cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 26/09/2015 11:09:57 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Anthony\Desktop
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

15,89 Gb Total Physical Memory | 10,31 Gb Available Physical Memory | 64,85% Memory free
18,27 Gb Paging File | 12,60 Gb Available in Paging File | 68,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 104,01 Gb Total Space | 44,74 Gb Free Space | 43,01% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 840,73 Gb Free Space | 90,25% Space Free | Partition Type: NTFS

Computer Name: ROG-ANTHO | User Name: Anthony | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2015/09/26 11:07:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Anthony\Desktop\OTL.exe
PRC - [2015/09/24 04:34:44 | 000,815,944 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/09/11 17:34:16 | 018,484,496 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer.exe
PRC - [2015/09/11 17:34:16 | 005,702,416 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
PRC - [2015/09/11 17:22:54 | 000,230,672 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\tv_w32.exe
PRC - [2015/08/27 02:37:44 | 002,634,872 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2015/08/27 02:37:41 | 001,872,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2015/08/14 14:03:20 | 000,391,872 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
PRC - [2015/08/14 14:03:14 | 000,358,080 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
PRC - [2015/08/14 14:02:14 | 012,465,344 | ---- | M] () -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
PRC - [2015/08/14 13:43:38 | 000,089,792 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
PRC - [2015/07/18 00:36:00 | 000,283,024 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe
PRC - [2015/07/08 15:22:32 | 001,353,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2014/12/17 15:31:26 | 019,853,392 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
PRC - [2014/11/05 13:44:30 | 000,060,488 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
PRC - [2014/10/29 16:21:04 | 000,009,728 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Video DSP\DriverMFTService.exe
PRC - [2014/10/21 14:33:56 | 000,124,520 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
PRC - [2014/09/03 12:03:34 | 000,405,976 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2014/09/03 12:03:32 | 000,154,584 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
PRC - [2014/06/23 20:33:30 | 000,209,720 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2014/05/26 10:47:22 | 000,303,928 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2014/05/15 16:23:42 | 000,406,328 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2014/03/26 16:24:44 | 000,115,512 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
PRC - [2013/05/15 15:39:12 | 000,463,872 | ---- | M] () -- C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe
PRC - [2012/05/28 11:04:48 | 000,113,312 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
PRC - [2011/11/21 15:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/09/24 04:34:41 | 001,501,512 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libglesv2.dll
MOD - [2015/09/24 04:34:40 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libegl.dll
MOD - [2015/08/27 02:37:44 | 000,011,896 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
MOD - [2014/11/05 13:44:30 | 000,124,928 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
MOD - [2014/11/05 13:44:30 | 000,037,424 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
MOD - [2013/05/15 15:39:12 | 000,463,872 | ---- | M] () -- C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/09/13 08:50:36 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:17 | 000,280,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:17 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 002,178,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 001,169,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 001,031,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,996,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,593,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,343,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,322,048 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 002,093,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 001,643,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 001,420,288 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 001,203,200 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,808,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,658,568 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,503,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,229,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,148,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2015/08/27 02:37:41 | 001,155,192 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:[b]64bit:[/b] - [2015/08/27 02:37:39 | 005,544,568 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe -- (NvStreamSvc)
SRV:[b]64bit:[/b] - [2015/07/18 00:35:40 | 000,351,120 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
SRV:[b]64bit:[/b] - [2015/07/10 13:01:10 | 000,621,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2015/07/10 13:01:10 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2015/07/10 13:01:10 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:41 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:38 | 001,844,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:36 | 000,115,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:20 | 000,749,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:16 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,526,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,337,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,289,280 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 002,674,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 001,149,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 001,019,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 000,512,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 000,268,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:07 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:06 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:06 | 000,087,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:03 | 003,467,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:02 | 000,918,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:02 | 000,836,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:02 | 000,055,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:01 | 000,096,256 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:01 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,717,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,296,960 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,196,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:58 | 000,143,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_Session2)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_Session2)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_Session2)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_Session2)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:57 | 000,405,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:57 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:56 | 000,019,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:55 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:55 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:54 | 000,275,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:53 | 000,267,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:53 | 000,063,488 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:51 | 000,583,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,550,400 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,379,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,362,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,024,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:37 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2015/07/08 15:22:32 | 001,353,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2014/05/13 15:31:14 | 000,887,256 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
SRV - [2015/09/12 23:08:07 | 000,925,696 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2015/09/12 23:08:07 | 000,510,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2015/09/11 17:34:16 | 005,702,416 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
SRV - [2015/08/27 02:37:41 | 001,872,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2015/08/14 14:03:20 | 000,391,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2015/08/14 14:03:14 | 000,358,080 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2015/08/14 14:02:14 | 012,465,344 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe -- (VMwareHostd)
SRV - [2015/08/14 13:43:38 | 000,089,792 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2015/08/11 19:27:04 | 000,906,944 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService)
SRV - [2015/07/18 00:36:00 | 000,283,024 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2015/07/10 13:00:30 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\lfsvc.dll -- (lfsvc)
SRV - [2015/07/10 13:00:29 | 002,049,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2015/07/10 13:00:24 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2015/07/10 13:00:23 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2015/07/10 12:59:37 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2015/07/09 13:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/10/29 16:21:04 | 000,009,728 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ASUS Video DSP\DriverMFTService.exe -- (DriverMFTService)
SRV - [2014/10/21 14:33:56 | 000,124,520 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe -- (iBtSiva)
SRV - [2014/09/03 12:03:34 | 000,405,976 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2014/09/03 12:03:32 | 000,154,584 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2014/03/26 16:24:44 | 000,115,512 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2013/03/01 03:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2011/11/21 15:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/09/24 14:47:03 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:17 | 000,052,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,934,752 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,685,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,200,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:12 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,516,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,373,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,080,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2015/09/12 23:08:07 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2015/09/08 11:47:40 | 000,146,072 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetLwf.sys -- (VBoxNetLwf)
DRV:[b]64bit:[/b] - [2015/09/08 11:47:40 | 000,117,768 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp6.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2015/08/27 02:37:39 | 000,019,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:[b]64bit:[/b] - [2015/08/23 17:08:16 | 000,100,776 | ---- | M] (ASUS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusTP.sys -- (ATP)
DRV:[b]64bit:[/b] - [2015/08/14 14:03:24 | 000,033,472 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
DRV:[b]64bit:[/b] - [2015/08/14 14:03:06 | 000,066,752 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
DRV:[b]64bit:[/b] - [2015/08/14 13:43:18 | 000,026,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:[b]64bit:[/b] - [2015/08/14 13:43:08 | 000,048,832 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:[b]64bit:[/b] - [2015/08/14 13:43:08 | 000,028,864 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:[b]64bit:[/b] - [2015/08/11 19:27:10 | 000,057,536 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
DRV:[b]64bit:[/b] - [2015/08/11 06:52:30 | 000,050,472 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:[b]64bit:[/b] - [2015/08/04 01:10:20 | 000,075,512 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsock.sys -- (vsock)
DRV:[b]64bit:[/b] - [2015/08/04 01:10:18 | 000,090,816 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
DRV:[b]64bit:[/b] - [2015/07/18 00:36:32 | 006,389,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2015/07/14 20:27:40 | 000,263,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibtusb.sys -- (ibtusb)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,255,240 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,251,632 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\edevmon.sys -- (edevmon)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,231,520 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,178,520 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,072,400 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:[b]64bit:[/b] - [2015/07/14 15:29:08 | 000,053,360 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:[b]64bit:[/b] - [2015/07/10 18:28:27 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2015/07/10 18:28:18 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2015/07/10 13:01:20 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:14 | 000,380,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:14 | 000,215,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:10 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:10 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:10 | 000,031,072 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,200,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,153,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,061,952 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:09 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:04 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,245,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,159,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2015/07/10 13:00:00 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,088,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:59 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:56 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:53 | 000,129,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:53 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:52 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,119,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:50 | 000,082,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,291,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,209,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,098,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,083,968 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,044,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:48 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:40 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:40 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:40 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:40 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:40 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,474,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,055,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,040,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,222,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,207,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,116,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:38 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:37 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 003,496,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwbw02.sys -- (NETwNb64)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,276,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,237,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,122,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,116,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb22.sys -- (xusb22)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,094,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,092,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,043,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fcvsc.sys -- (fcvsc)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2015/07/10 12:59:36 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2015/07/07 23:25:38 | 000,895,256 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
DRV:[b]64bit:[/b] - [2015/06/10 23:08:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2015/05/30 18:42:18 | 000,040,088 | ---- | M] (wj32) [Kernel | System | Running] -- C:\Program Files\Process Hacker 2\kprocesshacker.sys -- (KProcessHacker2)
DRV:[b]64bit:[/b] - [2015/05/14 11:44:38 | 000,751,632 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER)
DRV:[b]64bit:[/b] - [2015/05/13 05:44:24 | 000,019,976 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsHIDSwitch64.sys -- (HIDSwitch)
DRV:[b]64bit:[/b] - [2015/01/16 17:22:32 | 000,023,040 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:[b]64bit:[/b] - [2014/12/22 04:36:22 | 000,455,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2014/12/11 02:13:50 | 000,030,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2014/10/16 05:27:46 | 000,079,528 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\IntelPcc.sys -- (IntelHSWPcc)
DRV:[b]64bit:[/b] - [2014/09/03 12:03:32 | 000,126,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2014/06/26 04:56:54 | 000,670,056 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2013/07/24 17:02:55 | 000,034,816 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:[b]64bit:[/b] - [2013/03/04 14:24:27 | 000,040,344 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:[b]64bit:[/b] - [2013/03/01 03:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:[b]64bit:[/b] - [2012/08/06 05:17:18 | 000,017,280 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2015/07/10 12:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV - [2015/07/10 12:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV - [2013/07/02 17:45:52 | 000,019,768 | ---- | M] (ASUSTek Computer Inc.) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
DRV - [2009/07/02 18:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB
IE - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
IE - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


[color=#E56717]========== FireFox ==========[/color]

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp: C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf: C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@vmware.com/vmrc,version=5.5.0.00000: C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Firefox\np-vmware-vmrc.dll (VMware, Inc.)
FF - HKCU\Software\MozillaPlugins\SkypePlugin: C:\Users\Anthony\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi.dll (Skype Technologies S.A.)
FF - HKCU\Software\MozillaPlugins\SkypePlugin64: C:\Users\Anthony\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi-x64.dll (Skype Technologies S.A.)


[2014/01/21 20:07:48 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij\0.0.0.25_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9.3_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd\278_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe\14.0.0.165_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah\1.4.20_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\0.5_1\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfnbbbkabnehoejfhcbbhdicagcoobji\1.4.9_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk\0.810_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2015.909.1149.2_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2013/08/22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\WINDOWS\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [ROGNB] C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe ()
O4 - HKLM..\Run: [vmware-tray.exe] C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe (VMware, Inc.)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001..\Run: [GoogleChromeAutoLaunch_2AA0595218EF30A2508F1E549DA19CC6] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd)
O4 - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001..\Run: [OneDrive] C:\Users\Anthony\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3747340352-3963048523-2000407961-1001..\RunOnce: [Uninstall C:\Users\Anthony\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Anthony\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" File not found
O4 - Startup: C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O8:[b]64bit:[/b] - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found
O8:[b]64bit:[/b] - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found
O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html File not found
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html File not found
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{c5c33881-1649-4bb7-b3ba-a10687f6b148}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{d52398d1-eee4-4dce-8e15-99de69a5acf9}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{60230408-59e4-11e5-8264-acfdce940222}\Shell - "" = AutoRun
O33 - MountPoints2\{60230408-59e4-11e5-8264-acfdce940222}\Shell\AutoRun\command - "" = "G:\SETUP.EXE"
O33 - MountPoints2\{60230408-59e4-11e5-8264-acfdce940222}\Shell\configure\command - "" = G:\SETUP.EXE
O33 - MountPoints2\{60230408-59e4-11e5-8264-acfdce940222}\Shell\install\command - "" = G:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] dosvc - C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DcpSvc - C:\Windows\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] RetailDemo - C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)


SafeBootMin:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - U
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C49181C5-51A7-39B8-A058-B35C7BAD6E1F} - .NET Framework
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\inf\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D3D70DDE-B3B4-33DE-A8CD-808A85D68682} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/09/26 11:01:29 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Anthony\Desktop\OTL.exe
[2015/09/26 10:30:02 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\CEF
[2015/09/26 10:22:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2015/09/26 10:21:33 | 022,559,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2015/09/26 10:21:33 | 018,569,848 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2015/09/26 10:21:33 | 017,934,400 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2015/09/26 10:21:33 | 016,646,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2015/09/26 10:21:33 | 015,631,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2015/09/26 10:21:33 | 015,336,024 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2015/09/26 10:21:33 | 014,945,040 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2015/09/26 10:21:33 | 013,666,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2015/09/26 10:21:33 | 012,611,632 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2015/09/26 10:21:33 | 012,191,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2015/09/26 10:21:33 | 002,354,808 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2015/09/26 10:21:33 | 002,105,976 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2015/09/26 10:21:33 | 001,898,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6435598.dll
[2015/09/26 10:21:33 | 001,558,832 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6435598.dll
[2015/09/26 10:21:33 | 001,075,320 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2015/09/26 10:21:33 | 001,064,056 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2015/09/26 10:21:33 | 000,986,416 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2015/09/26 10:21:33 | 000,945,272 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2015/09/26 10:21:33 | 000,787,384 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2015/09/26 10:21:33 | 000,632,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2015/09/26 10:21:33 | 000,408,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2015/09/26 10:21:33 | 000,387,720 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2015/09/26 10:21:33 | 000,364,152 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2015/09/26 10:21:33 | 000,316,120 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2015/09/26 10:21:33 | 000,177,088 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2015/09/26 10:21:33 | 000,155,792 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2015/09/24 14:47:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
[2015/09/24 14:47:03 | 000,020,160 | ---- | C] (Glarysoft Ltd) -- C:\WINDOWS\SysNative\drivers\GUBootStartup.sys
[2015/09/24 14:47:03 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\GlarySoft
[2015/09/24 14:47:03 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\DiskDefrag
[2015/09/24 14:46:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Glary Utilities 5
[2015/09/24 14:09:26 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Documents\Modèles Office personnalisés
[2015/09/24 11:38:02 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Desktop\TUTO MADA
[2015/09/23 10:50:16 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Documents\Blocs-notes OneNote
[2015/09/22 13:35:46 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Tracing
[2015/09/22 13:35:13 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Skype
[2015/09/22 13:35:12 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Skype
[2015/09/22 13:35:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2015/09/22 13:35:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2015/09/22 13:35:08 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2015/09/22 13:34:42 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\SkypePlugin
[2015/09/22 11:54:49 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Wireshark
[2015/09/22 11:04:21 | 000,000,000 | ---D | C] -- C:\Users\Anthony\VirtualBox VMs
[2015/09/22 11:03:34 | 000,000,000 | ---D | C] -- C:\Users\Anthony\.VirtualBox
[2015/09/22 11:03:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
[2015/09/22 11:03:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DRVSTORE
[2015/09/22 11:03:22 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2015/09/21 16:25:22 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Diagnostics
[2015/09/21 15:52:39 | 000,000,000 | ---D | C] -- C:\Program Files\Wireshark
[2015/09/21 07:27:54 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\ElevatedDiagnostics
[2015/09/19 10:42:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2015/09/19 10:42:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2015/09/19 10:42:22 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2015/09/19 10:42:21 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2015/09/19 10:41:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2015/09/19 10:41:14 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2015/09/19 10:41:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2015/09/16 10:56:19 | 000,000,000 | R--D | C] -- C:\Users\Anthony\3D Objects
[2015/09/16 10:37:48 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Hyper-V
[2015/09/15 11:52:28 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator
[2015/09/15 11:52:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LinuxLive USB Creator
[2015/09/14 18:31:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2015/09/14 15:07:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Solarwinds
[2015/09/14 15:06:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2015/09/14 15:06:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinPcap
[2015/09/14 14:04:55 | 000,741,480 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\SysNative\HPDiscoPMB111.dll
[2015/09/14 14:04:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2015/09/14 14:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2015/09/14 14:04:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
[2015/09/14 14:04:45 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2015/09/14 14:04:29 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\HP
[2015/09/13 18:21:10 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Documents\The Crew
[2015/09/13 18:21:10 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Documents\ProfileCache
[2015/09/13 18:18:27 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_7.dll
[2015/09/13 18:18:27 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_7.dll
[2015/09/13 18:18:27 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_7.dll
[2015/09/13 18:18:27 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_7.dll
[2015/09/13 18:18:27 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_5.dll
[2015/09/13 18:18:27 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_5.dll
[2015/09/13 18:18:26 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_43.dll
[2015/09/13 18:18:26 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_43.dll
[2015/09/13 18:18:26 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_43.dll
[2015/09/13 18:18:26 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_43.dll
[2015/09/13 18:18:26 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_6.dll
[2015/09/13 18:18:26 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_6.dll
[2015/09/13 18:18:26 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_6.dll
[2015/09/13 18:18:26 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_6.dll
[2015/09/13 18:18:26 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_4.dll
[2015/09/13 18:18:26 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_4.dll
[2015/09/13 18:18:26 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_7.dll
[2015/09/13 18:18:26 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_7.dll
[2015/09/13 18:18:25 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_42.dll
[2015/09/13 18:18:25 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_42.dll
[2015/09/13 18:18:25 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_42.dll
[2015/09/13 18:18:25 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_42.dll
[2015/09/13 18:18:25 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_5.dll
[2015/09/13 18:18:25 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_5.dll
[2015/09/13 18:18:25 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_5.dll
[2015/09/13 18:18:25 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_5.dll
[2015/09/13 18:18:24 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_42.dll
[2015/09/13 18:18:24 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_42.dll
[2015/09/13 18:18:24 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_42.dll
[2015/09/13 18:18:24 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_42.dll
[2015/09/13 18:18:24 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_42.dll
[2015/09/13 18:18:24 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_42.dll
[2015/09/13 18:18:23 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_41.dll
[2015/09/13 18:18:23 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_41.dll
[2015/09/13 18:18:23 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_41.dll
[2015/09/13 18:18:23 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_41.dll
[2015/09/13 18:18:23 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_4.dll
[2015/09/13 18:18:23 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_41.dll
[2015/09/13 18:18:23 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_4.dll
[2015/09/13 18:18:23 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_41.dll
[2015/09/13 18:18:23 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_4.dll
[2015/09/13 18:18:23 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_4.dll
[2015/09/13 18:18:23 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_3.dll
[2015/09/13 18:18:23 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_3.dll
[2015/09/13 18:18:22 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_6.dll
[2015/09/13 18:18:22 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_6.dll
[2015/09/13 18:18:21 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_40.dll
[2015/09/13 18:18:21 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_40.dll
[2015/09/13 18:18:21 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_40.dll
[2015/09/13 18:18:21 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_40.dll
[2015/09/13 18:18:21 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_40.dll
[2015/09/13 18:18:21 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_3.dll
[2015/09/13 18:18:21 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_3.dll
[2015/09/13 18:18:21 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_40.dll
[2015/09/13 18:18:21 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_2.dll
[2015/09/13 18:18:21 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_2.dll
[2015/09/13 18:18:20 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_2.dll
[2015/09/13 18:18:20 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_2.dll
[2015/09/13 18:18:20 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_3.dll
[2015/09/13 18:18:20 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_3.dll
[2015/09/13 18:18:20 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_1.dll
[2015/09/13 18:18:20 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_1.dll
[2015/09/13 18:18:20 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_5.dll
[2015/09/13 18:18:20 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_5.dll
[2015/09/13 18:18:19 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_2.dll
[2015/09/13 18:18:19 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_2.dll
[2015/09/13 18:18:18 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_39.dll
[2015/09/13 18:18:18 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll
[2015/09/13 18:18:18 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_39.dll
[2015/09/13 18:18:18 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll
[2015/09/13 18:18:18 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_39.dll
[2015/09/13 18:18:18 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_1.dll
[2015/09/13 18:18:18 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_1.dll
[2015/09/13 18:18:18 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll
[2015/09/13 18:18:18 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_1.dll
[2015/09/13 18:18:18 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_1.dll
[2015/09/13 18:18:18 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_0.dll
[2015/09/13 18:18:18 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_0.dll
[2015/09/13 18:18:17 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_38.dll
[2015/09/13 18:18:17 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_38.dll
[2015/09/13 18:18:17 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_38.dll
[2015/09/13 18:18:17 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_38.dll
[2015/09/13 18:18:17 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_38.dll
[2015/09/13 18:18:17 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_38.dll
[2015/09/13 18:18:17 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_4.dll
[2015/09/13 18:18:17 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_4.dll
[2015/09/13 18:18:16 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_37.dll
[2015/09/13 18:18:16 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_37.dll
[2015/09/13 18:18:16 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_37.dll
[2015/09/13 18:18:16 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_0.dll
[2015/09/13 18:18:16 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_0.dll
[2015/09/13 18:18:16 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_37.dll
[2015/09/13 18:18:16 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_0.dll
[2015/09/13 18:18:16 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_0.dll
[2015/09/13 18:18:16 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_3.dll
[2015/09/13 18:18:16 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_3.dll
[2015/09/13 18:18:15 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_37.dll
[2015/09/13 18:18:15 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_37.dll
[2015/09/13 18:18:15 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_36.dll
[2015/09/13 18:18:15 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_36.dll
[2015/09/13 18:18:15 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_36.dll
[2015/09/13 18:18:15 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_36.dll
[2015/09/13 18:18:15 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_10.dll
[2015/09/13 18:18:15 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_10.dll
[2015/09/13 18:18:14 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_36.dll
[2015/09/13 18:18:14 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_35.dll
[2015/09/13 18:18:14 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_36.dll
[2015/09/13 18:18:14 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_35.dll
[2015/09/13 18:18:14 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_35.dll
[2015/09/13 18:18:14 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_35.dll
[2015/09/13 18:18:14 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_35.dll
[2015/09/13 18:18:14 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_35.dll
[2015/09/13 18:18:14 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_9.dll
[2015/09/13 18:18:14 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_9.dll
[2015/09/13 18:18:13 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_34.dll
[2015/09/13 18:18:13 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_34.dll
[2015/09/13 18:18:13 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_34.dll
[2015/09/13 18:18:13 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_34.dll
[2015/09/13 18:18:13 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_34.dll
[2015/09/13 18:18:13 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_34.dll
[2015/09/13 18:18:13 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_8.dll
[2015/09/13 18:18:13 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_8.dll
[2015/09/13 18:18:13 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_3.dll
[2015/09/13 18:18:13 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_3.dll
[2015/09/13 18:18:13 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_2.dll
[2015/09/13 18:18:13 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_2.dll
[2015/09/13 18:18:12 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_33.dll
[2015/09/13 18:18:12 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_33.dll
[2015/09/13 18:18:12 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_33.dll
[2015/09/13 18:18:12 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_33.dll
[2015/09/13 18:18:12 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_33.dll
[2015/09/13 18:18:12 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_33.dll
[2015/09/13 18:18:12 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_7.dll
[2015/09/13 18:18:12 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_7.dll
[2015/09/13 18:18:11 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_32.dll
[2015/09/13 18:18:11 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_32.dll
[2015/09/13 18:18:11 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10.dll
[2015/09/13 18:18:11 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10.dll
[2015/09/13 18:18:11 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_6.dll
[2015/09/13 18:18:11 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_5.dll
[2015/09/13 18:18:11 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_6.dll
[2015/09/13 18:18:11 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_5.dll
[2015/09/13 18:18:10 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_31.dll
[2015/09/13 18:18:10 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_31.dll
[2015/09/13 18:18:10 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_4.dll
[2015/09/13 18:18:10 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_3.dll
[2015/09/13 18:18:10 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_4.dll
[2015/09/13 18:18:10 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_3.dll
[2015/09/13 18:18:10 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_2.dll
[2015/09/13 18:18:10 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_2.dll
[2015/09/13 18:18:10 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_1.dll
[2015/09/13 18:18:10 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_1.dll
[2015/09/13 18:18:09 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_2.dll
[2015/09/13 18:18:09 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_1.dll
[2015/09/13 18:18:09 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_2.dll
[2015/09/13 18:18:09 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_1.dll
[2015/09/13 18:18:09 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_1.dll
[2015/09/13 18:18:09 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_1.dll
[2015/09/13 18:18:08 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_30.dll
[2015/09/13 18:18:08 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_29.dll
[2015/09/13 18:18:08 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_28.dll
[2015/09/13 18:18:08 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_30.dll
[2015/09/13 18:18:08 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_29.dll
[2015/09/13 18:18:08 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_28.dll
[2015/09/13 18:18:08 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_0.dll
[2015/09/13 18:18:08 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_0.dll
[2015/09/13 18:18:08 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_0.dll
[2015/09/13 18:18:08 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_0.dll
[2015/09/13 18:18:07 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_25.dll
[2015/09/13 18:18:07 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_27.dll
[2015/09/13 18:18:07 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_26.dll
[2015/09/13 18:18:07 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_24.dll
[2015/09/13 18:18:07 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_25.dll
[2015/09/13 18:18:07 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_27.dll
[2015/09/13 18:18:07 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_26.dll
[2015/09/13 18:18:07 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_24.dll
[2015/09/13 18:15:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\directx
[2015/09/13 17:54:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015/09/13 17:54:57 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015/09/13 13:47:25 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\WinRAR
[2015/09/13 13:47:16 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2015/09/13 13:47:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2015/09/13 13:47:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2015/09/13 13:12:45 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\VMware
[2015/09/13 13:12:43 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\VMware
[2015/09/13 10:54:26 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Ubisoft
[2015/09/13 10:15:58 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Ubisoft Game Launcher
[2015/09/13 10:15:58 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2015/09/13 10:15:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
[2015/09/13 09:58:41 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2015/09/13 09:57:46 | 006,885,168 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2015/09/13 09:57:46 | 003,496,056 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2015/09/13 09:57:46 | 002,558,584 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2015/09/13 09:57:46 | 001,062,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshext.dll
[2015/09/13 09:57:46 | 000,385,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2015/09/13 09:57:46 | 000,074,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshextr.dll
[2015/09/13 09:57:46 | 000,062,768 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2015/09/13 09:56:55 | 003,077,544 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2015/09/13 09:56:54 | 003,484,216 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2015/09/13 09:56:54 | 001,898,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6435582.dll
[2015/09/13 09:56:54 | 001,558,648 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6435582.dll
[2015/09/13 09:51:09 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Apple Computer
[2015/09/13 09:51:09 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Apple Computer
[2015/09/13 09:50:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2015/09/13 09:50:47 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Apple
[2015/09/13 09:50:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2015/09/13 09:50:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2015/09/13 09:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2015/09/13 09:49:34 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_43.dll
[2015/09/13 09:49:34 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_43.dll
[2015/09/13 09:49:34 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_43.dll
[2015/09/13 09:49:34 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_43.dll
[2015/09/13 09:49:34 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_43.dll
[2015/09/13 09:49:34 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_43.dll
[2015/09/13 09:49:33 | 001,756,424 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspbridge64.dll
[2015/09/13 09:49:33 | 001,710,568 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspcap64.dll
[2015/09/13 09:49:33 | 001,423,120 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspcap.dll
[2015/09/13 09:49:33 | 001,316,000 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspbridge.dll
[2015/09/13 09:49:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2015/09/13 09:49:31 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\NVIDIA Corporation
[2015/09/13 09:49:21 | 000,072,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvaudcap64v.dll
[2015/09/13 09:49:21 | 000,069,416 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvaudcap32v.dll
[2015/09/13 09:49:21 | 000,050,472 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvvad64v.sys
[2015/09/13 09:45:53 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Process Hacker 2
[2015/09/13 09:45:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2
[2015/09/13 09:45:40 | 000,000,000 | ---D | C] -- C:\Program Files\Process Hacker 2
[2015/09/13 09:38:01 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Cisco Packet Tracer 6.1.1sv
[2015/09/13 09:36:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer Student
[2015/09/13 09:36:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Packet Tracer 6.1.1sv
[2015/09/13 09:36:16 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Programs
[2015/09/13 09:32:02 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\ESET
[2015/09/13 09:32:02 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\ESET
[2015/09/13 09:31:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2015/09/13 09:31:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2015/09/13 09:31:11 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2015/09/13 09:26:23 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\TeamViewer
[2015/09/13 09:25:44 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\TeamViewer
[2015/09/13 09:25:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2015/09/13 09:23:18 | 000,075,512 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\drivers\vsock.sys
[2015/09/13 09:23:18 | 000,068,288 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\vsocklib.dll
[2015/09/13 09:23:18 | 000,066,752 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\drivers\vmx86.sys
[2015/09/13 09:23:18 | 000,064,192 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysWow64\vsocklib.dll
[2015/09/13 09:23:18 | 000,033,472 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\drivers\VMkbd.sys
[2015/09/13 09:23:02 | 000,358,080 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysWow64\vmnetdhcp.exe
[2015/09/13 09:22:58 | 000,934,080 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\vnetlib64.dll
[2015/09/13 09:22:58 | 000,391,872 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysWow64\vmnat.exe
[2015/09/13 09:22:58 | 000,026,816 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\drivers\vmnetuserif.sys
[2015/09/13 09:22:56 | 000,057,536 | ---- | C] (VMware, Inc.) -- C:\WINDOWS\SysNative\drivers\hcmon.sys
[2015/09/13 09:22:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
[2015/09/13 09:22:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VMware
[2015/09/13 09:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ThinPrint
[2015/09/13 09:22:39 | 000,000,000 | ---D | C] -- C:\ProgramData\VMware
[2015/09/13 09:22:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VMware
[2015/09/13 09:22:39 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Shared Virtual Machines
[2015/09/13 09:21:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VMware
[2015/09/13 09:19:18 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Foxit Software
[2015/09/13 09:19:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\AutoKMS
[2015/09/13 09:17:54 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\PeerDistRepub
[2015/09/13 09:17:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Toolkit
[2015/09/13 09:15:09 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2015/09/13 09:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2015/09/13 09:14:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2015/09/13 09:14:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
[2015/09/13 09:14:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/09/13 09:14:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH
[2015/09/13 09:14:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
[2015/09/13 09:13:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2015/09/13 09:13:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2015/09/13 09:13:10 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Microsoft Help
[2015/09/13 09:13:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2015/09/13 09:13:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2015/09/13 09:13:03 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2015/09/13 09:12:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
[2015/09/13 09:12:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elaborate Bytes
[2015/09/13 08:59:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MRT
[2015/09/13 08:54:03 | 000,000,000 | -HSD | C] -- C:\WINDOWS\BitLockerDiscoveryVolumeContents
[2015/09/13 08:54:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2015/09/13 08:48:05 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
[2015/09/13 06:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\ASUS Smart Gesture
[2015/09/13 06:33:00 | 000,000,000 | ---D | C] -- C:\ProgramData\SetupTPDriver
[2015/09/13 06:32:28 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\NetworkTiles
[2015/09/13 06:31:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2015/09/13 06:29:59 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Publishers
[2015/09/13 06:29:50 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Comms
[2015/09/13 06:29:44 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\TileDataLayer
[2015/09/12 23:10:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2015/09/12 23:09:01 | 000,000,000 | ---D | C] -- C:\Windows.old
[2015/09/12 23:08:17 | 003,248,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2015/09/12 23:08:17 | 002,646,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2015/09/12 23:08:17 | 002,462,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2015/09/12 23:08:17 | 002,416,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2015/09/12 23:08:17 | 002,151,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2015/09/12 23:08:17 | 001,916,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2015/09/12 23:08:17 | 001,562,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2015/09/12 23:08:17 | 001,561,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2015/09/12 23:08:17 | 001,411,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
[2015/09/12 23:08:17 | 001,356,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2015/09/12 23:08:17 | 001,087,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2015/09/12 23:08:17 | 001,043,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
[2015/09/12 23:08:17 | 001,043,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2015/09/12 23:08:17 | 001,025,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2015/09/12 23:08:17 | 000,980,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2015/09/12 23:08:17 | 000,918,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2015/09/12 23:08:17 | 000,896,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2015/09/12 23:08:17 | 000,877,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2015/09/12 23:08:17 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2015/09/12 23:08:17 | 000,816,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2015/09/12 23:08:17 | 000,799,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpccpl.dll
[2015/09/12 23:08:17 | 000,783,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2015/09/12 23:08:17 | 000,713,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2015/09/12 23:08:17 | 000,644,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2015/09/12 23:08:17 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2015/09/12 23:08:17 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2015/09/12 23:08:17 | 000,569,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2015/09/12 23:08:17 | 000,527,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2015/09/12 23:08:17 | 000,521,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2015/09/12 23:08:17 | 000,501,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2015/09/12 23:08:17 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
[2015/09/12 23:08:17 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2015/09/12 23:08:17 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2015/09/12 23:08:17 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2015/09/12 23:08:17 | 000,473,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2015/09/12 23:08:17 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2015/09/12 23:08:17 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2015/09/12 23:08:17 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2015/09/12 23:08:17 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2015/09/12 23:08:17 | 000,243,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2015/09/12 23:08:17 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fwpolicyiomgr.dll
[2015/09/12 23:08:17 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2015/09/12 23:08:17 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2015/09/12 23:08:17 | 000,052,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys
[2015/09/12 23:08:16 | 021,874,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2015/09/12 23:08:16 | 018,806,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2015/09/12 23:08:16 | 014,241,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2015/09/12 23:08:16 | 012,589,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2015/09/12 23:08:16 | 007,523,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2015/09/12 23:08:16 | 005,454,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2015/09/12 23:08:16 | 004,791,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2015/09/12 23:08:16 | 001,822,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2015/09/12 23:08:16 | 001,200,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2015/09/12 23:08:16 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2015/09/12 23:08:16 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2015/09/12 23:08:16 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
[2015/09/12 23:08:16 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
[2015/09/12 23:08:16 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationGeofences.dll
[2015/09/12 23:08:16 | 000,333,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2015/09/12 23:08:16 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2015/09/12 23:08:16 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2015/09/12 23:08:16 | 000,285,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2015/09/12 23:08:16 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2015/09/12 23:08:16 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2015/09/12 23:08:16 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationPermissions.dll
[2015/09/12 23:08:16 | 000,097,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcd.dll
[2015/09/12 23:08:16 | 000,082,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcd.dll
[2015/09/12 23:08:16 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2015/09/12 23:08:16 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.PAL.Desktop.dll
[2015/09/12 23:08:12 | 011,557,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2015/09/12 23:08:12 | 009,889,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2015/09/12 23:08:12 | 008,613,200 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2015/09/12 23:08:12 | 008,019,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2015/09/12 23:08:12 | 006,305,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2015/09/12 23:08:12 | 004,760,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2015/09/12 23:08:12 | 004,532,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2015/09/12 23:08:12 | 004,398,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2015/09/12 23:08:12 | 004,350,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2015/09/12 23:08:12 | 004,169,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2015/09/12 23:08:12 | 004,048,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2015/09/12 23:08:12 | 003,780,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2015/09/12 23:08:12 | 003,443,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2015/09/12 23:08:12 | 003,362,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2015/09/12 23:08:12 | 002,350,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2015/09/12 23:08:12 | 002,225,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2015/09/12 23:08:12 | 002,178,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2015/09/12 23:08:12 | 002,153,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2015/09/12 23:08:12 | 002,147,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2015/09/12 23:08:12 | 001,795,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2015/09/12 23:08:12 | 001,774,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2015/09/12 23:08:12 | 001,612,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2015/09/12 23:08:12 | 001,521,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2015/09/12 23:08:12 | 001,418,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
[2015/09/12 23:08:12 | 001,294,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2015/09/12 23:08:12 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcnwiz.dll
[2015/09/12 23:08:12 | 001,290,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2015/09/12 23:08:12 | 001,274,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2015/09/12 23:08:12 | 001,234,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2015/09/12 23:08:12 | 001,226,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wcnwiz.dll
[2015/09/12 23:08:12 | 001,201,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2015/09/12 23:08:12 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2015/09/12 23:08:12 | 001,135,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2015/09/12 23:08:12 | 001,123,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2015/09/12 23:08:12 | 001,061,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2015/09/12 23:08:12 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2015/09/12 23:08:12 | 001,018,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2015/09/12 23:08:12 | 000,996,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2015/09/12 23:08:12 | 000,993,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2015/09/12 23:08:12 | 000,934,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2015/09/12 23:08:12 | 000,911,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2015/09/12 23:08:12 | 000,872,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2015/09/12 23:08:12 | 000,858,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2015/09/12 23:08:12 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2015/09/12 23:08:12 | 000,845,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2015/09/12 23:08:12 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfuimanager.dll
[2015/09/12 23:08:12 | 000,754,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2015/09/12 23:08:12 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efscore.dll
[2015/09/12 23:08:12 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2015/09/12 23:08:12 | 000,642,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdbui.dll
[2015/09/12 23:08:12 | 000,608,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2015/09/12 23:08:12 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2015/09/12 23:08:12 | 000,594,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2015/09/12 23:08:12 | 000,593,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2015/09/12 23:08:12 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2015/09/12 23:08:12 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efscore.dll
[2015/09/12 23:08:12 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2015/09/12 23:08:12 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2015/09/12 23:08:12 | 000,584,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2015/09/12 23:08:12 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2015/09/12 23:08:12 | 000,576,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2015/09/12 23:08:12 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2015/09/12 23:08:12 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2015/09/12 23:08:12 | 000,542,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2015/09/12 23:08:12 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
[2015/09/12 23:08:12 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
[2015/09/12 23:08:12 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll
[2015/09/12 23:08:12 | 000,425,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2015/09/12 23:08:12 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdedit.exe
[2015/09/12 23:08:12 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BioFeedback.dll
[2015/09/12 23:08:12 | 000,407,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2015/09/12 23:08:12 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupShim.dll
[2015/09/12 23:08:12 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2015/09/12 23:08:12 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2015/09/12 23:08:12 | 000,365,568 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2015/09/12 23:08:12 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2015/09/12 23:08:12 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2015/09/12 23:08:12 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2015/09/12 23:08:12 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2015/09/12 23:08:12 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2015/09/12 23:08:12 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BlockedShutdown.dll
[2015/09/12 23:08:12 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultsvc.dll
[2015/09/12 23:08:12 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConhostV2.dll
[2015/09/12 23:08:12 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2015/09/12 23:08:12 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll
[2015/09/12 23:08:12 | 000,292,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
[2015/09/12 23:08:12 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemcpl.dll
[2015/09/12 23:08:12 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BioFeedback.dll
[2015/09/12 23:08:12 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\systemcpl.dll
[2015/09/12 23:08:12 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\syncutil.dll
[2015/09/12 23:08:12 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupShim.dll
[2015/09/12 23:08:12 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
[2015/09/12 23:08:12 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConsoleLogon.dll
[2015/09/12 23:08:12 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenter.dll
[2015/09/12 23:08:12 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_UserAccount.dll
[2015/09/12 23:08:12 | 000,252,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
[2015/09/12 23:08:12 | 000,243,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
[2015/09/12 23:08:12 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2015/09/12 23:08:12 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Notifications.dll
[2015/09/12 23:08:12 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
[2015/09/12 23:08:12 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicesFlowBroker.dll
[2015/09/12 23:08:12 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe
[2015/09/12 23:08:12 | 000,208,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2015/09/12 23:08:12 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll
[2015/09/12 23:08:12 | 000,200,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wof.sys
[2015/09/12 23:08:12 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
[2015/09/12 23:08:12 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReInfo.dll
[2015/09/12 23:08:12 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.PicturePassword.dll
[2015/09/12 23:08:12 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2015/09/12 23:08:12 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shacct.dll
[2015/09/12 23:08:12 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2015/09/12 23:08:12 | 000,181,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2015/09/12 23:08:12 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_SignInOptions.dll
[2015/09/12 23:08:12 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srumsvc.dll
[2015/09/12 23:08:12 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdboot.exe
[2015/09/12 23:08:12 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Privacy.dll
[2015/09/12 23:08:12 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SubscriptionMgr.dll
[2015/09/12 23:08:12 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2015/09/12 23:08:12 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
[2015/09/12 23:08:12 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2015/09/12 23:08:12 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\shacct.dll
[2015/09/12 23:08:12 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkStatus.dll
[2015/09/12 23:08:12 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll
[2015/09/12 23:08:12 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sendmail.dll
[2015/09/12 23:08:12 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeParserTask.exe
[2015/09/12 23:08:12 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll
[2015/09/12 23:08:12 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2015/09/12 23:08:12 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2015/09/12 23:08:12 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spbcd.dll
[2015/09/12 23:08:12 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll
[2015/09/12 23:08:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll
[2015/09/12 23:08:12 | 000,077,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2015/09/12 23:08:12 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll
[2015/09/12 23:08:12 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spbcd.dll
[2015/09/12 23:08:12 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.ProxyStub.dll
[2015/09/12 23:08:12 | 000,061,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2015/09/12 23:08:12 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2015/09/12 23:08:12 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnNetsh.dll
[2015/09/12 23:08:12 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2015/09/12 23:08:12 | 000,045,568 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2015/09/12 23:08:12 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2015/09/12 23:08:12 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\calc.exe
[2015/09/12 23:08:12 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\calc.exe
[2015/09/12 23:08:07 | 016,706,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2015/09/12 23:08:07 | 013,024,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2015/09/12 23:08:07 | 007,569,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2015/09/12 23:08:07 | 007,051,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2015/09/12 23:08:07 | 006,878,256 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2015/09/12 23:08:07 | 006,488,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2015/09/12 23:08:07 | 006,101,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2015/09/12 23:08:07 | 005,118,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2015/09/12 23:08:07 | 005,076,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2015/09/12 23:08:07 | 004,611,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2015/09/12 23:08:07 | 003,586,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2015/09/12 23:08:07 | 003,527,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2015/09/12 23:08:07 | 003,248,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2015/09/12 23:08:07 | 002,748,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2015/09/12 23:08:07 | 002,606,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2015/09/12 23:08:07 | 002,558,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2015/09/12 23:08:07 | 002,415,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2015/09/12 23:08:07 | 002,125,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2015/09/12 23:08:07 | 002,093,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2015/09/12 23:08:07 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2015/09/12 23:08:07 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2015/09/12 23:08:07 | 001,714,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2015/09/12 23:08:07 | 001,643,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2015/09/12 23:08:07 | 001,601,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2015/09/12 23:08:07 | 001,593,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2015/09/12 23:08:07 | 001,591,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2015/09/12 23:08:07 | 001,420,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2015/09/12 23:08:07 | 001,417,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2015/09/12 23:08:07 | 001,396,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2015/09/12 23:08:07 | 001,382,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2015/09/12 23:08:07 | 001,334,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2015/09/12 23:08:07 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemoteNaturalLanguage.dll
[2015/09/12 23:08:07 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2015/09/12 23:08:07 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2015/09/12 23:08:07 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2015/09/12 23:08:07 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2015/09/12 23:08:07 | 001,101,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2015/09/12 23:08:07 | 000,966,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2015/09/12 23:08:07 | 000,963,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2015/09/12 23:08:07 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2015/09/12 23:08:07 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll
[2015/09/12 23:08:07 | 000,893,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2015/09/12 23:08:07 | 000,869,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2015/09/12 23:08:07 | 000,859,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2015/09/12 23:08:07 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactApis.dll
[2015/09/12 23:08:07 | 000,841,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
[2015/09/12 23:08:07 | 000,832,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2015/09/12 23:08:07 | 000,828,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2015/09/12 23:08:07 | 000,823,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2015/09/12 23:08:07 | 000,808,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2015/09/12 23:08:07 | 000,801,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2015/09/12 23:08:07 | 000,783,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2015/09/12 23:08:07 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2015/09/12 23:08:07 | 000,762,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2015/09/12 23:08:07 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfuimanager.dll
[2015/09/12 23:08:07 | 000,700,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2015/09/12 23:08:07 | 000,695,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2015/09/12 23:08:07 | 000,680,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2015/09/12 23:08:07 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
[2015/09/12 23:08:07 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2015/09/12 23:08:07 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
[2015/09/12 23:08:07 | 000,658,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2015/09/12 23:08:07 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2015/09/12 23:08:07 | 000,650,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2015/09/12 23:08:07 | 000,632,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2015/09/12 23:08:07 | 000,630,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2015/09/12 23:08:07 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactApis.dll
[2015/09/12 23:08:07 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2015/09/12 23:08:07 | 000,609,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2015/09/12 23:08:07 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2015/09/12 23:08:07 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2015/09/12 23:08:07 | 000,583,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2015/09/12 23:08:07 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
[2015/09/12 23:08:07 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll
[2015/09/12 23:08:07 | 000,554,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directmanipulation.dll
[2015/09/12 23:08:07 | 000,541,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2015/09/12 23:08:07 | 000,521,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2015/09/12 23:08:07 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationController.dll
[2015/09/12 23:08:07 | 000,516,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2015/09/12 23:08:07 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2015/09/12 23:08:07 | 000,505,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2015/09/12 23:08:07 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
[2015/09/12 23:08:07 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2015/09/12 23:08:07 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2015/09/12 23:08:07 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
[2015/09/12 23:08:07 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2015/09/12 23:08:07 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MessagingDataModel2.dll
[2015/09/12 23:08:07 | 000,454,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directmanipulation.dll
[2015/09/12 23:08:07 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll
[2015/09/12 23:08:07 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2015/09/12 23:08:07 | 000,442,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2015/09/12 23:08:07 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
[2015/09/12 23:08:07 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2015/09/12 23:08:07 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2015/09/12 23:08:07 | 000,393,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2015/09/12 23:08:07 | 000,373,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2015/09/12 23:08:07 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2015/09/12 23:08:07 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2015/09/12 23:08:07 | 000,335,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2015/09/12 23:08:07 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2015/09/12 23:08:07 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2015/09/12 23:08:07 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2015/09/12 23:08:07 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2015/09/12 23:08:07 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2015/09/12 23:08:07 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationObjFactory.dll
[2015/09/12 23:08:07 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2015/09/12 23:08:07 | 000,303,104 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2015/09/12 23:08:07 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2015/09/12 23:08:07 | 000,290,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininit.exe
[2015/09/12 23:08:07 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2015/09/12 23:08:07 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
[2015/09/12 23:08:07 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2015/09/12 23:08:07 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NotificationObjFactory.dll
[2015/09/12 23:08:07 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
[2015/09/12 23:08:07 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2015/09/12 23:08:07 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll
[2015/09/12 23:08:07 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2015/09/12 23:08:07 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
[2015/09/12 23:08:07 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srumsvc.dll
[2015/09/12 23:08:07 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OmaDmAgent.dll
[2015/09/12 23:08:07 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll
[2015/09/12 23:08:07 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModelShim.dll
[2015/09/12 23:08:07 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseModernAppMgmtCSP.dll
[2015/09/12 23:08:07 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
[2015/09/12 23:08:07 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2015/09/12 23:08:07 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cloudAP.dll
[2015/09/12 23:08:07 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2015/09/12 23:08:07 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2015/09/12 23:08:07 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModel.dll
[2015/09/12 23:08:07 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll
[2015/09/12 23:08:07 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
[2015/09/12 23:08:07 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2015/09/12 23:08:07 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll
[2015/09/12 23:08:07 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEStoreEventHandlers.dll
[2015/09/12 23:08:07 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2015/09/12 23:08:07 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2015/09/12 23:08:07 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
[2015/09/12 23:08:07 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe
[2015/09/12 23:08:07 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll
[2015/09/12 23:08:07 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll
[2015/09/12 23:08:07 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEDataLayerHelpers.dll
[2015/09/12 23:08:07 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2015/09/12 23:08:07 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthRadioMedia.dll
[2015/09/12 23:08:07 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.V2.dll
[2015/09/12 23:08:07 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2015/09/12 23:08:07 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbser.sys
[2015/09/12 23:08:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys
[2015/09/12 23:08:07 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unenrollhook.dll
[2015/09/12 23:08:07 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hmkd.dll
[2015/09/12 23:08:07 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2015/09/12 23:08:07 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmprc.exe
[2015/09/12 23:08:07 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll
[2015/09/12 23:08:07 | 000,046,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2015/09/12 23:08:07 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys
[2015/09/12 23:08:07 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hmkd.dll
[2015/09/12 23:08:07 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tetheringclient.dll
[2015/09/12 23:08:07 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VoiceActivationManager.dll
[2015/09/12 23:08:07 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2015/09/12 23:08:07 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VoiceActivationManager.dll
[2015/09/12 23:08:07 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuautoappupdate.dll
[2015/09/12 23:08:07 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationControllerPS.dll
[2015/09/12 23:08:07 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerShellext.exe
[2015/09/12 22:52:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2015/09/12 22:52:55 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2015/09/12 22:52:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2015/09/12 22:52:55 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2015/09/12 22:52:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2015/09/12 22:52:38 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2015/09/12 22:52:38 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2015/09/12 22:52:38 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015/09/12 22:52:38 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015/09/12 22:52:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2015/09/12 22:52:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\Recovery
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
[2015/09/12 22:23:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
[2015/09/12 22:15:12 | 000,000,000 | --SD | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft
[2015/09/12 22:15:12 | 000,000,000 | R-SD | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2015/09/12 22:15:12 | 000,000,000 | R--D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2015/09/12 22:15:12 | 000,000,000 | R--D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/09/12 22:15:12 | 000,000,000 | R--D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Voisinage réseau
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Voisinage d'impression
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\Temporary Internet Files
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\SendTo
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Recent
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Modèles
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Documents\Mes vidéos
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Documents\Mes images
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Mes documents
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Menu Démarrer
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Documents\Ma musique
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Local Settings
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\Historique
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Cookies
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\Application Data
[2015/09/12 22:15:12 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\Application Data
[2015/09/12 22:15:12 | 000,000,000 | -H-D | C] -- C:\Users\Anthony\AppData
[2015/09/12 22:15:12 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Temp
[2015/09/12 22:15:12 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Microsoft
[2015/09/12 22:15:12 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/09/12 22:14:02 | 002,718,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2015/09/12 22:13:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sda
[2015/09/12 22:13:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2015/09/12 22:13:25 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2015/09/12 22:13:24 | 000,086,528 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.DLL
[2015/09/12 22:13:24 | 000,082,432 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL
[2015/09/12 22:12:53 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2015/09/12 22:12:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2015/09/12 22:12:38 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2015/09/12 22:12:34 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2015/09/12 22:11:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2015/09/12 18:32:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2015/09/12 18:28:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2015/09/12 18:28:16 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Google
[2015/09/12 18:28:08 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Apps
[2015/09/12 18:28:00 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\EmieUserList
[2015/09/12 18:28:00 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\EmieSiteList
[2015/09/12 18:28:00 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\AppData\Local\EmieBrowserModeList
[2015/09/12 17:42:35 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\WildTangent
[2015/09/12 17:35:48 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\WebStorage
[2015/09/12 17:35:48 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\awsRun
[2015/09/12 17:34:59 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\GWX
[2015/09/12 17:34:45 | 000,000,000 | ---D | C] -- C:\Users\Anthony\OneDrive
[2015/09/12 17:31:38 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Macromedia
[2015/09/12 17:30:48 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\ASUS
[2015/09/12 17:30:47 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Documents\Mes fichiers reçus
[2015/09/12 17:30:46 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\NVIDIA
[2015/09/12 17:30:34 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\PackageStaging
[2015/09/12 17:30:06 | 000,000,000 | ---D | C] -- C:\ProgramData\USBChargerPlus
[2015/09/12 17:30:02 | 000,000,000 | R--D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2015/09/12 17:30:02 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Searches
[2015/09/12 17:30:02 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Contacts
[2015/09/12 17:30:02 | 000,000,000 | R--D | C] -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015/09/12 17:30:02 | 000,000,000 | -H-D | C] -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2015/09/12 17:30:01 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Adobe
[2015/09/12 17:30:00 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\VirtualStore
[2015/09/12 17:29:58 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Local\Packages
[2015/09/12 17:29:52 | 000,000,000 | -HSD | C] -- C:\Users\Anthony\IntelGraphicsProfiles
[2015/09/12 17:29:51 | 000,000,000 | ---D | C] -- C:\Users\Anthony\AppData\Roaming\Intel
[2015/09/12 17:28:24 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wu.upgrade.ps.dll
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Videos
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Saved Games
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Pictures
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Music
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Links
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Favorites
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Downloads
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Documents
[2015/09/12 17:27:42 | 000,000,000 | R--D | C] -- C:\Users\Anthony\Desktop
[2015/09/12 17:27:42 | 000,000,000 | ---D | C] -- C:\Users\Anthony\Roaming
[2015/09/08 11:47:40 | 000,146,072 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetLwf.sys
[2015/09/08 11:47:40 | 000,117,768 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetAdp6.sys
[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[1 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
[1 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/09/26 11:10:50 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/09/26 11:07:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Anthony\Desktop\OTL.exe
[2015/09/26 10:56:07 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/09/26 10:56:07 | 000,000,165 | ---- | M] () -- C:\Users\Anthony\AppData\Roaming\sp_data.sys
[2015/09/26 10:56:04 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2015/09/26 10:56:03 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\ROG-ANTHO_Anthony_HistoryPrediction.bin
[2015/09/26 10:56:02 | 2530,435,071 | -HS- | M] () -- C:\hiberfil.sys
[2015/09/26 10:56:02 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/09/26 10:53:05 | 000,001,155 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
[2015/09/26 10:50:11 | 000,000,865 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/09/26 10:39:10 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/09/26 10:39:09 | 000,002,260 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/09/26 10:25:56 | 001,847,378 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/09/26 10:25:56 | 000,823,704 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2015/09/26 10:25:56 | 000,734,016 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/09/26 10:25:56 | 000,155,560 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2015/09/26 10:25:56 | 000,139,372 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/09/24 14:47:03 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\WINDOWS\SysNative\drivers\GUBootStartup.sys
[2015/09/24 14:45:36 | 000,000,200 | ---- | M] () -- C:\Users\Anthony\.packettracer
[2015/09/24 11:12:54 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
[2015/09/24 10:32:16 | 000,001,227 | ---- | M] () -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk
[2015/09/23 11:44:02 | 000,098,026 | ---- | M] () -- C:\Users\Anthony\Desktop\config bureau.PNG
[2015/09/23 10:21:32 | 000,000,432 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2015/09/22 13:37:08 | 000,001,586 | ---- | M] () -- C:\Users\Anthony\Desktop\Skype.lnk
[2015/09/22 11:03:29 | 000,001,151 | ---- | M] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
[2015/09/21 15:52:49 | 000,001,537 | ---- | M] () -- C:\Users\Public\Desktop\Wireshark.lnk
[2015/09/19 10:42:39 | 000,001,824 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015/09/19 09:51:21 | 000,001,030 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 10.lnk
[2015/09/16 20:04:22 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/09/16 10:36:02 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmbusr.sys
[2015/09/16 10:36:01 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Synth3dVsp.sys
[2015/09/16 10:36:01 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storvsp.sys
[2015/09/16 10:35:58 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Vid.sys
[2015/09/16 10:35:58 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vpcivsp.sys
[2015/09/14 14:04:54 | 000,002,327 | ---- | M] () -- C:\Users\Public\Desktop\HP Photosmart 5520 series.lnk
[2015/09/14 14:04:39 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
[2015/09/14 02:24:08 | 042,840,184 | ---- | M] () -- C:\WINDOWS\SysNative\nvcompiler.dll
[2015/09/14 02:24:08 | 037,819,000 | ---- | M] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2015/09/14 02:24:08 | 022,559,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2015/09/14 02:24:08 | 018,569,848 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2015/09/14 02:24:08 | 017,934,400 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2015/09/14 02:24:08 | 016,646,112 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2015/09/14 02:24:08 | 015,631,128 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2015/09/14 02:24:08 | 015,336,024 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2015/09/14 02:24:08 | 014,945,040 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2015/09/14 02:24:08 | 013,666,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2015/09/14 02:24:08 | 012,611,632 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2015/09/14 02:24:08 | 012,191,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2015/09/14 02:24:08 | 003,484,216 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2015/09/14 02:24:08 | 003,077,544 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2015/09/14 02:24:08 | 002,354,808 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2015/09/14 02:24:08 | 002,105,976 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2015/09/14 02:24:08 | 001,898,104 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6435598.dll
[2015/09/14 02:24:08 | 001,558,832 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6435598.dll
[2015/09/14 02:24:08 | 001,075,320 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2015/09/14 02:24:08 | 001,064,056 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2015/09/14 02:24:08 | 000,986,416 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2015/09/14 02:24:08 | 000,945,272 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2015/09/14 02:24:08 | 000,787,384 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2015/09/14 02:24:08 | 000,632,664 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2015/09/14 02:24:08 | 000,408,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2015/09/14 02:24:08 | 000,387,720 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2015/09/14 02:24:08 | 000,364,152 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2015/09/14 02:24:08 | 000,316,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2015/09/14 02:24:08 | 000,177,088 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2015/09/14 02:24:08 | 000,155,792 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2015/09/14 02:24:08 | 000,034,098 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2015/09/14 00:04:57 | 002,558,584 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2015/09/14 00:04:57 | 001,062,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshext.dll
[2015/09/14 00:04:57 | 000,385,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2015/09/14 00:04:57 | 000,074,872 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshextr.dll
[2015/09/14 00:04:57 | 000,062,768 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2015/09/14 00:04:56 | 006,885,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2015/09/14 00:04:56 | 003,496,056 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2015/09/13 19:15:46 | 000,000,233 | ---- | M] () -- C:\Users\Anthony\Desktop\The Crew (Worldwide).url
[2015/09/13 18:00:44 | 000,343,848 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015/09/13 10:15:58 | 000,001,280 | ---- | M] () -- C:\Users\Anthony\Desktop\Uplay.lnk
[2015/09/13 09:49:41 | 000,001,456 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2015/09/13 09:46:02 | 000,001,884 | ---- | M] () -- C:\Users\Anthony\Desktop\Process Hacker 2.lnk
[2015/09/13 09:41:42 | 000,001,180 | ---- | M] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2015/09/13 09:36:56 | 000,001,338 | ---- | M] () -- C:\Users\Anthony\Desktop\Cisco Packet Tracer Student.lnk
[2015/09/13 09:24:50 | 000,002,523 | ---- | M] () -- C:\Users\Public\Desktop\VMware vSphere Client.lnk
[2015/09/13 09:22:51 | 000,001,024 | ---- | M] () -- C:\WINDOWS\SysWow64\%TMP%
[2015/09/13 09:22:49 | 004,721,434 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2015/09/13 09:22:48 | 000,001,278 | ---- | M] () -- C:\Users\Public\Desktop\VMware Workstation Pro.lnk
[2015/09/13 09:17:32 | 000,001,722 | ---- | M] () -- C:\Users\Anthony\Desktop\Outlook 2013.lnk
[2015/09/13 09:17:07 | 000,001,794 | ---- | M] () -- C:\Users\Anthony\Desktop\Excel 2013.lnk
[2015/09/13 09:16:54 | 000,001,802 | ---- | M] () -- C:\Users\Anthony\Desktop\Word 2013.lnk
[2015/09/13 09:16:45 | 000,001,830 | ---- | M] () -- C:\Users\Anthony\Desktop\PowerPoint 2013.lnk
[2015/09/13 09:12:25 | 000,001,329 | ---- | M] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2015/09/13 09:03:22 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/09/13 08:50:41 | 000,785,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
[2015/09/13 08:50:41 | 000,475,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scrptadm.dll
[2015/09/13 08:50:41 | 000,361,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bdechangepin.exe
[2015/09/13 08:50:41 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SrpUxNativeSnapIn.dll
[2015/09/13 08:50:41 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tscfgwmi.dll
[2015/09/13 08:50:41 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuditNativeSnapIn.dll
[2015/09/13 08:50:41 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PeerDist.dll
[2015/09/13 08:50:41 | 000,147,439 | ---- | M] () -- C:\WINDOWS\SysNative\gpedit.msc
[2015/09/13 08:50:41 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\auditpolmsg.dll
[2015/09/13 08:50:41 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuditPolicyGPInterop.dll
[2015/09/13 08:50:41 | 000,043,566 | ---- | M] () -- C:\WINDOWS\SysNative\rsop.msc
[2015/09/13 08:50:40 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SrpUxNativeSnapIn.dll
[2015/09/13 08:50:40 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuditNativeSnapIn.dll
[2015/09/13 08:50:40 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\baaupdate.exe
[2015/09/13 08:50:40 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\auditpolmsg.dll
[2015/09/13 08:50:40 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmlib.dll
[2015/09/13 08:50:40 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintBrmUi.exe
[2015/09/13 08:50:40 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuditPolicyGPInterop.dll
[2015/09/13 08:50:40 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpscript.dll
[2015/09/13 08:50:40 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpscript.exe
[2015/09/13 08:50:40 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qwinsta.exe
[2015/09/13 08:50:40 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qprocess.exe
[2015/09/13 08:50:40 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msg.exe
[2015/09/13 08:50:40 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quser.exe
[2015/09/13 08:50:40 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\chgport.exe
[2015/09/13 08:50:40 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qappsrv.exe
[2015/09/13 08:50:40 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tskill.exe
[2015/09/13 08:50:40 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tsdiscon.exe
[2015/09/13 08:50:40 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tscon.exe
[2015/09/13 08:50:40 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rwinsta.exe
[2015/09/13 08:50:40 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\logoff.exe
[2015/09/13 08:50:40 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\chgusr.exe
[2015/09/13 08:50:40 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\chglogon.exe
[2015/09/13 08:50:40 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reset.exe
[2015/09/13 08:50:40 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\change.exe
[2015/09/13 08:50:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\query.exe
[2015/09/13 08:50:39 | 000,421,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppIdPolicyEngineApi.dll
[2015/09/13 08:50:39 | 000,272,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddputils.dll
[2015/09/13 08:50:39 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddptrace.dll
[2015/09/13 08:50:39 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddp_ps.dll
[2015/09/13 08:50:38 | 000,815,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvewiz.dll
[2015/09/13 08:50:38 | 000,567,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AdmTmpl.dll
[2015/09/13 08:50:38 | 000,324,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvecpl.dll
[2015/09/13 08:50:38 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppIdPolicyEngineApi.dll
[2015/09/13 08:50:38 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerWizardElev.exe
[2015/09/13 08:50:38 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerWizard.exe
[2015/09/13 08:50:38 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeSysprep.dll
[2015/09/13 08:50:37 | 001,359,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll
[2015/09/13 08:50:37 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpprefcl.dll
[2015/09/13 08:50:37 | 000,658,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll
[2015/09/13 08:50:37 | 000,561,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scrptadm.dll
[2015/09/13 08:50:37 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appmgr.dll
[2015/09/13 08:50:37 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll
[2015/09/13 08:50:37 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll
[2015/09/13 08:50:37 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationSettings.exe
[2015/09/13 08:50:37 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmshell.dll
[2015/09/13 08:50:37 | 000,137,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adrclient.dll
[2015/09/13 08:50:37 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmtrace.dll
[2015/09/13 08:50:37 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm_ps.dll
[2015/09/13 08:50:36 | 000,682,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistCacheProvider.dll
[2015/09/13 08:50:36 | 000,577,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpprefcl.dll
[2015/09/13 08:50:36 | 000,431,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistSh.dll
[2015/09/13 08:50:36 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddpchunk.dll
[2015/09/13 08:50:36 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appmgmts.dll
[2015/09/13 08:50:36 | 000,147,439 | ---- | M] () -- C:\WINDOWS\SysWow64\gpedit.msc
[2015/09/13 08:50:36 | 000,120,458 | ---- | M] () -- C:\WINDOWS\SysNative\secpol.msc
[2015/09/13 08:50:36 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpscript.dll
[2015/09/13 08:50:36 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpscript.exe
[2015/09/13 08:50:36 | 000,043,566 | ---- | M] () -- C:\WINDOWS\SysWow64\rsop.msc
[2015/09/13 08:50:35 | 000,833,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pmcsnap.dll
[2015/09/13 08:50:35 | 000,453,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AdmTmpl.dll
[2015/09/13 08:50:35 | 000,357,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PeerDistSh.dll
[2015/09/13 08:50:35 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscobj.dll
[2015/09/13 08:50:35 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ppcsnap.dll
[2015/09/13 08:50:35 | 000,146,389 | ---- | M] () -- C:\WINDOWS\SysNative\printmanagement.msc
[2015/09/13 08:50:35 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeHdCfg.exe
[2015/09/13 08:50:35 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BdeHdCfgLib.dll
[2015/09/13 08:50:35 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmlib.dll
[2015/09/13 08:50:34 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appmgr.dll
[2015/09/13 08:50:34 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cscobj.dll
[2015/09/13 08:50:34 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveprompt.exe
[2015/09/13 08:50:34 | 000,147,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CscMig.dll
[2015/09/13 08:50:34 | 000,052,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\embeddedapplauncher.exe
[2015/09/13 08:50:34 | 000,041,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmbeddedAppLauncherConfig.dll
[2015/09/13 08:50:33 | 000,957,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll
[2015/09/13 08:50:33 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmscan.dll
[2015/09/13 08:50:33 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll
[2015/09/13 08:50:33 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDist.dll
[2015/09/13 08:50:33 | 000,200,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll
[2015/09/13 08:50:33 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistWSDDiscoProv.dll
[2015/09/13 08:50:33 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistCleaner.dll
[2015/09/13 08:50:33 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmshell.dll
[2015/09/13 08:50:33 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adrclient.dll
[2015/09/13 08:50:33 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmtrace.dll
[2015/09/13 08:50:33 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistHttpTrans.dll
[2015/09/13 08:50:33 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PeerDistAD.dll
[2015/09/13 08:50:33 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm_ps.dll
[2015/09/13 06:32:59 | 000,056,944 | ---- | M] () -- C:\WINDOWS\SysNative\ASGCoInstaller_x64.dll
[2015/09/13 06:29:49 | 000,002,360 | ---- | M] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/09/12 23:08:17 | 003,248,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2015/09/12 23:08:17 | 002,646,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2015/09/12 23:08:17 | 002,462,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2015/09/12 23:08:17 | 002,416,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2015/09/12 23:08:17 | 002,151,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2015/09/12 23:08:17 | 001,916,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2015/09/12 23:08:17 | 001,562,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2015/09/12 23:08:17 | 001,561,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2015/09/12 23:08:17 | 001,411,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
[2015/09/12 23:08:17 | 001,356,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2015/09/12 23:08:17 | 001,087,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2015/09/12 23:08:17 | 001,043,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
[2015/09/12 23:08:17 | 001,043,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2015/09/12 23:08:17 | 001,025,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2015/09/12 23:08:17 | 000,980,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2015/09/12 23:08:17 | 000,918,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2015/09/12 23:08:17 | 000,896,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2015/09/12 23:08:17 | 000,877,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2015/09/12 23:08:17 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2015/09/12 23:08:17 | 000,816,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2015/09/12 23:08:17 | 000,799,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpccpl.dll
[2015/09/12 23:08:17 | 000,783,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2015/09/12 23:08:17 | 000,713,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2015/09/12 23:08:17 | 000,644,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2015/09/12 23:08:17 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2015/09/12 23:08:17 | 000,596,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2015/09/12 23:08:17 | 000,569,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2015/09/12 23:08:17 | 000,527,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2015/09/12 23:08:17 | 000,521,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2015/09/12 23:08:17 | 000,501,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2015/09/12 23:08:17 | 000,497,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
[2015/09/12 23:08:17 | 000,487,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2015/09/12 23:08:17 | 000,484,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2015/09/12 23:08:17 | 000,480,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2015/09/12 23:08:17 | 000,473,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2015/09/12 23:08:17 | 000,420,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2015/09/12 23:08:17 | 000,373,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2015/09/12 23:08:17 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2015/09/12 23:08:17 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2015/09/12 23:08:17 | 000,243,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2015/09/12 23:08:17 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fwpolicyiomgr.dll
[2015/09/12 23:08:17 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2015/09/12 23:08:17 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2015/09/12 23:08:17 | 000,052,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys
[2015/09/12 23:08:16 | 021,874,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2015/09/12 23:08:16 | 018,806,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2015/09/12 23:08:16 | 014,241,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2015/09/12 23:08:16 | 012,589,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2015/09/12 23:08:16 | 007,523,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2015/09/12 23:08:16 | 005,454,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2015/09/12 23:08:16 | 004,791,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2015/09/12 23:08:16 | 001,822,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2015/09/12 23:08:16 | 001,200,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2015/09/12 23:08:16 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2015/09/12 23:08:16 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2015/09/12 23:08:16 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
[2015/09/12 23:08:16 | 000,437,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
[2015/09/12 23:08:16 | 000,404,480 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/09/12 23:08:16 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationGeofences.dll
[2015/09/12 23:08:16 | 000,333,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2015/09/12 23:08:16 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2015/09/12 23:08:16 | 000,294,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2015/09/12 23:08:16 | 000,285,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2015/09/12 23:08:16 | 000,269,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2015/09/12 23:08:16 | 000,251,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2015/09/12 23:08:16 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationPermissions.dll
[2015/09/12 23:08:16 | 000,097,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcd.dll
[2015/09/12 23:08:16 | 000,082,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcd.dll
[2015/09/12 23:08:16 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2015/09/12 23:08:16 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.PAL.Desktop.dll
[2015/09/12 23:08:12 | 011,557,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2015/09/12 23:08:12 | 009,889,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2015/09/12 23:08:12 | 008,613,200 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2015/09/12 23:08:12 | 008,019,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2015/09/12 23:08:12 | 006,305,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2015/09/12 23:08:12 | 004,760,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2015/09/12 23:08:12 | 004,532,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2015/09/12 23:08:12 | 004,398,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2015/09/12 23:08:12 | 004,350,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2015/09/12 23:08:12 | 004,169,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2015/09/12 23:08:12 | 004,048,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2015/09/12 23:08:12 | 003,780,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2015/09/12 23:08:12 | 003,443,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2015/09/12 23:08:12 | 003,362,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2015/09/12 23:08:12 | 002,350,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2015/09/12 23:08:12 | 002,225,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2015/09/12 23:08:12 | 002,178,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2015/09/12 23:08:12 | 002,153,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2015/09/12 23:08:12 | 002,147,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2015/09/12 23:08:12 | 001,795,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2015/09/12 23:08:12 | 001,774,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2015/09/12 23:08:12 | 001,612,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2015/09/12 23:08:12 | 001,521,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2015/09/12 23:08:12 | 001,418,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
[2015/09/12 23:08:12 | 001,294,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2015/09/12 23:08:12 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcnwiz.dll
[2015/09/12 23:08:12 | 001,290,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2015/09/12 23:08:12 | 001,274,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2015/09/12 23:08:12 | 001,234,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2015/09/12 23:08:12 | 001,226,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wcnwiz.dll
[2015/09/12 23:08:12 | 001,201,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2015/09/12 23:08:12 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2015/09/12 23:08:12 | 001,135,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2015/09/12 23:08:12 | 001,123,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2015/09/12 23:08:12 | 001,061,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2015/09/12 23:08:12 | 001,031,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2015/09/12 23:08:12 | 001,018,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2015/09/12 23:08:12 | 000,996,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2015/09/12 23:08:12 | 000,993,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2015/09/12 23:08:12 | 000,934,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2015/09/12 23:08:12 | 000,911,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2015/09/12 23:08:12 | 000,872,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2015/09/12 23:08:12 | 000,858,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2015/09/12 23:08:12 | 000,850,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2015/09/12 23:08:12 | 000,845,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2015/09/12 23:08:12 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfuimanager.dll
[2015/09/12 23:08:12 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2015/09/12 23:08:12 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efscore.dll
[2015/09/12 23:08:12 | 000,685,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2015/09/12 23:08:12 | 000,642,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdbui.dll
[2015/09/12 23:08:12 | 000,608,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2015/09/12 23:08:12 | 000,595,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2015/09/12 23:08:12 | 000,594,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2015/09/12 23:08:12 | 000,593,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2015/09/12 23:08:12 | 000,589,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2015/09/12 23:08:12 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efscore.dll
[2015/09/12 23:08:12 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2015/09/12 23:08:12 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2015/09/12 23:08:12 | 000,584,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2015/09/12 23:08:12 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2015/09/12 23:08:12 | 000,576,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2015/09/12 23:08:12 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2015/09/12 23:08:12 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2015/09/12 23:08:12 | 000,542,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2015/09/12 23:08:12 | 000,505,344 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/09/12 23:08:12 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
[2015/09/12 23:08:12 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
[2015/09/12 23:08:12 | 000,430,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll
[2015/09/12 23:08:12 | 000,425,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2015/09/12 23:08:12 | 000,416,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdedit.exe
[2015/09/12 23:08:12 | 000,414,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BioFeedback.dll
[2015/09/12 23:08:12 | 000,413,184 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/09/12 23:08:12 | 000,407,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2015/09/12 23:08:12 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupShim.dll
[2015/09/12 23:08:12 | 000,384,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2015/09/12 23:08:12 | 000,366,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2015/09/12 23:08:12 | 000,365,568 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2015/09/12 23:08:12 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2015/09/12 23:08:12 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2015/09/12 23:08:12 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2015/09/12 23:08:12 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2015/09/12 23:08:12 | 000,335,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2015/09/12 23:08:12 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BlockedShutdown.dll
[2015/09/12 23:08:12 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultsvc.dll
[2015/09/12 23:08:12 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConhostV2.dll
[2015/09/12 23:08:12 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2015/09/12 23:08:12 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll
[2015/09/12 23:08:12 | 000,292,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
[2015/09/12 23:08:12 | 000,291,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemcpl.dll
[2015/09/12 23:08:12 | 000,283,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BioFeedback.dll
[2015/09/12 23:08:12 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\systemcpl.dll
[2015/09/12 23:08:12 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\syncutil.dll
[2015/09/12 23:08:12 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupShim.dll
[2015/09/12 23:08:12 | 000,273,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
[2015/09/12 23:08:12 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConsoleLogon.dll
[2015/09/12 23:08:12 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenter.dll
[2015/09/12 23:08:12 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_UserAccount.dll
[2015/09/12 23:08:12 | 000,252,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
[2015/09/12 23:08:12 | 000,243,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
[2015/09/12 23:08:12 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2015/09/12 23:08:12 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Notifications.dll
[2015/09/12 23:08:12 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
[2015/09/12 23:08:12 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicesFlowBroker.dll
[2015/09/12 23:08:12 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe
[2015/09/12 23:08:12 | 000,208,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2015/09/12 23:08:12 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll
[2015/09/12 23:08:12 | 000,200,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wof.sys
[2015/09/12 23:08:12 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
[2015/09/12 23:08:12 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReInfo.dll
[2015/09/12 23:08:12 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.PicturePassword.dll
[2015/09/12 23:08:12 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2015/09/12 23:08:12 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shacct.dll
[2015/09/12 23:08:12 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2015/09/12 23:08:12 | 000,181,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2015/09/12 23:08:12 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_SignInOptions.dll
[2015/09/12 23:08:12 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srumsvc.dll
[2015/09/12 23:08:12 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdboot.exe
[2015/09/12 23:08:12 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Privacy.dll
[2015/09/12 23:08:12 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SubscriptionMgr.dll
[2015/09/12 23:08:12 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2015/09/12 23:08:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
[2015/09/12 23:08:12 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2015/09/12 23:08:12 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\shacct.dll
[2015/09/12 23:08:12 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkStatus.dll
[2015/09/12 23:08:12 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll
[2015/09/12 23:08:12 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sendmail.dll
[2015/09/12 23:08:12 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeParserTask.exe
[2015/09/12 23:08:12 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll
[2015/09/12 23:08:12 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2015/09/12 23:08:12 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2015/09/12 23:08:12 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spbcd.dll
[2015/09/12 23:08:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll
[2015/09/12 23:08:12 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll
[2015/09/12 23:08:12 | 000,077,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2015/09/12 23:08:12 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll
[2015/09/12 23:08:12 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spbcd.dll
[2015/09/12 23:08:12 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.ProxyStub.dll
[2015/09/12 23:08:12 | 000,061,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2015/09/12 23:08:12 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2015/09/12 23:08:12 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnNetsh.dll
[2015/09/12 23:08:12 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2015/09/12 23:08:12 | 000,045,568 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2015/09/12 23:08:12 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2015/09/12 23:08:12 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\calc.exe
[2015/09/12 23:08:12 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\calc.exe
[2015/09/12 23:08:12 | 000,008,847 | ---- | M] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015/09/12 23:08:07 | 016,706,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2015/09/12 23:08:07 | 013,024,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2015/09/12 23:08:07 | 007,569,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2015/09/12 23:08:07 | 007,051,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2015/09/12 23:08:07 | 006,878,256 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2015/09/12 23:08:07 | 006,488,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2015/09/12 23:08:07 | 006,101,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2015/09/12 23:08:07 | 005,118,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2015/09/12 23:08:07 | 005,076,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2015/09/12 23:08:07 | 004,611,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2015/09/12 23:08:07 | 003,586,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2015/09/12 23:08:07 | 003,527,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2015/09/12 23:08:07 | 003,248,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2015/09/12 23:08:07 | 002,748,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2015/09/12 23:08:07 | 002,606,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2015/09/12 23:08:07 | 002,558,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2015/09/12 23:08:07 | 002,498,808 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/09/12 23:08:07 | 002,446,336 | ---- | M] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/09/12 23:08:07 | 002,415,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2015/09/12 23:08:07 | 002,125,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2015/09/12 23:08:07 | 002,093,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2015/09/12 23:08:07 | 001,964,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2015/09/12 23:08:07 | 001,888,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2015/09/12 23:08:07 | 001,823,232 | ---- | M] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/09/12 23:08:07 | 001,771,592 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/09/12 23:08:07 | 001,714,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2015/09/12 23:08:07 | 001,643,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2015/09/12 23:08:07 | 001,601,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2015/09/12 23:08:07 | 001,593,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2015/09/12 23:08:07 | 001,591,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2015/09/12 23:08:07 | 001,420,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2015/09/12 23:08:07 | 001,417,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2015/09/12 23:08:07 | 001,396,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2015/09/12 23:08:07 | 001,382,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2015/09/12 23:08:07 | 001,334,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2015/09/12 23:08:07 | 001,212,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemoteNaturalLanguage.dll
[2015/09/12 23:08:07 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2015/09/12 23:08:07 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2015/09/12 23:08:07 | 001,162,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2015/09/12 23:08:07 | 001,112,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2015/09/12 23:08:07 | 001,101,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2015/09/12 23:08:07 | 000,971,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\WpdMtpDr.dll
[2015/09/12 23:08:07 | 000,966,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2015/09/12 23:08:07 | 000,963,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2015/09/12 23:08:07 | 000,925,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2015/09/12 23:08:07 | 000,898,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll
[2015/09/12 23:08:07 | 000,893,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2015/09/12 23:08:07 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2015/09/12 23:08:07 | 000,859,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2015/09/12 23:08:07 | 000,856,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactApis.dll
[2015/09/12 23:08:07 | 000,841,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
[2015/09/12 23:08:07 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2015/09/12 23:08:07 | 000,828,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2015/09/12 23:08:07 | 000,823,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2015/09/12 23:08:07 | 000,808,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2015/09/12 23:08:07 | 000,801,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2015/09/12 23:08:07 | 000,783,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2015/09/12 23:08:07 | 000,778,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2015/09/12 23:08:07 | 000,762,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2015/09/12 23:08:07 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfuimanager.dll
[2015/09/12 23:08:07 | 000,700,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2015/09/12 23:08:07 | 000,695,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2015/09/12 23:08:07 | 000,692,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\NfcCx.dll
[2015/09/12 23:08:07 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2015/09/12 23:08:07 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
[2015/09/12 23:08:07 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2015/09/12 23:08:07 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
[2015/09/12 23:08:07 | 000,658,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2015/09/12 23:08:07 | 000,654,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2015/09/12 23:08:07 | 000,650,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2015/09/12 23:08:07 | 000,632,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2015/09/12 23:08:07 | 000,630,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2015/09/12 23:08:07 | 000,623,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactApis.dll
[2015/09/12 23:08:07 | 000,621,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2015/09/12 23:08:07 | 000,609,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2015/09/12 23:08:07 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2015/09/12 23:08:07 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2015/09/12 23:08:07 | 000,583,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2015/09/12 23:08:07 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
[2015/09/12 23:08:07 | 000,563,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll
[2015/09/12 23:08:07 | 000,554,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directmanipulation.dll
[2015/09/12 23:08:07 | 000,541,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2015/09/12 23:08:07 | 000,521,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2015/09/12 23:08:07 | 000,518,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationController.dll
[2015/09/12 23:08:07 | 000,516,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2015/09/12 23:08:07 | 000,510,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2015/09/12 23:08:07 | 000,505,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2015/09/12 23:08:07 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
[2015/09/12 23:08:07 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2015/09/12 23:08:07 | 000,497,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2015/09/12 23:08:07 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
[2015/09/12 23:08:07 | 000,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2015/09/12 23:08:07 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MessagingDataModel2.dll
[2015/09/12 23:08:07 | 000,454,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directmanipulation.dll
[2015/09/12 23:08:07 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll
[2015/09/12 23:08:07 | 000,446,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2015/09/12 23:08:07 | 000,442,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2015/09/12 23:08:07 | 000,441,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
[2015/09/12 23:08:07 | 000,421,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2015/09/12 23:08:07 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2015/09/12 23:08:07 | 000,393,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2015/09/12 23:08:07 | 000,373,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2015/09/12 23:08:07 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2015/09/12 23:08:07 | 000,336,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2015/09/12 23:08:07 | 000,335,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2015/09/12 23:08:07 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2015/09/12 23:08:07 | 000,328,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2015/09/12 23:08:07 | 000,324,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2015/09/12 23:08:07 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2015/09/12 23:08:07 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2015/09/12 23:08:07 | 000,306,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationObjFactory.dll
[2015/09/12 23:08:07 | 000,303,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2015/09/12 23:08:07 | 000,303,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2015/09/12 23:08:07 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2015/09/12 23:08:07 | 000,293,376 | ---- | M] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015/09/12 23:08:07 | 000,290,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininit.exe
[2015/09/12 23:08:07 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2015/09/12 23:08:07 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
[2015/09/12 23:08:07 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2015/09/12 23:08:07 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NotificationObjFactory.dll
[2015/09/12 23:08:07 | 000,263,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
[2015/09/12 23:08:07 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2015/09/12 23:08:07 | 000,247,296 | ---- | M] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015/09/12 23:08:07 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll
[2015/09/12 23:08:07 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2015/09/12 23:08:07 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
[2015/09/12 23:08:07 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srumsvc.dll
[2015/09/12 23:08:07 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OmaDmAgent.dll
[2015/09/12 23:08:07 | 000,200,704 | ---- | M] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/09/12 23:08:07 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll
[2015/09/12 23:08:07 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModelShim.dll
[2015/09/12 23:08:07 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseModernAppMgmtCSP.dll
[2015/09/12 23:08:07 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
[2015/09/12 23:08:07 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2015/09/12 23:08:07 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cloudAP.dll
[2015/09/12 23:08:07 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2015/09/12 23:08:07 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2015/09/12 23:08:07 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModel.dll
[2015/09/12 23:08:07 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll
[2015/09/12 23:08:07 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
[2015/09/12 23:08:07 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2015/09/12 23:08:07 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll
[2015/09/12 23:08:07 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\SensorsCx.dll
[2015/09/12 23:08:07 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEStoreEventHandlers.dll
[2015/09/12 23:08:07 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2015/09/12 23:08:07 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2015/09/12 23:08:07 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
[2015/09/12 23:08:07 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe
[2015/09/12 23:08:07 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll
[2015/09/12 23:08:07 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll
[2015/09/12 23:08:07 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEDataLayerHelpers.dll
[2015/09/12 23:08:07 | 000,080,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2015/09/12 23:08:07 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthRadioMedia.dll
[2015/09/12 23:08:07 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.V2.dll
[2015/09/12 23:08:07 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2015/09/12 23:08:07 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbser.sys
[2015/09/12 23:08:07 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys
[2015/09/12 23:08:07 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unenrollhook.dll
[2015/09/12 23:08:07 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hmkd.dll
[2015/09/12 23:08:07 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2015/09/12 23:08:07 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmprc.exe
[2015/09/12 23:08:07 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll
[2015/09/12 23:08:07 | 000,046,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2015/09/12 23:08:07 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys
[2015/09/12 23:08:07 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hmkd.dll
[2015/09/12 23:08:07 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tetheringclient.dll
[2015/09/12 23:08:07 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VoiceActivationManager.dll
[2015/09/12 23:08:07 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2015/09/12 23:08:07 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VoiceActivationManager.dll
[2015/09/12 23:08:07 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuautoappupdate.dll
[2015/09/12 23:08:07 | 000,032,768 | ---- | M] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/09/12 23:08:07 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationControllerPS.dll
[2015/09/12 23:08:07 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerShellext.exe
[2015/09/12 23:08:07 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\fr-FR\mountmgr.sys.mui
[2015/09/12 22:22:47 | 000,009,528 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2015/09/12 22:22:47 | 000,009,528 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2015/09/12 22:22:24 | 000,023,108 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2015/09/12 22:13:30 | 000,006,786 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\rtwavesEFX.dat
[2015/09/12 22:13:30 | 000,002,626 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\rtwavesMFX.dat
[2015/09/12 22:13:29 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2015/09/12 22:13:28 | 000,317,061 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\RTWAVES40.dat
[2015/09/12 22:13:25 | 000,000,200 | ---- | M] () -- C:\WINDOWS\SysNative\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
[2015/09/12 22:12:32 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
[2015/09/12 18:27:58 | 000,001,458 | ---- | M] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/09/12 17:38:21 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
[2015/09/11 14:17:51 | 005,231,082 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2015/09/08 11:47:40 | 000,146,072 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetLwf.sys
[2015/09/08 11:47:40 | 000,117,768 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetAdp6.sys
[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[1 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
[1 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/09/26 11:10:50 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/09/26 10:56:03 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\ROG-ANTHO_Anthony_HistoryPrediction.bin
[2015/09/26 10:21:33 | 042,840,184 | ---- | C] () -- C:\WINDOWS\SysNative\nvcompiler.dll
[2015/09/26 10:21:33 | 037,819,000 | ---- | C] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2015/09/24 14:47:04 | 000,001,167 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
[2015/09/24 14:47:04 | 000,001,155 | ---- | C] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
[2015/09/23 11:44:02 | 000,098,026 | ---- | C] () -- C:\Users\Anthony\Desktop\config bureau.PNG
[2015/09/23 10:50:21 | 000,001,227 | ---- | C] () -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk
[2015/09/23 10:13:07 | 000,000,432 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2015/09/22 13:37:08 | 000,001,586 | ---- | C] () -- C:\Users\Anthony\Desktop\Skype.lnk
[2015/09/22 11:03:29 | 000,001,151 | ---- | C] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
[2015/09/21 15:52:49 | 000,001,537 | ---- | C] () -- C:\Users\Public\Desktop\Wireshark.lnk
[2015/09/19 10:42:39 | 000,001,824 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015/09/16 20:04:22 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/09/14 14:04:54 | 000,002,327 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart 5520 series.lnk
[2015/09/14 14:04:39 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2015/09/13 19:15:46 | 000,000,233 | ---- | C] () -- C:\Users\Anthony\Desktop\The Crew (Worldwide).url
[2015/09/13 17:54:58 | 000,000,865 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/09/13 10:15:58 | 000,001,280 | ---- | C] () -- C:\Users\Anthony\Desktop\Uplay.lnk
[2015/09/13 09:57:46 | 005,231,082 | ---- | C] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2015/09/13 09:56:54 | 000,034,098 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2015/09/13 09:50:47 | 000,002,535 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2015/09/13 09:49:41 | 000,001,456 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2015/09/13 09:45:40 | 000,001,884 | ---- | C] () -- C:\Users\Anthony\Desktop\Process Hacker 2.lnk
[2015/09/13 09:41:42 | 000,001,180 | ---- | C] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2015/09/13 09:38:01 | 000,000,200 | ---- | C] () -- C:\Users\Anthony\.packettracer
[2015/09/13 09:36:56 | 000,001,338 | ---- | C] () -- C:\Users\Anthony\Desktop\Cisco Packet Tracer Student.lnk
[2015/09/13 09:25:43 | 000,001,042 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
[2015/09/13 09:25:43 | 000,001,030 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 10.lnk
[2015/09/13 09:24:50 | 000,002,523 | ---- | C] () -- C:\Users\Public\Desktop\VMware vSphere Client.lnk
[2015/09/13 09:22:51 | 000,001,024 | ---- | C] () -- C:\WINDOWS\SysWow64\%TMP%
[2015/09/13 09:22:49 | 004,721,434 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2015/09/13 09:22:48 | 000,001,278 | ---- | C] () -- C:\Users\Public\Desktop\VMware Workstation Pro.lnk
[2015/09/13 09:17:32 | 000,001,722 | ---- | C] () -- C:\Users\Anthony\Desktop\Outlook 2013.lnk
[2015/09/13 09:17:07 | 000,001,794 | ---- | C] () -- C:\Users\Anthony\Desktop\Excel 2013.lnk
[2015/09/13 09:16:54 | 000,001,802 | ---- | C] () -- C:\Users\Anthony\Desktop\Word 2013.lnk
[2015/09/13 09:16:45 | 000,001,830 | ---- | C] () -- C:\Users\Anthony\Desktop\PowerPoint 2013.lnk
[2015/09/13 09:12:25 | 000,001,329 | ---- | C] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2015/09/13 09:03:22 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/09/13 08:50:46 | 000,032,200 | ---- | C] () -- C:\WINDOWS\Professional.xml
[2015/09/13 06:32:59 | 000,056,944 | ---- | C] () -- C:\WINDOWS\SysNative\ASGCoInstaller_x64.dll
[2015/09/13 06:31:31 | 000,002,390 | ---- | C] () -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2015/09/13 00:22:37 | 016,777,216 | -HS- | C] () -- C:\swapfile.sys
[2015/09/13 00:22:34 | 2530,435,071 | -HS- | C] () -- C:\hiberfil.sys
[2015/09/12 23:08:16 | 000,404,480 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/09/12 23:08:12 | 000,505,344 | ---- | C] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/09/12 23:08:12 | 000,413,184 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/09/12 23:08:12 | 000,008,847 | ---- | C] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015/09/12 23:08:07 | 002,498,808 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/09/12 23:08:07 | 002,446,336 | ---- | C] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/09/12 23:08:07 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/09/12 23:08:07 | 001,771,592 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/09/12 23:08:07 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015/09/12 23:08:07 | 000,247,296 | ---- | C] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015/09/12 23:08:07 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/09/12 23:08:07 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/09/12 22:23:02 | 001,847,378 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/09/12 22:22:24 | 000,023,108 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2015/09/12 22:18:12 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2015/09/12 22:15:12 | 000,000,352 | ---- | C] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2015/09/12 22:15:12 | 000,000,334 | ---- | C] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2015/09/12 22:13:30 | 000,006,786 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\rtwavesEFX.dat
[2015/09/12 22:13:30 | 000,002,626 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\rtwavesMFX.dat
[2015/09/12 22:13:29 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2015/09/12 22:13:28 | 000,317,061 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\RTWAVES40.dat
[2015/09/12 22:13:25 | 000,000,200 | ---- | C] () -- C:\WINDOWS\SysNative\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
[2015/09/12 22:13:25 | 000,000,180 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2015/09/12 22:12:32 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
[2015/09/12 21:47:33 | 000,009,528 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2015/09/12 21:47:33 | 000,009,528 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2015/09/12 18:32:57 | 000,002,360 | ---- | C] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/09/12 18:32:57 | 000,002,260 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/09/12 18:28:22 | 000,001,096 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/09/12 18:28:21 | 000,001,092 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/09/12 18:27:58 | 000,001,458 | ---- | C] () -- C:\Users\Anthony\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/09/12 17:38:21 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
[2015/09/12 17:34:52 | 000,001,600 | ---- | C] () -- C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
[2015/09/12 17:30:07 | 000,000,165 | ---- | C] () -- C:\Users\Anthony\AppData\Roaming\sp_data.sys
[2015/07/10 14:20:52 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015/07/10 13:04:39 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/07/10 13:04:38 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/07/10 13:00:35 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 13:00:33 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 13:00:32 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 13:00:31 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 13:00:30 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 13:00:29 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 13:00:29 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 13:00:29 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 13:00:29 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 13:00:28 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 13:00:27 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 13:00:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 13:00:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 13:00:24 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 12:59:51 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015/04/11 06:36:44 | 000,024,576 | ---- | C] () -- C:\ProgramData\SetStretch.exe
[2015/04/11 06:36:44 | 000,000,256 | ---- | C] () -- C:\ProgramData\SetStretch.cmd
[2015/04/11 06:36:44 | 000,000,103 | ---- | C] () -- C:\ProgramData\SetStretch.VBS

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2015/09/13 09:24:38 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2015/09/12 23:08:07 | 006,488,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015/09/12 23:08:07 | 005,118,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015/07/10 12:59:53 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/07/10 13:00:23 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015/07/10 12:59:55 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2015/09/12 17:30:48 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\ASUS
[2015/09/12 17:35:48 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\awsRun
[2015/09/24 14:47:03 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\DiskDefrag
[2015/09/13 09:32:02 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\ESET
[2015/09/13 09:19:18 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\Foxit Software
[2015/09/24 14:47:03 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\GlarySoft
[2015/09/13 09:45:55 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\Process Hacker 2
[2015/09/13 17:55:43 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\TeamViewer
[2015/09/12 17:35:48 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\WebStorage
[2015/09/12 17:42:35 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\WildTangent
[2015/09/22 11:54:49 | 000,000,000 | ---D | M] -- C:\Users\Anthony\AppData\Roaming\Wireshark

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2014/11/22 03:15:21 | 000,404,250 | RHS- | M] () -- C:\bootmgr
[2015/07/10 13:00:31 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2015/09/26 10:56:02 | 2530,435,071 | -HS- | M] () -- C:\hiberfil.sys
[2015/09/24 11:12:54 | 2550,136,832 | -HS- | M] () -- C:\pagefile.sys
[2015/09/26 11:10:50 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/09/24 11:12:54 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2015/07/10 13:02:40 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2015/09/19 10:41:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2015/09/13 06:39:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS
[2015/09/12 22:15:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS Gaming Mouse
[2015/09/19 10:41:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2015/07/17 08:42:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cisco
[2015/09/13 09:36:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cisco Packet Tracer 6.1.1sv
[2015/09/22 13:35:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2015/09/13 09:12:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Elaborate Bytes
[2015/09/12 22:16:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Foxit PhantomPDF
[2015/09/26 10:53:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Glary Utilities 5
[2015/09/12 18:32:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2015/09/14 14:04:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
[2015/09/12 22:16:07 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2015/09/12 22:16:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2015/09/16 10:37:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2015/09/19 10:42:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2015/09/15 11:52:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LinuxLive USB Creator
[2015/09/12 22:16:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee
[2015/07/17 08:50:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mcafee.com
[2015/09/13 09:13:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services
[2015/09/12 22:16:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2015/09/13 09:14:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server
[2015/09/13 09:14:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2015/09/13 09:14:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2015/09/12 22:52:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2015/09/13 09:57:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2015/09/12 22:16:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2015/09/12 22:52:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2015/09/22 13:35:09 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2015/09/24 14:14:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TeamViewer
[2015/07/17 08:38:44 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2015/09/13 10:15:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ubisoft
[2015/09/13 09:24:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VMware
[2015/09/16 10:37:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2015/09/12 22:16:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2015/09/16 10:20:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2015/07/10 13:04:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2015/07/10 13:04:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2015/09/16 10:37:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2015/07/10 13:04:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2015/07/10 13:04:22 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2015/07/10 13:04:22 | 000,000,000 | --SD | M] -- C:\Program Files (x86)\WindowsPowerShell
[2015/09/21 15:53:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinPcap
[2015/09/13 13:47:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2013/08/22 14:43:40 | 000,062,304 | ---- | M] (Microsoft Corporation) MD5=7DFAEBA9AD62D20102B576D5CAC45EC8 -- C:\Windows.old\Windows\System32\drivers\AGP440.sys
[2013/08/22 14:43:40 | 000,062,304 | ---- | M] (Microsoft Corporation) MD5=7DFAEBA9AD62D20102B576D5CAC45EC8 -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_36be84f8fc597ea3\AGP440.sys
[2013/08/22 14:43:40 | 000,062,304 | ---- | M] (Microsoft Corporation) MD5=7DFAEBA9AD62D20102B576D5CAC45EC8 -- C:\Windows.old\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_6.3.9600.17238_none_ab0b455c927bd60f\AGP440.sys
[2015/07/10 12:59:38 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\WINDOWS\SysNative\drivers\AGP440.sys
[2015/07/10 12:59:38 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\machine.inf_amd64_c357541563097b98\AGP440.sys
[2015/07/10 12:59:38 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_10.0.10240.16384_none_c2135eea595e241e\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2015/07/17 18:05:56 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=1A8EA3500576DD4B43E9318F10709E0E -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.3.9600.17415_none_72d9e34b2fc71435\appmgmts.dll
[2015/09/13 08:50:35 | 000,165,376 | ---- | M] (Microsoft Corporation) MD5=66638D1635BE67F28D46A383DB91D138 -- C:\Windows\SysWOW64\appmgmts.dll
[2015/09/13 08:50:35 | 000,165,376 | ---- | M] (Microsoft Corporation) MD5=66638D1635BE67F28D46A383DB91D138 -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.10240.16384_none_942404652b17add8\appmgmts.dll
[2015/09/13 08:50:36 | 000,200,192 | ---- | M] (Microsoft Corporation) MD5=68AF553066C4DAE7D8698322526BDA86 -- C:\WINDOWS\SysNative\appmgmts.dll
[2015/09/13 08:50:36 | 000,200,192 | ---- | M] (Microsoft Corporation) MD5=68AF553066C4DAE7D8698322526BDA86 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.10240.16384_none_89cf5a12f6b6ebdd\appmgmts.dll
[2015/07/17 18:05:56 | 000,183,296 | ---- | M] (Microsoft Corporation) MD5=8176FBA685178FB0F52D46693474FA50 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.3.9600.16384_none_728d486f3000a7ad\appmgmts.dll
[2015/07/17 18:06:18 | 000,151,040 | ---- | M] (Microsoft Corporation) MD5=D45B9E7A13866AEEF0AAD9E60A24C604 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.3.9600.16384_none_7ce1f2c1646169a8\appmgmts.dll
[2015/07/17 18:06:18 | 000,155,648 | ---- | M] (Microsoft Corporation) MD5=EB51A6F994DF6A6D0C7C850279BEE784 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.3.9600.17415_none_7d2e8d9d6427d630\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2013/08/22 14:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\Windows.old\Windows\System32\drivers\atapi.sys
[2013/08/22 14:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_64aa4354da84c2df\atapi.sys
[2013/08/22 14:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\Windows.old\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.3.9600.16384_none_cdf68824f580d510\atapi.sys
[2015/07/10 12:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\WINDOWS\SysNative\drivers\atapi.sys
[2015/07/10 12:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_5689072091519d03\atapi.sys
[2015/07/10 12:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.10240.16384_none_e53899c8bc371940\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2014/11/22 03:02:52 | 000,792,576 | ---- | M] (Microsoft Corporation) MD5=1D31E78ED5C40B5C6CC8D3DE713177A5 -- C:\Windows.old\Windows\SysWOW64\autochk.exe
[2014/11/22 03:02:52 | 000,792,576 | ---- | M] (Microsoft Corporation) MD5=1D31E78ED5C40B5C6CC8D3DE713177A5 -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.3.9600.17031_none_76c6a414dd35029f\autochk.exe
[2014/11/22 03:02:40 | 000,890,880 | ---- | M] (Microsoft Corporation) MD5=387A1E98BE548E4F199343CBA01E9D6D -- C:\Windows.old\Windows\System32\autochk.exe
[2014/11/22 03:02:40 | 000,890,880 | ---- | M] (Microsoft Corporation) MD5=387A1E98BE548E4F199343CBA01E9D6D -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.3.9600.17031_none_d2e53f98959273d5\autochk.exe
[2015/07/10 12:59:57 | 000,944,640 | ---- | M] (Microsoft Corporation) MD5=9A4DEDB0AFE7D254DA6F38F976ABB84E -- C:\WINDOWS\SysNative\autochk.exe
[2015/07/10 12:59:57 | 000,944,640 | ---- | M] (Microsoft Corporation) MD5=9A4DEDB0AFE7D254DA6F38F976ABB84E -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10240.16384_none_e9f45ef85c6e6d93\autochk.exe
[2015/07/10 13:00:25 | 000,852,480 | ---- | M] (Microsoft Corporation) MD5=B407085E10413D1F023A8E666140C429 -- C:\Windows\SysWOW64\autochk.exe
[2015/07/10 13:00:25 | 000,852,480 | ---- | M] (Microsoft Corporation) MD5=B407085E10413D1F023A8E666140C429 -- C:\Windows\WinSxS\wow64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10240.16384_none_f449094a90cf2f8e\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2015/07/10 13:00:00 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=1E8A9267F8886803AAE02982FC1B5BC4 -- C:\WINDOWS\SysNative\drivers\beep.sys
[2015/07/10 13:00:00 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=1E8A9267F8886803AAE02982FC1B5BC4 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_10.0.10240.16384_none_cc211301a24a92ff\beep.sys
[2013/08/22 13:40:24 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=EC19013E4CF87609534165DF897274D6 -- C:\Windows.old\Windows\System32\drivers\beep.sys
[2013/08/22 13:40:24 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=EC19013E4CF87609534165DF897274D6 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.3.9600.16384_none_b4df015ddb944ecf\beep.sys

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2015/07/09 19:59:32 | 002,412,576 | ---- | M] (Microsoft Corporation) MD5=1597BE06E044CBEF50F760157433AB31 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17930_none_4cf9b47f81ef4ea8\explorer.exe
[2015/07/26 06:28:58 | 004,047,288 | ---- | M] (Microsoft Corporation) MD5=36E7C77518D3FA1231C6CDA62152308F -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16405_none_640b7b8348c8c4d4\explorer.exe
[2015/07/25 06:54:41 | 004,047,288 | ---- | M] (Microsoft Corporation) MD5=49A9479F4044CC5734DF2FA0831B5F61 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16404_none_640b799d48c8c7ad\explorer.exe
[2014/11/22 03:15:57 | 002,207,488 | ---- | M] (Microsoft Corporation) MD5=4B37A33F4F5237BF02E537F8D12D1129 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_4d144c4b81daa3b6\explorer.exe
[2015/07/26 07:15:40 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=6E756C33B5ECBD96756086A34D9A90DC -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16405_none_59b6d131146802d9\explorer.exe
[2015/07/10 13:00:32 | 004,043,152 | ---- | M] (Microsoft Corporation) MD5=77DA3B74F4D2ED7A58F081E423688A30 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_6409c31348ca7b5e\explorer.exe
[2014/11/22 03:15:35 | 002,501,368 | ---- | M] (Microsoft Corporation) MD5=85D47EB257B06094F052E0C8AEFA3BEE -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_42bfa1f94d79e1bb\explorer.exe
[2015/07/09 20:48:54 | 002,758,128 | ---- | M] (Microsoft Corporation) MD5=86EAE7913F9B72A047FF2FD4A10DCE5F -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17930_none_42a50a2d4d8e8cad\explorer.exe
[2015/08/11 04:47:44 | 002,414,096 | ---- | M] (Microsoft Corporation) MD5=9180E7A47852FC2EBDAEF0B1F0D146BD -- C:\Windows.old\Windows\SysWOW64\explorer.exe
[2015/08/11 04:47:44 | 002,414,096 | ---- | M] (Microsoft Corporation) MD5=9180E7A47852FC2EBDAEF0B1F0D146BD -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18009_none_4d22feff81cf1226\explorer.exe
[2015/07/10 13:00:15 | 004,528,168 | ---- | M] (Microsoft Corporation) MD5=A7FFEC1BD46B20FE7E293F2D9DD1C8F5 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_59b518c11469b963\explorer.exe
[2015/09/12 23:08:12 | 004,048,808 | ---- | M] (Microsoft Corporation) MD5=B3F90790F991A5A21113B58EE50FA696 -- C:\Windows\SysWOW64\explorer.exe
[2015/09/12 23:08:12 | 004,048,808 | ---- | M] (Microsoft Corporation) MD5=B3F90790F991A5A21113B58EE50FA696 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_640b2f9348c91d1b\explorer.exe
[2015/07/25 08:29:47 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=C6F56519F6F8A5C1B4144CF863CDE0CA -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16404_none_59b6cf4b146805b2\explorer.exe
[2015/08/11 04:47:42 | 002,757,072 | ---- | M] (Microsoft Corporation) MD5=E1B0AF69BFB6CBDE9B53C55E4BF91992 -- C:\Windows.old\Windows\explorer.exe
[2015/08/11 04:47:42 | 002,757,072 | ---- | M] (Microsoft Corporation) MD5=E1B0AF69BFB6CBDE9B53C55E4BF91992 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18009_none_42ce54ad4d6e502b\explorer.exe
[2015/09/12 23:08:12 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=F1CBCB7FA6F3B309639AA2D4EF74469C -- C:\Windows\explorer.exe
[2015/09/12 23:08:12 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=F1CBCB7FA6F3B309639AA2D4EF74469C -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_59b6854114685b20\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2015/07/10 12:59:59 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=5576DF399CF2D3B63608F7F282151249 -- C:\WINDOWS\SysNative\hidserv.dll
[2015/07/10 12:59:59 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=5576DF399CF2D3B63608F7F282151249 -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10240.16384_none_deacba1c221bf2db\hidserv.dll
[2015/07/10 13:00:26 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=79E59B65911FC6A155417C85639DB0BC -- C:\Windows\SysWOW64\hidserv.dll
[2015/07/10 13:00:26 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=79E59B65911FC6A155417C85639DB0BC -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10240.16384_none_e901646e567cb4d6\hidserv.dll
[2014/11/22 03:14:44 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=AE71B1BC1A17000F7B8F9AB79D4668D4 -- C:\Windows.old\Windows\SysWOW64\hidserv.dll
[2014/11/22 03:14:44 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=AE71B1BC1A17000F7B8F9AB79D4668D4 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.3.9600.17415_none_d20beda68f8cdd2e\hidserv.dll
[2014/11/22 03:15:12 | 000,033,792 | ---- | M] (Microsoft Corporation) MD5=EA85B5093DF7B5C3E80362B053740AE2 -- C:\Windows.old\Windows\System32\hidserv.dll
[2014/11/22 03:15:12 | 000,033,792 | ---- | M] (Microsoft Corporation) MD5=EA85B5093DF7B5C3E80362B053740AE2 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.3.9600.17415_none_c7b743545b2c1b33\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2015/07/10 12:59:38 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\WINDOWS\SysNative\drivers\iaStorV.sys
[2015/07/10 12:59:38 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2015/07/10 12:59:38 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.10240.16384_none_b711c42722754533\iaStorV.sys
[2013/08/22 14:43:45 | 000,412,000 | ---- | M] (Intel Corporation) MD5=A2200C3033FA4EF249FC096A7A7D02A2 -- C:\Windows.old\Windows\System32\drivers\iaStorV.sys
[2013/08/22 14:43:45 | 000,412,000 | ---- | M] (Intel Corporation) MD5=A2200C3033FA4EF249FC096A7A7D02A2 -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2013/08/22 14:43:45 | 000,412,000 | ---- | M] (Intel Corporation) MD5=A2200C3033FA4EF249FC096A7A7D02A2 -- C:\Windows.old\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_6.3.9600.16384_none_9fcfb2835bbf0103\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2014/11/22 03:14:56 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=59452E147C6A5D055E5EBCB6B8E99CB7 -- C:\Windows.old\Windows\SysWOW64\imm32.dll
[2014/11/22 03:14:56 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=59452E147C6A5D055E5EBCB6B8E99CB7 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.3.9600.17415_none_57b5c34f828931f9\imm32.dll
[2015/07/10 13:00:28 | 000,168,400 | ---- | M] (Microsoft Corporation) MD5=837F5F1B7C66CF4B5C8FDF6BE472E9BA -- C:\Windows\SysWOW64\imm32.dll
[2015/07/10 13:00:28 | 000,168,400 | ---- | M] (Microsoft Corporation) MD5=837F5F1B7C66CF4B5C8FDF6BE472E9BA -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10240.16384_none_6eab3a17497909a1\imm32.dll
[2015/07/10 13:00:05 | 000,211,288 | ---- | M] (Microsoft Corporation) MD5=BFE876E837A15B740FCEA4F4A844C7C9 -- C:\WINDOWS\SysNative\imm32.dll
[2015/07/10 13:00:05 | 000,211,288 | ---- | M] (Microsoft Corporation) MD5=BFE876E837A15B740FCEA4F4A844C7C9 -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10240.16384_none_64568fc5151847a6\imm32.dll
[2014/11/22 03:15:37 | 000,210,744 | ---- | M] (Microsoft Corporation) MD5=DEB33D08FBF708CAAC08080054D4C7CC -- C:\Windows.old\Windows\System32\imm32.dll
[2014/11/22 03:15:37 | 000,210,744 | ---- | M] (Microsoft Corporation) MD5=DEB33D08FBF708CAAC08080054D4C7CC -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.3.9600.17415_none_4d6118fd4e286ffe\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2014/11/22 03:15:45 | 001,040,384 | ---- | M] (Microsoft Corporation) MD5=00DC86D9068D7E780407A8B66E2AFD9D -- C:\Windows.old\Windows\SysWOW64\kernel32.dll
[2014/11/22 03:15:45 | 001,040,384 | ---- | M] (Microsoft Corporation) MD5=00DC86D9068D7E780407A8B66E2AFD9D -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.3.9600.17415_none_8f1d8a7a5e69bda5\kernel32.dll
[2015/07/10 12:59:59 | 000,702,512 | ---- | M] (Microsoft Corporation) MD5=038B10C8E735FE667DA29B2E92A09B8A -- C:\WINDOWS\SysNative\kernel32.dll
[2015/07/10 12:59:59 | 000,702,512 | ---- | M] (Microsoft Corporation) MD5=038B10C8E735FE667DA29B2E92A09B8A -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10240.16384_none_9bbe56eff0f8d352\kernel32.dll
[2014/11/22 03:15:07 | 001,309,744 | ---- | M] (Microsoft Corporation) MD5=4F455778B6CDA2FD61D4F8B0A3E0543C -- C:\Windows.old\Windows\System32\kernel32.dll
[2014/11/22 03:15:07 | 001,309,744 | ---- | M] (Microsoft Corporation) MD5=4F455778B6CDA2FD61D4F8B0A3E0543C -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.3.9600.17415_none_84c8e0282a08fbaa\kernel32.dll
[2015/07/10 13:00:23 | 000,624,312 | ---- | M] (Microsoft Corporation) MD5=6407D861DFB1D295336EFC8D12DE2E5F -- C:\Windows\SysWOW64\kernel32.dll
[2015/07/10 13:00:23 | 000,624,312 | ---- | M] (Microsoft Corporation) MD5=6407D861DFB1D295336EFC8D12DE2E5F -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10240.16384_none_a61301422559954d\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2015/07/10 13:00:30 | 000,306,528 | ---- | M] (Microsoft Corporation) MD5=56D710DA9CCC7E5541DB958BC2A13EE2 -- C:\Windows\SysWOW64\mswsock.dll
[2015/07/10 13:00:30 | 000,306,528 | ---- | M] (Microsoft Corporation) MD5=56D710DA9CCC7E5541DB958BC2A13EE2 -- C:\Windows\WinSxS\wow64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10240.16384_none_caa87306fc59cb2d\mswsock.dll
[2015/07/10 13:00:09 | 000,364,384 | ---- | M] (Microsoft Corporation) MD5=6E887DD203D23FD46D3460A3DB67E0D0 -- C:\WINDOWS\SysNative\mswsock.dll
[2015/07/10 13:00:09 | 000,364,384 | ---- | M] (Microsoft Corporation) MD5=6E887DD203D23FD46D3460A3DB67E0D0 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10240.16384_none_c053c8b4c7f90932\mswsock.dll
[2014/11/22 03:15:58 | 000,286,208 | ---- | M] (Microsoft Corporation) MD5=98ECA44A09EFA23890205D2B5233FC96 -- C:\Windows.old\Windows\SysWOW64\mswsock.dll
[2014/11/22 03:15:58 | 000,286,208 | ---- | M] (Microsoft Corporation) MD5=98ECA44A09EFA23890205D2B5233FC96 -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.3.9600.17415_none_4d3fb66948abc054\mswsock.dll
[2014/11/22 03:14:43 | 000,339,456 | ---- | M] (Microsoft Corporation) MD5=B394EB3E443DCB195BC65B9A54CD8FE3 -- C:\Windows.old\Windows\System32\mswsock.dll
[2014/11/22 03:14:43 | 000,339,456 | ---- | M] (Microsoft Corporation) MD5=B394EB3E443DCB195BC65B9A54CD8FE3 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.3.9600.17415_none_a95e51ed0109318a\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2014/11/22 03:14:42 | 001,114,432 | ---- | M] (Microsoft Corporation) MD5=21FE65E2E67C4E31EE95CBD1F91C4B24 -- C:\Windows.old\Windows\System32\drivers\ndis.sys
[2014/11/22 03:14:42 | 001,114,432 | ---- | M] (Microsoft Corporation) MD5=21FE65E2E67C4E31EE95CBD1F91C4B24 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.3.9600.17399_none_4a0df8fdfc06c676\ndis.sys
[2015/07/14 23:59:47 | 001,113,944 | ---- | M] (Microsoft Corporation) MD5=97DC5967F65503213FD1F1B3E4A6F983 -- C:\Windows.old\Windows\SoftwareDistribution\Download\4a99e89736a36882968e4648bc1a7573\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.3.9600.17933_none_4a48e22dfbdb75b0\ndis.sys
[2015/07/10 13:00:10 | 001,168,736 | ---- | M] (Microsoft Corporation) MD5=C055015D9B573A7EDAF2B2948E687F36 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16384_none_6155efe3c2b95661\ndis.sys
[2015/09/12 23:08:16 | 001,168,736 | ---- | M] (Microsoft Corporation) MD5=D43EAFF4887321A07D9F9A9DD7225E07 -- C:\WINDOWS\SysNative\drivers\ndis.sys
[2015/09/12 23:08:16 | 001,168,736 | ---- | M] (Microsoft Corporation) MD5=D43EAFF4887321A07D9F9A9DD7225E07 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16394_none_6155d91bc2b97002\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2014/11/22 03:14:43 | 000,838,656 | ---- | M] (Microsoft Corporation) MD5=02D117FC638B768BD1A15F8000B83EAE -- C:\Windows.old\Windows\System32\netlogon.dll
[2014/11/22 03:14:43 | 000,838,656 | ---- | M] (Microsoft Corporation) MD5=02D117FC638B768BD1A15F8000B83EAE -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.17415_none_eec2b22a0bb75b53\netlogon.dll
[2015/07/10 13:00:26 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\Windows\SysWOW64\netlogon.dll
[2015/07/10 13:00:26 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_100cd3440707f4f6\netlogon.dll
[2015/07/10 13:00:02 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\WINDOWS\SysNative\netlogon.dll
[2015/07/10 13:00:02 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_05b828f1d2a732fb\netlogon.dll
[2014/11/22 03:15:57 | 000,695,296 | ---- | M] (Microsoft Corporation) MD5=CCEC6CB98A00ECE7F5AFB9C0FC9427B3 -- C:\Windows.old\Windows\SysWOW64\netlogon.dll
[2014/11/22 03:15:57 | 000,695,296 | ---- | M] (Microsoft Corporation) MD5=CCEC6CB98A00ECE7F5AFB9C0FC9427B3 -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.17415_none_f9175c7c40181d4e\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2015/09/12 23:08:16 | 002,116,448 | ---- | M] (Microsoft Corporation) MD5=466EC5659C02ED53DBD47DC1BC2B8086 -- C:\WINDOWS\SysNative\drivers\ntfs.sys
[2015/09/12 23:08:16 | 002,116,448 | ---- | M] (Microsoft Corporation) MD5=466EC5659C02ED53DBD47DC1BC2B8086 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16412_none_ae733761b7974fd9\ntfs.sys
[2015/07/10 13:00:10 | 002,117,472 | ---- | M] (Microsoft Corporation) MD5=5B3D91EB07785D0EDB19449D5C35E30A -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16384_none_ae719b6bb798e437\ntfs.sys
[2014/11/22 03:14:42 | 002,025,792 | ---- | M] (Microsoft Corporation) MD5=7F68063A5A0461E02BC860CE0E6BFDDC -- C:\Windows.old\Windows\System32\drivers\ntfs.sys
[2014/11/22 03:14:42 | 002,025,792 | ---- | M] (Microsoft Corporation) MD5=7F68063A5A0461E02BC860CE0E6BFDDC -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.3.9600.17401_none_9782f367f0a48b42\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2013/08/22 14:43:32 | 000,168,288 | ---- | M] (NVIDIA Corporation) MD5=1F43ABFFAC3D6CA356851D517392966E -- C:\Windows.old\Windows\System32\drivers\nvstor.sys
[2013/08/22 14:43:32 | 000,168,288 | ---- | M] (NVIDIA Corporation) MD5=1F43ABFFAC3D6CA356851D517392966E -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_7ba65ba4b222e751\nvstor.sys
[2013/08/22 14:43:32 | 000,168,288 | ---- | M] (NVIDIA Corporation) MD5=1F43ABFFAC3D6CA356851D517392966E -- C:\Windows.old\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.3.9600.16384_none_2a99233292f5aadb\nvstor.sys
[2015/07/10 12:59:39 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\WINDOWS\SysNative\drivers\nvstor.sys
[2015/07/10 12:59:39 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_3ee6d81b22b3ea66\nvstor.sys
[2015/07/10 12:59:39 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.10240.16384_none_41db34d659abef0b\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2015/07/10 13:00:26 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=2884FDC26067A7AF8CA34009DB315ECC -- C:\Windows\SysWOW64\proquota.exe
[2015/07/10 13:00:26 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=2884FDC26067A7AF8CA34009DB315ECC -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_10.0.10240.16384_none_d3a8ce0274b50157\proquota.exe
[2014/11/22 03:15:15 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=864379396733031C99B64550358CAEBD -- C:\Windows.old\Windows\System32\proquota.exe
[2014/11/22 03:15:15 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=864379396733031C99B64550358CAEBD -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.3.9600.17415_none_18d1f2be66229ae5\proquota.exe
[2014/11/22 03:15:49 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=DF801B9FC4247EBFBFE07E5EC417C5B0 -- C:\Windows.old\Windows\SysWOW64\proquota.exe
[2014/11/22 03:15:49 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=DF801B9FC4247EBFBFE07E5EC417C5B0 -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_6.3.9600.17415_none_bcb3573aadc529af\proquota.exe
[2015/07/10 13:00:01 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=EA8E0AE71F8C0725A67CF0D87A7413A5 -- C:\WINDOWS\SysNative\proquota.exe
[2015/07/10 13:00:01 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=EA8E0AE71F8C0725A67CF0D87A7413A5 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_10.0.10240.16384_none_2fc769862d12728d\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2014/11/22 03:15:01 | 000,933,376 | ---- | M] (Microsoft Corporation) MD5=48554994279BFE17A3D2B00076D0CB1A -- C:\Windows.old\Windows\System32\qmgr.dll
[2014/11/22 03:15:01 | 000,933,376 | ---- | M] (Microsoft Corporation) MD5=48554994279BFE17A3D2B00076D0CB1A -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.3.9600.17415_none_149bbfd3cd2f7e88\qmgr.dll
[2015/07/10 12:59:53 | 001,168,896 | ---- | M] (Microsoft Corporation) MD5=BD60F5633F6BD617D9ECCA3FFDC0D37E -- C:\WINDOWS\SysNative\qmgr.dll
[2015/07/10 12:59:53 | 001,168,896 | ---- | M] (Microsoft Corporation) MD5=BD60F5633F6BD617D9ECCA3FFDC0D37E -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client-core_31bf3856ad364e35_10.0.10240.16384_none_2e454e862584285c\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2015/07/10 13:00:01 | 000,284,672 | ---- | M] (Microsoft Corporation) MD5=7DD59DB925AC2401D33B38152551153E -- C:\WINDOWS\SysNative\scecli.dll
[2015/07/10 13:00:01 | 000,284,672 | ---- | M] (Microsoft Corporation) MD5=7DD59DB925AC2401D33B38152551153E -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10240.16384_none_400e540a73c8b9b6\scecli.dll
[2014/11/22 03:15:13 | 000,274,944 | ---- | M] (Microsoft Corporation) MD5=9A475B8F19A15BFDE8DF84E40ECAE8AA -- C:\Windows.old\Windows\System32\scecli.dll
[2014/11/22 03:15:13 | 000,274,944 | ---- | M] (Microsoft Corporation) MD5=9A475B8F19A15BFDE8DF84E40ECAE8AA -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.3.9600.17415_none_2918dd42acd8e20e\scecli.dll
[2015/07/10 13:00:27 | 000,227,840 | ---- | M] (Microsoft Corporation) MD5=E45A0DCC29B8097D7D51CAEE389F4665 -- C:\Windows\SysWOW64\scecli.dll
[2015/07/10 13:00:27 | 000,227,840 | ---- | M] (Microsoft Corporation) MD5=E45A0DCC29B8097D7D51CAEE389F4665 -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10240.16384_none_4a62fe5ca8297bb1\scecli.dll
[2014/11/22 03:15:49 | 000,214,016 | ---- | M] (Microsoft Corporation) MD5=FB740FE549197E7B08021EF30327921D -- C:\Windows.old\Windows\SysWOW64\scecli.dll
[2014/11/22 03:15:49 | 000,214,016 | ---- | M] (Microsoft Corporation) MD5=FB740FE549197E7B08021EF30327921D -- C:\Windows.old\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.3.9600.17415_none_336d8794e139a409\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2015/04/11 15:04:42 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=2E3976C857D7230EC8D2B2276E688255 -- C:\Windows.old\Windows\System32\spoolsv.exe
[2015/04/11 15:04:42 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=2E3976C857D7230EC8D2B2276E688255 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.3.9600.17480_none_c705ed2295837cf6\spoolsv.exe
[2015/07/10 13:00:14 | 000,781,824 | ---- | M] (Microsoft Corporation) MD5=58C17D92AD61EC7A98B05F4FAD0D205A -- C:\WINDOWS\SysNative\spoolsv.exe
[2015/07/10 13:00:14 | 000,781,824 | ---- | M] (Microsoft Corporation) MD5=58C17D92AD61EC7A98B05F4FAD0D205A -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.10240.16384_none_de4c14d05c360fba\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) MD5=A1AEAFC58DF7803B8AA2B09EA93C722F -- C:\WINDOWS\SysNative\svchost.exe
[2015/07/10 12:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) MD5=A1AEAFC58DF7803B8AA2B09EA93C722F -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10240.16384_none_bdbbcb4f9ffb0889\svchost.exe
[2015/07/10 13:00:25 | 000,035,176 | ---- | M] (Microsoft Corporation) MD5=A412DEDAC6A1FF7BA06FEB3B6725495E -- C:\Windows\SysWOW64\svchost.exe
[2015/07/10 13:00:25 | 000,035,176 | ---- | M] (Microsoft Corporation) MD5=A412DEDAC6A1FF7BA06FEB3B6725495E -- C:\Windows\WinSxS\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10240.16384_none_c81075a1d45bca84\svchost.exe
[2014/11/22 03:15:57 | 000,033,088 | ---- | M] (Microsoft Corporation) MD5=D0ABC231C0B3E88C6B612B28ABBF734D -- C:\Windows.old\Windows\SysWOW64\svchost.exe
[2014/11/22 03:15:57 | 000,033,088 | ---- | M] (Microsoft Corporation) MD5=D0ABC231C0B3E88C6B612B28ABBF734D -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.17415_none_4aa7b90420adbfab\svchost.exe
[2014/11/22 03:14:43 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=E3A2AD05E24105B35E986CF9CB38EC47 -- C:\Windows.old\Windows\System32\svchost.exe
[2014/11/22 03:14:43 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=E3A2AD05E24105B35E986CF9CB38EC47 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.17415_none_a6c65487d90b30e1\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2015/07/10 13:00:20 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0608264209A836821D6AB8C67B108AB -- C:\WINDOWS\SysNative\termsrv.dll
[2015/07/10 13:00:20 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0608264209A836821D6AB8C67B108AB -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.10240.16384_none_969fb376eef16206\termsrv.dll
[2014/11/22 03:15:35 | 001,114,624 | ---- | M] (Microsoft Corporation) MD5=C50997E282576DA492EBA66B059D4196 -- C:\Windows.old\Windows\System32\termsrv.dll
[2014/11/22 03:15:35 | 001,114,624 | ---- | M] (Microsoft Corporation) MD5=C50997E282576DA492EBA66B059D4196 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.3.9600.17415_none_7faa3caf28018a5e\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2014/11/22 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows.old\Windows\System32\userinit.exe
[2014/11/22 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_cd33b4fca56d6b07\userinit.exe
[2015/07/10 13:00:01 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\WINDOWS\SysNative\userinit.exe
[2015/07/10 13:00:01 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_e4292bc46c5d42af\userinit.exe
[2015/07/10 13:00:27 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\Windows\SysWOW64\userinit.exe
[2015/07/10 13:00:27 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\Windows\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_ee7dd616a0be04aa\userinit.exe
[2014/11/22 03:15:57 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows.old\Windows\SysWOW64\userinit.exe
[2014/11/22 03:15:57 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_71151978ed0ff9d1\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2014/11/22 03:14:39 | 000,310,080 | ---- | M] (Microsoft Corporation) MD5=64CA2B4A49A8EAF495E435623ECCE7DB -- C:\Windows.old\Windows\System32\drivers\volsnap.sys
[2014/11/22 03:14:39 | 000,310,080 | ---- | M] (Microsoft Corporation) MD5=64CA2B4A49A8EAF495E435623ECCE7DB -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_8687137d6e4faf5d\volsnap.sys
[2014/11/22 03:14:39 | 000,310,080 | ---- | M] (Microsoft Corporation) MD5=64CA2B4A49A8EAF495E435623ECCE7DB -- C:\Windows.old\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys
[2015/07/10 12:59:39 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\WINDOWS\SysNative\drivers\volsnap.sys
[2015/07/10 12:59:39 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\WINDOWS\SysNative\DriverStore\FileRepository\volume.inf_amd64_b017de7f410d7e0a\volsnap.sys
[2015/07/10 12:59:39 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_10.0.10240.16384_none_1db7292f96c24571\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2015/08/22 18:26:56 | 002,427,392 | ---- | M] (Microsoft Corporation) MD5=096A832FCF5A01003E96DD7FEE45618D -- C:\Windows.old\Windows\SoftwareDistribution\Download\a927c010c166802461fed41ecf3ca76f\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.9600.18036_none_05c99a1884b400dd\wininet.dll
[2015/07/10 13:00:28 | 002,207,232 | ---- | M] (Microsoft Corporation) MD5=197727031E79E48839B4560FBA515EF8 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16384_none_f182dd9bad97833d\wininet.dll
[2015/07/10 13:00:04 | 002,741,248 | ---- | M] (Microsoft Corporation) MD5=32A862495B7C356B9895FDD0B9023C5F -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16384_none_4da1791f65f4f473\wininet.dll
[2015/08/22 18:00:11 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=9BCDFFECF276DBFB1EC8E2D3DD038E00 -- C:\Windows.old\Windows\SoftwareDistribution\Download\a927c010c166802461fed41ecf3ca76f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.9600.18036_none_a9aafe94cc568fa7\wininet.dll
[2015/04/11 15:16:26 | 002,358,272 | ---- | M] (Microsoft Corporation) MD5=9DFE41A69DF70AAB75CB5BA8C1109EA2 -- C:\Windows.old\Windows\System32\wininet.dll
[2015/04/11 15:16:26 | 002,358,272 | ---- | M] (Microsoft Corporation) MD5=9DFE41A69DF70AAB75CB5BA8C1109EA2 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.9600.17631_none_05892a9284e42b37\wininet.dll
[2015/09/12 23:08:07 | 002,207,744 | ---- | M] (Microsoft Corporation) MD5=D17222898B5BDE5AF2B98CEB7068372D -- C:\Windows\SysWOW64\wininet.dll
[2015/09/12 23:08:07 | 002,207,744 | ---- | M] (Microsoft Corporation) MD5=D17222898B5BDE5AF2B98CEB7068372D -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16391_none_f182c121ad97a569\wininet.dll
[2015/04/11 15:16:26 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=F285D499EC42969D963CA49EADA63218 -- C:\Windows.old\Windows\SysWOW64\wininet.dll
[2015/04/11 15:16:26 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=F285D499EC42969D963CA49EADA63218 -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.9600.17631_none_a96a8f0ecc86ba01\wininet.dll
[2015/09/12 23:08:12 | 002,741,760 | ---- | M] (Microsoft Corporation) MD5=FE32B8423711B4B4378C0BA3C3560ED4 -- C:\WINDOWS\SysNative\wininet.dll
[2015/09/12 23:08:12 | 002,741,760 | ---- | M] (Microsoft Corporation) MD5=FE32B8423711B4B4378C0BA3C3560ED4 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16391_none_4da15ca565f5169f\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2015/09/12 23:08:07 | 000,290,312 | ---- | M] (Microsoft Corporation) MD5=7718A2A9B2BFB2C8E2BAEB03310CA3FD -- C:\WINDOWS\SysNative\wininit.exe
[2015/09/12 23:08:07 | 000,290,312 | ---- | M] (Microsoft Corporation) MD5=7718A2A9B2BFB2C8E2BAEB03310CA3FD -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10240.16393_none_38f311cf9efe0dc0\wininit.exe
[2014/11/22 03:14:43 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=A570A64292214C43E0BA50E6A72A6380 -- C:\Windows.old\Windows\System32\wininit.exe
[2014/11/22 03:14:43 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=A570A64292214C43E0BA50E6A72A6380 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.3.9600.17415_none_21fdb3b5d80e199e\wininit.exe
[2015/07/10 13:00:01 | 000,290,304 | ---- | M] (Microsoft Corporation) MD5=CAAA293DD133160DF13D95CC48FC42B9 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10240.16384_none_38f32a7d9efdf146\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2015/07/26 05:39:18 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=26EFEFD877A84EE9FBDE6DEE630892C9 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16405_none_77c52b356f9d100f\winlogon.exe
[2015/07/26 05:39:18 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=26EFEFD877A84EE9FBDE6DEE630892C9 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16405_none_77c52b356f9d100f\winlogon.exe
[2015/07/10 13:00:01 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=536B686D86402D254C59B5DE3A575F45 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2015/07/10 13:00:01 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=536B686D86402D254C59B5DE3A575F45 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2015/09/12 23:08:12 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=84B1FE2E4615A89293F1FD4DE52EE26E -- C:\WINDOWS\SysNative\winlogon.exe
[2015/09/12 23:08:12 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=84B1FE2E4615A89293F1FD4DE52EE26E -- C:\WINDOWS\SysNative\winlogon.exe
[2015/09/12 23:08:12 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=84B1FE2E4615A89293F1FD4DE52EE26E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16485_none_77c474f56f9ddd17\winlogon.exe
[2015/09/12 23:08:12 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=84B1FE2E4615A89293F1FD4DE52EE26E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16485_none_77c474f56f9ddd17\winlogon.exe
[2014/11/22 03:15:13 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows.old\Windows\System32\winlogon.exe
[2014/11/22 03:15:13 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows.old\Windows\System32\winlogon.exe
[2014/11/22 03:15:13 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17415_none_60cdfbfda8aeeef1\winlogon.exe
[2014/11/22 03:15:13 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17415_none_60cdfbfda8aeeef1\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2015/07/10 13:00:10 | 000,422,560 | ---- | M] (Microsoft Corporation) MD5=0E49B1E08DF8484884A0092C48B933DB -- C:\WINDOWS\SysNative\ws2_32.dll
[2015/07/10 13:00:10 | 000,422,560 | ---- | M] (Microsoft Corporation) MD5=0E49B1E08DF8484884A0092C48B933DB -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10240.16384_none_fab8227169035068\ws2_32.dll
[2014/11/22 03:15:49 | 000,321,248 | ---- | M] (Microsoft Corporation) MD5=34E71A52A1BFA68411CAECCFB6D72F8C -- C:\Windows.old\Windows\SysWOW64\ws2_32.dll
[2014/11/22 03:15:49 | 000,321,248 | ---- | M] (Microsoft Corporation) MD5=34E71A52A1BFA68411CAECCFB6D72F8C -- C:\Windows.old\Windows\WinSxS\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.3.9600.17415_none_87a41025e9b6078a\ws2_32.dll
[2014/11/22 03:14:42 | 000,363,080 | ---- | M] (Microsoft Corporation) MD5=3A0B3B44C263DB1823360FF3E5C223CE -- C:\Windows.old\Windows\System32\ws2_32.dll
[2014/11/22 03:14:42 | 000,363,080 | ---- | M] (Microsoft Corporation) MD5=3A0B3B44C263DB1823360FF3E5C223CE -- C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.3.9600.17415_none_e3c2aba9a21378c0\ws2_32.dll
[2015/07/10 13:00:28 | 000,372,912 | ---- | M] (Microsoft Corporation) MD5=C8F00509B3880DDEDC7944472AC9D5B8 -- C:\Windows\SysWOW64\ws2_32.dll
[2015/07/10 13:00:28 | 000,372,912 | ---- | M] (Microsoft Corporation) MD5=C8F00509B3880DDEDC7944472AC9D5B8 -- C:\Windows\WinSxS\wow64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10240.16384_none_050cccc39d641263\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2015/09/12 17:34:16 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3747340352-3963048523-2000407961-1001\desktop.ini
[2015/07/10 14:21:38 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2015/09/12 18:28:21 | 000,001,092 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2015/09/12 18:28:22 | 000,001,096 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 220 bytes -> C:\Users\Anthony\OneDrive:ms-properties

< End of report >

Publicité


Signaler le contenu de ce document

Publicité