cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 17/05/2017 09:34:28 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jean-\Desktop
An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.14393.0)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1,94 Gb Total Physical Memory | 0,79 Gb Available Physical Memory | 40,62% Memory free
3,94 Gb Paging File | 2,84 Gb Available in Paging File | 72,14% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 28,62 Gb Total Space | 3,25 Gb Free Space | 11,35% Space Free | Partition Type: NTFS
Drive D: | 117,02 Gb Total Space | 73,76 Gb Free Space | 63,04% Space Free | Partition Type: exFAT
Drive E: | 2794,49 Gb Total Space | 650,01 Gb Free Space | 23,26% Space Free | Partition Type: NTFS
Drive F: | 7,20 Gb Total Space | 0,09 Gb Free Space | 1,21% Space Free | Partition Type: FAT32
Drive X: | 30,02 Gb Total Space | 0,06 Gb Free Space | 0,19% Space Free | Partition Type: FAT

Computer Name: DESKTOP-0MK4QLL | User Name: jean- | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2017/05/17 09:33:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\jean-\Desktop\OTL.exe
PRC - [2017/05/17 09:27:16 | 003,514,792 | ---- | M] (SosVirus) -- C:\Users\jean-\Desktop\Pre_Scan.exe
PRC - [2017/05/17 09:07:06 | 002,777,512 | ---- | M] (SosVirus) -- C:\Users\jean-\Desktop\QuickDiag.exe
PRC - [2017/05/09 08:52:06 | 000,064,512 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x86__kzf8qxf38zg5c\SkypeHost.exe
PRC - [2017/04/28 01:47:02 | 007,104,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
PRC - [2017/04/28 01:45:44 | 000,493,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SettingSyncHost.exe
PRC - [2017/04/28 01:44:11 | 000,328,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpCmdRun.exe
PRC - [2017/04/28 01:39:22 | 004,312,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2017/04/28 00:57:03 | 001,700,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smartscreen.exe
PRC - [2017/04/28 00:51:04 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
PRC - [2017/01/06 13:36:40 | 000,947,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
PRC - [2016/11/02 12:05:45 | 000,313,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2016/07/16 09:25:55 | 000,072,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostw.exe
PRC - [2016/07/16 09:25:07 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sihost.exe
PRC - [2016/07/16 09:25:03 | 000,029,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2017/05/09 08:52:08 | 031,002,624 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x86__kzf8qxf38zg5c\SkyWrap.dll
MOD - [2017/05/09 08:52:06 | 001,741,824 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x86__kzf8qxf38zg5c\skypert.dll
MOD - [2017/05/09 08:52:06 | 000,168,960 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
MOD - [2017/05/09 08:52:06 | 000,064,512 | ---- | M] () -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x86__kzf8qxf38zg5c\SkypeHost.exe
MOD - [2017/04/28 01:56:56 | 002,048,488 | ---- | M] () -- C:\Windows\System32\CoreUIComponents.dll
MOD - [2017/04/28 00:55:17 | 003,158,016 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
MOD - [2017/04/28 00:52:50 | 001,724,928 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
MOD - [2017/04/28 00:52:08 | 000,779,776 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
MOD - [2017/03/04 07:24:30 | 000,321,536 | ---- | M] () -- C:\Windows\ShellExperiences\QuickActions.dll
MOD - [2017/03/04 07:04:10 | 006,726,656 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
MOD - [2017/03/04 06:58:20 | 001,150,464 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
MOD - [2017/02/21 14:48:16 | 002,157,528 | ---- | M] () -- C:\Program Files\adaware\adaware antivirus\adaware antivirus\12.0.649.11190\AdAwareShellExtension.dll
MOD - [2017/01/06 13:36:26 | 000,526,848 | ---- | M] () -- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
MOD - [2016/12/07 16:40:00 | 002,237,776 | ---- | M] () -- C:\PROGRA~1\TeraCopy\TERACO~2.DLL
MOD - [2016/07/16 09:25:47 | 000,108,032 | ---- | M] () -- C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
MOD - [2016/04/03 14:40:44 | 001,263,192 | ---- | M] () -- C:\Program Files\Copy Handler\chext.dll
MOD - [2016/04/03 14:40:44 | 000,945,752 | ---- | M] () -- C:\Program Files\Copy Handler\libchcore32u.dll
MOD - [2010/07/04 22:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\LiteManager Pro -- (ROMService)
SRV - [2017/05/15 08:43:00 | 000,250,784 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 15\LiveTunerService.exe -- (WO_LiveService2)
SRV - [2017/05/05 14:12:06 | 004,463,960 | ---- | M] (Acronis) [On_Demand | Stopped] -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2017/04/28 02:02:55 | 000,271,488 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV - [2017/04/28 02:01:16 | 002,717,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
SRV - [2017/04/28 01:55:11 | 000,583,128 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2017/04/28 01:44:10 | 000,084,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV - [2017/04/28 01:13:28 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2017/04/28 01:11:50 | 000,623,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
SRV - [2017/04/28 01:11:50 | 000,517,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FlightSettings.dll -- (wisvc)
SRV - [2017/04/28 01:10:27 | 000,425,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\usocore.dll -- (UsoSvc)
SRV - [2017/04/28 01:10:27 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV - [2017/04/28 01:10:10 | 000,822,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\usermgr.dll -- (UserManager)
SRV - [2017/04/28 01:07:58 | 000,754,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ngcsvc.dll -- (NgcSvc)
SRV - [2017/04/28 01:06:09 | 001,488,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2017/04/28 01:03:56 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
SRV - [2017/04/28 01:00:58 | 000,300,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV - [2017/04/22 23:31:14 | 008,152,448 | ---- | M] (COMODO) [Auto | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (CmdAgent)
SRV - [2017/04/22 23:22:50 | 002,080,448 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV - [2017/03/30 04:10:44 | 000,118,480 | ---- | M] (COMODO) [Auto | Stopped] -- C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe -- (isesrv)
SRV - [2017/03/28 06:12:13 | 000,920,064 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\dosvc.dll -- (DoSvc)
SRV - [2017/03/18 17:45:32 | 001,949,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
SRV - [2017/03/04 07:25:47 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV - [2017/03/04 07:25:43 | 000,063,488 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\moshost.dll -- (MapsBroker)
SRV - [2017/03/04 07:25:40 | 000,073,216 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\tzautoupdate.dll -- (tzautoupdate)
SRV - [2017/03/04 07:21:12 | 000,579,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\XblAuthManager.dll -- (XblAuthManager)
SRV - [2017/03/04 07:19:45 | 000,277,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvcext.dll -- (vmicvss)
SRV - [2017/03/04 07:19:45 | 000,277,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvcext.dll -- (vmicrdv)
SRV - [2017/03/04 07:19:15 | 000,704,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\XblGameSave.dll -- (XblGameSave)
SRV - [2017/03/04 07:18:14 | 000,828,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV - [2017/03/04 07:16:41 | 000,565,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
SRV - [2017/03/04 07:16:38 | 000,473,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\RDXService.dll -- (RetailDemo)
SRV - [2017/03/04 07:16:20 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\Unistore.dll -- (UnistoreSvc)
SRV - [2017/03/04 07:12:46 | 000,894,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SensorDataService.exe -- (SensorDataService)
SRV - [2017/03/04 07:06:40 | 001,382,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
SRV - [2017/03/04 06:59:52 | 001,252,352 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\UserDataService.dll -- (UserDataSvc)
SRV - [2017/03/01 08:41:08 | 002,273,432 | ---- | M] (Comodo) [Auto | Stopped] -- C:\Program Files\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater)
SRV - [2017/02/25 16:04:58 | 003,125,408 | ---- | M] (Paramount Software UK Ltd) [On_Demand | Stopped] -- C:\Program Files\Macrium\Common\MacriumService.exe -- (MacriumService)
SRV - [2017/02/21 14:45:20 | 000,540,296 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\adaware\adaware antivirus\adaware antivirus\12.0.649.11190\AdAwareService.exe -- (adawareantivirusservice)
SRV - [2017/01/31 01:27:26 | 000,072,016 | ---- | M] (Code Sector) [Auto | Stopped] -- C:\Program Files\TeraCopy\TeraCopyService.exe -- (TeraCopyService)
SRV - [2017/01/06 13:36:52 | 000,503,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FrameServer.dll -- (FrameServer)
SRV - [2017/01/06 13:36:37 | 000,366,592 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
SRV - [2017/01/06 13:36:37 | 000,182,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NetSetupSvc.dll -- (NetSetupSvc)
SRV - [2017/01/06 13:36:10 | 000,612,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
SRV - [2017/01/06 13:35:59 | 000,636,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PhoneService.dll -- (PhoneSvc)
SRV - [2017/01/06 13:35:59 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2017/01/06 13:35:59 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV - [2017/01/06 13:35:59 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\RMapi.dll -- (RmSvc)
SRV - [2017/01/06 13:35:39 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
SRV - [2017/01/06 13:35:39 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\LicenseManagerSvc.dll -- (LicenseManager)
SRV - [2017/01/06 13:35:25 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SensorService.dll -- (SensorService)
SRV - [2017/01/06 13:35:19 | 003,370,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\Windows.StateRepository.dll -- (StateRepository)
SRV - [2017/01/06 13:35:19 | 000,441,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
SRV - [2017/01/06 13:35:19 | 000,294,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\cdpsvc.dll -- (CDPSvc)
SRV - [2017/01/06 13:35:19 | 000,254,976 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\System32\cdpusersvc.dll -- (CDPUserSvc)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvmsession)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
SRV - [2017/01/06 13:35:14 | 000,228,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
SRV - [2016/12/15 17:45:18 | 000,915,952 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2016/12/14 05:41:53 | 000,137,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV - [2016/10/28 14:54:10 | 000,360,736 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\IObit Uninstaller\IUService.exe -- (IObitUnSvr)
SRV - [2016/07/18 15:31:10 | 000,284,152 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\System32\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV - [2016/07/18 15:21:30 | 000,290,808 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs)
SRV - [2016/07/16 11:17:57 | 000,154,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2016/07/16 09:26:42 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
SRV - [2016/07/16 09:26:40 | 000,373,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WalletService.dll -- (WalletService)
SRV - [2016/07/16 09:26:15 | 000,144,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
SRV - [2016/07/16 09:25:58 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV - [2016/07/16 09:25:57 | 000,120,320 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
SRV - [2016/07/16 09:25:57 | 000,047,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dmwappushsvc.dll -- (dmwappushservice)
SRV - [2016/07/16 09:25:56 | 000,036,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
SRV - [2016/07/16 09:25:55 | 000,155,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dcpsvc.dll -- (DcpSvc)
SRV - [2016/07/16 09:25:39 | 000,070,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
SRV - [2016/07/16 09:25:39 | 000,069,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV - [2016/07/16 09:25:31 | 000,330,240 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\System32\APHostService.dll -- (OneSyncSvc)
SRV - [2016/07/16 09:25:23 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
SRV - [2016/07/16 09:25:21 | 000,253,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\TieringEngineService.exe -- (TieringEngineService)
SRV - [2016/07/16 09:25:21 | 000,104,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
SRV - [2016/07/16 09:25:21 | 000,011,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
SRV - [2016/07/16 09:25:10 | 000,413,184 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\SmsRouterSvc.dll -- (SmsRouter)
SRV - [2016/07/16 09:25:09 | 000,432,640 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
SRV - [2016/07/16 09:25:08 | 000,046,080 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\MessagingService.dll -- (MessagingService)
SRV - [2016/07/16 09:25:07 | 000,446,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\tileobjserver.dll -- (tiledatamodelsvc)
SRV - [2016/07/16 09:25:07 | 000,294,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
SRV - [2016/07/16 09:25:07 | 000,280,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV - [2016/07/16 09:25:07 | 000,259,072 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
SRV - [2016/07/16 09:25:07 | 000,195,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wpnservice.dll -- (WpnService)
SRV - [2016/07/16 09:25:07 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\tetheringservice.dll -- (icssvc)
SRV - [2016/07/16 09:25:07 | 000,129,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBrokerSvc)
SRV - [2016/07/16 09:25:07 | 000,058,368 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\WpnUserService.dll -- (WpnUserService)
SRV - [2016/07/16 09:25:07 | 000,030,208 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\lfsvc.dll -- (lfsvc)
SRV - [2016/07/16 09:25:07 | 000,024,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DevQueryBroker.dll -- (DevQueryBroker)
SRV - [2016/07/16 09:25:04 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AJRouter.dll -- (AJRouter)
SRV - [2016/07/16 09:25:03 | 000,591,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ClipSVC.dll -- (ClipSVC)
SRV - [2016/07/16 09:25:03 | 000,159,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
SRV - [2016/07/16 09:25:03 | 000,121,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dssvc.dll -- (DsSvc)
SRV - [2016/07/16 09:25:03 | 000,101,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\embeddedmodesvc.dll -- (embeddedmode)
SRV - [2016/07/16 09:24:52 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\BthHFSrv.dll -- (BthHFSrv)
SRV - [2015/11/06 14:08:48 | 007,637,744 | ---- | M] (Acronis) [On_Demand | Stopped] -- C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv)
SRV - [2015/08/11 15:19:08 | 004,884,064 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files\Common Files\Acronis\Infrastructure\mms_mini.exe -- (mmsminisrv)
SRV - [2015/06/23 21:23:40 | 000,125,952 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\System32\DptfPolicyLpmService.exe -- (DptfPolicyLpmService)
SRV - [2015/06/23 21:23:40 | 000,118,792 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\System32\DptfParticipantProcessorService.exe -- (DptfParticipantProcessorService)
SRV - [2015/06/23 21:23:40 | 000,115,712 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\System32\DptfPolicyCriticalService.exe -- (DptfPolicyCriticalService)
SRV - [2015/06/23 01:08:02 | 000,037,416 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [On_Demand | Stopped] -- C:\Program Files\EaseUS\System GoBack Free\bin\Agent.exe -- (EaseUS Agent)
SRV - [2015/03/01 00:22:50 | 000,019,112 | ---- | M] (The Within Network, LLC) [On_Demand | Stopped] -- C:\Windows\unsignedthemes.exe -- (UnsignedThemes)
SRV - [2014/11/26 18:48:04 | 000,173,248 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe -- (BingDesktopUpdate)
SRV - [2012/02/09 18:54:12 | 000,249,680 | ---- | M] (Solvusoft) [Auto | Stopped] -- C:\Program Files\SupersonicPC\SolvusoftWMDefragSrv.exe -- (SolvusoftWMDiskOptimizer)
SRV - [2009/08/24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 15\DfsdkS.exe -- (DfSdkS)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | System | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B68FBD8E-2E9F-4FFE-A168-294859C03956}\MpKsl72d3d0cd.sys -- (MpKsl72d3d0cd)
DRV - [2017/05/16 11:15:42 | 000,088,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntelBatteryManagement.sys -- (IntelBatteryManagement)
DRV - [2017/05/16 11:14:36 | 000,130,832 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TXEI.sys -- (TXEI)
DRV - [2017/05/16 11:11:19 | 000,023,840 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\System32\drivers\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2017/05/05 14:12:07 | 000,249,184 | ---- | M] (Acronis International GmbH) [File_System | Boot | Running] -- C:\Windows\System32\drivers\file_tracker.sys -- (file_tracker)
DRV - [2017/05/05 14:11:59 | 000,229,720 | ---- | M] (Acronis International GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\virtual_file.sys -- (virtual_file)
DRV - [2017/05/05 14:11:58 | 000,398,680 | ---- | M] (Acronis International GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tnd.sys -- (tnd)
DRV - [2017/05/05 14:11:57 | 000,156,504 | ---- | M] (Acronis International GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tib_mounter.sys -- (tib_mounter)
DRV - [2017/05/05 14:11:56 | 000,685,400 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tib.sys -- (tib)
DRV - [2017/05/05 14:11:53 | 000,245,088 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\snapman.sys -- (snapman)
DRV - [2017/05/05 14:11:52 | 000,123,744 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\fltsrv.sys -- (fltsrv)
DRV - [2017/04/28 01:43:55 | 000,458,592 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\spaceport.sys -- (spaceport)
DRV - [2017/04/28 01:20:23 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2017/04/28 01:20:00 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV - [2017/04/19 00:49:02 | 000,060,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iaioi2c.sys -- (iaioi2c)
DRV - [2017/03/31 02:01:22 | 000,109,896 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
DRV - [2017/03/31 02:01:22 | 000,045,504 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdhlp)
DRV - [2017/03/31 02:01:20 | 000,651,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdguard.sys -- (cmdGuard)
DRV - [2017/03/31 02:01:18 | 000,036,224 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2017/03/29 22:49:54 | 000,049,680 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\isedrv.sys -- (isedrv)
DRV - [2017/03/28 06:41:48 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\BasicRender.sys -- (BasicRender)
DRV - [2017/03/28 06:40:27 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV - [2017/03/04 08:09:41 | 000,092,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pdc.sys -- (pdc)
DRV - [2017/03/04 07:59:36 | 000,055,136 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\dam.sys -- (dam)
DRV - [2017/03/04 07:52:45 | 000,111,968 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\storahci.sys -- (storahci)
DRV - [2017/03/04 07:28:22 | 000,216,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\xboxgip.sys -- (xboxgip)
DRV - [2017/03/04 07:20:10 | 000,518,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WdiWiFi.sys -- (wdiwifi)
DRV - [2017/02/08 13:52:28 | 000,378,336 | ---- | M] (BitDefender S.R.L.) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\Trufos.sys -- (Trufos)
DRV - [2017/02/08 13:52:28 | 000,144,504 | ---- | M] (BitDefender LLC) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\gzflt.sys -- (gzflt)
DRV - [2017/01/06 13:35:50 | 000,276,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\clfs.sys -- (CLFS)
DRV - [2017/01/06 13:35:50 | 000,042,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iorate.sys -- (iorate)
DRV - [2017/01/06 13:35:49 | 000,188,928 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\ahcache.sys -- (ahcache)
DRV - [2017/01/06 13:35:21 | 000,095,072 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\wcifs.sys -- (wcifs)
DRV - [2017/01/06 13:35:13 | 000,175,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2017/01/06 13:35:13 | 000,101,216 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV - [2017/01/06 13:35:13 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\capimg.sys -- (CapImg)
DRV - [2017/01/06 13:35:13 | 000,056,672 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\MegaSas2i.sys -- (megasas2i)
DRV - [2017/01/06 13:35:13 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\xinputhid.sys -- (xinputhid)
DRV - [2017/01/06 13:35:13 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BthMini.SYS -- (BthMini)
DRV - [2017/01/06 12:33:02 | 000,173,408 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\wof.sys -- (Wof)
DRV - [2016/11/23 14:52:40 | 001,285,360 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\avc3.sys -- (avc3)
DRV - [2016/11/23 14:52:40 | 000,718,488 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\avckf.sys -- (avckf)
DRV - [2016/11/08 11:35:08 | 000,034,856 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VRootHub.sys -- (VRootHub)
DRV - [2016/11/08 11:35:02 | 000,051,752 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VHostController.sys -- (VHostController)
DRV - [2016/09/05 05:47:32 | 000,109,184 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2016/09/05 05:44:22 | 000,055,424 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudqcfilter.sys -- (ssudqcfilter)
DRV - [2016/08/15 10:41:02 | 000,246,248 | ---- | M] (Bitdefender) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ignis.sys -- (ignis)
DRV - [2016/07/16 11:18:01 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2016/07/16 11:17:57 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2016/07/16 09:26:51 | 000,024,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV - [2016/07/16 09:26:02 | 000,244,576 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\WdFilter.sys -- (WdFilter)
DRV - [2016/07/16 09:26:02 | 000,100,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV - [2016/07/16 09:26:02 | 000,037,912 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\WdBoot.sys -- (WdBoot)
DRV - [2016/07/16 09:25:56 | 000,106,496 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\Ndu.sys -- (Ndu)
DRV - [2016/07/16 09:25:55 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV - [2016/07/16 09:25:55 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\mslldp.sys -- (MsLldp)
DRV - [2016/07/16 09:25:51 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\applockerfltr.sys -- (applockerfltr)
DRV - [2016/07/16 09:25:41 | 000,205,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ufx01000.sys -- (Ufx01000)
DRV - [2016/07/16 09:25:41 | 000,117,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SerCx2.sys -- (SerCx2)
DRV - [2016/07/16 09:25:41 | 000,086,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV - [2016/07/16 09:25:41 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
DRV - [2016/07/16 09:25:41 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UcmCx.sys -- (UcmCx0101)
DRV - [2016/07/16 09:25:41 | 000,060,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SpbCx.sys -- (SpbCx)
DRV - [2016/07/16 09:25:41 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SerCx.sys -- (SerCx)
DRV - [2016/07/16 09:25:41 | 000,042,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\urscx01000.sys -- (UrsCx01000)
DRV - [2016/07/16 09:25:41 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IndirectKmd.sys -- (IndirectKmd)
DRV - [2016/07/16 09:25:41 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mshidumdf.sys -- (mshidumdf)
DRV - [2016/07/16 09:25:41 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV - [2016/07/16 09:25:40 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VerifierExt.sys -- (VerifierExt)
DRV - [2016/07/16 09:25:40 | 000,062,976 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\storqosflt.sys -- (storqosflt)
DRV - [2016/07/16 09:25:40 | 000,042,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\condrv.sys -- (condrv)
DRV - [2016/07/16 09:25:31 | 000,033,120 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\cnghwassist.sys -- (cnghwassist)
DRV - [2016/07/16 09:25:30 | 000,037,376 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\mmcss.sys -- (MMCSS)
DRV - [2016/07/16 09:25:22 | 000,075,104 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\EhStorClass.sys -- (EhStorClass)
DRV - [2016/07/16 09:25:08 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV - [2016/07/16 09:25:07 | 000,135,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV - [2016/07/16 09:25:07 | 000,088,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\wfplwfs.sys -- (WFPLWFS)
DRV - [2016/07/16 09:25:07 | 000,058,368 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\registry.sys -- (clreg)
DRV - [2016/07/16 09:25:07 | 000,052,736 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\wcnfs.sys -- (wcnfs)
DRV - [2016/07/16 09:25:01 | 000,173,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Ucx01000.sys -- (Ucx01000)
DRV - [2016/07/16 09:25:01 | 000,091,488 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\acpiex.sys -- (acpiex)
DRV - [2016/07/16 09:25:01 | 000,077,312 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\filecrypt.sys -- (FileCrypt)
DRV - [2016/07/16 09:25:01 | 000,062,976 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NetAdapterCx.sys -- (NetAdapterCx)
DRV - [2016/07/16 09:25:01 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2016/07/16 09:25:01 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Udecx.sys -- (UdeCx)
DRV - [2016/07/16 09:25:01 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vhf.sys -- (vhf)
DRV - [2016/07/16 09:24:57 | 000,430,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\USBHUB3.SYS -- (USBHUB3)
DRV - [2016/07/16 09:24:57 | 000,289,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\USBXHCI.SYS -- (USBXHCI)
DRV - [2016/07/16 09:24:57 | 000,107,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV - [2016/07/16 09:24:57 | 000,076,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\sdstor.sys -- (sdstor)
DRV - [2016/07/16 09:24:57 | 000,075,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV - [2016/07/16 09:24:57 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2016/07/16 09:24:57 | 000,066,560 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iai2c.sys -- (iai2c)
DRV - [2016/07/16 09:24:57 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV - [2016/07/16 09:24:57 | 000,038,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV - [2016/07/16 09:24:57 | 000,037,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidi2c.sys -- (hidi2c)
DRV - [2016/07/16 09:24:57 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV - [2016/07/16 09:24:57 | 000,027,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\buttonconverter.sys -- (buttonconverter)
DRV - [2016/07/16 09:24:57 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2016/07/16 09:24:57 | 000,025,600 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iagpio.sys -- (iagpio)
DRV - [2016/07/16 09:24:57 | 000,022,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\urschipidea.sys -- (UrsChipidea)
DRV - [2016/07/16 09:24:57 | 000,021,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV - [2016/07/16 09:24:57 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\npsvctrig.sys -- (npsvctrig)
DRV - [2016/07/16 09:24:57 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\genericusbfn.sys -- (genericusbfn)
DRV - [2016/07/16 09:24:57 | 000,017,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kdnic.sys -- (kdnic)
DRV - [2016/07/16 09:24:57 | 000,015,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV - [2016/07/16 09:24:55 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV - [2016/07/16 09:24:55 | 000,066,912 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\stornvme.sys -- (stornvme)
DRV - [2016/07/16 09:24:55 | 000,059,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\uaspstor.sys -- (UASPStor)
DRV - [2016/07/16 09:24:55 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\storufs.sys -- (storufs)
DRV - [2016/07/16 09:24:55 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\uefi.sys -- (UEFI)
DRV - [2016/07/16 09:24:55 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iaiogpio.sys -- (GPIO)
DRV - [2016/07/16 09:24:55 | 000,014,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volume.sys -- (volume)
DRV - [2016/07/16 09:24:55 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\acpitime.sys -- (acpitime)
DRV - [2016/07/16 09:24:55 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\acpipagr.sys -- (acpipagr)
DRV - [2016/07/16 09:24:54 | 001,038,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\adp80xx.sys -- (ADP80XX)
DRV - [2016/07/16 09:24:54 | 000,524,640 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\iaStorAV.sys -- (iaStorAV)
DRV - [2016/07/16 09:24:54 | 000,089,952 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV - [2016/07/16 09:24:54 | 000,085,856 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\3ware.sys -- (3ware)
DRV - [2016/07/16 09:24:54 | 000,085,856 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV - [2016/07/16 09:24:54 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\lsi_sss.sys -- (LSI_SSS)
DRV - [2016/07/16 09:24:54 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\mvumis.sys -- (mvumis)
DRV - [2016/07/16 09:24:54 | 000,054,624 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\percsas3i.sys -- (percsas3i)
DRV - [2016/07/16 09:24:54 | 000,051,552 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\percsas2i.sys -- (percsas2i)
DRV - [2016/07/16 09:24:54 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AcpiDev.sys -- (AcpiDev)
DRV - [2016/07/16 09:24:54 | 000,008,192 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcmfn2.sys -- (bcmfn2)
DRV - [2016/07/16 09:24:54 | 000,008,192 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcmfn.sys -- (bcmfn)
DRV - [2016/07/16 09:24:53 | 004,304,384 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rtwlans.sys -- (RtlWlans)
DRV - [2016/07/16 09:24:53 | 000,042,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\intelpep.sys -- (intelpep)
DRV - [2016/07/16 09:24:52 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bthhfenum.sys -- (BthHFEnum)
DRV - [2016/07/16 09:24:52 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV - [2016/07/16 09:24:52 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_x86_ed148199964e21c5\CompositeBus.sys -- (CompositeBus)
DRV - [2016/07/16 09:24:52 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthhfHid.sys -- (bthhfhid)
DRV - [2016/07/16 09:24:51 | 000,083,296 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2016/07/16 09:24:51 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2016/07/16 09:24:51 | 000,039,776 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2016/07/16 09:24:51 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2016/07/16 09:24:51 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2016/07/16 09:24:51 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2016/07/16 09:24:51 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hyperkbd.sys -- (hyperkbd)
DRV - [2016/07/16 09:24:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmgencounter.sys -- (gencounter)
DRV - [2016/07/16 09:24:51 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmgid.sys -- (vmgid)
DRV - [2016/07/16 09:24:51 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2016/06/16 11:36:18 | 000,113,768 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\adaware\adaware antivirus\AdAwareProxyEngine\1.0.0.8\bdfwfpf.sys -- (bdfwfpf)
DRV - [2016/06/02 04:49:32 | 000,043,800 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\clwvd7.sys -- (clwvd7)
DRV - [2015/12/01 20:46:03 | 000,044,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV - [2015/12/01 20:46:03 | 000,035,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iwdbus.sys -- (iwdbus)
DRV - [2015/11/12 22:50:08 | 000,022,216 | ---- | M] (Western Digital Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2015/11/11 04:41:06 | 000,277,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\isstrtc.sys -- (IntelSST)
DRV - [2015/10/29 03:34:34 | 000,027,504 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iaiogpiovirtual.sys -- (GpioVirtual)
DRV - [2015/10/29 03:18:32 | 000,098,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iaiouart.sys -- (iaiouart)
DRV - [2015/10/16 11:19:58 | 000,077,280 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PMIC.sys -- (PMIC)
DRV - [2015/08/28 03:15:16 | 000,041,984 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GoodixTouchDriver.sys -- (GoodixTouchDriver)
DRV - [2015/07/20 10:36:08 | 000,557,312 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtkUart.sys -- (RtkUart)
DRV - [2015/06/23 21:23:40 | 000,467,968 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\DptfManager.sys -- (DptfManager)
DRV - [2015/06/23 21:23:40 | 000,203,264 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\DptfDevProc.sys -- (DptfDevProc)
DRV - [2015/06/23 21:23:40 | 000,088,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DptfDevAmbient.sys -- (DptfDevAmbient)
DRV - [2015/06/23 21:23:40 | 000,085,000 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\DptfDevGen.sys -- (DptfDevGen)
DRV - [2015/06/23 21:23:40 | 000,059,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\DptfDevDisplay.sys -- (DptfDevDisplay)
DRV - [2015/06/23 21:23:40 | 000,055,816 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DptfDevPower.sys -- (DptfDevDBPT)
DRV - [2015/06/16 04:54:58 | 000,033,792 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\MBI.sys -- (MBI)
DRV - [2015/03/01 00:22:50 | 000,026,792 | ---- | M] (The Within Network, LLC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\elytsxu.sys -- (uxstyle)
DRV - [2014/12/15 00:58:48 | 000,189,992 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\EuFdDisk.sys -- (EUFDDISK)
DRV - [2014/12/15 00:58:48 | 000,051,752 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2014/12/15 00:58:48 | 000,041,512 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\EUBKMON.sys -- (EUBKMON)
DRV - [2014/12/15 00:58:48 | 000,015,912 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2014/11/05 10:21:14 | 000,087,816 | ---- | M] (CyberLink) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CLVirtualBus01.sys -- (CLVirtualBus01)
DRV - [2014/03/20 03:51:44 | 000,014,088 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 15\LiveTuner32.sys -- (LiveTuner2PM)
DRV - [2012/10/26 16:42:24 | 004,255,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2012/10/26 16:42:24 | 000,298,984 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2010/07/04 20:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = A4 1C DF DB 0F C4 D2 01 [binary data]
IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = 01 00 00 00 49 00 00 00 61 CE CC 95 C8 83 C0 60 D9 18 81 A1 75 6D F0 F3 16 CF 00 CC 0B 1C FD 86 F4 D0 55 D5 98 0C 49 0A A7 C9 B0 4F 47 25 AC F9 E5 84 88 47 1F 8A 10 D7 64 46 2A 9F E3 B8 0C BA 82 1A 64 DD C3 14 1B F6 01 46 46 60 0D D7 E6 B8 03 02 00 00 00 10 00 00 00 76 63 58 57 25 32 62 33 63 66 39 49 6F 25 33 64 [Binary data over 200 bytes]
IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
IE - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll (Oracle Corporation)



O1 HOSTS File: ([2017/05/17 08:59:43 | 000,000,832 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer.dll (IObit)
O2 - BHO: (Reg Error: Value error.) - {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} - C:\SkinPack\OldNewExplorer32.dll (www.startisback.com)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner2] C:\Program Files\Ashampoo\Ashampoo WinOptimizer 15\LiveTuner2.exe (Ashampoo Development GmbH & Co. KG)
O4 - HKLM..\Run: [BingDesktop] C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe (Microsoft Corp.)
O4 - HKLM..\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (COMODO)
O4 - HKLM..\Run: [DptfPolicyLpmServiceHelper] C:\Windows\System32\DptfPolicyLpmServiceHelper.exe (Intel Corporation)
O4 - HKLM..\Run: [IseUI] C:\Program Files\COMODO\Internet Security Essentials\vkise.exe (COMODO)
O4 - HKLM..\Run: [Syncios device service] C:\Program Files\Anvsoft\Syncios\SynciosDeviceService.exe ()
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKLM..\Run: [WindowsDefender] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\WINDOWS\System32\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\WINDOWS\System32\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001..\Run: [Power2GoExpress11] File not found
O4 - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001..\Run: [ultracopier] C:\Program Files\Supercopier\supercopier.exe (ultracopier.first-world.info)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
O7 - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKU\S-1-5-21-2393403230-1296784631-2839305349-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NolowDiskSpaceChecks = 1
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9dcc4489-981d-44f3-be1c-920a8eb6f7e5}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9dcc4489-981d-44f3-be1c-920a8eb6f7e5}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2017/05/16 15:20:36 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ exFAT ]
O32 - AutoRun File - [2016/09/30 06:06:21 | 000,002,344 | ---- | M] () - E:\AutoBackupSystem.dat -- [ NTFS ]
O32 - AutoRun File - [2016/09/30 06:06:19 | 000,000,048 | ---- | M] () - E:\AutoCreateBoot.dat -- [ NTFS ]
O32 - AutoRun File - [2016/07/21 17:48:20 | 001,130,532 | ---- | M] () - E:\Automobile-Elevator-with-Car.jpg -- [ NTFS ]
O32 - AutoRun File - [2016/07/21 17:48:20 | 000,208,345 | ---- | M] () - E:\Automobile-Elevatr.-Car-lift-600X400.jpg -- [ NTFS ]
O32 - AutoRun File - [2016/11/17 15:03:12 | 000,000,149 | ---- | M] () - E:\autorun (1).inf -- [ NTFS ]
O32 - AutoRun File - [2017/05/16 15:20:40 | 000,000,000 | RHSD | M] - F:\Autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2017/03/26 19:34:02 | 000,000,000 | ---D | M] - X:\Autorun.inf -- [ FAT ]
O33 - MountPoints2\{315313a3-2fd6-11e7-958c-586356fa674d}\Shell - "" = AutoRun
O33 - MountPoints2\{315313a3-2fd6-11e7-958c-586356fa674d}\Shell\AutoRun\command - "" = "G:\DTVP30_Launcher.exe"
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within (All) ==========[/color]

[2017/05/17 09:27:33 | 000,000,000 | ---D | C] -- C:\Pre_Scan
[2017/05/17 09:07:15 | 000,000,000 | ---D | C] -- C:\QuickDiag
[2017/05/17 08:50:12 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2017/05/17 08:49:21 | 000,522,240 | ---- | C] (OldTimer Tools) -- C:\Users\jean-\Desktop\OTM.exe
[2017/05/17 08:47:19 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\jean-\Desktop\OTL.exe
[2017/05/17 08:46:07 | 003,514,792 | ---- | C] (SosVirus) -- C:\Users\jean-\Desktop\Pre_Scan.exe
[2017/05/17 08:45:12 | 002,777,512 | ---- | C] (SosVirus) -- C:\Users\jean-\Desktop\QuickDiag.exe
[2017/05/16 19:05:48 | 000,000,000 | ---D | C] -- C:\AdsFix
[2017/05/16 18:49:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SupersonicPC
[2017/05/16 18:49:23 | 000,000,000 | ---D | C] -- C:\Program Files\SupersonicPC
[2017/05/16 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Privacy Cleaner
[2017/05/16 18:48:42 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Privacy Cleaner
[2017/05/16 17:14:38 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF-to-Word
[2017/05/16 17:14:35 | 000,000,000 | ---D | C] -- C:\Program Files\PDF-to-Word
[2017/05/16 17:07:08 | 006,502,824 | ---- | C] (SosVirus) -- C:\Users\jean-\Desktop\adsfix_4_16.05.17.4.exe
[2017/05/16 15:59:08 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\WINDOWS\System32\DfSdkBt.exe
[2017/05/16 11:11:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\IObit
[2017/05/16 11:11:19 | 000,023,840 | ---- | C] (REALiX(tm)) -- C:\WINDOWS\System32\drivers\HWiNFO32.SYS
[2017/05/16 11:11:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 4
[2017/05/16 11:08:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2017/05/12 15:33:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\rescache
[2017/05/11 17:20:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack
[2017/05/11 17:19:07 | 001,741,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imagesp1.dll
[2017/05/11 17:19:07 | 000,558,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\zipfldr.dll
[2017/05/11 17:19:06 | 037,476,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imageres.dll
[2017/05/11 16:41:23 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Conceptworld
[2017/05/11 16:38:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Piky Basket
[2017/05/11 16:38:27 | 000,000,000 | ---D | C] -- C:\Program Files\Conceptworld
[2017/05/11 16:38:01 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Leap
[2017/05/11 16:35:38 | 000,000,000 | ---D | C] -- C:\Users\jean-\.swt
[2017/05/11 16:34:35 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Vuze Downloads
[2017/05/11 16:33:49 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Azureus
[2017/05/11 16:31:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2017/05/11 16:31:50 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Sun
[2017/05/11 16:31:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2017/05/11 16:30:40 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2017/05/11 16:25:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2017/05/11 16:07:33 | 001,277,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfasfsrcsnk.dll
[2017/05/11 16:07:33 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Sensors.dll
[2017/05/11 16:07:32 | 001,851,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmp4srcsnk.dll
[2017/05/11 16:07:32 | 000,822,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Chakradiag.dll
[2017/05/11 16:07:32 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeApiPublic.dll
[2017/05/11 16:07:32 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MCRecvSrc.dll
[2017/05/11 16:07:31 | 001,525,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FntCache.dll
[2017/05/11 16:07:31 | 001,411,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdi32full.dll
[2017/05/11 16:07:31 | 001,232,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.Maps.dll
[2017/05/11 16:07:31 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasmans.dll
[2017/05/11 16:07:30 | 001,360,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfnetsrc.dll
[2017/05/11 16:07:30 | 001,202,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmpeg2srcsnk.dll
[2017/05/11 16:07:30 | 000,981,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfnetcore.dll
[2017/05/11 16:07:29 | 001,384,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppobjs.dll
[2017/05/11 16:07:29 | 000,355,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdbss.sys
[2017/05/11 16:07:27 | 001,221,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Audio.dll
[2017/05/11 16:07:26 | 000,635,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9diag.dll
[2017/05/11 16:07:26 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vbscript.dll
[2017/05/11 16:07:26 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\virtdisk.dll
[2017/05/11 16:07:24 | 000,764,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprddm.dll
[2017/05/11 16:07:22 | 002,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWrite.dll
[2017/05/11 16:07:22 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.Phone.dll
[2017/05/11 16:07:21 | 001,488,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diagtrack.dll
[2017/05/11 16:07:21 | 001,235,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32kbase.sys
[2017/05/11 16:07:21 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\raspppoe.sys
[2017/05/11 16:07:21 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vwifimp.sys
[2017/05/11 16:07:20 | 004,023,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcore.dll
[2017/05/11 16:07:19 | 001,956,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ntfs.sys
[2017/05/11 16:07:18 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleacc.dll
[2017/05/11 16:07:17 | 001,017,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VSSVC.exe
[2017/05/11 16:07:16 | 006,665,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Protection.PlayReady.dll
[2017/05/11 16:07:14 | 002,333,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmSvc.dll
[2017/05/11 16:07:13 | 003,664,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll
[2017/05/11 16:07:13 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsasrv.dll
[2017/05/11 16:07:11 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2017/05/11 16:07:10 | 002,483,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininet.dll
[2017/05/11 16:07:10 | 000,518,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaservc.dll
[2017/05/11 16:07:09 | 001,378,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentExtensions.onecore.dll
[2017/05/11 16:07:08 | 001,098,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpsvc.dll
[2017/05/11 16:07:07 | 001,284,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2017/05/11 16:07:06 | 000,781,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWAHost.exe
[2017/05/11 16:07:05 | 001,896,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys
[2017/05/11 16:07:04 | 003,733,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_47.dll
[2017/05/11 16:07:02 | 013,873,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.dll
[2017/05/11 16:07:00 | 000,330,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aadcloudap.dll
[2017/05/11 16:06:59 | 005,685,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Data.Pdf.dll
[2017/05/11 16:06:58 | 002,646,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertEnroll.dll
[2017/05/11 16:06:57 | 001,993,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmcore.dll
[2017/05/11 16:06:56 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpAXHolder.dll
[2017/05/11 16:06:55 | 000,458,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\spaceport.sys
[2017/05/11 16:06:54 | 000,628,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kernel32.dll
[2017/05/11 16:06:54 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bridge.sys
[2017/05/11 16:06:54 | 000,080,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpudd.dll
[2017/05/11 16:06:53 | 002,994,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32kfull.sys
[2017/05/11 16:06:53 | 000,342,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgmms1.sys
[2017/05/11 16:06:53 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ubpm.dll
[2017/05/11 16:06:52 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuuhext.dll
[2017/05/11 16:06:51 | 000,583,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CoreMessaging.dll
[2017/05/11 16:06:51 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storewuauth.dll
[2017/05/11 16:06:49 | 012,349,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmp.dll
[2017/05/11 16:06:47 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtrans.dll
[2017/05/11 16:06:46 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtmled.dll
[2017/05/11 16:06:45 | 006,042,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Chakra.dll
[2017/05/11 16:06:44 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll
[2017/05/11 16:06:42 | 018,365,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edgehtml.dll
[2017/05/11 16:06:35 | 001,980,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml6.dll
[2017/05/11 16:06:34 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unimdm.tsp
[2017/05/11 16:06:33 | 005,996,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe
[2017/05/11 16:06:32 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsnt.dll
[2017/05/11 16:06:29 | 003,689,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msi.dll
[2017/05/11 16:06:28 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll
[2017/05/11 16:06:26 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthport.sys
[2017/05/11 16:06:24 | 019,414,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtml.dll
[2017/05/11 16:06:22 | 000,857,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EmailApis.dll
[2017/05/11 16:06:22 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncSettings.dll
[2017/05/11 16:06:22 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InstallAgentUserBroker.exe
[2017/05/11 16:06:22 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_Flights.dll
[2017/05/11 16:06:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDeviceRegistration.dll
[2017/05/11 16:06:22 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Devices.dll
[2017/05/11 16:06:21 | 001,431,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Store.dll
[2017/05/11 16:06:21 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToDevice.dll
[2017/05/11 16:06:21 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDXTaskFactory.dll
[2017/05/11 16:06:21 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Picker.dll
[2017/05/11 16:06:21 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Family.SyncEngine.dll
[2017/05/11 16:06:21 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InstallAgent.exe
[2017/05/11 16:06:21 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dialclient.dll
[2017/05/11 16:06:21 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Family.Client.dll
[2017/05/11 16:06:20 | 001,004,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Input.Inking.dll
[2017/05/11 16:06:20 | 000,557,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StoreAgent.dll
[2017/05/11 16:06:20 | 000,448,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ContentDeliveryManager.Utilities.dll
[2017/05/11 16:06:20 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efswrt.dll
[2017/05/11 16:06:20 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.WiFiDirect.dll
[2017/05/11 16:06:20 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Usb.dll
[2017/05/11 16:06:20 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToReceiver.dll
[2017/05/11 16:06:20 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DisplayManager.dll
[2017/05/11 16:06:20 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinRtTracing.dll
[2017/05/11 16:06:20 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Lights.dll
[2017/05/11 16:06:20 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CameraCaptureUI.dll
[2017/05/11 16:06:19 | 000,846,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\termsrv.dll
[2017/05/11 16:06:19 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Authentication.Web.Core.dll
[2017/05/11 16:06:19 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2017/05/11 16:06:18 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Wallet.dll
[2017/05/11 16:06:18 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Scanners.dll
[2017/05/11 16:06:18 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Radios.dll
[2017/05/11 16:06:18 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthserv.dll
[2017/05/11 16:06:18 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.StateRepositoryClient.dll
[2017/05/11 16:06:17 | 000,795,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MiracastReceiver.dll
[2017/05/11 16:06:17 | 000,747,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Ocr.dll
[2017/05/11 16:06:17 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.PointOfService.dll
[2017/05/11 16:06:17 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.AccountsControl.dll
[2017/05/11 16:06:17 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.AllJoyn.dll
[2017/05/11 16:06:17 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataTimeUtil.dll
[2017/05/11 16:06:16 | 003,596,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcorets.dll
[2017/05/11 16:06:16 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.FaceAnalysis.dll
[2017/05/11 16:06:16 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
[2017/05/11 16:06:16 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.LockScreen.dll
[2017/05/11 16:06:15 | 001,534,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Graphics.Printing.3D.dll
[2017/05/11 16:06:15 | 000,675,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.dll
[2017/05/11 16:06:15 | 000,598,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Web.dll
[2017/05/11 16:06:15 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafBth.dll
[2017/05/11 16:06:15 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Authentication.Identity.Provider.dll
[2017/05/11 16:06:15 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidsvc.dll
[2017/05/11 16:06:15 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spaceman.exe
[2017/05/11 16:06:14 | 000,861,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LicenseManager.dll
[2017/05/11 16:06:14 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2017/05/11 16:06:14 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.UX.EapRequestHandler.dll
[2017/05/11 16:06:14 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Gaming.Input.dll
[2017/05/11 16:06:14 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rastlsext.dll
[2017/05/11 16:06:14 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.BlockedShutdown.dll
[2017/05/11 16:06:14 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeveloperOptionsSettingsHandlers.dll
[2017/05/11 16:06:14 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.HumanInterfaceDevice.dll
[2017/05/11 16:06:14 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.WiFi.dll
[2017/05/11 16:06:13 | 001,600,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\urlmon.dll
[2017/05/11 16:06:13 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIRibbonRes.dll
[2017/05/11 16:06:13 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieproxy.dll
[2017/05/11 16:06:12 | 002,263,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iertutil.dll
[2017/05/11 16:06:12 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Globalization.dll
[2017/05/11 16:06:12 | 000,361,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsmf.dll
[2017/05/11 16:06:12 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WwaApi.dll
[2017/05/11 16:06:11 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSWorkspace.dll
[2017/05/11 16:06:11 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dxpserver.exe
[2017/05/11 16:06:10 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi2.dll
[2017/05/11 16:06:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcconf.dll
[2017/05/11 16:06:09 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ExSMime.dll
[2017/05/11 16:06:08 | 002,747,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcore.dll
[2017/05/11 16:06:08 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\updatehandlers.dll
[2017/05/11 16:06:08 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SpaceAgent.exe
[2017/05/11 16:06:08 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\updatepolicy.dll
[2017/05/11 16:06:07 | 001,077,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Editing.dll
[2017/05/11 16:06:07 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Web.Http.dll
[2017/05/11 16:06:07 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.dll
[2017/05/11 16:06:07 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToManager.dll
[2017/05/11 16:06:06 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.BackgroundTransfer.dll
[2017/05/11 16:06:06 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RTMediaFrame.dll
[2017/05/11 16:06:06 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CryptoWinRT.dll
[2017/05/11 16:06:05 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AzureSettingSyncProvider.dll
[2017/05/11 16:06:05 | 000,901,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Bluetooth.dll
[2017/05/11 16:06:05 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bisrv.dll
[2017/05/11 16:06:05 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Internal.Management.dll
[2017/05/11 16:06:04 | 001,774,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkMobileSettings.dll
[2017/05/11 16:06:04 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dlnashext.dll
[2017/05/11 16:06:04 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AboveLockAppHost.dll
[2017/05/11 16:06:03 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssrch.dll
[2017/05/11 16:06:03 | 001,109,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SharedStartModel.dll
[2017/05/11 16:06:03 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NaturalLanguage6.dll
[2017/05/11 16:06:02 | 000,525,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogs.dll
[2017/05/11 16:06:02 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.dll
[2017/05/11 16:06:02 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceaccess.dll
[2017/05/11 16:06:02 | 000,263,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Storage.ApplicationData.dll
[2017/05/11 16:06:02 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NgcCtnrSvc.dll
[2017/05/11 16:06:02 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vaultcli.dll
[2017/05/11 16:06:02 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserMgrProxy.dll
[2017/05/11 16:06:02 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppointmentActivation.dll
[2017/05/11 16:06:01 | 000,450,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rastls.dll
[2017/05/11 16:06:01 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\webcheck.dll
[2017/05/11 16:06:01 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tdc.ocx
[2017/05/11 16:06:00 | 002,027,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2017/05/11 16:05:59 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthprops.cpl
[2017/05/11 16:05:58 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserbroker.dll
[2017/05/11 16:05:57 | 007,468,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstscax.dll
[2017/05/11 16:05:57 | 000,425,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usocore.dll
[2017/05/11 16:05:56 | 004,614,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.dll
[2017/05/11 16:05:56 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WebcamUi.dll
[2017/05/11 16:05:56 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SpaceControl.dll
[2017/05/11 16:05:55 | 001,136,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpncore.dll
[2017/05/11 16:05:55 | 000,517,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FlightSettings.dll
[2017/05/11 16:05:54 | 001,656,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Perception.dll
[2017/05/11 16:05:53 | 000,798,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authui.dll
[2017/05/11 16:05:53 | 000,525,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LogonController.dll
[2017/05/11 16:05:52 | 003,774,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_nt.dll
[2017/05/11 16:05:51 | 000,685,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Internal.Shell.Broker.dll
[2017/05/11 16:05:51 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairing.dll
[2017/05/11 16:05:51 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogs3D.dll
[2017/05/11 16:05:50 | 000,822,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usermgr.dll
[2017/05/11 16:05:47 | 001,584,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidsvc.dll
[2017/05/11 16:05:47 | 000,754,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ngcsvc.dll
[2017/05/11 16:05:46 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ShareHost.dll
[2017/05/11 16:05:45 | 000,975,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinapi.appcore.dll
[2017/05/11 16:05:45 | 000,819,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppContracts.dll
[2017/05/11 16:05:45 | 000,493,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncHost.exe
[2017/05/11 16:05:44 | 000,352,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MMDevAPI.dll
[2017/05/11 16:05:43 | 001,725,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KernelBase.dll
[2017/05/11 16:05:43 | 000,846,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinTypes.dll
[2017/05/11 16:05:42 | 012,187,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieframe.dll
[2017/05/11 16:05:42 | 000,256,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\thumbcache.dll
[2017/05/11 16:05:40 | 003,106,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstsc.exe
[2017/05/11 16:05:40 | 001,228,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usercpl.dll
[2017/05/11 16:05:38 | 007,626,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.dll
[2017/05/11 16:05:37 | 004,312,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2017/05/11 16:05:37 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shutdownux.dll
[2017/05/11 16:05:36 | 005,722,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windows.storage.dll
[2017/05/11 16:05:34 | 020,967,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shell32.dll
[2017/05/11 16:05:11 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apprepapi.dll
[2017/05/11 16:05:10 | 001,700,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smartscreen.exe
[2017/05/11 16:05:10 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apprepsync.dll
[2017/05/11 16:05:07 | 000,277,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSetupUI.dll
[2017/05/11 16:05:07 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupugc.exe
[2017/05/11 16:05:05 | 002,154,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storagewmi.dll
[2017/05/11 16:05:04 | 002,749,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mispace.dll
[2017/05/11 16:05:02 | 001,504,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WindowsCodecs.dll
[2017/05/11 16:04:58 | 001,438,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ResetEngine.dll
[2017/05/11 16:04:58 | 001,220,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RecoveryDrive.exe
[2017/05/11 16:04:57 | 000,886,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aadtb.dll
[2017/05/11 16:04:56 | 001,137,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsp_health.dll
[2017/05/11 16:04:56 | 000,965,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgent.dll
[2017/05/11 16:04:56 | 000,719,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsp_sr.dll
[2017/05/11 16:04:55 | 001,323,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsp_fs.dll
[2017/05/11 16:04:53 | 000,962,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ole32.dll
[2017/05/11 16:04:53 | 000,601,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleaut32.dll
[2017/05/11 16:04:53 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olepro32.dll
[2017/05/11 16:04:51 | 000,713,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpcss.dll
[2017/05/11 16:04:51 | 000,380,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\services.exe
[2017/05/11 16:04:50 | 002,168,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\combase.dll
[2017/05/11 16:04:49 | 000,545,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vhdmp.sys
[2017/05/11 16:04:49 | 000,053,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsdepends.sys
[2017/05/11 16:04:48 | 000,661,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcWebFilter.dll
[2017/05/11 16:04:48 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\srv2.sys
[2017/05/11 16:04:48 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\srv.sys
[2017/05/11 16:04:40 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.Handlers.dll
[2017/05/11 16:04:40 | 000,368,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\puiobj.dll
[2017/05/11 16:04:39 | 001,631,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.Resources.dll
[2017/05/11 16:04:37 | 001,557,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\crypt32.dll
[2017/05/11 16:04:37 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReInfo.dll
[2017/05/11 16:04:33 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\audiosrv.dll
[2017/05/11 16:04:33 | 000,601,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetSetupEngine.dll
[2017/05/11 16:04:32 | 001,413,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OpcServices.dll
[2017/05/11 16:04:31 | 000,784,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winresume.exe
[2017/05/11 16:04:30 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winlogon.exe
[2017/05/11 16:04:30 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidcertstorecheck.exe
[2017/05/11 16:04:29 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BthLEEnum.sys
[2017/05/11 16:04:28 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Enumeration.dll
[2017/05/11 16:04:28 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioEndpointBuilder.dll
[2017/05/11 16:04:28 | 000,294,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConhostV2.dll
[2017/05/11 16:04:28 | 000,116,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudExperienceHostCommon.dll
[2017/05/11 16:04:28 | 000,025,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browser_broker.exe
[2017/05/11 16:04:26 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvewiz.dll
[2017/05/11 16:04:26 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicesFlowBroker.dll
[2017/05/11 16:04:25 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BluetoothApis.dll
[2017/05/11 16:04:08 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationApi.dll
[2017/05/11 16:04:08 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credprovhost.dll
[2017/05/11 16:04:06 | 001,755,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceFlows.DataModel.dll
[2017/05/11 16:04:06 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsreg.dll
[2017/05/11 16:04:04 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConsentUX.dll
[2017/05/11 16:04:04 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpoext.dll
[2017/05/11 16:04:03 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Energy.dll
[2017/05/11 16:04:03 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthTelemetry.dll
[2017/05/11 15:48:42 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\CyberLink
[2017/05/09 17:34:22 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
[2017/05/09 16:00:32 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Lavasoft
[2017/05/09 09:02:33 | 000,189,992 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\EuFdDisk.sys
[2017/05/09 09:02:33 | 000,051,752 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\eubakup.sys
[2017/05/09 09:02:33 | 000,015,912 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\eudskacs.sys
[2017/05/09 09:02:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System GoBack Free
[2017/05/09 09:02:14 | 000,019,496 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\fbnative.exe
[2017/05/09 09:01:26 | 000,000,000 | ---D | C] -- C:\Program Files\EaseUS
[2017/05/09 08:54:54 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Macrorit Disk Partition Expert Free
[2017/05/09 08:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Macrorit
[2017/05/07 23:37:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EPSON
[2017/05/07 23:35:50 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON
[2017/05/06 10:07:38 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Reflect
[2017/05/06 10:06:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
[2017/05/06 10:05:59 | 000,000,000 | ---D | C] -- C:\Program Files\Macrium
[2017/05/06 09:15:53 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fast HTML Checker
[2017/05/06 09:15:52 | 000,000,000 | ---D | C] -- C:\Program Files\Fast HTML Checker
[2017/05/06 09:14:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer
[2017/05/06 09:13:56 | 000,000,000 | ---D | C] -- C:\Program Files\FolderViewer
[2017/05/06 08:58:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encrypt4all Software
[2017/05/06 08:57:59 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Encrypt4all Software
[2017/05/06 08:57:57 | 000,000,000 | ---D | C] -- C:\Program Files\Encrypt4all Software
[2017/05/06 08:41:56 | 000,000,000 | ---D | C] -- C:\Users\jean-\Desktop\autres application
[2017/05/05 17:41:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize
[2017/05/05 17:40:16 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\JAM Software
[2017/05/05 17:40:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
[2017/05/05 17:39:16 | 000,000,000 | ---D | C] -- C:\Program Files\JAM Software
[2017/05/05 17:34:38 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\CrashRpt
[2017/05/05 17:26:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
[2017/05/05 17:23:28 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supercopier
[2017/05/05 17:15:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2017/05/05 14:13:11 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Acronis
[2017/05/05 14:11:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
[2017/05/05 14:10:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis
[2017/05/05 14:10:07 | 000,000,000 | ---D | C] -- C:\Program Files\Acronis
[2017/05/05 14:10:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Acronis
[2017/05/05 14:04:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Macrium
[2017/05/05 13:47:00 | 000,000,000 | ---D | C] -- C:\ProgramData\dbg
[2017/05/05 13:46:54 | 000,000,000 | ---D | C] -- C:\AeroGlass
[2017/05/05 13:33:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\IObit
[2017/05/05 13:33:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\ImCleanDisabled
[2017/05/05 13:30:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Foxit ContentPlatform
[2017/05/05 13:30:27 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Foxit AgentInformation
[2017/05/05 13:30:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2017/05/05 13:30:10 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Foxit Software
[2017/05/05 13:28:44 | 000,000,000 | ---D | C] -- C:\Program Files\Foxit Software
[2017/05/05 13:23:55 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\IObit
[2017/05/05 13:19:10 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Syncios
[2017/05/05 13:19:08 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Syncios
[2017/05/05 13:19:08 | 000,000,000 | ---D | C] -- C:\Users\jean-\.android
[2017/05/05 13:19:01 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Syncios Data Transfer
[2017/05/05 13:19:01 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\SyncDroid
[2017/05/05 13:17:10 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syncios
[2017/05/05 13:15:49 | 000,000,000 | ---D | C] -- C:\Program Files\Anvsoft
[2017/05/05 13:15:47 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\proDAD
[2017/05/05 13:15:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\proDAD
[2017/05/05 13:15:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\KDirectShow
[2017/05/05 13:14:55 | 000,000,000 | ---D | C] -- C:\Program Files\proDAD
[2017/05/05 13:14:52 | 000,000,000 | ---D | C] -- C:\ProgramData\proDAD
[2017/05/05 13:10:13 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\trolCommander
[2017/05/05 13:09:40 | 000,000,000 | ---D | C] -- C:\Program Files\trolCommander
[2017/05/05 13:08:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderIco
[2017/05/05 13:08:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Teorex
[2017/05/05 13:08:42 | 000,000,000 | ---D | C] -- C:\Program Files\FolderIco
[2017/05/05 13:05:54 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\muCommander
[2017/05/05 13:05:37 | 000,000,000 | ---D | C] -- C:\Program Files\muCommander
[2017/05/05 12:36:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Carte Bleue Caisse d'Epargne
[2017/05/05 12:36:46 | 000,000,000 | ---D | C] -- C:\Program Files\e-Carte Bleue
[2017/05/05 12:36:30 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Downloaded Installations
[2017/05/05 12:33:20 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\NiceCopier
[2017/05/05 12:33:19 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\winappmanager
[2017/05/03 18:15:35 | 000,000,000 | -H-D | C] -- C:\W7P_Backups
[2017/05/03 18:14:58 | 000,000,000 | ---D | C] -- C:\SkinPack
[2017/05/03 18:12:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nikon
[2017/05/03 18:08:58 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Avatar
[2017/05/03 18:08:00 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\YouCam
[2017/05/03 17:54:37 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Kotobee Reader
[2017/05/03 17:53:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Reader
[2017/05/03 17:53:17 | 000,000,000 | ---D | C] -- C:\Program Files\Kotobee Reader
[2017/05/03 17:42:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Publisher
[2017/05/03 17:41:50 | 000,000,000 | ---D | C] -- C:\Program Files\Kotobee Publisher
[2017/05/03 17:40:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server
[2017/05/03 17:40:49 | 000,000,000 | ---D | C] -- C:\Program Files\LiteManager Pro - Server
[2017/05/03 17:39:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer
[2017/05/03 17:39:20 | 000,000,000 | ---D | C] -- C:\Program Files\LiteManager Pro - Viewer
[2017/05/03 17:34:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eyes Relaxing And Focusing
[2017/05/03 17:33:54 | 000,000,000 | ---D | C] -- C:\Program Files\Eyes Relaxing And Focusing 3.0
[2017/05/03 17:31:09 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2017/05/03 17:26:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Informer Technologies, Inc
[2017/05/03 17:26:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Informer
[2017/05/03 17:25:26 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Mes téléchargements Filehippo
[2017/05/03 17:24:10 | 000,000,000 | ---D | C] -- C:\Program Files\FileHippo.com
[2017/05/03 17:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\WebM Project
[2017/05/03 17:21:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
[2017/05/03 17:21:54 | 000,000,000 | ---D | C] -- C:\Program Files\Xiph.Org
[2017/05/03 17:21:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Screen Recorder
[2017/05/03 17:21:10 | 000,000,000 | ---D | C] -- C:\Program Files\Icecream Screen Recorder
[2017/05/03 17:20:02 | 000,000,000 | ---D | C] -- C:\Users\jean-\Desktop\lfs ultra & 100% sécurisé finalis part f sigma ter apps
[2017/05/03 17:18:48 | 000,000,000 | ---D | C] -- C:\Users\jean-\Desktop\youcam 8, photodirector 9, & efm du mh2mol management apps
[2017/05/03 17:17:42 | 000,000,000 | ---D | C] -- C:\Users\jean-\Desktop\managemy_barrow 3 & 4, & widen & lfsu100%sf - cyberlink mediasuite 15 & tidymymusic
[2017/05/03 17:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniCopier
[2017/05/03 17:15:23 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Xilisoft
[2017/05/03 17:15:20 | 000,000,000 | ---D | C] -- C:\Program Files\MiniCopier
[2017/05/03 17:13:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast File Copy by Daanav.com
[2017/05/03 17:13:42 | 000,000,000 | ---D | C] -- C:\Program Files\Fast File Copy by Daanav.com
[2017/05/03 17:12:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
[2017/05/03 17:12:25 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\TechSmith
[2017/05/03 17:11:13 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Debugmode
[2017/05/03 17:10:53 | 000,000,000 | ---D | C] -- C:\Program Files\DebugMode
[2017/05/03 17:09:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free-video-splitter
[2017/05/03 17:09:40 | 000,000,000 | ---D | C] -- C:\Program Files\free-video-splitter
[2017/05/03 17:09:33 | 000,000,000 | ---D | C] -- C:\Program Files\Xilisoft
[2017/05/03 17:09:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Xilisoft
[2017/05/03 17:09:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
[2017/05/03 17:08:59 | 000,000,000 | ---D | C] -- C:\Program Files\TechSmith
[2017/05/03 17:04:09 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\TeraCopy
[2017/05/03 17:04:08 | 000,000,000 | -H-D | C] -- C:\Users\jean-\AppData\Roaming\Obsidium
[2017/05/03 17:04:08 | 000,000,000 | -H-D | C] -- C:\Users\jean-\.obs32
[2017/05/03 17:02:16 | 000,000,000 | ---D | C] -- C:\Program Files\TeraCopy
[2017/05/03 17:02:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker
[2017/05/03 17:02:03 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2017/05/03 17:01:59 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2017/05/03 17:01:21 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2017/05/03 17:01:21 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2017/05/03 17:01:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roadkil.Net
[2017/05/03 17:01:10 | 000,000,000 | ---D | C] -- C:\Program Files\Roadkil.Net
[2017/05/03 17:00:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
[2017/05/03 17:00:46 | 000,000,000 | ---D | C] -- C:\Program Files\Runtime Software
[2017/05/03 16:59:40 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PerigeeCopy
[2017/05/03 16:59:39 | 000,000,000 | ---D | C] -- C:\Program Files\PerigeeCopy
[2017/05/03 16:59:02 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Copy Handler
[2017/05/03 16:59:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler
[2017/05/03 16:58:53 | 000,000,000 | ---D | C] -- C:\Program Files\Copy Handler
[2017/05/03 16:57:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NiceCopier
[2017/05/03 16:57:12 | 000,000,000 | ---D | C] -- C:\Program Files\NiceCopier
[2017/05/03 16:56:41 | 000,000,000 | ---D | C] -- C:\Users\jean-\ultracopier
[2017/05/03 16:56:26 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KillCopy
[2017/05/03 16:56:24 | 000,000,000 | ---D | C] -- C:\Program Files\Supercopier
[2017/05/03 16:56:21 | 000,000,000 | ---D | C] -- C:\Program Files\KillSoft
[2017/05/03 16:56:16 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ultracopier
[2017/05/03 16:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Ultracopier
[2017/05/03 16:49:00 | 000,000,000 | ---D | C] -- C:\ProgramData\BitDefender
[2017/05/03 16:45:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Wondershare
[2017/05/03 16:44:59 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Wondershare
[2017/05/03 16:44:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wondershare
[2017/05/03 16:44:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
[2017/05/03 16:42:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Wondershare Video Editor
[2017/05/03 16:42:27 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Wondershare Filmora
[2017/05/03 16:42:27 | 000,000,000 | ---D | C] -- C:\Program Files\Wondershare
[2017/05/03 16:39:19 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Wondershare
[2017/05/03 16:34:35 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\CrashDumps
[2017/05/03 16:32:47 | 000,236,792 | ---- | C] (COMODO) -- C:\WINDOWS\System32\iseguard32.dll
[2017/05/03 16:32:47 | 000,049,680 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\isedrv.sys
[2017/05/03 16:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
[2017/05/03 16:32:16 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Comodo
[2017/05/03 16:31:37 | 000,000,000 | ---D | C] -- C:\Program Files\Comodo
[2017/05/03 16:28:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Shared Space
[2017/05/03 16:28:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo Downloader
[2017/05/03 16:28:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo
[2017/05/03 16:27:20 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\adaware
[2017/05/03 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\AdAwareDesktop
[2017/05/03 16:25:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\adaware
[2017/05/03 16:24:15 | 000,000,000 | ---D | C] -- C:\Program Files\adaware
[2017/05/03 16:23:41 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\AdAwareUpdater
[2017/05/03 16:23:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\adaware
[2017/05/03 16:22:31 | 000,000,000 | ---D | C] -- C:\ProgramData\adaware
[2017/05/03 16:09:08 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Ashampoo
[2017/05/03 16:09:02 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\ashampoo
[2017/05/03 16:09:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
[2017/05/03 16:07:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Ashampoo
[2017/05/03 16:07:46 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo
[2017/05/03 15:47:29 | 000,000,000 | ---D | C] -- C:\Users\jean-\Documents\Cameyo apps
[2017/05/03 15:33:53 | 001,629,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WdfCoInstaller01011.dll
[2017/05/03 15:10:19 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Power2Go11
[2017/05/03 15:10:03 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\CyberLink
[2017/05/03 15:10:02 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CyberLink
[2017/05/03 15:09:52 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\CyberLink
[2017/05/03 15:08:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp
[2017/05/03 15:07:15 | 000,000,000 | ---D | C] -- C:\Program Files\InstallShield Installation Information
[2017/05/03 15:07:10 | 000,000,000 | ---D | C] -- C:\Program Files\NSIS Uninstall Information
[2017/05/03 15:07:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CyberLink
[2017/05/03 15:06:59 | 000,087,816 | ---- | C] (CyberLink) -- C:\WINDOWS\System32\drivers\CLVirtualBus01.sys
[2017/05/03 15:04:57 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2017/05/03 15:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2017/05/03 15:04:21 | 000,000,000 | ---D | C] -- C:\ProgramData\install_clap
[2017/05/03 15:04:21 | 000,000,000 | ---D | C] -- C:\ProgramData\install_backup
[2017/05/03 15:00:46 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2017/05/03 14:49:37 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\VOS
[2017/05/03 14:48:29 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\WinRAR
[2017/05/03 14:48:08 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2017/05/03 14:48:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2017/05/03 14:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2017/05/03 14:22:06 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Kotobee Author
[2017/05/03 14:21:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Author
[2017/05/03 14:21:21 | 000,000,000 | ---D | C] -- C:\Program Files\Kotobee Author
[2017/05/03 14:21:14 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Programs
[2017/05/03 14:14:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bing Bureau
[2017/05/03 14:14:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2017/05/03 10:01:05 | 000,240,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msiscsi.sys
[2017/05/03 10:00:59 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2017/05/03 10:00:59 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Gaming.XboxLive.Storage.dll
[2017/05/03 10:00:59 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpRelayTransport.dll
[2017/05/03 10:00:59 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BasicDisplay.sys
[2017/05/03 10:00:59 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BasicRender.sys
[2017/05/03 10:00:57 | 006,109,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mos.dll
[2017/05/03 10:00:54 | 002,138,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InputService.dll
[2017/05/03 10:00:54 | 000,895,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Streaming.dll
[2017/05/03 10:00:54 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mbsmsapi.dll
[2017/05/03 10:00:54 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.ServiceDiscovery.Dnssd.dll
[2017/05/03 10:00:53 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Connectivity.dll
[2017/05/03 10:00:51 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Internal.Bluetooth.dll
[2017/05/03 10:00:51 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafpos.dll
[2017/05/03 10:00:51 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.SerialCommunication.dll
[2017/05/03 10:00:51 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FontProvider.dll
[2017/05/03 10:00:50 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.SmartCards.dll
[2017/05/03 10:00:50 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.LowLevel.dll
[2017/05/03 10:00:50 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.HostName.dll
[2017/05/03 10:00:50 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Core.dll
[2017/05/03 10:00:49 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.SmartCards.Phone.dll
[2017/05/03 10:00:48 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kerberos.dll
[2017/05/03 10:00:47 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Speech.dll
[2017/05/03 10:00:47 | 000,827,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.appcore.dll
[2017/05/03 10:00:46 | 000,862,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncCore.dll
[2017/05/03 10:00:46 | 000,136,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudExperienceHostUser.dll
[2017/05/03 10:00:45 | 003,198,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdp.dll
[2017/05/03 10:00:45 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Import.dll
[2017/05/03 10:00:45 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ErrorDetails.dll
[2017/05/03 10:00:45 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthBroker.dll
[2017/05/03 10:00:45 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.UserDeviceAssociation.dll
[2017/05/03 10:00:44 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentClient.dll
[2017/05/03 10:00:24 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2017/05/03 10:00:05 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Web.Diagnostics.dll
[2017/05/03 10:00:04 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usoapi.dll
[2017/05/03 10:00:03 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MusUpdateHandlers.dll
[2017/05/03 10:00:03 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MusNotificationUx.exe
[2017/05/03 10:00:01 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MusNotification.exe
[2017/05/03 10:00:00 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\musdialoghandlers.dll
[2017/05/03 09:59:59 | 001,966,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip.sys
[2017/05/03 09:59:57 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RADCUI.dll
[2017/05/03 09:59:56 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sbe.dll
[2017/05/03 09:59:54 | 000,167,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscapi.dll
[2017/05/03 09:59:54 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TokenBrokerUI.dll
[2017/05/03 09:59:47 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Family.Authentication.dll
[2017/05/03 09:59:43 | 001,196,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscui.cpl
[2017/05/03 09:59:39 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psmsrv.dll
[2017/05/03 09:59:38 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnapps.dll
[2017/05/03 09:59:37 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\localspl.dll
[2017/05/03 09:59:34 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\asycfilt.dll
[2017/05/03 09:59:33 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netshell.dll
[2017/05/03 09:59:33 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkBindingEngineMigPlugin.dll
[2017/05/03 09:59:32 | 000,950,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndis.sys
[2017/05/03 09:59:31 | 006,474,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2017/05/03 09:59:29 | 001,344,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsrcsnk.dll
[2017/05/03 09:59:28 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmjpegdec.dll
[2017/05/03 09:59:24 | 003,307,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFMediaEngine.dll
[2017/05/03 09:59:02 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apds.dll
[2017/05/03 09:59:01 | 001,406,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationFramework.dll
[2017/05/03 09:59:01 | 000,884,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2017/05/03 09:59:01 | 000,545,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontdrvhost.exe
[2017/05/03 09:59:01 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Geolocation.dll
[2017/05/03 09:59:01 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\flvprophandler.dll
[2017/05/03 09:59:00 | 000,576,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wer.dll
[2017/05/03 09:59:00 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmenrollengine.dll
[2017/05/03 09:59:00 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\enrollmentapi.dll
[2017/05/03 09:58:58 | 001,564,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\quartz.dll
[2017/05/03 09:58:57 | 000,920,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dosvc.dll
[2017/05/03 09:58:57 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Midi.dll
[2017/05/03 09:58:56 | 000,728,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\enterprisecsps.dll
[2017/05/03 09:58:54 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcertinst.exe
[2017/05/03 09:58:52 | 000,746,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2017/05/03 09:58:52 | 000,125,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudExperienceHostBroker.dll
[2017/05/03 09:58:49 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CredProvDataModel.dll
[2017/05/03 09:58:49 | 000,034,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompPkgSup.dll
[2017/05/03 09:58:48 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Cortana.Desktop.dll
[2017/05/03 09:58:48 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudDomainJoinDataModelServer.dll
[2017/05/03 09:58:36 | 001,949,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentServer.dll
[2017/05/03 09:58:36 | 000,790,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentExtensions.desktop.dll
[2017/05/03 09:58:36 | 000,306,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.MediaControl.dll
[2017/05/03 09:58:29 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcastdvr.exe
[2017/05/03 09:40:09 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Macromedia
[2017/05/03 09:35:49 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Modules
[2017/05/03 09:35:46 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\UsbFix
[2017/04/22 23:31:02 | 000,044,008 | ---- | C] (COMODO) -- C:\WINDOWS\System32\cmdcsr.dll
[2017/04/22 23:30:56 | 000,733,456 | ---- | C] (COMODO) -- C:\WINDOWS\System32\guard32.dll
[2017/04/22 23:26:32 | 000,363,200 | ---- | C] (COMODO) -- C:\WINDOWS\System32\cmdvrt32.dll
[2017/04/22 23:26:20 | 000,194,752 | ---- | C] (COMODO) -- C:\WINDOWS\System32\cmdshim32.dll
[2017/04/19 00:59:12 | 000,000,000 | -HSD | C] -- C:\Users\jean-\IntelGraphicsProfiles
[2017/04/19 00:57:25 | 000,069,120 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.DLL
[2017/04/19 00:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2017/04/19 00:37:27 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\MicrosoftEdge
[2017/03/31 02:01:22 | 000,109,896 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\inspect.sys
[2017/03/31 02:01:22 | 000,045,504 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmdhlp.sys
[2017/03/31 02:01:20 | 000,651,768 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmdguard.sys
[2017/03/31 02:01:18 | 000,036,224 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmderd.sys
[2017/03/26 03:17:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\InfusedApps
[2017/03/26 03:17:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2017/03/26 03:16:18 | 000,000,000 | ---D | C] -- C:\Windows.old
[2017/03/26 03:15:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\Setup
[2017/03/26 03:12:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2017/03/26 03:12:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\OCR
[2017/03/26 03:12:30 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2017/03/26 03:12:30 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2017/03/26 03:11:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF\fr-FR
[2017/03/26 03:11:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr
[2017/03/26 03:11:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\fr-FR
[2017/03/26 03:11:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\fr-FR
[2017/03/26 03:08:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm
[2017/03/26 03:08:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WCN
[2017/03/26 03:08:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\slmgr
[2017/03/26 03:08:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Printing_Admin_Scripts
[2017/03/26 03:08:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2017/03/26 03:08:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF\en-US
[2017/03/26 03:08:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\en-US
[2017/03/26 03:08:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\en-US
[2017/03/26 03:08:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\DigitalLocker
[2017/03/26 03:08:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\0409
[2017/03/26 03:02:03 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msclmd.dll
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\Web
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\Vss
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\tracing
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\TAPI
[2017/03/26 03:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemResources
[2017/03/26 03:01:45 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Nui
[2017/03/26 03:01:45 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\F12
[2017/03/26 03:01:45 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\dsc
[2017/03/26 03:01:45 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\DiagSvcs
[2017/03/26 03:01:45 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Configuration
[2017/03/26 03:01:45 | 000,000,000 | R--D | C] -- C:\WINDOWS\PrintDialog
[2017/03/26 03:01:45 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2017/03/26 03:01:45 | 000,000,000 | R--D | C] -- C:\WINDOWS\MiracastView
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-TW
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-HK
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-CN
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WinMetadata
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winevt
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WindowsPowerShell
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WinBioPlugIns
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WinBioDatabase
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WDI
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\uk-UA
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\tr-TR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\th-TH
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Tasks
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SystemResetPlatform
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemApps
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sv-SE
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sru
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sr-Latn-RS
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sr-Latn-CS
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sppui
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spp
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Speech_OneCore
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech_OneCore
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Speech
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System\Speech
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sl-SI
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sk-SK
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SKB
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellExperiences
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\setup
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SecureBootUpdates
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\schemas
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SchCache
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ru-RU
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ro-RO
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\restore
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Recovery
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RasToast
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pt-PT
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pt-BR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ProximityToast
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\prefetch
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\PolicyDefinitions
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PointOfService
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-PL
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\PLA
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Performance
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\nl-NL
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\networklist
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NDF
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\nb-NO
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MUI
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MSDRM
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\ModemLogs
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\migwiz
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\migration
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Migration
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MailContactsCalendarSync
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\lv-LV
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\lt-LT
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Licenses
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ko-KR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ja-JP
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\it-IT
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Ipmi
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\InputMethod
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\hu-HU
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\hr-HR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\he-IL
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\FxsTmp
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-FR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-CA
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fi-FI
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\et-EE
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\es-MX
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\es-ES
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-GB
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\el-GR
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\downlevel
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Dism
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-DE
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DDFs
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\da-DK
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\cs-CZ
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CodeIntegrity
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\catroot2
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Bthprops
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Boot
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bg-BG
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ar-SA
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appraiser
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\AppLocker
[2017/03/26 03:01:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\AdvancedInstallers
[2017/03/26 03:01:44 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft
[2017/03/26 03:01:44 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2017/03/26 03:01:44 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\Program Files\Windows Defender
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\WINDOWS\Microsoft.NET
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\WINDOWS\ImmersiveControlPanel
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\WINDOWS\assembly
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[2017/03/26 03:01:44 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
[2017/03/26 03:01:44 | 000,000,000 | -HSD | C] -- C:\Program Files\Windows Sidebar
[2017/03/26 03:01:44 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2017/03/26 03:01:44 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsApps
[2017/03/26 03:01:44 | 000,000,000 | -H-D | C] -- C:\ProgramData
[2017/03/26 03:01:44 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ELAMBKUP
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\WindowsPowerShell
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\USOPrivate
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Sysprep
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftwareDistribution
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\LiveKernelReports
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\InputMethod
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\IME
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\GameBarPresenceWriter
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\diagnostics
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\debug
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Comms
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Branding
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Boot
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\bcastdvr
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppReadiness
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\apppatch
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\appcompat
[2017/03/26 03:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2017/03/26 03:01:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2017/03/26 03:01:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2017/03/26 02:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\INF
[2017/03/26 02:52:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\CbsTemp
[2017/03/26 02:50:55 | 000,000,000 | R--D | C] -- C:\Users
[2017/03/26 02:50:55 | 000,000,000 | R--D | C] -- C:\Program Files
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\Windows
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SMI
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\servicing
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DriverStore
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2017/03/26 02:50:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
[2017/03/26 02:43:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2017/03/26 02:22:28 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2017/03/26 02:22:27 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2017/03/26 02:20:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SleepStudy
[2017/03/26 02:20:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2017/03/26 02:20:52 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2017/03/25 23:45:47 | 000,430,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2017/03/25 23:44:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT
[2017/03/25 23:44:09 | 153,591,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2017/03/25 19:28:13 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\NetworkTiles
[2017/03/25 19:28:02 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Skype
[2017/03/25 19:27:40 | 000,000,000 | R--D | C] -- C:\Users\jean-\OneDrive
[2017/03/25 19:27:26 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Comms
[2017/03/25 19:25:49 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Publishers
[2017/03/25 19:25:46 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\PackageStaging
[2017/03/25 19:25:30 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2017/03/25 19:25:30 | 000,000,000 | R--D | C] -- C:\Users\jean-\Searches
[2017/03/25 19:25:30 | 000,000,000 | R--D | C] -- C:\Users\jean-\Contacts
[2017/03/25 19:25:30 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2017/03/25 19:25:28 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Adobe
[2017/03/25 19:25:27 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\TileDataLayer
[2017/03/25 19:25:27 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Packages
[2017/03/25 19:25:26 | 000,000,000 | -H-D | C] -- C:\Users\jean-\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2017/03/25 19:25:25 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\VirtualStore
[2017/03/25 19:25:25 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\ConnectedDevicesPlatform
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Voisinage réseau
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Voisinage d'impression
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\AppData\Local\Temporary Internet Files
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\SendTo
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Recent
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Modèles
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Documents\Mes vidéos
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Documents\Mes images
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Mes documents
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Menu Démarrer
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Documents\Ma musique
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Local Settings
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\AppData\Local\Historique
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Cookies
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\Application Data
[2017/03/25 19:22:51 | 000,000,000 | -HSD | C] -- C:\Users\jean-\AppData\Local\Application Data
[2017/03/25 19:22:50 | 000,000,000 | --SD | C] -- C:\Users\jean-\AppData\Roaming\Microsoft
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Videos
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Saved Games
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Pictures
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Music
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Links
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Favorites
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Downloads
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Documents
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\Desktop
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2017/03/25 19:22:50 | 000,000,000 | R--D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2017/03/25 19:22:50 | 000,000,000 | -H-D | C] -- C:\Users\jean-\AppData
[2017/03/25 19:22:50 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Temp
[2017/03/25 19:22:50 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Local\Microsoft
[2017/03/25 19:22:50 | 000,000,000 | ---D | C] -- C:\Users\jean-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2017/03/25 19:19:03 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2017/03/25 17:42:24 | 000,000,000 | -H-D | C] -- C:\$SysReset
[2017/03/25 16:58:28 | 002,643,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tquery.dll
[2017/03/25 16:58:28 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XboxNetApiSvc.dll
[2017/03/25 16:58:28 | 000,773,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchIndexer.exe
[2017/03/25 16:58:28 | 000,714,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssvp.dll
[2017/03/25 16:58:28 | 000,529,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StructuredQuery.dll
[2017/03/25 16:58:28 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchProtocolHost.exe
[2017/03/25 16:58:28 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Search.ProtocolHandler.MAPI2.dll
[2017/03/25 16:58:28 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssphtb.dll
[2017/03/25 16:58:28 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchFilterHost.exe
[2017/03/25 16:58:28 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssph.dll
[2017/03/25 16:58:28 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssitlb.dll
[2017/03/25 16:58:27 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XblGameSave.dll
[2017/03/25 16:58:27 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XblGameSaveExt.dll
[2017/03/25 16:58:27 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Gaming.UI.GameBar.dll
[2017/03/25 16:58:27 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XInputUap.dll
[2017/03/25 16:58:26 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nshwfp.dll
[2017/03/25 16:58:26 | 000,100,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfupgd.dll
[2017/03/25 16:58:25 | 001,969,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hevcdecoder.dll
[2017/03/25 16:58:25 | 001,456,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GdiPlus.dll
[2017/03/25 16:58:25 | 000,636,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winhttp.dll
[2017/03/25 16:58:25 | 000,111,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storahci.sys
[2017/03/25 16:58:21 | 006,534,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanmm.dll
[2017/03/25 16:58:21 | 003,520,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsrchvw.exe
[2017/03/25 16:58:21 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwansvc.dll
[2017/03/25 16:58:21 | 000,579,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XblAuthManager.dll
[2017/03/25 16:58:21 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVSENCD.DLL
[2017/03/25 16:58:21 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanconn.dll
[2017/03/25 16:58:21 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CfgSPCellular.dll
[2017/03/25 16:58:21 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EnterpriseAPNCsp.dll
[2017/03/25 16:58:21 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPDShServiceObj.dll
[2017/03/25 16:58:21 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CspCellularSettings.dll
[2017/03/25 16:58:20 | 004,557,824 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\dbgeng.dll
[2017/03/25 16:58:20 | 001,557,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmde.dll
[2017/03/25 16:58:20 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Immersive.dll
[2017/03/25 16:58:20 | 001,293,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMPDMC.exe
[2017/03/25 16:58:20 | 001,056,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wifinetworkmanager.dll
[2017/03/25 16:58:20 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmsvc.dll
[2017/03/25 16:58:20 | 000,368,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanui.dll
[2017/03/25 16:58:20 | 000,272,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wintrust.dll
[2017/03/25 16:58:18 | 003,478,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIRibbon.dll
[2017/03/25 16:58:18 | 001,362,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpmde.dll
[2017/03/25 16:58:18 | 001,231,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcnwiz.dll
[2017/03/25 16:58:18 | 001,154,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Pimstore.dll
[2017/03/25 16:58:18 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vssapi.dll
[2017/03/25 16:58:18 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Search.dll
[2017/03/25 16:58:18 | 000,560,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserLanguagesCpl.dll
[2017/03/25 16:58:18 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vds.exe
[2017/03/25 16:58:18 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmWmiPl.dll
[2017/03/25 16:58:18 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cemapi.dll
[2017/03/25 16:58:18 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDeviceRegistration.Ngc.dll
[2017/03/25 16:58:18 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DuCsps.dll
[2017/03/25 16:58:18 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Shell.Search.UriHandler.dll
[2017/03/25 16:58:17 | 001,252,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataService.dll
[2017/03/25 16:58:17 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PimIndexMaintenance.dll
[2017/03/25 16:58:17 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WindowsUpdateElevatedInstaller.exe
[2017/03/25 16:58:16 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VCardParser.dll
[2017/03/25 16:58:14 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataAccountApis.dll
[2017/03/25 16:58:13 | 002,458,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\themecpl.dll
[2017/03/25 16:58:13 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Unistore.dll
[2017/03/25 16:58:13 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ContactApis.dll
[2017/03/25 16:58:13 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TabletPC.cpl
[2017/03/25 16:58:13 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppointmentApis.dll
[2017/03/25 16:58:13 | 000,567,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChatApis.dll
[2017/03/25 16:58:13 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmCoreProvisioning.dll
[2017/03/25 16:58:13 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinapi.dll
[2017/03/25 16:58:13 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\input.dll
[2017/03/25 16:58:13 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscandui.dll
[2017/03/25 16:58:13 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapi32.dll
[2017/03/25 16:58:13 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpipcfg.dll
[2017/03/25 16:58:13 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netiohlp.dll
[2017/03/25 16:58:13 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Tabbtn.dll
[2017/03/25 16:58:13 | 000,095,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdx.sys
[2017/03/25 16:58:13 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tabcal.exe
[2017/03/25 16:58:13 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MultiDigiMon.exe
[2017/03/25 16:58:13 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LaunchWinApp.exe
[2017/03/25 16:58:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netiougc.exe
[2017/03/25 16:58:12 | 001,260,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctf.dll
[2017/03/25 16:58:12 | 001,104,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SpeechPal.dll
[2017/03/25 16:58:12 | 000,945,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reseteng.dll
[2017/03/25 16:58:12 | 000,632,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sud.dll
[2017/03/25 16:58:12 | 000,454,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storport.sys
[2017/03/25 16:58:12 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msutb.dll
[2017/03/25 16:58:12 | 000,399,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxsmb.sys
[2017/03/25 16:58:12 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wksprt.exe
[2017/03/25 16:58:12 | 000,320,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systemreset.exe
[2017/03/25 16:58:12 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/03/25 16:58:12 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scksp.dll
[2017/03/25 16:58:12 | 000,186,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys
[2017/03/25 16:58:12 | 000,184,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IPHLPAPI.DLL
[2017/03/25 16:58:12 | 000,173,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\basecsp.dll
[2017/03/25 16:58:12 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certprop.dll
[2017/03/25 16:58:12 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.SystemManagement.dll
[2017/03/25 16:58:12 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfui.dll
[2017/03/25 16:58:12 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfp.dll
[2017/03/25 16:58:12 | 000,036,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SysResetErr.exe
[2017/03/25 16:58:11 | 002,318,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsThresholdAdminFlowUI.dll
[2017/03/25 16:58:11 | 000,994,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ApplicationFrame.dll
[2017/03/25 16:58:11 | 000,894,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorDataService.exe
[2017/03/25 16:58:11 | 000,869,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SecConfig.efi
[2017/03/25 16:58:11 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TokenBroker.dll
[2017/03/25 16:58:11 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipnathlp.dll
[2017/03/25 16:58:11 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OneDriveSettingSyncProvider.dll
[2017/03/25 16:58:11 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schannel.dll
[2017/03/25 16:58:11 | 000,387,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.UserAccountsHandlers.dll
[2017/03/25 16:58:11 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SearchFolder.dll
[2017/03/25 16:58:11 | 000,290,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsAdminFlows.exe
[2017/03/25 16:58:11 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_WorkAccess.dll
[2017/03/25 16:58:11 | 000,117,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthHost.exe
[2017/03/25 16:58:11 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MediaFoundation.DefaultPerceptionProvider.dll
[2017/03/25 16:58:11 | 000,093,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\phoneactivate.exe
[2017/03/25 16:58:11 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BluetoothDesktopHandlers.dll
[2017/03/25 16:58:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tbauth.dll
[2017/03/25 16:58:11 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TokenBrokerCookies.exe
[2017/03/25 16:58:10 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sharemediacpl.dll
[2017/03/25 16:58:08 | 001,842,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnidui.dll
[2017/03/25 16:58:08 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Wpc.dll
[2017/03/25 16:58:08 | 001,224,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcMon.exe
[2017/03/25 16:58:08 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasgcw.dll
[2017/03/25 16:58:08 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32spl.dll
[2017/03/25 16:58:08 | 000,570,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintRenderAPIHost.DLL
[2017/03/25 16:58:08 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iprtrmgr.dll
[2017/03/25 16:58:08 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spoolsv.exe
[2017/03/25 16:58:08 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vpnike.dll
[2017/03/25 16:58:08 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Graphics.Printing.dll
[2017/03/25 16:58:08 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDXService.dll
[2017/03/25 16:58:08 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.BackgroundMediaPlayback.dll
[2017/03/25 16:58:08 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winspool.drv
[2017/03/25 16:58:08 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\regedit.exe
[2017/03/25 16:58:08 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rascustom.dll
[2017/03/25 16:58:08 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\puiapi.dll
[2017/03/25 16:58:08 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RelPost.exe
[2017/03/25 16:58:08 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityCommon.dll
[2017/03/25 16:58:08 | 000,106,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\partmgr.sys
[2017/03/25 16:58:08 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DafPrintProvider.dll
[2017/03/25 16:58:08 | 000,092,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pdc.sys
[2017/03/25 16:58:08 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpninprc.dll
[2017/03/25 16:58:08 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\findnetprinters.dll
[2017/03/25 16:58:07 | 008,886,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OneDriveSetup.exe
[2017/03/25 16:58:07 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlansvc.dll
[2017/03/25 16:58:07 | 000,518,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys
[2017/03/25 16:58:07 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlanMediaManager.dll
[2017/03/25 16:58:07 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwifi.sys
[2017/03/25 16:58:07 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlansec.dll
[2017/03/25 16:58:07 | 000,313,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2017/03/25 16:58:07 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ndis.sys.mui
[2017/03/25 16:58:07 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ndis.sys.mui
[2017/03/25 16:58:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wfdprov.dll
[2017/03/25 16:58:06 | 001,571,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3.dll
[2017/03/25 16:58:05 | 002,206,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msmpeg2vdec.dll
[2017/03/25 16:58:05 | 001,299,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVPXENC.dll
[2017/03/25 16:58:05 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVP9DEC.dll
[2017/03/25 16:58:03 | 002,740,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msftedit.dll
[2017/03/25 16:58:03 | 001,123,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfplat.dll
[2017/03/25 16:58:03 | 000,976,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfds.dll
[2017/03/25 16:58:03 | 000,818,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\modernexecserver.dll
[2017/03/25 16:58:03 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmkvsrcsnk.dll
[2017/03/25 16:58:03 | 000,374,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFPlay.dll
[2017/03/25 16:58:02 | 005,380,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BingMaps.dll
[2017/03/25 16:58:02 | 002,363,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapRouter.dll
[2017/03/25 16:58:02 | 002,109,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapGeocoder.dll
[2017/03/25 16:58:02 | 000,952,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsvr.dll
[2017/03/25 16:58:02 | 000,884,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcomm.dll
[2017/03/25 16:58:02 | 000,707,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapsStore.dll
[2017/03/25 16:58:02 | 000,631,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\main.cpl
[2017/03/25 16:58:02 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\internetmail.dll
[2017/03/25 16:58:02 | 000,530,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mf.dll
[2017/03/25 16:58:02 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DavSyncProvider.dll
[2017/03/25 16:58:02 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapConfiguration.dll
[2017/03/25 16:58:02 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accountaccessor.dll
[2017/03/25 16:58:02 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MCCSEngineShared.dll
[2017/03/25 16:58:02 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\moshost.dll
[2017/03/25 16:58:00 | 001,709,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActiveSyncProvider.dll
[2017/03/25 16:58:00 | 001,357,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSPhotography.dll
[2017/03/25 16:58:00 | 000,700,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Storage.Search.dll
[2017/03/25 16:58:00 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appinfo.dll
[2017/03/25 16:57:59 | 000,551,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgmms2.sys
[2017/03/25 16:57:59 | 000,523,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\cng.sys
[2017/03/25 16:57:59 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockAppBroker.dll
[2017/03/25 16:57:59 | 000,353,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TextInputFramework.dll
[2017/03/25 16:57:59 | 000,321,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockAppHost.exe
[2017/03/25 16:57:59 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys
[2017/03/25 16:57:59 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Core.TextInput.dll
[2017/03/25 16:57:59 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpipreg.sys
[2017/03/25 16:57:59 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mskssrv.sys
[2017/03/25 16:57:58 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\indexeddbserver.dll
[2017/03/25 16:57:57 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscms.dll
[2017/03/25 16:57:57 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icm32.dll
[2017/03/25 16:57:56 | 000,827,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iphlpsvc.dll
[2017/03/25 16:57:55 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hgcpl.dll
[2017/03/25 16:57:55 | 000,112,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpapi.dll
[2017/03/25 16:57:54 | 002,484,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gameux.dll
[2017/03/25 16:57:54 | 000,896,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontext.dll
[2017/03/25 16:57:54 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsettingsprovider.dll
[2017/03/25 16:57:54 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcfg.dll
[2017/03/25 16:57:54 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhengine.dll
[2017/03/25 16:57:54 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhtask.dll
[2017/03/25 16:57:53 | 004,423,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ExplorerFrame.dll
[2017/03/25 16:57:53 | 002,277,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d11.dll
[2017/03/25 16:57:53 | 001,382,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\workfolderssvc.dll
[2017/03/25 16:57:53 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkfoldersControl.dll
[2017/03/25 16:57:53 | 000,570,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clusapi.dll
[2017/03/25 16:57:53 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddraw.dll
[2017/03/25 16:57:53 | 000,524,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxgi.dll
[2017/03/25 16:57:53 | 000,497,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnsapi.dll
[2017/03/25 16:57:53 | 000,432,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DMRServer.dll
[2017/03/25 16:57:53 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DXP.dll
[2017/03/25 16:57:53 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\resutils.dll
[2017/03/25 16:57:53 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnsrslvr.dll
[2017/03/25 16:57:53 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFoldersShell.dll
[2017/03/25 16:57:53 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFolders.exe
[2017/03/25 16:57:53 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFoldersGPExt.dll
[2017/03/25 16:57:53 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddrawex.dll
[2017/03/25 16:57:52 | 000,699,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uDWM.dll
[2017/03/25 16:57:52 | 000,229,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcntel.dll
[2017/03/25 16:57:52 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcore6.dll
[2017/03/25 16:57:52 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceEnroller.exe
[2017/03/25 16:57:52 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dfsc.sys
[2017/03/25 16:57:52 | 000,055,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dam.sys
[2017/03/25 16:57:52 | 000,031,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceCensus.exe
[2017/03/25 16:57:51 | 001,339,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appraiser.dll
[2017/03/25 16:57:51 | 000,581,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ci.dll
[2017/03/25 16:57:51 | 000,513,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\generaltel.dll
[2017/03/25 16:57:51 | 000,341,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Classpnp.sys
[2017/03/25 16:57:51 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2017/03/25 16:57:51 | 000,248,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\policymanager.dll
[2017/03/25 16:57:51 | 000,198,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudExperienceHost.dll
[2017/03/25 16:57:51 | 000,113,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acmigration.dll
[2017/03/25 16:57:51 | 000,073,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompatTelRunner.exe
[2017/03/25 16:57:50 | 001,320,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2017/03/25 16:57:50 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxclu.dll
[2017/03/25 16:57:50 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Cortana.OneCore.dll
[2017/03/25 16:57:49 | 001,073,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.efi
[2017/03/25 16:57:49 | 000,945,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.exe
[2017/03/25 16:57:49 | 000,890,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winresume.efi
[2017/03/25 16:57:49 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BootMenuUX.dll
[2017/03/25 16:57:49 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudBackupSettings.dll
[2017/03/25 16:57:49 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BrowserSettingSync.dll
[2017/03/25 16:57:48 | 000,980,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aeinv.dll
[2017/03/25 16:57:48 | 000,760,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appwiz.cpl
[2017/03/25 16:57:48 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PCPTpm12.dll
[2017/03/25 16:57:48 | 000,484,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioSes.dll
[2017/03/25 16:57:48 | 000,450,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devinv.dll
[2017/03/25 16:57:48 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroleui.dll
[2017/03/25 16:57:48 | 000,279,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\invagent.dll
[2017/03/25 16:57:48 | 000,192,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aepic.dll
[2017/03/25 16:57:48 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXApplicabilityBlob.dll
[2017/03/25 16:57:48 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzautoupdate.dll
[2017/03/25 16:57:45 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\daxexec.dll
[2017/03/25 16:57:45 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsvcext.dll
[2017/03/25 16:57:45 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BcastDVRHelper.dll
[2017/03/25 16:57:45 | 000,086,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hvsocket.sys
[2017/03/25 16:57:45 | 000,078,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys
[2017/03/25 16:57:45 | 000,060,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys
[2017/03/25 16:57:44 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\xboxgip.sys
[2017/02/08 13:52:28 | 000,378,336 | ---- | C] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\Trufos.sys
[2017/02/08 13:52:28 | 000,144,504 | ---- | C] (BitDefender LLC) -- C:\WINDOWS\System32\drivers\gzflt.sys
[2017/02/03 08:42:57 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TsWpfWrp.exe
[2017/02/03 08:42:56 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationNative_v0300.dll
[2017/02/03 08:42:56 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationCFFRasterizerNative_v0300.dll
[2017/01/19 18:12:54 | 000,000,000 | ---D | C] -- C:\boot
[2017/01/11 13:27:22 | 000,261,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pci.sys
[2017/01/11 13:27:16 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpencom.dll
[2017/01/11 13:27:16 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KnobsCore.dll
[2017/01/11 13:27:15 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.CredDialogController.dll
[2017/01/11 13:27:15 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KnobsCsp.dll
[2017/01/11 13:27:15 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProvPluginEng.dll
[2017/01/11 13:27:14 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.BioFeedback.dll
[2017/01/11 13:27:10 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\domgmt.dll
[2017/01/11 13:27:06 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2017/01/11 13:26:40 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbiosrvc.dll
[2017/01/11 13:26:37 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptui.dll
[2017/01/11 13:26:36 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSCard.dll
[2017/01/11 13:26:35 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ScDeviceEnum.dll
[2017/01/11 13:26:16 | 005,398,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aclui.dll
[2017/01/11 13:26:15 | 000,382,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AUDIOKSE.dll
[2017/01/11 13:26:15 | 000,313,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\audiodg.exe
[2017/01/11 13:26:07 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConsoleLogon.dll
[2017/01/11 13:26:04 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cloudAP.dll
[2017/01/11 13:26:04 | 000,076,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remoteaudioendpoint.dll
[2017/01/11 13:26:03 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Cred.dll
[2017/01/11 13:26:03 | 000,806,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3D12.dll
[2017/01/11 13:26:01 | 001,722,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SRHInproc.dll
[2017/01/11 13:26:01 | 000,734,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\samsrv.dll
[2017/01/11 13:26:01 | 000,218,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offlinesam.dll
[2017/01/11 13:26:00 | 001,127,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ClipUp.exe
[2017/01/11 13:25:58 | 000,341,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msv1_0.dll
[2017/01/11 13:25:58 | 000,101,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ImplatSetup.dll
[2017/01/11 13:25:56 | 000,824,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SRH.dll
[2017/01/06 13:36:52 | 000,856,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfreadwrite.dll
[2017/01/06 13:36:52 | 000,687,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvproc.dll
[2017/01/06 13:36:52 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qdvd.dll
[2017/01/06 13:36:52 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FrameServer.dll
[2017/01/06 13:36:52 | 000,455,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DolbyDecMFT.dll
[2017/01/06 13:36:52 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSAC3ENC.DLL
[2017/01/06 13:36:52 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FSClient.dll
[2017/01/06 13:36:52 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfksproxy.dll
[2017/01/06 13:36:52 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsensorgroup.dll
[2017/01/06 13:36:52 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioSrvPolicyManager.dll
[2017/01/06 13:36:52 | 000,152,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RTWorkQ.dll
[2017/01/06 13:36:52 | 000,121,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfps.dll
[2017/01/06 13:36:52 | 000,091,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfaudiocnv.dll
[2017/01/06 13:36:52 | 000,083,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devenum.dll
[2017/01/06 13:36:52 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\encapi.dll
[2017/01/06 13:36:40 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveapi.dll
[2017/01/06 13:36:40 | 000,557,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fvevol.sys
[2017/01/06 13:36:40 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSync.dll
[2017/01/06 13:36:40 | 000,433,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWanAPI.dll
[2017/01/06 13:36:40 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdesvc.dll
[2017/01/06 13:36:40 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvecpl.dll
[2017/01/06 13:36:40 | 000,279,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdeunlock.exe
[2017/01/06 13:36:40 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveui.dll
[2017/01/06 13:36:40 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxsmb10.sys
[2017/01/06 13:36:40 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\manage-bde.exe
[2017/01/06 13:36:40 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveapibase.dll
[2017/01/06 13:36:40 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvenotify.exe
[2017/01/06 13:36:40 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.DeviceEncryptionHandlers.dll
[2017/01/06 13:36:40 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BitLockerDeviceEncryption.exe
[2017/01/06 13:36:40 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanprotdim.dll
[2017/01/06 13:36:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdeui.dll
[2017/01/06 13:36:39 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprdim.dll
[2017/01/06 13:36:39 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PsmServiceExtHost.dll
[2017/01/06 13:36:39 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bowser.sys
[2017/01/06 13:36:38 | 000,598,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcRefreshTask.dll
[2017/01/06 13:36:38 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnprv.dll
[2017/01/06 13:36:38 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanmsm.dll
[2017/01/06 13:36:38 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlancfg.dll
[2017/01/06 13:36:38 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcTok.exe
[2017/01/06 13:36:38 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WiFiConfigSP.dll
[2017/01/06 13:36:38 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanhlp.dll
[2017/01/06 13:36:37 | 009,260,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmploc.DLL
[2017/01/06 13:36:37 | 000,834,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Vpn.dll
[2017/01/06 13:36:37 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\das.dll
[2017/01/06 13:36:37 | 000,292,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS
[2017/01/06 13:36:37 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wifiprofilessettinghandler.dll
[2017/01/06 13:36:37 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetSetupSvc.dll
[2017/01/06 13:36:37 | 000,111,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetSetupApi.dll
[2017/01/06 13:36:37 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpshell.dll
[2017/01/06 13:36:37 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dasHost.exe
[2017/01/06 13:36:37 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceassociation.dll
[2017/01/06 13:36:37 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmintegrator.dll
[2017/01/06 13:36:37 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlansvcpal.dll
[2017/01/06 13:36:37 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwmp.dll
[2017/01/06 13:36:37 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdxm.ocx
[2017/01/06 13:36:37 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxmasf.dll
[2017/01/06 13:36:36 | 002,755,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtml.tlb
[2017/01/06 13:36:36 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkCollectionAgent.dll
[2017/01/06 13:36:36 | 000,254,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpeffects.dll
[2017/01/06 13:36:36 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpdxm.dll
[2017/01/06 13:36:36 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Chakrathunk.dll
[2017/01/06 13:36:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesetup.dll
[2017/01/06 13:36:36 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iernonce.dll
[2017/01/06 13:36:27 | 001,586,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntdll.dll
[2017/01/06 13:36:27 | 000,798,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpcrt4.dll
[2017/01/06 13:36:27 | 000,482,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\afd.sys
[2017/01/06 13:36:27 | 000,402,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ws2_32.dll
[2017/01/06 13:36:27 | 000,133,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sspicli.dll
[2017/01/06 13:36:27 | 000,102,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ksecdd.sys
[2017/01/06 13:36:27 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\csrsrv.dll
[2017/01/06 13:36:27 | 000,043,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsass.exe
[2017/01/06 13:36:26 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\srvnet.sys
[2017/01/06 13:36:26 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dab.dll
[2017/01/06 13:36:26 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CbtBackgroundManagerPolicy.dll
[2017/01/06 13:36:26 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml6r.dll
[2017/01/06 13:36:12 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsrv.dll
[2017/01/06 13:36:12 | 000,021,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\cmimcext.sys
[2017/01/06 13:36:10 | 001,425,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d9.dll
[2017/01/06 13:36:10 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntshrui.dll
[2017/01/06 13:36:10 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d8.dll
[2017/01/06 13:36:10 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsm.dll
[2017/01/06 13:36:10 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SessEnv.dll
[2017/01/06 13:36:10 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credprovslegacy.dll
[2017/01/06 13:36:10 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConfigureExpandedStorage.dll
[2017/01/06 13:36:08 | 000,912,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comdlg32.dll
[2017/01/06 13:36:08 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systemcpl.dll
[2017/01/06 13:36:08 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkDesktopSettings.dll
[2017/01/06 13:36:08 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autoplay.dll
[2017/01/06 13:36:08 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthExt.dll
[2017/01/06 13:36:08 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpremove.exe
[2017/01/06 13:36:08 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Shell.dll
[2017/01/06 13:36:07 | 003,716,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootux.dll
[2017/01/06 13:36:07 | 000,705,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskbarcpl.dll
[2017/01/06 13:36:07 | 000,596,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comctl32.dll
[2017/01/06 13:36:07 | 000,549,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionCenterCPL.dll
[2017/01/06 13:36:07 | 000,384,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DataSenseHandlers.dll
[2017/01/06 13:36:07 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stobject.dll
[2017/01/06 13:36:07 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContent.dll
[2017/01/06 13:36:07 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sendmail.dll
[2017/01/06 13:36:00 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbmon.dll
[2017/01/06 13:36:00 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\splwow64.exe
[2017/01/06 13:35:59 | 002,356,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVidCtl.dll
[2017/01/06 13:35:59 | 001,344,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtsvc.dll
[2017/01/06 13:35:59 | 001,097,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpx.dll
[2017/01/06 13:35:59 | 000,823,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nettrace.dll
[2017/01/06 13:35:59 | 000,749,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvstore.dll
[2017/01/06 13:35:59 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CPFilters.dll
[2017/01/06 13:35:59 | 000,636,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhoneService.dll
[2017/01/06 13:35:59 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GamePanel.exe
[2017/01/06 13:35:59 | 000,582,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhoneProviders.dll
[2017/01/06 13:35:59 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasapi32.dll
[2017/01/06 13:35:59 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\w32time.dll
[2017/01/06 13:35:59 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_StorageSense.dll
[2017/01/06 13:35:59 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energy.dll
[2017/01/06 13:35:59 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SndVolSSO.dll
[2017/01/06 13:35:59 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nltest.exe
[2017/01/06 13:35:59 | 000,373,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdedit.exe
[2017/01/06 13:35:59 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetSetupShim.dll
[2017/01/06 13:35:59 | 000,356,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\halmacpi.dll
[2017/01/06 13:35:59 | 000,356,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hal.dll
[2017/01/06 13:35:59 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncsi.dll
[2017/01/06 13:35:59 | 000,315,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wifitask.exe
[2017/01/06 13:35:59 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StorSvc.dll
[2017/01/06 13:35:59 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esentutl.exe
[2017/01/06 13:35:59 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlasvc.dll
[2017/01/06 13:35:59 | 000,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtapi.dll
[2017/01/06 13:35:59 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.pcshell.dll
[2017/01/06 13:35:59 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provengine.dll
[2017/01/06 13:35:59 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EnterpriseAppMgmtSvc.dll
[2017/01/06 13:35:59 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_G18030.DLL
[2017/01/06 13:35:59 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provhandlers.dll
[2017/01/06 13:35:59 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdmregistration.dll
[2017/01/06 13:35:59 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provops.dll
[2017/01/06 13:35:59 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provisioningcsp.dll
[2017/01/06 13:35:59 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppCapture.dll
[2017/01/06 13:35:59 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credprovs.dll
[2017/01/06 13:35:59 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EnterpriseModernAppMgmtCSP.dll
[2017/01/06 13:35:59 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMapi.dll
[2017/01/06 13:35:59 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EDPCleanup.exe
[2017/01/06 13:35:59 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wificonnapi.dll
[2017/01/06 13:35:59 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSpkg.dll
[2017/01/06 13:35:59 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VPNv2CSP.dll
[2017/01/06 13:35:59 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReportingCSP.dll
[2017/01/06 13:35:59 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmifw.dll
[2017/01/06 13:35:59 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.exe
[2017/01/06 13:35:59 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NFCProvisioningPlugin.dll
[2017/01/06 13:35:59 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provdatastore.dll
[2017/01/06 13:35:59 | 000,067,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\crashdmp.sys
[2017/01/06 13:35:59 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetCfgNotifyObjectHost.exe
[2017/01/06 13:35:59 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BarcodeProvisioningPlugin.dll
[2017/01/06 13:35:59 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HttpsDataSource.dll
[2017/01/06 13:35:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provtool.exe
[2017/01/06 13:35:59 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemovableMediaProvisioningPlugin.dll
[2017/01/06 13:35:59 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2017/01/06 13:35:59 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StorageUsage.dll
[2017/01/06 13:35:59 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmTasks.dll
[2017/01/06 13:35:59 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EAMProgressHandler.dll
[2017/01/06 13:35:59 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\modem.sys
[2017/01/06 13:35:59 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Management.Provisioning.ProxyStub.dll
[2017/01/06 13:35:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_IS2022.DLL
[2017/01/06 13:35:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\c_GSM7.DLL
[2017/01/06 13:35:59 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhoneServiceRes.dll
[2017/01/06 13:35:50 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\clfs.sys
[2017/01/06 13:35:50 | 000,099,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tm.sys
[2017/01/06 13:35:50 | 000,042,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\iorate.sys
[2017/01/06 13:35:49 | 004,970,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppsvc.exe
[2017/01/06 13:35:49 | 001,602,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aitstatic.exe
[2017/01/06 13:35:49 | 000,939,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pidgenx.dll
[2017/01/06 13:35:49 | 000,802,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EditionUpgradeManagerObj.dll
[2017/01/06 13:35:49 | 000,781,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\http.sys
[2017/01/06 13:35:49 | 000,675,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppwinob.dll
[2017/01/06 13:35:49 | 000,564,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GenValObj.exe
[2017/01/06 13:35:49 | 000,493,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsregcmd.exe
[2017/01/06 13:35:49 | 000,466,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppcext.dll
[2017/01/06 13:35:49 | 000,421,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcasvc.dll
[2017/01/06 13:35:49 | 000,378,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NgcCtnrGidsHandler.dll
[2017/01/06 13:35:49 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msinfo32.exe
[2017/01/06 13:35:49 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\discan.dll
[2017/01/06 13:35:49 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ahcache.sys
[2017/01/06 13:35:49 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EditionUpgradeHelper.dll
[2017/01/06 13:35:49 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppnp.dll
[2017/01/06 13:35:49 | 000,122,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\migisol.dll
[2017/01/06 13:35:49 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slc.dll
[2017/01/06 13:35:49 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chartv.dll
[2017/01/06 13:35:49 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppc.dll
[2017/01/06 13:35:49 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsmsext.dll
[2017/01/06 13:35:49 | 000,081,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceReactivation.dll
[2017/01/06 13:35:49 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsiwmi.dll
[2017/01/06 13:35:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininetlui.dll
[2017/01/06 13:35:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Sens.dll
[2017/01/06 13:35:49 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offreg.dll
[2017/01/06 13:35:49 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2017/01/06 13:35:49 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsext.dll
[2017/01/06 13:35:49 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgentc.exe
[2017/01/06 13:35:49 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slcext.dll
[2017/01/06 13:35:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ResetEngine.exe
[2017/01/06 13:35:48 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2017/01/06 13:35:48 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Playback.MediaPlayer.dll
[2017/01/06 13:35:48 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscsvc.dll
[2017/01/06 13:35:48 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mrxdav.sys
[2017/01/06 13:35:48 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MDMAppInstaller.exe
[2017/01/06 13:35:48 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwrshplugin.dll
[2017/01/06 13:35:48 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProvSysprep.dll
[2017/01/06 13:35:48 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BackgroundMediaPolicy.dll
[2017/01/06 13:35:40 | 001,336,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsecedit.dll
[2017/01/06 13:35:40 | 000,500,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NotificationController.dll
[2017/01/06 13:35:40 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DscCore.dll
[2017/01/06 13:35:40 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinBioDataModel.dll
[2017/01/06 13:35:40 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\biwinrt.dll
[2017/01/06 13:35:40 | 000,141,824 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\System32\DscCoreConfProv.dll
[2017/01/06 13:35:40 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscinterop.dll
[2017/01/06 13:35:40 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RjvMDMConfig.dll
[2017/01/06 13:35:40 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinBioDataModelOOBE.exe
[2017/01/06 13:35:39 | 000,461,312 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\DbgModel.dll
[2017/01/06 13:35:39 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_Bluetooth.dll
[2017/01/06 13:35:39 | 000,260,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Phoneutil.dll
[2017/01/06 13:35:39 | 000,186,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\weretw.dll
[2017/01/06 13:35:39 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VEStoreEventHandlers.dll
[2017/01/06 13:35:39 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\POSyncServices.dll
[2017/01/06 13:35:39 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataPlatformHelperUtil.dll
[2017/01/06 13:35:39 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AddressParser.dll
[2017/01/06 13:35:39 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ContactActivation.dll
[2017/01/06 13:35:39 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataTypeHelperUtil.dll
[2017/01/06 13:35:39 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataLanguageUtil.dll
[2017/01/06 13:35:39 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSManHTTPConfig.exe
[2017/01/06 13:35:39 | 000,023,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe
[2017/01/06 13:35:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smphost.dll
[2017/01/06 13:35:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LicenseManagerSvc.dll
[2017/01/06 13:35:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\delegatorprovider.dll
[2017/01/06 13:35:39 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storagewmi_passthru.dll
[2017/01/06 13:35:39 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ExtrasXmlParser.dll
[2017/01/06 13:35:39 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
[2017/01/06 13:35:39 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserDataAccessRes.dll
[2017/01/06 13:35:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhoneutilRes.dll
[2017/01/06 13:35:25 | 000,747,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoteNaturalLanguage.dll
[2017/01/06 13:35:25 | 000,519,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ngccredprov.dll
[2017/01/06 13:35:25 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NgcCtnr.dll
[2017/01/06 13:35:25 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorService.dll
[2017/01/06 13:35:25 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptngc.dll
[2017/01/06 13:35:24 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkUXBroker.dll
[2017/01/06 13:35:24 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dialserver.dll
[2017/01/06 13:35:24 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NPSM.dll
[2017/01/06 13:35:24 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CastLaunch.dll
[2017/01/06 13:35:24 | 000,036,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfpmp.exe
[2017/01/06 13:35:23 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\JpMapControl.dll
[2017/01/06 13:35:23 | 000,760,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NMAA.dll
[2017/01/06 13:35:23 | 000,715,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapControlCore.dll
[2017/01/06 13:35:23 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BingOnlineServices.dll
[2017/01/06 13:35:23 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MosResource.dll
[2017/01/06 13:35:23 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NmaDirect.dll
[2017/01/06 13:35:23 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\moshostcore.dll
[2017/01/06 13:35:23 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapsBtSvc.dll
[2017/01/06 13:35:23 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Microsoft-Windows-MapControls.dll
[2017/01/06 13:35:23 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InputLocaleManager.dll
[2017/01/06 13:35:23 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapsCSP.dll
[2017/01/06 13:35:23 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MosStorage.dll
[2017/01/06 13:35:23 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EditBufferTestHook.dll
[2017/01/06 13:35:23 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MosHostClient.dll
[2017/01/06 13:35:23 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapstoasttask.dll
[2017/01/06 13:35:23 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WordBreakers.dll
[2017/01/06 13:35:23 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapsupdatetask.dll
[2017/01/06 13:35:23 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nativemap.dll
[2017/01/06 13:35:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapsBtSvcProxy.dll
[2017/01/06 13:35:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Microsoft-Windows-MosTrace.dll
[2017/01/06 13:35:23 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Microsoft-Windows-MosHost.dll
[2017/01/06 13:35:23 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MapControlStringsRes.dll
[2017/01/06 13:35:22 | 002,708,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esent.dll
[2017/01/06 13:35:22 | 002,323,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10warp.dll
[2017/01/06 13:35:22 | 001,344,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\user32.dll
[2017/01/06 13:35:22 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdd.dll
[2017/01/06 13:35:22 | 000,170,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdi32.dll
[2017/01/06 13:35:22 | 000,094,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32u.dll
[2017/01/06 13:35:21 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\webio.dll
[2017/01/06 13:35:21 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprapi.dll
[2017/01/06 13:35:21 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-system-events.dll
[2017/01/06 13:35:21 | 000,292,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fastfat.sys
[2017/01/06 13:35:21 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wincorlib.dll
[2017/01/06 13:35:21 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profsvc.dll
[2017/01/06 13:35:21 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkssvc.dll
[2017/01/06 13:35:21 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wc_storage.dll
[2017/01/06 13:35:21 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\container.dll
[2017/01/06 13:35:21 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapisrv.dll
[2017/01/06 13:35:21 | 000,145,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ksecpkg.sys
[2017/01/06 13:35:21 | 000,117,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcrypt.dll
[2017/01/06 13:35:21 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offlinelsa.dll
[2017/01/06 13:35:21 | 000,095,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wcifs.sys
[2017/01/06 13:35:21 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\samlib.dll
[2017/01/06 13:35:21 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthRadioMedia.dll
[2017/01/06 13:35:21 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NfcRadioMedia.dll
[2017/01/06 13:35:21 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stdole2.tlb
[2017/01/06 13:35:21 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzres.dll
[2017/01/06 13:35:20 | 000,797,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgr.dll
[2017/01/06 13:35:19 | 003,370,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.StateRepository.dll
[2017/01/06 13:35:19 | 001,357,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIAutomationCore.dll
[2017/01/06 13:35:19 | 001,022,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxPackaging.dll
[2017/01/06 13:35:19 | 000,869,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MrmCoreR.dll
[2017/01/06 13:35:19 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.InkControls.dll
[2017/01/06 13:35:19 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppReadiness.dll
[2017/01/06 13:35:19 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\facecredentialprovider.dll
[2017/01/06 13:35:19 | 000,294,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdpsvc.dll
[2017/01/06 13:35:19 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DataExchange.dll
[2017/01/06 13:35:19 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdpusersvc.dll
[2017/01/06 13:35:19 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIAnimation.dll
[2017/01/06 13:35:19 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GlobCollationHost.dll
[2017/01/06 13:35:19 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ClipboardServer.dll
[2017/01/06 13:35:19 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ACPBackgroundManagerPolicy.dll
[2017/01/06 13:35:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
[2017/01/06 13:35:19 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ErrorDetailsUpdate.dll
[2017/01/06 13:35:19 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ffbroker.dll
[2017/01/06 13:35:14 | 002,423,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSAJApi.dll
[2017/01/06 13:35:14 | 000,589,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ClipSp.sys
[2017/01/06 13:35:14 | 000,554,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tdh.dll
[2017/01/06 13:35:14 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vmrdvcore.dll
[2017/01/06 13:35:14 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActivationManager.dll
[2017/01/06 13:35:14 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pdh.dll
[2017/01/06 13:35:14 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsvc.dll
[2017/01/06 13:35:13 | 000,570,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\acpi.sys
[2017/01/06 13:35:13 | 000,231,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sdbus.sys
[2017/01/06 13:35:13 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbvideo.sys
[2017/01/06 13:35:13 | 000,175,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tpm.sys
[2017/01/06 13:35:13 | 000,154,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dumpsd.sys
[2017/01/06 13:35:13 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys
[2017/01/06 13:35:13 | 000,113,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmapi.dll
[2017/01/06 13:35:13 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthpan.sys
[2017/01/06 13:35:13 | 000,101,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys
[2017/01/06 13:35:13 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\capimg.sys
[2017/01/06 13:35:13 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthenum.sys
[2017/01/06 13:35:13 | 000,056,672 | ---- | C] (Avago Technologies) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys
[2017/01/06 13:35:13 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\spaceport.sys.mui
[2017/01/06 13:35:13 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\spaceport.sys.mui
[2017/01/06 13:35:13 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\xinputhid.sys
[2017/01/06 13:35:13 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys
[2017/01/06 13:35:13 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\kbdhid.sys
[2017/01/06 13:35:13 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidusb.sys
[2017/01/06 13:35:13 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BthMini.SYS
[2017/01/06 13:23:08 | 006,238,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsLexicons000c.dll
[2017/01/06 13:23:08 | 002,269,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData000c.dll
[2017/01/06 12:40:48 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\netvsc.sys.mui
[2017/01/06 12:40:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\vmstorfl.sys.mui
[2017/01/06 12:40:48 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\dmvsc.sys.mui
[2017/01/06 12:40:48 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbrpm.sys.mui
[2017/01/06 12:40:45 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\synth3dvsc.sys.mui
[2017/01/06 12:40:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rfxvmt.sys.mui
[2017/01/06 12:40:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\vmbus.sys.mui
[2017/01/06 12:40:41 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\fvevol.sys.mui
[2017/01/06 12:40:30 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\WpdMtpDr.dll.mui
[2017/01/06 12:40:26 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\NdisImPlatform.sys.mui
[2017/01/06 12:40:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mslldp.sys.mui
[2017/01/06 12:40:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wof.sys.mui
[2017/01/06 12:40:26 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\bthpan.sys.mui
[2017/01/06 12:40:26 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\agilevpn.sys.mui
[2017/01/06 12:40:23 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\http.sys.mui
[2017/01/06 12:40:23 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\nwifi.sys.mui
[2017/01/06 12:40:23 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\tunnel.sys.mui
[2017/01/06 12:40:23 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\modem.sys.mui
[2017/01/06 12:40:23 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wudfpf.sys.mui
[2017/01/06 12:40:23 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\volmgrx.sys.mui
[2017/01/06 12:40:23 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\NdisVirtualBus.sys.mui
[2017/01/06 12:40:23 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ws2ifsl.sys.mui
[2017/01/06 12:40:23 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\iorate.sys.mui
[2017/01/06 12:40:19 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbport.sys.mui
[2017/01/06 12:40:19 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\USBHUB3.SYS.mui
[2017/01/06 12:40:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbhub.sys.mui
[2017/01/06 12:40:19 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\USBXHCI.SYS.mui
[2017/01/06 12:40:19 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\bthport.sys.mui
[2017/01/06 12:40:19 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\BthLEEnum.sys.mui
[2017/01/06 12:40:19 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\i8042prt.sys.mui
[2017/01/06 12:40:19 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\tpm.sys.mui
[2017/01/06 12:40:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\sdbus.sys.mui
[2017/01/06 12:40:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\dumpsd.sys.mui
[2017/01/06 12:40:19 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ndiscap.sys.mui
[2017/01/06 12:40:19 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\hidclass.sys.mui
[2017/01/06 12:40:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\sermouse.sys.mui
[2017/01/06 12:40:19 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mouclass.sys.mui
[2017/01/06 12:40:19 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\kbdclass.sys.mui
[2017/01/06 12:40:19 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\hidbth.sys.mui
[2017/01/06 12:40:19 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\HidBthLE.dll.mui
[2017/01/06 12:40:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\hidi2c.sys.mui
[2017/01/06 12:40:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\BthMini.SYS.mui
[2017/01/06 12:40:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbehci.sys.mui
[2017/01/06 12:40:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\sdstor.sys.mui
[2017/01/06 12:40:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mouhid.sys.mui
[2017/01/06 12:40:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\BTHUSB.SYS.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbstor.sys.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rfcomm.sys.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mshidumdf.sys.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\kbdhid.sys.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\IndirectKmd.sys.mui
[2017/01/06 12:40:19 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\bthenum.sys.mui
[2017/01/06 12:40:19 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\SensorsCx.dll.mui
[2017/01/06 12:40:16 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\tcpip.sys.mui
[2017/01/06 12:40:16 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ntfs.sys.mui
[2017/01/06 12:40:16 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\srv2.sys.mui
[2017/01/06 12:40:16 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mrxsmb.sys.mui
[2017/01/06 12:40:16 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\afd.sys.mui
[2017/01/06 12:40:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mup.sys.mui
[2017/01/06 12:40:16 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\storqosflt.sys.mui
[2017/01/06 12:40:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rdbss.sys.mui
[2017/01/06 12:40:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\fltmgr.sys.mui
[2017/01/06 12:40:16 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\SensorsHid.dll.mui
[2017/01/06 12:40:16 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ndisuio.sys.mui
[2017/01/06 12:40:16 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wdf01000.sys.mui
[2017/01/06 12:40:16 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\partmgr.sys.mui
[2017/01/06 12:40:16 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mountmgr.sys.mui
[2017/01/06 12:40:13 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\scfilter.sys.mui
[2017/01/06 12:40:10 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\luafv.sys.mui
[2017/01/06 12:40:06 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\mgtdyn.dll.mui
[2017/01/06 12:40:06 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\idtsec.dll.mui
[2017/01/06 12:40:06 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wfplwfs.sys.mui
[2017/01/06 12:40:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\msgpiowin32.sys.mui
[2017/01/06 12:40:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\hidscanner.dll.mui
[2017/01/06 12:40:03 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\pacer.sys.mui
[2017/01/06 12:40:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wmbclass.sys.mui
[2017/01/06 12:40:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\viac7.sys.mui
[2017/01/06 12:40:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\processr.sys.mui
[2017/01/06 12:40:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\intelppm.sys.mui
[2017/01/06 12:40:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\amdppm.sys.mui
[2017/01/06 12:40:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\amdk8.sys.mui
[2017/01/06 12:40:03 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\vhdmp.sys.mui
[2017/01/06 12:40:03 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\vdrvroot.sys.mui
[2017/01/06 12:40:03 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\serial.sys.mui
[2017/01/06 12:40:03 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\acpi.sys.mui
[2017/01/06 12:40:03 | 000,011,264 | ---- | C] (Agere Systems) -- C:\WINDOWS\System32\drivers\fr-FR\ltmdmnt.sys.mui
[2017/01/06 12:40:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\pci.sys.mui
[2017/01/06 12:40:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\ataport.sys.mui
[2017/01/06 12:40:03 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\battc.sys.mui
[2017/01/06 12:40:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\IPMIDrv.sys.mui
[2017/01/06 12:40:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\disk.sys.mui
[2017/01/06 12:40:03 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\wacompen.sys.mui
[2017/01/06 12:40:03 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\isapnp.sys.mui
[2017/01/06 12:40:03 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\tsusbflt.sys.mui
[2017/01/06 12:40:03 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\parport.sys.mui
[2017/01/06 12:40:03 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\umbus.sys.mui
[2017/01/06 12:40:03 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\parvdm.sys.mui
[2017/01/06 12:40:03 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\mssmbios.sys.mui
[2017/01/06 12:40:03 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\volmgr.sys.mui
[2017/01/06 12:40:03 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\vhf.sys.mui
[2017/01/06 12:40:03 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rdpdr.sys.mui
[2017/01/06 12:40:03 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\qwavedrv.sys.mui
[2017/01/06 12:40:03 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\MTConfig.sys.mui
[2017/01/06 12:40:03 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\pdc.sys.mui
[2017/01/06 12:40:00 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\1394ohci.sys.mui
[2017/01/06 12:40:00 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\EhStorTcgDrv.sys.mui
[2017/01/06 12:40:00 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\fr-FR\WUDFUsbccidDriver.dll.mui
[2017/01/06 12:40:00 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\pcmcia.sys.mui
[2017/01/06 12:40:00 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rndismpx.sys.mui
[2017/01/06 12:40:00 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\rndismp6.sys.mui
[2017/01/06 12:40:00 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\bthhfenum.sys.mui
[2017/01/06 12:40:00 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\usbvideo.sys.mui
[2017/01/06 12:40:00 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\serscan.sys.mui
[2017/01/06 12:40:00 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\pnpmem.sys.mui
[2017/01/06 12:40:00 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\cdrom.sys.mui
[2017/01/06 12:40:00 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\BthAvrcpTg.sys.mui
[2017/01/06 12:40:00 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fr-FR\BthhfHid.sys.mui
[2017/01/06 12:33:02 | 000,173,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wof.sys
[2016/11/23 14:52:40 | 001,285,360 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avc3.sys
[2016/11/23 14:52:40 | 000,718,488 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avckf.sys
[2016/09/05 05:47:32 | 000,109,184 | ---- | C] (Samsung Electronics Co., Ltd.) -- C:\WINDOWS\System32\drivers\ssudbus.sys
[2016/09/05 05:44:22 | 000,055,424 | ---- | C] (QUALCOMM Incorporated) -- C:\WINDOWS\System32\drivers\ssudqcfilter.sys
[2016/08/15 10:41:02 | 000,246,248 | ---- | C] (Bitdefender) -- C:\WINDOWS\System32\drivers\ignis.sys
[2016/07/18 15:31:30 | 000,069,120 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\Intel_OpenCL_ICD32.dll
[2016/07/16 11:18:57 | 000,474,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\quickassist.exe
[2016/07/16 11:14:56 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\netvsc.sys.mui
[2016/07/16 11:14:56 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\synth3dvsc.sys.mui
[2016/07/16 11:14:56 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\vmstorfl.sys.mui
[2016/07/16 11:14:56 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\dmvsc.sys.mui
[2016/07/16 11:14:56 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\srv.sys.mui
[2016/07/16 11:14:56 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rfxvmt.sys.mui
[2016/07/16 11:14:56 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbrpm.sys.mui
[2016/07/16 11:14:55 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\fvevol.sys.mui
[2016/07/16 11:14:55 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\vmbus.sys.mui
[2016/07/16 11:14:54 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\WpdMtpDr.dll.mui
[2016/07/16 11:14:54 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\WpdUpFltr.sys.mui
[2016/07/16 11:14:52 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\nwifi.sys.mui
[2016/07/16 11:14:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\NdisImPlatform.sys.mui
[2016/07/16 11:14:52 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mslldp.sys.mui
[2016/07/16 11:14:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\tunnel.sys.mui
[2016/07/16 11:14:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wof.sys.mui
[2016/07/16 11:14:52 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\bthpan.sys.mui
[2016/07/16 11:14:52 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ipnat.sys.mui
[2016/07/16 11:14:52 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\agilevpn.sys.mui
[2016/07/16 11:14:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ks.sys.mui
[2016/07/16 11:14:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ws2ifsl.sys.mui
[2016/07/16 11:14:51 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\http.sys.mui
[2016/07/16 11:14:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\fwpkclnt.sys.mui
[2016/07/16 11:14:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\modem.sys.mui
[2016/07/16 11:14:51 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\RNDISMP.sys.mui
[2016/07/16 11:14:51 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wudfpf.sys.mui
[2016/07/16 11:14:51 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\volmgrx.sys.mui
[2016/07/16 11:14:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\NdisVirtualBus.sys.mui
[2016/07/16 11:14:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\iorate.sys.mui
[2016/07/16 11:14:50 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\tcpip.sys.mui
[2016/07/16 11:14:50 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ntfs.sys.mui
[2016/07/16 11:14:50 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\srv2.sys.mui
[2016/07/16 11:14:50 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mrxsmb.sys.mui
[2016/07/16 11:14:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbport.sys.mui
[2016/07/16 11:14:50 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\afd.sys.mui
[2016/07/16 11:14:50 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\USBHUB3.SYS.mui
[2016/07/16 11:14:50 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\bthport.sys.mui
[2016/07/16 11:14:50 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\USBXHCI.SYS.mui
[2016/07/16 11:14:50 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbhub.sys.mui
[2016/07/16 11:14:50 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\BthLEEnum.sys.mui
[2016/07/16 11:14:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mup.sys.mui
[2016/07/16 11:14:50 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\i8042prt.sys.mui
[2016/07/16 11:14:50 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\storqosflt.sys.mui
[2016/07/16 11:14:50 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\sercx2.sys.mui
[2016/07/16 11:14:50 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\tpm.sys.mui
[2016/07/16 11:14:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\sdbus.sys.mui
[2016/07/16 11:14:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\IddCx.dll.mui
[2016/07/16 11:14:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\dumpsd.sys.mui
[2016/07/16 11:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ndiscap.sys.mui
[2016/07/16 11:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\hidclass.sys.mui
[2016/07/16 11:14:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rdbss.sys.mui
[2016/07/16 11:14:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\sermouse.sys.mui
[2016/07/16 11:14:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\fltmgr.sys.mui
[2016/07/16 11:14:50 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\hidbth.sys.mui
[2016/07/16 11:14:50 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\spbcx.sys.mui
[2016/07/16 11:14:50 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mouclass.sys.mui
[2016/07/16 11:14:50 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\kbdclass.sys.mui
[2016/07/16 11:14:50 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\HidBthLE.dll.mui
[2016/07/16 11:14:50 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\sercx.sys.mui
[2016/07/16 11:14:50 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\hidi2c.sys.mui
[2016/07/16 11:14:50 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\BthMini.SYS.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wdf01000.sys.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbehci.sys.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\SensorsHid.dll.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\sdstor.sys.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ndisuio.sys.mui
[2016/07/16 11:14:50 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\BTHUSB.SYS.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbstor.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rfcomm.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\partmgr.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mshidumdf.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mshidkmdf.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mountmgr.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mouhid.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\kbdhid.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\IndirectKmd.sys.mui
[2016/07/16 11:14:50 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\bthenum.sys.mui
[2016/07/16 11:14:50 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\SensorsCx.dll.mui
[2016/07/16 11:14:49 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\scsiport.sys.mui
[2016/07/16 11:14:49 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\scfilter.sys.mui
[2016/07/16 11:14:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\luafv.sys.mui
[2016/07/16 11:14:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\mgtdyn.dll.mui
[2016/07/16 11:14:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\idtsec.dll.mui
[2016/07/16 11:14:47 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wfplwfs.sys.mui
[2016/07/16 11:14:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\msgpiowin32.sys.mui
[2016/07/16 11:14:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\hidscanner.dll.mui
[2016/07/16 11:14:46 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\pacer.sys.mui
[2016/07/16 11:14:46 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wmbclass.sys.mui
[2016/07/16 11:14:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\NfcCx.dll.mui
[2016/07/16 11:14:46 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\tsusbflt.sys.mui
[2016/07/16 11:14:46 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rdpdr.sys.mui
[2016/07/16 11:14:46 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\qwavedrv.sys.mui
[2016/07/16 11:14:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\viac7.sys.mui
[2016/07/16 11:14:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\processr.sys.mui
[2016/07/16 11:14:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\intelppm.sys.mui
[2016/07/16 11:14:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\amdppm.sys.mui
[2016/07/16 11:14:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\amdk8.sys.mui
[2016/07/16 11:14:45 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ucx01000.sys.mui
[2016/07/16 11:14:45 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\1394ohci.sys.mui
[2016/07/16 11:14:45 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\vhdmp.sys.mui
[2016/07/16 11:14:45 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\vdrvroot.sys.mui
[2016/07/16 11:14:45 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\serial.sys.mui
[2016/07/16 11:14:45 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\acpi.sys.mui
[2016/07/16 11:14:45 | 000,009,728 | ---- | C] (Agere Systems) -- C:\WINDOWS\System32\drivers\en-US\ltmdmnt.sys.mui
[2016/07/16 11:14:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\pci.sys.mui
[2016/07/16 11:14:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\EhStorTcgDrv.sys.mui
[2016/07/16 11:14:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\battc.sys.mui
[2016/07/16 11:14:45 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\ataport.sys.mui
[2016/07/16 11:14:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui
[2016/07/16 11:14:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\IPMIDrv.sys.mui
[2016/07/16 11:14:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\disk.sys.mui
[2016/07/16 11:14:45 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\wacompen.sys.mui
[2016/07/16 11:14:45 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\pcmcia.sys.mui
[2016/07/16 11:14:45 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\parport.sys.mui
[2016/07/16 11:14:45 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\isapnp.sys.mui
[2016/07/16 11:14:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\umbus.sys.mui
[2016/07/16 11:14:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rndismpx.sys.mui
[2016/07/16 11:14:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\rndismp6.sys.mui
[2016/07/16 11:14:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\mssmbios.sys.mui
[2016/07/16 11:14:45 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\bthhfenum.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\vhf.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\usbvideo.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\serscan.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\pnpmem.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\parvdm.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\MTConfig.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\cdrom.sys.mui
[2016/07/16 11:14:45 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\BthAvrcpTg.sys.mui
[2016/07/16 11:14:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\volmgr.sys.mui
[2016/07/16 11:14:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\pdc.sys.mui
[2016/07/16 11:14:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\en-US\BthhfHid.sys.mui
[2016/07/16 09:26:58 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSRESM.dll
[2016/07/16 09:26:58 | 000,846,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSST.dll
[2016/07/16 09:26:58 | 000,533,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOMEX.dll
[2016/07/16 09:26:58 | 000,527,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSSVC.exe
[2016/07/16 09:26:58 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSTIFF.dll
[2016/07/16 09:26:58 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSAPI.dll
[2016/07/16 09:26:58 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXST30.dll
[2016/07/16 09:26:58 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOM.dll
[2016/07/16 09:26:58 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSROUTE.dll
[2016/07/16 09:26:58 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSMON.dll
[2016/07/16 09:26:58 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\blb_ps.dll
[2016/07/16 09:26:58 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinFax.dll
[2016/07/16 09:26:58 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSUNATD.exe
[2016/07/16 09:26:58 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSEVENT.dll
[2016/07/16 09:26:58 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\blbres.dll
[2016/07/16 09:26:56 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpunits.dll
[2016/07/16 09:26:56 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcl.dll
[2016/07/16 09:26:56 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpeval.dll
[2016/07/16 09:26:56 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wclUnicode.dll
[2016/07/16 09:26:56 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wclPowrProf.dll
[2016/07/16 09:26:56 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\whealogr.dll
[2016/07/16 09:26:56 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Family.Cache.dll
[2016/07/16 09:26:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wclEtw.dll
[2016/07/16 09:26:56 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DscTimer.dll
[2016/07/16 09:26:56 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dscproxy.dll
[2016/07/16 09:26:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
[2016/07/16 09:26:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wclSqm.dll
[2016/07/16 09:26:56 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wclWdi.dll
[2016/07/16 09:26:53 | 001,310,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbengine.exe
[2016/07/16 09:26:53 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsFilt.dll
[2016/07/16 09:26:53 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbadmin.exe
[2016/07/16 09:26:53 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rstrui.exe
[2016/07/16 09:26:53 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umrdp.dll
[2016/07/16 09:26:53 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2016/07/16 09:26:53 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpdr.sys
[2016/07/16 09:26:53 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XPSSHHDR.dll
[2016/07/16 09:26:53 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BlbEvents.dll
[2016/07/16 09:26:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srhelper.dll
[2016/07/16 09:26:53 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srclient.dll
[2016/07/16 09:26:53 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SrTasks.exe
[2016/07/16 09:26:53 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ms3dthumbnailprovider.dll
[2016/07/16 09:26:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfdts.dll
[2016/07/16 09:26:53 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srwmi.dll
[2016/07/16 09:26:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srdelayed.exe
[2016/07/16 09:26:53 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SrEvents.dll
[2016/07/16 09:26:51 | 031,664,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WindowsCodecsRaw.dll
[2016/07/16 09:26:51 | 002,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpdshext.dll
[2016/07/16 09:26:51 | 000,987,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr120_clr0400.dll
[2016/07/16 09:26:51 | 000,815,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WFS.exe
[2016/07/16 09:26:51 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WFSR.dll
[2016/07/16 09:26:51 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceApi.dll
[2016/07/16 09:26:51 | 000,510,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhotoScreensaver.scr
[2016/07/16 09:26:51 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceStatus.dll
[2016/07/16 09:26:51 | 000,398,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srcore.dll
[2016/07/16 09:26:51 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOMPOSE.dll
[2016/07/16 09:26:51 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswmdm.dll
[2016/07/16 09:26:51 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPDSp.dll
[2016/07/16 09:26:51 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\photowiz.dll
[2016/07/16 09:26:51 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\audiodev.dll
[2016/07/16 09:26:51 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cewmdm.dll
[2016/07/16 09:26:51 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elshyph.dll
[2016/07/16 09:26:51 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpd_ci.dll
[2016/07/16 09:26:51 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOVER.exe
[2016/07/16 09:26:51 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unregmp2.exe
[2016/07/16 09:26:51 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSUTILITY.dll
[2016/07/16 09:26:51 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceTypes.dll
[2016/07/16 09:26:51 | 000,153,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpps.dll
[2016/07/16 09:26:51 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceWiaCompat.dll
[2016/07/16 09:26:51 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\repair-bde.exe
[2016/07/16 09:26:51 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceClassExtension.dll
[2016/07/16 09:26:51 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSXP32.dll
[2016/07/16 09:26:51 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BitLockerWizardElev.exe
[2016/07/16 09:26:51 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeHdCfgLib.dll
[2016/07/16 09:26:51 | 000,075,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dumpfve.sys
[2016/07/16 09:26:51 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpdbusenum.dll
[2016/07/16 09:26:51 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceConnectApi.dll
[2016/07/16 09:26:51 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveskybackup.dll
[2016/07/16 09:26:51 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeUISrv.exe
[2016/07/16 09:26:51 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdxm.tlb
[2016/07/16 09:26:51 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bderepair.dll
[2016/07/16 09:26:51 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSEXT32.dll
[2016/07/16 09:26:51 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdmps.dll
[2016/07/16 09:26:51 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOMPOSERES.dll
[2016/07/16 09:26:51 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsepno.dll
[2016/07/16 09:26:51 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdmlog.dll
[2016/07/16 09:26:51 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPDShextAutoplay.exe
[2016/07/16 09:26:51 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WofTasks.dll
[2016/07/16 09:26:51 | 000,024,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys
[2016/07/16 09:26:51 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvecerts.dll
[2016/07/16 09:26:51 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amcompat.tlb
[2016/07/16 09:26:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmerror.dll
[2016/07/16 09:26:46 | 000,484,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp120_clr0400.dll
[2016/07/16 09:26:46 | 000,029,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aspnet_counters.dll
[2016/07/16 09:26:46 | 000,018,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr100_clr0400.dll
[2016/07/16 09:26:43 | 004,238,336 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\GameUXLegacyGDFs.dll
[2016/07/16 09:26:43 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionCenter.dll
[2016/07/16 09:26:43 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe
[2016/07/16 09:26:43 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cleanmgr.exe
[2016/07/16 09:26:43 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isoburn.exe
[2016/07/16 09:26:43 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountControlSettings.exe
[2016/07/16 09:26:43 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountControlSettings.dll
[2016/07/16 09:26:43 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsqmcons.exe
[2016/07/16 09:26:43 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartScreenSettings.exe
[2016/07/16 09:26:43 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CredentialUIBroker.exe
[2016/07/16 09:26:43 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hcproviders.dll
[2016/07/16 09:26:43 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConnectedAccountState.dll
[2016/07/16 09:26:43 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dataclen.dll
[2016/07/16 09:26:43 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootim.exe
[2016/07/16 09:26:43 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WallpaperHost.exe
[2016/07/16 09:26:42 | 003,309,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncCenter.dll
[2016/07/16 09:26:42 | 001,516,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0000.dll
[2016/07/16 09:26:42 | 000,886,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autochk.exe
[2016/07/16 09:26:42 | 000,795,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Bubbles.scr
[2016/07/16 09:26:42 | 000,733,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qedwipes.dll
[2016/07/16 09:26:42 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingFacility.dll
[2016/07/16 09:26:42 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OobeFldr.dll
[2016/07/16 09:26:42 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elslad.dll
[2016/07/16 09:26:42 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaaut.dll
[2016/07/16 09:26:42 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qedit.dll
[2016/07/16 09:26:42 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msra.exe
[2016/07/16 09:26:42 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psisdecd.dll
[2016/07/16 09:26:42 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartCardSimulator.dll
[2016/07/16 09:26:42 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiashext.dll
[2016/07/16 09:26:42 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiadefui.dll
[2016/07/16 09:26:42 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EncDec.dll
[2016/07/16 09:26:42 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasppp.dll
[2016/07/16 09:26:42 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scansetting.dll
[2016/07/16 09:26:42 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti.dll
[2016/07/16 09:26:42 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSNP.ax
[2016/07/16 09:26:42 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ssText3d.scr
[2016/07/16 09:26:42 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB7.dll
[2016/07/16 09:26:42 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\moricons.dll
[2016/07/16 09:26:42 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2016/07/16 09:26:42 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syncui.dll
[2016/07/16 09:26:42 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.PicturePassword.dll
[2016/07/16 09:26:42 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sbeio.dll
[2016/07/16 09:26:42 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VBICodec.ax
[2016/07/16 09:26:42 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Mystify.scr
[2016/07/16 09:26:42 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Ribbons.scr
[2016/07/16 09:26:42 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiadss.dll
[2016/07/16 09:26:42 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvideo.dll
[2016/07/16 09:26:42 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\msvideo.dll
[2016/07/16 09:26:42 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2016/07/16 09:26:42 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\immersivetpmvscmgrsvr.exe
[2016/07/16 09:26:42 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\raserver.exe
[2016/07/16 09:26:42 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avifile.dll
[2016/07/16 09:26:42 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\avifile.dll
[2016/07/16 09:26:42 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvscmgrsvr.exe
[2016/07/16 09:26:42 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rmttpmvscmgrsvr.exe
[2016/07/16 09:26:42 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrahc.dll
[2016/07/16 09:26:42 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.XamlHost.dll
[2016/07/16 09:26:42 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2016/07/16 09:26:42 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mobsync.exe
[2016/07/16 09:26:42 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DataSenseLiveTileTask.exe
[2016/07/16 09:26:42 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiascanprofiles.dll
[2016/07/16 09:26:42 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psisrndr.ax
[2016/07/16 09:26:42 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaacmgr.exe
[2016/07/16 09:26:42 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvscmgr.exe
[2016/07/16 09:26:42 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\synceng.dll
[2016/07/16 09:26:42 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Mpeg2Data.ax
[2016/07/16 09:26:42 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSTPager.ax
[2016/07/16 09:26:42 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recovery.dll
[2016/07/16 09:26:42 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax
[2016/07/16 09:26:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cca.dll
[2016/07/16 09:26:42 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciavi.drv
[2016/07/16 09:26:42 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\mciavi.drv
[2016/07/16 09:26:42 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSDvbNP.ax
[2016/07/16 09:26:42 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avicap.dll
[2016/07/16 09:26:42 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\avicap.dll
[2016/07/16 09:26:42 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSSessionUX.dll
[2016/07/16 09:26:42 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiarpc.dll
[2016/07/16 09:26:42 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sberes.dll
[2016/07/16 09:26:42 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlaapi.dll
[2016/07/16 09:26:42 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ELSCore.dll
[2016/07/16 09:26:42 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingHost.exe
[2016/07/16 09:26:42 | 000,061,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msacm.dll
[2016/07/16 09:26:42 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msauserext.dll
[2016/07/16 09:26:42 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2016/07/16 09:26:42 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vsstrace.dll
[2016/07/16 09:26:42 | 000,043,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContentServer.exe
[2016/07/16 09:26:42 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdchange.exe
[2016/07/16 09:26:42 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vbisurf.ax
[2016/07/16 09:26:42 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContentHost.dll
[2016/07/16 09:26:42 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tvratings.dll
[2016/07/16 09:26:42 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2016/07/16 09:26:42 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToStatusProvider.dll
[2016/07/16 09:26:42 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciwave.drv
[2016/07/16 09:26:42 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\mciwave.drv
[2016/07/16 09:26:42 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciseq.drv
[2016/07/16 09:26:42 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\mciseq.drv
[2016/07/16 09:26:42 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elsTrans.dll
[2016/07/16 09:26:42 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxpps.dll
[2016/07/16 09:26:42 | 000,017,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ntosext.sys
[2016/07/16 09:26:42 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoteWipeCSP.dll
[2016/07/16 09:26:42 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventcls.dll
[2016/07/16 09:26:42 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiatrace.dll
[2016/07/16 09:26:42 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recover.exe
[2016/07/16 09:26:42 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SecondaryTileExperienceCallback.ProxyStub.dll
[2016/07/16 09:26:42 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir32_32.dll
[2016/07/16 09:26:42 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2016/07/16 09:26:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsraLegacy.tlb
[2016/07/16 09:26:42 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rendezvousSession.tlb
[2016/07/16 09:26:41 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wow32.dll
[2016/07/16 09:26:41 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll
[2016/07/16 09:26:41 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceSetupManagerAPI.dll
[2016/07/16 09:26:41 | 000,086,016 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\SMBHelperClass.dll
[2016/07/16 09:26:41 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scavengeui.dll
[2016/07/16 09:26:41 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\csrstub.exe
[2016/07/16 09:26:41 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceDriverRetrievalClient.dll
[2016/07/16 09:26:41 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceSetupStatusProvider.dll
[2016/07/16 09:26:41 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DsmUserTask.exe
[2016/07/16 09:26:41 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscisvif.dll
[2016/07/16 09:26:41 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdmdbg.dll
[2016/07/16 09:26:41 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntvdmcpl.dll
[2016/07/16 09:26:41 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscproxystub.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WOWEXEC.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WOWDEB.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINSPOOL.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINSOCK.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINOLDAP.MOD
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINNLS.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\winhelp.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win87em.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win.com
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WIFEMAN.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WFWNET.DRV
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vga.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\vga.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ver.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ver.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdmredir.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\v7vga.rom
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\USER.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\typelib.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TOOLHELP.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TIMER.DRV
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\system.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\system.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysedit.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storage.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\stdole.tlb
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sound.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\sound.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SHELL.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\share.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setver.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\redir.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pmspl.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OLESVR.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olecli.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\olecli.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ole2nls.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ole2disp.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ole2.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntvdmd.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntvdm.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTIO804.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTIO412.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTIO411.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTIO404.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTIO.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTDOS804.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTDOS412.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTDOS411.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTDOS404.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NTDOS.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlsfunc.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netapi.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscdexnt.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mouse.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\mouse.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmtask.tsk
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\mmtask.tsk
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MMSYSTEM.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mem.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lzexpand.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\lzexpand.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LOADFIX.COM
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lanman.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\krnl386.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KEYBOARD.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keyboard.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\keyboard.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KEY01.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KB16.COM
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HIMEM.SYS
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\graphics.pro
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GRAPHICS.COM
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\graftabl.com
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GDI.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fastopen.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\exe2bin.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ega.cpi
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edlin.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EDIT.HLP
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edit.com
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DRWATSON.EXE
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dosx.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\debug.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDEML.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ctl3dv2.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\country.sys
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\compobj.dll
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMMDLG.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMMAND.COM
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMM.drv
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bios4.rom
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bios1.rom
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\append.exe
[2016/07/16 09:26:41 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ANSI.SYS
[2016/07/16 09:26:40 | 001,132,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdclt.exe
[2016/07/16 09:26:40 | 001,034,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdengin2.dll
[2016/07/16 09:26:40 | 000,732,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdcpl.dll
[2016/07/16 09:26:40 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WalletService.dll
[2016/07/16 09:26:40 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DaOtpCredentialProvider.dll
[2016/07/16 09:26:40 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvsc.dll
[2016/07/16 09:26:40 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spp.dll
[2016/07/16 09:26:40 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdrsvc.dll
[2016/07/16 09:26:40 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdshext.dll
[2016/07/16 09:26:40 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxproxy.dll
[2016/07/16 09:26:40 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VscMgrPS.dll
[2016/07/16 09:26:39 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recdisc.exe
[2016/07/16 09:26:15 | 002,549,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InkAnalysisLegacyCom.dll
[2016/07/16 09:26:15 | 000,476,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SnippingTool.exe
[2016/07/16 09:26:15 | 000,432,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msTextPrediction.dll
[2016/07/16 09:26:15 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2016/07/16 09:26:15 | 000,268,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpendp.dll
[2016/07/16 09:26:15 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hwrreg.exe
[2016/07/16 09:26:15 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpinput.exe
[2016/07/16 09:26:15 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcaSvc.dll
[2016/07/16 09:26:15 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RotMgr.dll
[2016/07/16 09:26:15 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hwrcomp.exe
[2016/07/16 09:26:15 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rfxvmt.dll
[2016/07/16 09:26:15 | 000,023,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys
[2016/07/16 09:26:14 | 001,311,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsCpl.dll
[2016/07/16 09:26:14 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mblctr.exe
[2016/07/16 09:26:14 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsApi.dll
[2016/07/16 09:26:14 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sensrsvc.dll
[2016/07/16 09:26:14 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsClassExtension.dll
[2016/07/16 09:26:14 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorPerformanceEvents.dll
[2016/07/16 09:26:14 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcaApi.dll
[2016/07/16 09:26:14 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorCustomAdbAlgorithm.dll
[2016/07/16 09:26:13 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetpp.dll
[2016/07/16 09:26:13 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DFDWiz.exe
[2016/07/16 09:26:13 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetppui.dll
[2016/07/16 09:26:13 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnpinst.exe
[2016/07/16 09:26:07 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browcli.dll
[2016/07/16 09:26:05 | 004,827,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtmpltfm.dll
[2016/07/16 09:26:05 | 002,231,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVCORE.DLL
[2016/07/16 09:26:05 | 001,197,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtmcodecs.dll
[2016/07/16 09:26:05 | 001,195,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMNetMgr.dll
[2016/07/16 09:26:05 | 001,025,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtmpal.dll
[2016/07/16 09:26:05 | 000,707,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ortcengine.dll
[2016/07/16 09:26:05 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieui.dll
[2016/07/16 09:26:05 | 000,385,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provsvc.dll
[2016/07/16 09:26:05 | 000,360,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\P2PGraph.dll
[2016/07/16 09:26:05 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MDEServer.exe
[2016/07/16 09:26:05 | 000,353,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2psvc.dll
[2016/07/16 09:26:05 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
[2016/07/16 09:26:05 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srchadmin.dll
[2016/07/16 09:26:05 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WmpDui.dll
[2016/07/16 09:26:05 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnrpsvc.dll
[2016/07/16 09:26:05 | 000,273,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMASF.DLL
[2016/07/16 09:26:05 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ListSvc.dll
[2016/07/16 09:26:05 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drt.dll
[2016/07/16 09:26:05 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pnetsh.dll
[2016/07/16 09:26:05 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hgprint.dll
[2016/07/16 09:26:05 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\P2P.dll
[2016/07/16 09:26:05 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrdc.dll
[2016/07/16 09:26:05 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmidx.dll
[2016/07/16 09:26:05 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Streaming.ps.dll
[2016/07/16 09:26:05 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browser.dll
[2016/07/16 09:26:05 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSCollect.exe
[2016/07/16 09:26:05 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSReset.exe
[2016/07/16 09:26:05 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logagent.exe
[2016/07/16 09:26:05 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eShims.dll
[2016/07/16 09:26:05 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnrpnsp.dll
[2016/07/16 09:26:05 | 000,067,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtmmvrortc.dll
[2016/07/16 09:26:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFoldersRes.dll
[2016/07/16 09:26:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Pnrphc.dll
[2016/07/16 09:26:05 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Groupinghc.dll
[2016/07/16 09:26:05 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drtprov.dll
[2016/07/16 09:26:05 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drttransport.dll
[2016/07/16 09:26:05 | 000,029,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CameraSettingsUIHost.exe
[2016/07/16 09:26:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbrpm.sys
[2016/07/16 09:26:05 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnrpauto.dll
[2016/07/16 09:26:05 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LAPRXY.DLL
[2016/07/16 09:26:05 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WebCache.exe
[2016/07/16 09:26:05 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\asferror.dll
[2016/07/16 09:26:04 | 001,224,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfshim.dll
[2016/07/16 09:26:04 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript.dll
[2016/07/16 09:26:04 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtmsft.dll
[2016/07/16 09:26:04 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscoree.dll
[2016/07/16 09:26:04 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationHost.exe
[2016/07/16 09:26:04 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
[2016/07/16 09:26:04 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iexpress.exe
[2016/07/16 09:26:04 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wextract.exe
[2016/07/16 09:26:04 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\occache.dll
[2016/07/16 09:26:04 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieUnatt.exe
[2016/07/16 09:26:04 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IEAdvpack.dll
[2016/07/16 09:26:04 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesysprep.dll
[2016/07/16 09:26:04 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inseng.dll
[2016/07/16 09:26:04 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscories.dll
[2016/07/16 09:26:04 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\JavaScriptCollectionAgent.dll
[2016/07/16 09:26:04 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MshtmlDac.dll
[2016/07/16 09:26:04 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pngfilt.dll
[2016/07/16 09:26:04 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
[2016/07/16 09:26:04 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationHostProxy.dll
[2016/07/16 09:26:04 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtmler.dll
[2016/07/16 09:26:04 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netfxperf.dll
[2016/07/16 09:26:04 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imgutil.dll
[2016/07/16 09:26:04 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
[2016/07/16 09:26:04 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscorier.dll
[2016/07/16 09:26:04 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedssync.exe
[2016/07/16 09:26:04 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clrhost.dll
[2016/07/16 09:26:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshta.exe
[2016/07/16 09:26:02 | 000,644,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dccw.exe
[2016/07/16 09:26:02 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colorui.dll
[2016/07/16 09:26:02 | 000,244,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdFilter.sys
[2016/07/16 09:26:02 | 000,100,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys
[2016/07/16 09:26:02 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colorcpl.exe
[2016/07/16 09:26:02 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Cortana.PAL.Desktop.dll
[2016/07/16 09:26:02 | 000,037,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdBoot.sys
[2016/07/16 09:26:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icmui.dll
[2016/07/16 09:26:02 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winshfhc.dll
[2016/07/16 09:26:01 | 000,786,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\opengl32.dll
[2016/07/16 09:26:01 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dramp.dll
[2016/07/16 09:26:01 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\riched20.dll
[2016/07/16 09:26:01 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dim700.dll
[2016/07/16 09:26:01 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dim.dll
[2016/07/16 09:26:01 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdiag.exe
[2016/07/16 09:26:01 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdiagn.dll
[2016/07/16 09:26:01 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verifiergui.exe
[2016/07/16 09:26:01 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\glu32.dll
[2016/07/16 09:26:01 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\softkbd.dll
[2016/07/16 09:26:01 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msaatext.dll
[2016/07/16 09:26:01 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tasklist.exe
[2016/07/16 09:26:01 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systeminfo.exe
[2016/07/16 09:26:01 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskkill.exe
[2016/07/16 09:26:01 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispci.dll
[2016/07/16 09:26:01 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2016/07/16 09:26:01 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Magnification.dll
[2016/07/16 09:26:01 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\htui.dll
[2016/07/16 09:26:01 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsCtfMonitor.dll
[2016/07/16 09:26:01 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxgwdi.dll
[2016/07/16 09:26:01 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d8thk.dll
[2016/07/16 09:26:01 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IconCodecService.dll
[2016/07/16 09:26:01 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ctfmon.exe
[2016/07/16 09:26:01 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XInput9_1_0.dll
[2016/07/16 09:26:01 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\riched32.dll
[2016/07/16 09:26:01 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleaccrc.dll
[2016/07/16 09:26:00 | 001,453,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dui70.dll
[2016/07/16 09:26:00 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werconcpl.dll
[2016/07/16 09:26:00 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10.dll
[2016/07/16 09:26:00 | 000,821,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfuimanager.dll
[2016/07/16 09:26:00 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\duser.dll
[2016/07/16 09:26:00 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\glmf32.dll
[2016/07/16 09:26:00 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werui.dll
[2016/07/16 09:26:00 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10_1core.dll
[2016/07/16 09:26:00 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10core.dll
[2016/07/16 09:26:00 | 000,257,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsta.dll
[2016/07/16 09:26:00 | 000,223,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkspbroker.exe
[2016/07/16 09:26:00 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rgb9rast.dll
[2016/07/16 09:26:00 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fms.dll
[2016/07/16 09:26:00 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10_1.dll
[2016/07/16 09:26:00 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWWIN.EXE
[2016/07/16 09:26:00 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\t2embed.dll
[2016/07/16 09:26:00 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkspbrokerAx.dll
[2016/07/16 09:26:00 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispdiag.exe
[2016/07/16 09:26:00 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regapi.dll
[2016/07/16 09:26:00 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDSAppXHelper.dll
[2016/07/16 09:26:00 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wercplsupport.dll
[2016/07/16 09:26:00 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudDomainJoinAUG.dll
[2016/07/16 09:26:00 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dxof.dll
[2016/07/16 09:26:00 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winver.exe
[2016/07/16 09:26:00 | 000,053,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wtsapi32.dll
[2016/07/16 09:26:00 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDSPnf.exe
[2016/07/16 09:26:00 | 000,039,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\utildll.dll
[2016/07/16 09:26:00 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msimtf.dll
[2016/07/16 09:26:00 | 000,034,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqmapi.dll
[2016/07/16 09:26:00 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MirrorDrvCompat.dll
[2016/07/16 09:26:00 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XInput1_4.dll
[2016/07/16 09:26:00 | 000,018,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SlideToShutDown.exe
[2016/07/16 09:26:00 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wksprtPS.dll
[2016/07/16 09:26:00 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\muifontsetup.dll
[2016/07/16 09:26:00 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\workerdd.dll
[2016/07/16 09:26:00 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsddd.dll
[2016/07/16 09:26:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.CloudDomainJoinAUG.ProxyStub.dll
[2016/07/16 09:26:00 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CHxReadingStringIME.dll
[2016/07/16 09:26:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleacchooks.dll
[2016/07/16 09:26:00 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2016/07/16 09:26:00 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nddeapi.dll
[2016/07/16 09:26:00 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfime.ime
[2016/07/16 09:25:59 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysdm.cpl
[2016/07/16 09:25:59 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\notepad.exe
[2016/07/16 09:25:59 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twext.dll
[2016/07/16 09:25:59 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Fondue.exe
[2016/07/16 09:25:59 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsadu.dll
[2016/07/16 09:25:59 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbici.dll
[2016/07/16 09:25:59 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.CloudStore.Schema.DesktopShell.dll
[2016/07/16 09:25:59 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deskadp.dll
[2016/07/16 09:25:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deskmon.dll
[2016/07/16 09:25:59 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RegCtrl.dll
[2016/07/16 09:25:59 | 000,041,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iuilp.dll
[2016/07/16 09:25:59 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LanguageComponentsInstallerComHandler.exe
[2016/07/16 09:25:59 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fodhelper.exe
[2016/07/16 09:25:59 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LangCleanupSysprepAction.dll
[2016/07/16 09:25:58 | 002,813,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\themeui.dll
[2016/07/16 09:25:58 | 001,910,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DisplaySwitch.exe
[2016/07/16 09:25:58 | 001,660,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batmeter.dll
[2016/07/16 09:25:58 | 001,155,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shellstyle.dll
[2016/07/16 09:25:58 | 000,672,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsuiext.dll
[2016/07/16 09:25:58 | 000,622,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpksetup.exe
[2016/07/16 09:25:58 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shsvcs.dll
[2016/07/16 09:25:58 | 000,499,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\timedate.cpl
[2016/07/16 09:25:58 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uxtheme.dll
[2016/07/16 09:25:58 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shwebsvc.dll
[2016/07/16 09:25:58 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\intl.cpl
[2016/07/16 09:25:58 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsquery.dll
[2016/07/16 09:25:58 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceCenter.dll
[2016/07/16 09:25:58 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cttune.exe
[2016/07/16 09:25:58 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Display.dll
[2016/07/16 09:25:58 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcpl.dll
[2016/07/16 09:25:58 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eudcedit.exe
[2016/07/16 09:25:58 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InputSwitch.dll
[2016/07/16 09:25:58 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msieftp.dll
[2016/07/16 09:25:58 | 000,284,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shlwapi.dll
[2016/07/16 09:25:58 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shdocvw.dll
[2016/07/16 09:25:58 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingFolder.dll
[2016/07/16 09:25:58 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dskquoui.dll
[2016/07/16 09:25:58 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\desk.cpl
[2016/07/16 09:25:58 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LanguageComponentsInstaller.dll
[2016/07/16 09:25:58 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dsui.dll
[2016/07/16 09:25:58 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rshx32.dll
[2016/07/16 09:25:58 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\control.exe
[2016/07/16 09:25:58 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontview.exe
[2016/07/16 09:25:58 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dskquota.dll
[2016/07/16 09:25:58 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OptionalFeatures.exe
[2016/07/16 09:25:58 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceElementSource.dll
[2016/07/16 09:25:58 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsExtensibilityHandlers.dll
[2016/07/16 09:25:58 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IdCtrls.dll
[2016/07/16 09:25:58 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceProperties.exe
[2016/07/16 09:25:58 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2016/07/16 09:25:58 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingWizard.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesRemote.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesProtection.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesPerformance.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesHardware.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesDataExecutionPrevention.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesComputerName.exe
[2016/07/16 09:25:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesAdvanced.exe
[2016/07/16 09:25:58 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\packager.dll
[2016/07/16 09:25:58 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DpiScaling.exe
[2016/07/16 09:25:58 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcdAutoSetup.dll
[2016/07/16 09:25:58 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StorageContextHandler.dll
[2016/07/16 09:25:58 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RunLegacyCPLElevated.exe
[2016/07/16 09:25:58 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UXInit.dll
[2016/07/16 09:25:58 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rundll32.exe
[2016/07/16 09:25:58 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\playlistfolder.dll
[2016/07/16 09:25:58 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoveDeviceContextHandler.dll
[2016/07/16 09:25:58 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\themeservice.dll
[2016/07/16 09:25:58 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msident.dll
[2016/07/16 09:25:58 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dssec.dll
[2016/07/16 09:25:58 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msports.dll
[2016/07/16 09:25:58 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ComputerDefaults.exe
[2016/07/16 09:25:58 | 000,042,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ApplicationFrameHost.exe
[2016/07/16 09:25:58 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\grpconv.exe
[2016/07/16 09:25:58 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cttunesvr.exe
[2016/07/16 09:25:58 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\docprop.dll
[2016/07/16 09:25:58 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pifmgr.dll
[2016/07/16 09:25:58 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpkinstall.exe
[2016/07/16 09:25:58 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrnsave.scr
[2016/07/16 09:25:58 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ThumbnailExtractionHost.exe
[2016/07/16 09:25:58 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthMtpContextHandler.dll
[2016/07/16 09:25:58 | 000,027,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\version.dll
[2016/07/16 09:25:58 | 000,026,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsRemoveDevice.exe
[2016/07/16 09:25:58 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shimgvw.dll
[2016/07/16 09:25:58 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prevhost.exe
[2016/07/16 09:25:58 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shgina.dll
[2016/07/16 09:25:58 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingProxy.dll
[2016/07/16 09:25:58 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shunimpl.dll
[2016/07/16 09:25:58 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntlanui2.dll
[2016/07/16 09:25:58 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shpafact.dll
[2016/07/16 09:25:58 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Startupscan.dll
[2016/07/16 09:25:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MUILanguageCleanup.dll
[2016/07/16 09:25:58 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\panmap.dll
[2016/07/16 09:25:58 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceUxRes.dll
[2016/07/16 09:25:58 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe
[2016/07/16 09:25:58 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browseui.dll
[2016/07/16 09:25:58 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoveDeviceElevated.dll
[2016/07/16 09:25:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\write.exe
[2016/07/16 09:25:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2016/07/16 09:25:58 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systray.exe
[2016/07/16 09:25:58 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msidle.dll
[2016/07/16 09:25:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shfolder.dll
[2016/07/16 09:25:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpksetupproxyserv.dll
[2016/07/16 09:25:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msidntld.dll
[2016/07/16 09:25:57 | 001,135,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsPrint.dll
[2016/07/16 09:25:57 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printui.dll
[2016/07/16 09:25:57 | 000,873,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapi3.dll
[2016/07/16 09:25:57 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efscore.dll
[2016/07/16 09:25:57 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printfilterpipelinesvc.exe
[2016/07/16 09:25:57 | 000,541,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDMon.dll
[2016/07/16 09:25:57 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prnfldr.dll
[2016/07/16 09:25:57 | 000,398,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsGdiConverter.dll
[2016/07/16 09:25:57 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tracerpt.exe
[2016/07/16 09:25:57 | 000,378,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\termmgr.dll
[2016/07/16 09:25:57 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntprint.dll
[2016/07/16 09:25:57 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\compstui.dll
[2016/07/16 09:25:57 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SharedPCCSP.dll
[2016/07/16 09:25:57 | 000,256,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdprint.dll
[2016/07/16 09:25:57 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapisrv.dll
[2016/07/16 09:25:57 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wavemsp.dll
[2016/07/16 09:25:57 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prnntfy.dll
[2016/07/16 09:25:57 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\omadmclient.exe
[2016/07/16 09:25:57 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ipnat.sys
[2016/07/16 09:25:57 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpmon.dll
[2016/07/16 09:25:57 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_SignInOptions.dll
[2016/07/16 09:25:57 | 000,165,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DataExchangeHost.exe
[2016/07/16 09:25:57 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti_ci.dll
[2016/07/16 09:25:57 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceDirectoryClient.dll
[2016/07/16 09:25:57 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prncache.dll
[2016/07/16 09:25:57 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2016/07/16 09:25:57 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slr100.dll
[2016/07/16 09:25:57 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.SharedPC.AccountManager.dll
[2016/07/16 09:25:57 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleprn.dll
[2016/07/16 09:25:57 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdmCommon.dll
[2016/07/16 09:25:57 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapiui.dll
[2016/07/16 09:25:57 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintWSDAHost.dll
[2016/07/16 09:25:57 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\telephon.cpl
[2016/07/16 09:25:57 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DMPushRouterCore.dll
[2016/07/16 09:25:57 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logman.exe
[2016/07/16 09:25:57 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\policymanagerprecheck.dll
[2016/07/16 09:25:57 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\agilevpn.sys
[2016/07/16 09:25:57 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remotesp.tsp
[2016/07/16 09:25:57 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spoolss.dll
[2016/07/16 09:25:57 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PinEnrollmentHelper.dll
[2016/07/16 09:25:57 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DocumentPerformanceEvents.dll
[2016/07/16 09:25:57 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\alg.exe
[2016/07/16 09:25:57 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\enterpriseresourcemanager.dll
[2016/07/16 09:25:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.SharedPC.CredentialProvider.dll
[2016/07/16 09:25:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintIsolationHost.exe
[2016/07/16 09:25:57 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmenterprisediagnostics.dll
[2016/07/16 09:25:57 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printui.exe
[2016/07/16 09:25:57 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntprint.exe
[2016/07/16 09:25:57 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDScanProxy.dll
[2016/07/16 09:25:57 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpmonui.dll
[2016/07/16 09:25:57 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\g711codc.ax
[2016/07/16 09:25:57 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bidispl.dll
[2016/07/16 09:25:57 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintPlatformConfig.dll
[2016/07/16 09:25:57 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmwappushsvc.dll
[2016/07/16 09:25:57 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiMigPlugin.dll
[2016/07/16 09:25:57 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdmpostprocessevaluator.dll
[2016/07/16 09:25:57 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\typeperf.exe
[2016/07/16 09:25:57 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfctrs.dll
[2016/07/16 09:25:57 | 000,041,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iri.dll
[2016/07/16 09:25:57 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintIsolationProxy.dll
[2016/07/16 09:25:57 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\relog.exe
[2016/07/16 09:25:57 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfproc.dll
[2016/07/16 09:25:57 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Printers.Extensions.dll
[2016/07/16 09:25:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfos.dll
[2016/07/16 09:25:57 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfdisk.dll
[2016/07/16 09:25:57 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printfilterpipelineprxy.dll
[2016/07/16 09:25:57 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpprnext.dll
[2016/07/16 09:25:57 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hidphone.tsp
[2016/07/16 09:25:57 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dialer.exe
[2016/07/16 09:25:57 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpmib.dll
[2016/07/16 09:25:57 | 000,027,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogHost.exe
[2016/07/16 09:25:57 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapilua.dll
[2016/07/16 09:25:57 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FaxPrinterInstaller.dll
[2016/07/16 09:25:57 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DdcWnsListener.dll
[2016/07/16 09:25:57 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsdchngr.dll
[2016/07/16 09:25:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfnet.dll
[2016/07/16 09:25:57 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskperf.exe
[2016/07/16 09:25:57 | 000,019,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapi.dll
[2016/07/16 09:25:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogHost3D.exe
[2016/07/16 09:25:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\localui.dll
[2016/07/16 09:25:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcmsetup.exe
[2016/07/16 09:25:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiUnattend.exe
[2016/07/16 09:25:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiSysprep.dll
[2016/07/16 09:25:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PCShellCommonProxyStub.dll
[2016/07/16 09:25:57 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapiperf.dll
[2016/07/16 09:25:56 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\upnphost.dll
[2016/07/16 09:25:56 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhoneOm.dll
[2016/07/16 09:25:56 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_UserAccount.dll
[2016/07/16 09:25:56 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OneBackupHandler.dll
[2016/07/16 09:25:56 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsDocumentTargetPrint.dll
[2016/07/16 09:25:56 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rastapi.dll
[2016/07/16 09:25:56 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edputil.dll
[2016/07/16 09:25:56 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DiagnosticLogCSP.dll
[2016/07/16 09:25:56 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HNetCfgClient.dll
[2016/07/16 09:25:56 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrobj.dll
[2016/07/16 09:25:56 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_Maps.dll
[2016/07/16 09:25:56 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsRasterService.dll
[2016/07/16 09:25:56 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msls31.dll
[2016/07/16 09:25:56 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmcsp.dll
[2016/07/16 09:25:56 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TtlsAuth.dll
[2016/07/16 09:25:56 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srumsvc.dll
[2016/07/16 09:25:56 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TetheringStation.dll
[2016/07/16 09:25:56 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\coredpus.dll
[2016/07/16 09:25:56 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TtlsCfg.dll
[2016/07/16 09:25:56 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndiswan.sys
[2016/07/16 09:25:56 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrrun.dll
[2016/07/16 09:25:56 | 000,162,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsBroker.exe
[2016/07/16 09:25:56 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SubscriptionMgr.dll
[2016/07/16 09:25:56 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscript.exe
[2016/07/16 09:25:56 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cscript.exe
[2016/07/16 09:25:56 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdmDiagnostics.dll
[2016/07/16 09:25:56 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winjson.dll
[2016/07/16 09:25:56 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshom.ocx
[2016/07/16 09:25:56 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_OneCore_BatterySaver.dll
[2016/07/16 09:25:56 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcsps.dll
[2016/07/16 09:25:56 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprmsg.dll
[2016/07/16 09:25:56 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Ndu.sys
[2016/07/16 09:25:56 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_ClosedCaptioning.dll
[2016/07/16 09:25:56 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_SIUF.dll
[2016/07/16 09:25:56 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmapi.dll
[2016/07/16 09:25:56 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\omadmapi.dll
[2016/07/16 09:25:56 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VoipRT.dll
[2016/07/16 09:25:56 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapsvc.dll
[2016/07/16 09:25:56 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasman.dll
[2016/07/16 09:25:56 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDPrintProxy.DLL
[2016/07/16 09:25:56 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SimCfg.dll
[2016/07/16 09:25:56 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshext.dll
[2016/07/16 09:25:56 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TelephonyInteractiveUser.dll
[2016/07/16 09:25:56 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nduprov.dll
[2016/07/16 09:25:56 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unenrollhook.dll
[2016/07/16 09:25:56 | 000,060,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.DataModel.dll
[2016/07/16 09:25:56 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\udhisapi.dll
[2016/07/16 09:25:56 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhonePlatformAbstraction.dll
[2016/07/16 09:25:56 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UsbSettingsHandlers.dll
[2016/07/16 09:25:56 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\omadmprc.exe
[2016/07/16 09:25:56 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\feclient.dll
[2016/07/16 09:25:56 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srumapi.dll
[2016/07/16 09:25:56 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FontGlyphAnimator.dll
[2016/07/16 09:25:56 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.XboxLive.ProxyStub.dll
[2016/07/16 09:25:56 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edpnotify.exe
[2016/07/16 09:25:56 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syncmlhook.dll
[2016/07/16 09:25:56 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efssvc.dll
[2016/07/16 09:25:56 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\upnpcont.exe
[2016/07/16 09:25:56 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcfghost.exe
[2016/07/16 09:25:56 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dusmtask.exe
[2016/07/16 09:25:56 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmprocessxmlfiltered.dll
[2016/07/16 09:25:56 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Profile.SystemManufacturers.dll
[2016/07/16 09:25:56 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmoleaututils.dll
[2016/07/16 09:25:56 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshcon.dll
[2016/07/16 09:25:56 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcfgutils.dll
[2016/07/16 09:25:56 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmgrcspps.dll
[2016/07/16 09:25:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\enterpriseetw.dll
[2016/07/16 09:25:56 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IpNatHlpClient.dll
[2016/07/16 09:25:56 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdmDiagnosticsTool.exe
[2016/07/16 09:25:56 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsunattend.exe
[2016/07/16 09:25:56 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispex.dll
[2016/07/16 09:25:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmiso8601utils.dll
[2016/07/16 09:25:56 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Eap3Host.exe
[2016/07/16 09:25:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSClient.dll
[2016/07/16 09:25:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netwphelper.dll
[2016/07/16 09:25:56 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetHost.exe
[2016/07/16 09:25:56 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TelephonyInteractiveUserRes.dll
[2016/07/16 09:25:56 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DMAppsRes.dll
[2016/07/16 09:25:55 | 002,148,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsservices.dll
[2016/07/16 09:25:55 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedsvc.dll
[2016/07/16 09:25:55 | 000,711,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\PEAuth.sys
[2016/07/16 09:25:55 | 000,694,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DismApi.dll
[2016/07/16 09:25:55 | 000,661,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MrmIndexer.dll
[2016/07/16 09:25:55 | 000,566,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskschd.dll
[2016/07/16 09:25:55 | 000,556,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcupdate_GenuineIntel.dll
[2016/07/16 09:25:55 | 000,398,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdelta.dll
[2016/07/16 09:25:55 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authfwcfg.dll
[2016/07/16 09:25:55 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\configmanager2.dll
[2016/07/16 09:25:55 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2016/07/16 09:25:55 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2016/07/16 09:25:55 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstask.dll
[2016/07/16 09:25:55 | 000,205,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unattend.dll
[2016/07/16 09:25:55 | 000,197,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionQueue.dll
[2016/07/16 09:25:55 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll
[2016/07/16 09:25:55 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pku2u.dll
[2016/07/16 09:25:55 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtutil.exe
[2016/07/16 09:25:55 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcpsvc.dll
[2016/07/16 09:25:55 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uudf.dll
[2016/07/16 09:25:55 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ufat.dll
[2016/07/16 09:25:55 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SimAuth.dll
[2016/07/16 09:25:55 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regsvc.dll
[2016/07/16 09:25:55 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Profile.RetailInfo.dll
[2016/07/16 09:25:55 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys
[2016/07/16 09:25:55 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edpcsp.dll
[2016/07/16 09:25:55 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdmmigrator.dll
[2016/07/16 09:25:55 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CfgSPPolicy.dll
[2016/07/16 09:25:55 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msscript.ocx
[2016/07/16 09:25:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbceip.dll
[2016/07/16 09:25:55 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edpauditapi.dll
[2016/07/16 09:25:55 | 000,095,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcmnutils.dll
[2016/07/16 09:25:55 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LicensingCSP.dll
[2016/07/16 09:25:55 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2016/07/16 09:25:55 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcpurapi.dll
[2016/07/16 09:25:55 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rasl2tp.sys
[2016/07/16 09:25:55 | 000,076,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcupdate_AuthenticAMD.dll
[2016/07/16 09:25:55 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpbcreds.dll
[2016/07/16 09:25:55 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\raspptp.sys
[2016/07/16 09:25:55 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SecureTimeAggregator.dll
[2016/07/16 09:25:55 | 000,072,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskhostw.exe
[2016/07/16 09:25:55 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DiskSnapshot.exe
[2016/07/16 09:25:55 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ngctasks.dll
[2016/07/16 09:25:55 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mslldp.sys
[2016/07/16 09:25:55 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rassstp.sys
[2016/07/16 09:25:55 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspatchc.dll
[2016/07/16 09:25:55 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wanarp.sys
[2016/07/16 09:25:55 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wldp.dll
[2016/07/16 09:25:55 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll
[2016/07/16 09:25:55 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efslsaext.dll
[2016/07/16 09:25:55 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\expand.exe
[2016/07/16 09:25:55 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtutils.dll
[2016/07/16 09:25:55 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertPKICmdlet.dll
[2016/07/16 09:25:55 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndproxy.sys
[2016/07/16 09:25:55 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ftp.exe
[2016/07/16 09:25:55 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CspProxy.dll
[2016/07/16 09:25:55 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fwcfg.dll
[2016/07/16 09:25:55 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ucsvc.exe
[2016/07/16 09:25:55 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InprocLogger.dll
[2016/07/16 09:25:55 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prauthproviders.dll
[2016/07/16 09:25:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcpapi.dll
[2016/07/16 09:25:55 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\luainstall.dll
[2016/07/16 09:25:55 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vpnikeapi.dll
[2016/07/16 09:25:55 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspatcha.dll
[2016/07/16 09:25:55 | 000,035,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfmifs.dll
[2016/07/16 09:25:55 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsutil.dll
[2016/07/16 09:25:55 | 000,033,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Diskdump.sys
[2016/07/16 09:25:55 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UsoClient.exe
[2016/07/16 09:25:55 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CheckNetIsolation.exe
[2016/07/16 09:25:55 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\at.exe
[2016/07/16 09:25:55 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secur32.dll
[2016/07/16 09:25:55 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndistapi.sys
[2016/07/16 09:25:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credssp.dll
[2016/07/16 09:25:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkntfs.exe
[2016/07/16 09:25:55 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontgroupsoverride.dll
[2016/07/16 09:25:55 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DmOmaCpMo.exe
[2016/07/16 09:25:55 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EnterpriseAppMgmtClient.dll
[2016/07/16 09:25:55 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MCCSPal.dll
[2016/07/16 09:25:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmpushproxy.dll
[2016/07/16 09:25:55 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcommandlineutils.dll
[2016/07/16 09:25:55 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys
[2016/07/16 09:25:55 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfmifsproxy.dll
[2016/07/16 09:25:55 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mstee.sys
[2016/07/16 09:25:55 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mspqm.sys
[2016/07/16 09:25:55 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mspclock.sys
[2016/07/16 09:25:55 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\security.dll
[2016/07/16 09:25:55 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tier2punctuations.dll
[2016/07/16 09:25:51 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysmain.dll
[2016/07/16 09:25:51 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlceqp40.dll
[2016/07/16 09:25:51 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\untfs.dll
[2016/07/16 09:25:51 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlcese40.dll
[2016/07/16 09:25:51 | 000,396,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\defragsvc.dll
[2016/07/16 09:25:51 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpx.dll
[2016/07/16 09:25:51 | 000,353,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verifier.dll
[2016/07/16 09:25:51 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskcomp.dll
[2016/07/16 09:25:51 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmicmiplugin.dll
[2016/07/16 09:25:51 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\udfs.sys
[2016/07/16 09:25:51 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mintdh.dll
[2016/07/16 09:25:51 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppLockerCSP.dll
[2016/07/16 09:25:51 | 000,228,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dism.exe
[2016/07/16 09:25:51 | 000,215,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdyboost.sys
[2016/07/16 09:25:51 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmime.dll
[2016/07/16 09:25:51 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmd.exe
[2016/07/16 09:25:51 | 000,202,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifsutil.dll
[2016/07/16 09:25:51 | 000,185,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmllite.dll
[2016/07/16 09:25:51 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schtasks.exe
[2016/07/16 09:25:51 | 000,180,736 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\System32\Defrag.exe
[2016/07/16 09:25:51 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlceoledb40.dll
[2016/07/16 09:25:51 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SIHClient.exe
[2016/07/16 09:25:51 | 000,149,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ulib.dll
[2016/07/16 09:25:51 | 000,147,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\appid.sys
[2016/07/16 09:25:51 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdboot.exe
[2016/07/16 09:25:51 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPTaskScheduler.dll
[2016/07/16 09:25:51 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CourtesyEngine.dll
[2016/07/16 09:25:51 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsutil.exe
[2016/07/16 09:25:51 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmstyle.dll
[2016/07/16 09:25:51 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PCPKsp.dll
[2016/07/16 09:25:51 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlcecompact40.dll
[2016/07/16 09:25:51 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verifier.exe
[2016/07/16 09:25:51 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srpapi.dll
[2016/07/16 09:25:51 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmusic.dll
[2016/07/16 09:25:51 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmsynth.dll
[2016/07/16 09:25:51 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cngcredui.dll
[2016/07/16 09:25:51 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptcatsvc.dll
[2016/07/16 09:25:51 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uexfat.dll
[2016/07/16 09:25:51 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpnpmgr.dll
[2016/07/16 09:25:51 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmscript.dll
[2016/07/16 09:25:51 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\joy.cpl
[2016/07/16 09:25:51 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fingerprintcredential.dll
[2016/07/16 09:25:51 | 000,088,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlsbres.dll
[2016/07/16 09:25:51 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmclient.exe
[2016/07/16 09:25:51 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootcfg.exe
[2016/07/16 09:25:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcompos.dll
[2016/07/16 09:25:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\w32tm.exe
[2016/07/16 09:25:51 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\updatecsp.dll
[2016/07/16 09:25:51 | 000,069,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fileinfo.sys
[2016/07/16 09:25:51 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcastdvr.proxy.dll
[2016/07/16 09:25:51 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvcfg.exe
[2016/07/16 09:25:51 | 000,054,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fmifs.dll
[2016/07/16 09:25:51 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usermgrcli.dll
[2016/07/16 09:25:51 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmloader.dll
[2016/07/16 09:25:51 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EtwRundown.dll
[2016/07/16 09:25:51 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amsi.dll
[2016/07/16 09:25:51 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbioext.dll
[2016/07/16 09:25:51 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TaskSchdPS.dll
[2016/07/16 09:25:51 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sfc.exe
[2016/07/16 09:25:51 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmband.dll
[2016/07/16 09:25:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdhcinst.dll
[2016/07/16 09:25:51 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventcreate.exe
[2016/07/16 09:25:51 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aeevts.dll
[2016/07/16 09:25:51 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WofUtil.dll
[2016/07/16 09:25:51 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dswave.dll
[2016/07/16 09:25:51 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidtel.exe
[2016/07/16 09:25:51 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regsvr32.exe
[2016/07/16 09:25:51 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxshared.dll
[2016/07/16 09:25:51 | 000,018,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupetw.dll
[2016/07/16 09:25:51 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdkey.exe
[2016/07/16 09:25:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\defragproxy.dll
[2016/07/16 09:25:51 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\applockerfltr.sys
[2016/07/16 09:25:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllhst3g.exe
[2016/07/16 09:25:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amsiproxy.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_qcx.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_qc.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_32.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_qcx.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_qc.dll
[2016/07/16 09:25:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_32.ax
[2016/07/16 09:25:51 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RpcNs4.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnsvr.exe
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnlobby.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnhupnp.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnhpast.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnet.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnathlp.dll
[2016/07/16 09:25:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnaddr.dll
[2016/07/16 09:25:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stdole32.tlb
[2016/07/16 09:25:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\defragres.dll
[2016/07/16 09:25:51 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootstr.dll
[2016/07/16 09:25:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lz32.dll
[2016/07/16 09:25:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iologmsg.dll
[2016/07/16 09:25:51 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\advapi32res.dll
[2016/07/16 09:25:50 | 009,569,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmres.dll
[2016/07/16 09:25:50 | 000,757,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmsys.cpl
[2016/07/16 09:25:50 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFx02000.dll
[2016/07/16 09:25:50 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChxAPDS.dll
[2016/07/16 09:25:50 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msimeChsPinyinMainDS.dll
[2016/07/16 09:25:50 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChxHAPDS.dll
[2016/07/16 09:25:50 | 000,353,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\volsnap.sys
[2016/07/16 09:25:50 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDDS.dll
[2016/07/16 09:25:50 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChtCangjieDS.dll
[2016/07/16 09:25:50 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChtHkStrokeDS.dll
[2016/07/16 09:25:50 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChsStrokeDS.dll
[2016/07/16 09:25:50 | 000,312,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\volmgrx.sys
[2016/07/16 09:25:50 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChtQuickDS.dll
[2016/07/16 09:25:50 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SDDS.dll
[2016/07/16 09:25:50 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jpndecoder.dll
[2016/07/16 09:25:50 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ChsPinyinRanker.dll
[2016/07/16 09:25:50 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MtfDecoder.dll
[2016/07/16 09:25:50 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chxinputrouter.dll
[2016/07/16 09:25:50 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpg2splt.ax
[2016/07/16 09:25:50 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jpnranker.dll
[2016/07/16 09:25:50 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFHost.exe
[2016/07/16 09:25:50 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\netbt.sys
[2016/07/16 09:25:50 | 000,215,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SndVol.exe
[2016/07/16 09:25:50 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BingASDS.dll
[2016/07/16 09:25:50 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ApproveChildRequest.exe
[2016/07/16 09:25:50 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MTFServer.dll
[2016/07/16 09:25:50 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFPlatform.dll
[2016/07/16 09:25:50 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dinput8.dll
[2016/07/16 09:25:50 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MTF.dll
[2016/07/16 09:25:50 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WUDFRd.sys
[2016/07/16 09:25:50 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcApi.dll
[2016/07/16 09:25:50 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\JpnServiceDS.dll
[2016/07/16 09:25:50 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ContactHarvesterDS.dll
[2016/07/16 09:25:50 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qasf.dll
[2016/07/16 09:25:50 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dinput.dll
[2016/07/16 09:25:50 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gcdef.dll
[2016/07/16 09:25:50 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\trie.dll
[2016/07/16 09:25:50 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FilterDS.dll
[2016/07/16 09:25:50 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VocabRoamingHandler.dll
[2016/07/16 09:25:50 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StaticDictDS.dll
[2016/07/16 09:25:50 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MTFFuzzyDS.dll
[2016/07/16 09:25:50 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GameBarPresenceWriter.exe
[2016/07/16 09:25:50 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFSvc.dll
[2016/07/16 09:25:50 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WUDFPf.sys
[2016/07/16 09:25:50 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\cdfs.sys
[2016/07/16 09:25:50 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chxranker.dll
[2016/07/16 09:25:50 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcirt.dll
[2016/07/16 09:25:50 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcrt40.dll
[2016/07/16 09:25:50 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clfsw32.dll
[2016/07/16 09:25:50 | 000,055,808 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\cero.rs
[2016/07/16 09:25:50 | 000,054,784 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\fpb.rs
[2016/07/16 09:25:50 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MTFSpellcheckDS.dll
[2016/07/16 09:25:50 | 000,052,224 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\esrb.rs
[2016/07/16 09:25:50 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RuleBasedDS.dll
[2016/07/16 09:25:50 | 000,046,080 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\oflc-nz.rs
[2016/07/16 09:25:50 | 000,044,032 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\csrr.rs
[2016/07/16 09:25:50 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EmojiDS.dll
[2016/07/16 09:25:50 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TransliterationRanker.dll
[2016/07/16 09:25:50 | 000,041,472 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\cob-au.rs
[2016/07/16 09:25:50 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jpninputrouter.dll
[2016/07/16 09:25:50 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pid.dll
[2016/07/16 09:25:50 | 000,031,744 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\usk.rs
[2016/07/16 09:25:50 | 000,030,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Dumpata.sys
[2016/07/16 09:25:50 | 000,027,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hwpolicy.sys
[2016/07/16 09:25:50 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpapi.dll
[2016/07/16 09:25:50 | 000,022,016 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\grb.rs
[2016/07/16 09:25:50 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ktmw32.dll
[2016/07/16 09:25:50 | 000,020,992 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\pegi-pt.rs
[2016/07/16 09:25:50 | 000,020,992 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\pegi.rs
[2016/07/16 09:25:50 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CoreMmRes.dll
[2016/07/16 09:25:50 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netevent.dll
[2016/07/16 09:25:50 | 000,015,872 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\djctq.rs
[2016/07/16 09:25:50 | 000,015,360 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\pcbp.rs
[2016/07/16 09:25:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prflbmsg.dll
[2016/07/16 09:25:50 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDJPN.DLL
[2016/07/16 09:25:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKOR.DLL
[2016/07/16 09:25:50 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\txfw32.dll
[2016/07/16 09:25:50 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GameBarPresenceWriter.proxy.dll
[2016/07/16 09:25:50 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WppRecorderUM.dll
[2016/07/16 09:25:50 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecat.dll
[2016/07/16 09:25:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpwsockx.dll
[2016/07/16 09:25:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpmodemx.dll
[2016/07/16 09:25:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dplayx.dll
[2016/07/16 09:25:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dplaysvr.exe
[2016/07/16 09:25:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDYCL.DLL
[2016/07/16 09:25:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRO.DLL
[2016/07/16 09:25:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNO1.DLL
[2016/07/16 09:25:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINEN.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDYBA.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUKX.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTIPRD.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTIPRC.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSW.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSP.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSL.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSG.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNSO.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlk41a.dll
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLA.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIULAT.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIBO.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdibm02.dll
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGR.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGN.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFC.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCZ.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCA.DLL
[2016/07/16 09:25:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDYCC.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDYAK.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDWOL.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTURME.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTT102.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTAT.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSYR1.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSORA.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSN1.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRU.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDPO.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDPL1.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDOSM.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDOLDIT.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNO.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNEPR.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNE.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMYAN.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMLT47.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLV.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLAO.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKURD.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKNI.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKHMR.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDJAV.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINTEL.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINTAM.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINORI.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINMAL.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINKAN.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINGUJ.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINDEV.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINBEN.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHEB.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHAW.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHAU.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFTHRK.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFR.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFO.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFI.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDEST.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDDZO.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDDA.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCHER.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBHC.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAZEL.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAZE.DLL
[2016/07/16 09:25:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDA2.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDVNTC.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUZB.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDURDU.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUR.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUK.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUGHR1.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUGHR.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTAJIK.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDPASH.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMONST.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMONMO.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMON.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMAORI.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLT.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKYR.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIT142.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIT.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIR.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINPUN.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINASA.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHE.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGEO.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFA.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDDIV2.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDDIV1.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBU.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBLR.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBASH.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDARME.DLL
[2016/07/16 09:25:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDA1.DLL
[2016/07/16 09:25:50 | 000,004,608 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\WEB.rs
[2016/07/16 09:25:49 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcsvDevice.dll
[2016/07/16 09:25:49 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provthrd.dll
[2016/07/16 09:25:49 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netplwiz.dll
[2016/07/16 09:25:49 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remotepg.dll
[2016/07/16 09:25:49 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-kernel-power-events.dll
[2016/07/16 09:25:49 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiageng.dll
[2016/07/16 09:25:49 | 000,159,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxAllUserStore.dll
[2016/07/16 09:25:49 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingMonitor.dll
[2016/07/16 09:25:49 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagprv.dll
[2016/07/16 09:25:49 | 000,157,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudStorageWizard.exe
[2016/07/16 09:25:49 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mydocs.dll
[2016/07/16 09:25:49 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdeploy.dll
[2016/07/16 09:25:49 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fde.dll
[2016/07/16 09:25:49 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-kernel-processor-power-events.dll
[2016/07/16 09:25:49 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncPolicy.dll
[2016/07/16 09:25:49 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\frprov.dll
[2016/07/16 09:25:49 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdvvmtransport.dll
[2016/07/16 09:25:49 | 000,067,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sessionmsg.exe
[2016/07/16 09:25:49 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2016/07/16 09:25:49 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-pdc.dll
[2016/07/16 09:25:49 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMSRoamingSecurity.dll
[2016/07/16 09:25:49 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSWbPrxy.exe
[2016/07/16 09:25:49 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudNotifications.exe
[2016/07/16 09:25:49 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsRdpWebAccess.dll
[2016/07/16 09:25:49 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2016/07/16 09:25:49 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsdwmdr.dll
[2016/07/16 09:25:49 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSTheme.exe
[2016/07/16 09:25:49 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ustprov.dll
[2016/07/16 09:25:49 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-kernel-pnp-events.dll
[2016/07/16 09:25:49 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSa.exe
[2016/07/16 09:25:49 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tlscsp.dll
[2016/07/16 09:25:49 | 000,038,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PasswordOnWakeSettingFlyout.exe
[2016/07/16 09:25:49 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Netplwiz.exe
[2016/07/16 09:25:49 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Portable.dll
[2016/07/16 09:25:49 | 000,031,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountBroker.exe
[2016/07/16 09:25:49 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaProxy.exe
[2016/07/16 09:25:49 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaUacHelper.exe
[2016/07/16 09:25:49 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsmproxy.dll
[2016/07/16 09:25:49 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagnhost.exe
[2016/07/16 09:25:49 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drprov.dll
[2016/07/16 09:25:49 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCHERP.DLL
[2016/07/16 09:25:49 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfts.dll
[2016/07/16 09:25:49 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-battery-events.dll
[2016/07/16 09:25:49 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaPs.dll
[2016/07/16 09:25:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHEPT.DLL
[2016/07/16 09:25:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCAN.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSMSNO.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSMSFI.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRUM.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDROST.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDROPR.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecnt.dll
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnec95.dll
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLVST.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINUK2.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGRLND.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDFI1.DLL
[2016/07/16 09:25:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\f3ahvoas.dll
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTZM.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTUQ.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTUF.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSW09.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSORST.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSOREX.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSL1.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSF.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDPL.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnec.dll
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHU.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGR1.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGKL.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDES.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCZ2.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCZ1.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDCR.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBENE.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBE.DLL
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdax2.dll
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd106n.dll
[2016/07/16 09:25:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd106.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-hal-events.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUSX.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUR1.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTIFI2.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTIFI.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTAILE.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSYR2.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDSORS1.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRU1.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdphags.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDNTL.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMLT48.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMACST.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLV1.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINMAR.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINHIN.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDIC.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHELA3.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHELA2.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhebl3.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHE319.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHE220.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGTHC.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgeoqw.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgeooa.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgeome.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgeoer.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDGAE.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdfar.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBR.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBGPH1.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdarmty.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdarmph.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDA3.DLL
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101c.dll
[2016/07/16 09:25:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUSR.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUSL.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUSA.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTH3.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTH2.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTH1.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTH0.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDOLCH.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDOGHAM.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnko.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDMAC.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLT2.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDLT1.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlisus.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlisub.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDKAZ.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINBE2.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDINBE1.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDHU1.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDDV.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBULG.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBUG.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBGPH.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAZST.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDARMW.DLL
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd103.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101b.dll
[2016/07/16 09:25:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101a.dll
[2016/07/16 09:25:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-processor-aggregator-events.dll
[2016/07/16 09:25:48 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagschd.dll
[2016/07/16 09:25:47 | 000,524,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxs.dll
[2016/07/16 09:25:47 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercpl.dll
[2016/07/16 09:25:47 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbemcomn.dll
[2016/07/16 09:25:47 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scesrv.dll
[2016/07/16 09:25:47 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers_Notifications.dll
[2016/07/16 09:25:47 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedynos.dll
[2016/07/16 09:25:47 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offfilt.dll
[2016/07/16 09:25:47 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scecli.dll
[2016/07/16 09:25:47 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.cpl
[2016/07/16 09:25:47 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CortanaMapiHelper.dll
[2016/07/16 09:25:47 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\miutils.dll
[2016/07/16 09:25:47 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\QuickActionsDataModel.dll
[2016/07/16 09:25:47 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnputil.exe
[2016/07/16 09:25:47 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smbwmiv2.dll
[2016/07/16 09:25:47 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProvisioningHandlers.dll
[2016/07/16 09:25:47 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PersonaX.dll
[2016/07/16 09:25:47 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlhtml.dll
[2016/07/16 09:25:47 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Cortana.Persona.dll
[2016/07/16 09:25:47 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XamlTileRender.dll
[2016/07/16 09:25:47 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MtcModel.dll
[2016/07/16 09:25:47 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mimofcodec.dll
[2016/07/16 09:25:47 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provpackageapidll.dll
[2016/07/16 09:25:47 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.AppDefaults.dll
[2016/07/16 09:25:47 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\loadperf.dll
[2016/07/16 09:25:47 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.CloudStore.Schema.Shell.dll
[2016/07/16 09:25:47 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrscmd.dll
[2016/07/16 09:25:47 | 000,087,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OpenWith.exe
[2016/07/16 09:25:47 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdsrv.dll
[2016/07/16 09:25:47 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mibincodec.dll
[2016/07/16 09:25:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdprov.dll
[2016/07/16 09:25:47 | 000,062,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudExperienceHostBroker.exe
[2016/07/16 09:25:47 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncobjapi.dll
[2016/07/16 09:25:47 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmlfilter.dll
[2016/07/16 09:25:47 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Cortana.ProxyStub.dll
[2016/07/16 09:25:47 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzutil.exe
[2016/07/16 09:25:47 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ShellCommonCommonProxyStub.dll
[2016/07/16 09:25:47 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lodctr.exe
[2016/07/16 09:25:47 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrs.exe
[2016/07/16 09:25:47 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PSModuleDiscoveryProvider.dll
[2016/07/16 09:25:47 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetEvtFwdr.exe
[2016/07/16 09:25:47 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SecEdit.exe
[2016/07/16 09:25:47 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtffilt.dll
[2016/07/16 09:25:47 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unlodctr.exe
[2016/07/16 09:25:47 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndiscap.sys
[2016/07/16 09:25:47 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mimefilt.dll
[2016/07/16 09:25:47 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\linkinfo.dll
[2016/07/16 09:25:47 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxstrace.exe
[2016/07/16 09:25:47 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxssrv.dll
[2016/07/16 09:25:47 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppinst.dll
[2016/07/16 09:25:47 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrshost.exe
[2016/07/16 09:25:47 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energytask.dll
[2016/07/16 09:25:47 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NotificationControllerPS.dll
[2016/07/16 09:25:47 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CortanaMapiHelper.ProxyStub.dll
[2016/07/16 09:25:47 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provdiagnostics.dll
[2016/07/16 09:25:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrssrv.dll
[2016/07/16 09:25:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-sleepstudy-events.dll
[2016/07/16 09:25:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrsmgr.dll
[2016/07/16 09:25:46 | 001,220,608 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\dbghelp.dll
[2016/07/16 09:25:46 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Speech.UXRes.dll
[2016/07/16 09:25:46 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MBMediaManager.dll
[2016/07/16 09:25:46 | 000,339,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Faultrep.dll
[2016/07/16 09:25:46 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\upnp.dll
[2016/07/16 09:25:46 | 000,266,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFault.exe
[2016/07/16 09:25:46 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RasMediaManager.dll
[2016/07/16 09:25:46 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DictationManager.dll
[2016/07/16 09:25:46 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ssdpsrv.dll
[2016/07/16 09:25:46 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmitomi.dll
[2016/07/16 09:25:46 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LegacyNetUXHost.exe
[2016/07/16 09:25:46 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmAuto.dll
[2016/07/16 09:25:46 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafupnp.dll
[2016/07/16 09:25:46 | 000,139,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wermgr.exe
[2016/07/16 09:25:46 | 000,135,680 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\dbgcore.dll
[2016/07/16 09:25:46 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EthernetMediaManager.dll
[2016/07/16 09:25:46 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmidcom.dll
[2016/07/16 09:25:46 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wersvc.dll
[2016/07/16 09:25:46 | 000,120,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFaultSecure.exe
[2016/07/16 09:25:46 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KeywordDetectorMsftSidAdapter.dll
[2016/07/16 09:25:46 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAMediaManager.dll
[2016/07/16 09:25:46 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mi.dll
[2016/07/16 09:25:46 | 000,092,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EncDump.dll
[2016/07/16 09:25:46 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prvdmofcomp.dll
[2016/07/16 09:25:46 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSManMigrationPlugin.dll
[2016/07/16 09:25:46 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmRes.dll
[2016/07/16 09:25:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IPELoggingDictationHelper.dll
[2016/07/16 09:25:46 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LegacyNetUX.dll
[2016/07/16 09:25:46 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ssdpapi.dll
[2016/07/16 09:25:46 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsmprovhost.exe
[2016/07/16 09:25:46 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werdiagcontroller.dll
[2016/07/16 09:25:46 | 000,033,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\werkernel.sys
[2016/07/16 09:25:46 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmAgent.dll
[2016/07/16 09:25:46 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Register-CimProvider.exe
[2016/07/16 09:25:46 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsmplpxy.dll
[2016/07/16 09:25:41 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDApi.dll
[2016/07/16 09:25:41 | 000,367,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcryptprimitives.dll
[2016/07/16 09:25:41 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAFWSD.dll
[2016/07/16 09:25:41 | 000,205,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ufx01000.sys
[2016/07/16 09:25:41 | 000,194,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msrpc.sys
[2016/07/16 09:25:41 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BioCredProv.dll
[2016/07/16 09:25:41 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\IddCx.dll
[2016/07/16 09:25:41 | 000,117,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SerCx2.sys
[2016/07/16 09:25:41 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\SensorsCx.dll
[2016/07/16 09:25:41 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eeprov.dll
[2016/07/16 09:25:41 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbio.dll
[2016/07/16 09:25:41 | 000,086,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys
[2016/07/16 09:25:41 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsNativeApi.V2.dll
[2016/07/16 09:25:41 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys
[2016/07/16 09:25:41 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UMDF\UcmCx.dll
[2016/07/16 09:25:41 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hascsp.dll
[2016/07/16 09:25:41 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energyprov.dll
[2016/07/16 09:25:41 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UcmCx.sys
[2016/07/16 09:25:41 | 000,060,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SpbCx.sys
[2016/07/16 09:25:41 | 000,059,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SerCx.sys
[2016/07/16 09:25:41 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DafGip.dll
[2016/07/16 09:25:41 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XboxGipRadioManager.dll
[2016/07/16 09:25:41 | 000,054,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsNativeApi.dll
[2016/07/16 09:25:41 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshbth.dll
[2016/07/16 09:25:41 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hmkd.dll
[2016/07/16 09:25:41 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eeutil.dll
[2016/07/16 09:25:41 | 000,044,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsUtilsV2.dll
[2016/07/16 09:25:41 | 000,042,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\urscx01000.sys
[2016/07/16 09:25:41 | 000,037,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tbs.dll
[2016/07/16 09:25:41 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UsbCApi.dll
[2016/07/16 09:25:41 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Internal.UI.BioEnrollment.ProxyStub.dll
[2016/07/16 09:25:41 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys
[2016/07/16 09:25:41 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MiracastInputMgr.dll
[2016/07/16 09:25:41 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMC.exe
[2016/07/16 09:25:41 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dumpsdport.sys
[2016/07/16 09:25:41 | 000,021,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tbs.sys
[2016/07/16 09:25:41 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sspisrv.dll
[2016/07/16 09:25:41 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltLib.dll
[2016/07/16 09:25:41 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mshidumdf.sys
[2016/07/16 09:25:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys
[2016/07/16 09:25:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmi.dll
[2016/07/16 09:25:41 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmCertResources.dll
[2016/07/16 09:25:40 | 000,827,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adtschema.dll
[2016/07/16 09:25:40 | 000,815,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowsperformancerecordercontrol.dll
[2016/07/16 09:25:40 | 000,773,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcrt.dll
[2016/07/16 09:25:40 | 000,584,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Wdf01000.sys
[2016/07/16 09:25:40 | 000,343,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\netio.sys
[2016/07/16 09:25:40 | 000,293,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fltMgr.sys
[2016/07/16 09:25:40 | 000,255,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sechost.dll
[2016/07/16 09:25:40 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpr.exe
[2016/07/16 09:25:40 | 000,159,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\VerifierExt.sys
[2016/07/16 09:25:40 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msaudite.dll
[2016/07/16 09:25:40 | 000,102,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kdnet.dll
[2016/07/16 09:25:40 | 000,100,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smss.exe
[2016/07/16 09:25:40 | 000,093,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imagehlp.dll
[2016/07/16 09:25:40 | 000,087,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mountmgr.sys
[2016/07/16 09:25:40 | 000,082,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcd.dll
[2016/07/16 09:25:40 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storqosflt.sys
[2016/07/16 09:25:40 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msobjs.dll
[2016/07/16 09:25:40 | 000,059,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PSHED.DLL
[2016/07/16 09:25:40 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RpcEpMap.dll
[2016/07/16 09:25:40 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\basesrv.dll
[2016/07/16 09:25:40 | 000,054,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profapi.dll
[2016/07/16 09:25:40 | 000,053,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdfLdr.sys
[2016/07/16 09:25:40 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\npfs.sys
[2016/07/16 09:25:40 | 000,042,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\condrv.sys
[2016/07/16 09:25:40 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdrleakdiag.exe
[2016/07/16 09:25:40 | 000,032,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys
[2016/07/16 09:25:40 | 000,031,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptbase.dll
[2016/07/16 09:25:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nsiproxy.sys
[2016/07/16 09:25:40 | 000,026,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winnsi.dll
[2016/07/16 09:25:40 | 000,026,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WppRecorder.sys
[2016/07/16 09:25:40 | 000,026,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kdcom.dll
[2016/07/16 09:25:40 | 000,026,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fs_rec.sys
[2016/07/16 09:25:40 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msfs.sys
[2016/07/16 09:25:40 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nsisvc.dll
[2016/07/16 09:25:40 | 000,020,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nsi.dll
[2016/07/16 09:25:40 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kdstub.dll
[2016/07/16 09:25:40 | 000,017,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys
[2016/07/16 09:25:40 | 000,016,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\csrss.exe
[2016/07/16 09:25:40 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kd.dll
[2016/07/16 09:25:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDUS.DLL
[2016/07/16 09:25:40 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\null.sys
[2016/07/16 09:25:39 | 000,918,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ucrtbase.dll
[2016/07/16 09:25:39 | 000,670,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netlogon.dll
[2016/07/16 09:25:39 | 000,498,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp_win.dll
[2016/07/16 09:25:39 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp60.dll
[2016/07/16 09:25:39 | 000,415,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp110_win.dll
[2016/07/16 09:25:39 | 000,315,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswsock.dll
[2016/07/16 09:25:39 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Wldap32.dll
[2016/07/16 09:25:39 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcore.dll
[2016/07/16 09:25:39 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\exfat.sys
[2016/07/16 09:25:39 | 000,275,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powrprof.dll
[2016/07/16 09:25:39 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncryptprov.dll
[2016/07/16 09:25:39 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srvsvc.dll
[2016/07/16 09:25:39 | 000,213,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgmgr32.dll
[2016/07/16 09:25:39 | 000,205,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininit.exe
[2016/07/16 09:25:39 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mlang.dll
[2016/07/16 09:25:39 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdigest.dll
[2016/07/16 09:25:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authz.dll
[2016/07/16 09:25:39 | 000,184,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rsaenh.dll
[2016/07/16 09:25:39 | 000,183,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoncli.dll
[2016/07/16 09:25:39 | 000,173,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntasn1.dll
[2016/07/16 09:25:39 | 000,154,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntmarta.dll
[2016/07/16 09:25:39 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OneCoreCommonProxyStub.dll
[2016/07/16 09:25:39 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netjoin.dll
[2016/07/16 09:25:39 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptnet.dll
[2016/07/16 09:25:39 | 000,132,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dssenh.dll
[2016/07/16 09:25:39 | 000,132,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devobj.dll
[2016/07/16 09:25:39 | 000,120,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncrypt.dll
[2016/07/16 09:25:39 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpo.dll
[2016/07/16 09:25:39 | 000,104,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncryptsslp.dll
[2016/07/16 09:25:39 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\joinutil.dll
[2016/07/16 09:25:39 | 000,094,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\userenv.dll
[2016/07/16 09:25:39 | 000,086,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpr.dll
[2016/07/16 09:25:39 | 000,075,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srvcli.dll
[2016/07/16 09:25:39 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keyiso.dll
[2016/07/16 09:25:39 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KdsCli.dll
[2016/07/16 09:25:39 | 000,068,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptsp.dll
[2016/07/16 09:25:39 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\samcli.dll
[2016/07/16 09:25:39 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\djoin.exe
[2016/07/16 09:25:39 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getmac.exe
[2016/07/16 09:25:39 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptsvc.dll
[2016/07/16 09:25:39 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcsvc.dll
[2016/07/16 09:25:39 | 000,060,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptdll.dll
[2016/07/16 09:25:39 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkscli.dll
[2016/07/16 09:25:39 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprovisionsp.dll
[2016/07/16 09:25:39 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcsvc6.dll
[2016/07/16 09:25:39 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprovfw.dll
[2016/07/16 09:25:39 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndisuio.sys
[2016/07/16 09:25:39 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devrtl.dll
[2016/07/16 09:25:39 | 000,049,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msasn1.dll
[2016/07/16 09:25:39 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\joinproviderol.dll
[2016/07/16 09:25:39 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfscli.dll
[2016/07/16 09:25:39 | 000,042,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pcw.sys
[2016/07/16 09:25:39 | 000,038,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\svchost.exe
[2016/07/16 09:25:39 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmiclnt.dll
[2016/07/16 09:25:39 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Websocket.dll
[2016/07/16 09:25:39 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sscore.dll
[2016/07/16 09:25:39 | 000,036,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netutils.dll
[2016/07/16 09:25:39 | 000,033,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NtlmShared.dll
[2016/07/16 09:25:39 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gmsaclient.dll
[2016/07/16 09:25:39 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tokenbinding.dll
[2016/07/16 09:25:39 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\userinit.exe
[2016/07/16 09:25:39 | 000,025,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcwum.dll
[2016/07/16 09:25:39 | 000,024,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsrole.dll
[2016/07/16 09:25:39 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\seclogon.dll
[2016/07/16 09:25:39 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsparse.dll
[2016/07/16 09:25:39 | 000,023,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BOOTVID.DLL
[2016/07/16 09:25:39 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysntfy.dll
[2016/07/16 09:25:39 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lmhsvc.dll
[2016/07/16 09:25:39 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winnlsres.dll
[2016/07/16 09:25:39 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllhost.exe
[2016/07/16 09:25:39 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedcli.dll
[2016/07/16 09:25:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmsgapi.dll
[2016/07/16 09:25:39 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nrpsrv.dll
[2016/07/16 09:25:39 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapi.dll
[2016/07/16 09:25:39 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sscoreext.dll
[2016/07/16 09:25:39 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wship6.dll
[2016/07/16 09:25:39 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSHTCPIP.DLL
[2016/07/16 09:25:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netmsg.dll
[2016/07/16 09:25:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msprivs.dll
[2016/07/16 09:25:31 | 001,488,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmsipc.dll
[2016/07/16 09:25:31 | 001,394,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DxpTaskSync.dll
[2016/07/16 09:25:31 | 001,122,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomp.dll
[2016/07/16 09:25:31 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winipcsecproc.dll
[2016/07/16 09:25:31 | 000,513,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncController.dll
[2016/07/16 09:25:31 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syncutil.dll
[2016/07/16 09:25:31 | 000,371,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AccountsRt.dll
[2016/07/16 09:25:31 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncInfrastructure.dll
[2016/07/16 09:25:31 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winipcfile.dll
[2016/07/16 09:25:31 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\APHostService.dll
[2016/07/16 09:25:31 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConhostV1.dll
[2016/07/16 09:25:31 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSyncMetastore.dll
[2016/07/16 09:25:31 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cabview.dll
[2016/07/16 09:25:31 | 000,149,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imm32.dll
[2016/07/16 09:25:31 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\net1.exe
[2016/07/16 09:25:31 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceSyncProvider.dll
[2016/07/16 09:25:31 | 000,124,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cabinet.dll
[2016/07/16 09:25:31 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSyncProviders.dll
[2016/07/16 09:25:31 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmredir.dll
[2016/07/16 09:25:31 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\networkhelper.dll
[2016/07/16 09:25:31 | 000,101,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mup.sys
[2016/07/16 09:25:31 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntdsapi.dll
[2016/07/16 09:25:31 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontsub.dll
[2016/07/16 09:25:31 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\console.dll
[2016/07/16 09:25:31 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winhttpcom.dll
[2016/07/16 09:25:31 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netsh.exe
[2016/07/16 09:25:31 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActiveSyncCsp.dll
[2016/07/16 09:25:31 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usp10.dll
[2016/07/16 09:25:31 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InternetMailCsp.dll
[2016/07/16 09:25:31 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinMsoIrmProtector.dll
[2016/07/16 09:25:31 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinOpcIrmProtector.dll
[2016/07/16 09:25:31 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\makecab.exe
[2016/07/16 09:25:31 | 000,069,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netapi32.dll
[2016/07/16 09:25:31 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MuiUnattend.exe
[2016/07/16 09:25:31 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Syncreg.dll
[2016/07/16 09:25:31 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sc.exe
[2016/07/16 09:25:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WABSyncProvider.dll
[2016/07/16 09:25:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reg.exe
[2016/07/16 09:25:31 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntlanman.dll
[2016/07/16 09:25:31 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EasPoliciesBroker.dll
[2016/07/16 09:25:31 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmghost.dll
[2016/07/16 09:25:31 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cabapi.dll
[2016/07/16 09:25:31 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetmib1.dll
[2016/07/16 09:25:31 | 000,050,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwminit.dll
[2016/07/16 09:25:31 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncProxy.dll
[2016/07/16 09:25:31 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\runonce.exe
[2016/07/16 09:25:31 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setx.exe
[2016/07/16 09:25:31 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\net.exe
[2016/07/16 09:25:31 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\APHostClient.dll
[2016/07/16 09:25:31 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\conhost.exe
[2016/07/16 09:25:31 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\format.com
[2016/07/16 09:25:31 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xcopy.exe
[2016/07/16 09:25:31 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mf3216.dll
[2016/07/16 09:25:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys
[2016/07/16 09:25:31 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncHost.exe
[2016/07/16 09:25:31 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\auditpolcore.dll
[2016/07/16 09:25:31 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwm.exe
[2016/07/16 09:25:31 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credui.dll
[2016/07/16 09:25:31 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nci.dll
[2016/07/16 09:25:31 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NETSTAT.EXE
[2016/07/16 09:25:31 | 000,033,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\cnghwassist.sys
[2016/07/16 09:25:31 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\APHostRes.dll
[2016/07/16 09:25:31 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icacls.exe
[2016/07/16 09:25:31 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\findstr.exe
[2016/07/16 09:25:31 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\extrac32.exe
[2016/07/16 09:25:31 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\auditpol.exe
[2016/07/16 09:25:31 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\w32topl.dll
[2016/07/16 09:25:31 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipconfig.exe
[2016/07/16 09:25:31 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifmon.dll
[2016/07/16 09:25:31 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\snmpapi.dll
[2016/07/16 09:25:31 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hid.dll
[2016/07/16 09:25:31 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\more.com
[2016/07/16 09:25:31 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkdsk.exe
[2016/07/16 09:25:31 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ARP.EXE
[2016/07/16 09:25:31 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sort.exe
[2016/07/16 09:25:31 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ROUTE.EXE
[2016/07/16 09:25:31 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PING.EXE
[2016/07/16 09:25:31 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\attrib.exe
[2016/07/16 09:25:31 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncInfrastructureps.dll
[2016/07/16 09:25:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PATHPING.EXE
[2016/07/16 09:25:31 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TRACERT.EXE
[2016/07/16 09:25:31 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mountvol.exe
[2016/07/16 09:25:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MRINFO.EXE
[2016/07/16 09:25:31 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\finger.exe
[2016/07/16 09:25:31 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HOSTNAME.EXE
[2016/07/16 09:25:31 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dciman32.dll
[2016/07/16 09:25:31 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncHostps.dll
[2016/07/16 09:25:31 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EasPoliciesBrokerHost.exe
[2016/07/16 09:25:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TCPSVCS.EXE
[2016/07/16 09:25:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EasPoliciesBrokerPS.dll
[2016/07/16 09:25:31 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msimg32.dll
[2016/07/16 09:25:31 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys
[2016/07/16 09:25:31 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\normaliz.dll
[2016/07/16 09:25:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncRes.dll
[2016/07/16 09:25:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\neth.dll
[2016/07/16 09:25:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpk.dll
[2016/07/16 09:25:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icmp.dll
[2016/07/16 09:25:30 | 000,563,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_9.dll
[2016/07/16 09:25:30 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsound.dll
[2016/07/16 09:25:30 | 000,487,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioEng.dll
[2016/07/16 09:25:30 | 000,482,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\advapi32.dll
[2016/07/16 09:25:30 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qdv.dll
[2016/07/16 09:25:30 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2016/07/16 09:25:30 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcap.dll
[2016/07/16 09:25:30 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdmaud.drv
[2016/07/16 09:25:30 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsdmo.dll
[2016/07/16 09:25:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Profile.HardwareId.dll
[2016/07/16 09:25:30 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsadmin.exe
[2016/07/16 09:25:30 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\playtomenu.dll
[2016/07/16 09:25:30 | 000,135,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmm.dll
[2016/07/16 09:25:30 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CastingShellExt.dll
[2016/07/16 09:25:30 | 000,131,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmmbase.dll
[2016/07/16 09:25:30 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvfw32.dll
[2016/07/16 09:25:30 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Kswdmcap.ax
[2016/07/16 09:25:30 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shacct.dll
[2016/07/16 09:25:30 | 000,100,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apisetschema.dll
[2016/07/16 09:25:30 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avifil32.dll
[2016/07/16 09:25:30 | 000,090,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msacm32.dll
[2016/07/16 09:25:30 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciavi32.dll
[2016/07/16 09:25:30 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amstream.dll
[2016/07/16 09:25:30 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlaySndSrv.dll
[2016/07/16 09:25:30 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CallButtons.dll
[2016/07/16 09:25:30 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avicap32.dll
[2016/07/16 09:25:30 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmci.dll
[2016/07/16 09:25:30 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CastSrv.exe
[2016/07/16 09:25:30 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2016/07/16 09:25:30 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shacctprofile.dll
[2016/07/16 09:25:30 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iyuv_32.dll
[2016/07/16 09:25:30 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciqtz32.dll
[2016/07/16 09:25:30 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcicda.dll
[2016/07/16 09:25:30 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mmcss.sys
[2016/07/16 09:25:30 | 000,036,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msgsm32.acm
[2016/07/16 09:25:30 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvidc32.dll
[2016/07/16 09:25:30 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2016/07/16 09:25:30 | 000,030,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imaadp32.acm
[2016/07/16 09:25:30 | 000,029,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msadp32.acm
[2016/07/16 09:25:30 | 000,029,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avrt.dll
[2016/07/16 09:25:30 | 000,028,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdmo.dll
[2016/07/16 09:25:30 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msacm32.drv
[2016/07/16 09:25:30 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciseq.dll
[2016/07/16 09:25:30 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msyuv.dll
[2016/07/16 09:25:30 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciwave.dll
[2016/07/16 09:25:30 | 000,023,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg711.acm
[2016/07/16 09:25:30 | 000,020,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2016/07/16 09:25:30 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\midimap.dll
[2016/07/16 09:25:30 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CallButtons.ProxyStub.dll
[2016/07/16 09:25:30 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrle32.dll
[2016/07/16 09:25:30 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsbyuv.dll
[2016/07/16 09:25:30 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcico.dll
[2016/07/16 09:25:30 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\coreaudiopolicymanagerext.dll
[2016/07/16 09:25:30 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_8.dll
[2016/07/16 09:25:30 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dvdplay.exe
[2016/07/16 09:25:30 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdrmsdk.dll
[2016/07/16 09:25:29 | 000,813,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Magnify.exe
[2016/07/16 09:25:29 | 000,536,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hhctrl.ocx
[2016/07/16 09:25:29 | 000,380,957 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\expsrv.dll
[2016/07/16 09:25:29 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2016/07/16 09:25:29 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Help.Runtime.dll
[2016/07/16 09:25:29 | 000,149,019 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\crtdll.dll
[2016/07/16 09:25:29 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\advpack.dll
[2016/07/16 09:25:29 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hlink.dll
[2016/07/16 09:25:29 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2016/07/16 09:25:29 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\INETRES.dll
[2016/07/16 09:25:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccu32.dll
[2016/07/16 09:25:29 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccr32.dll
[2016/07/16 09:25:29 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hhsetup.dll
[2016/07/16 09:25:29 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ACCTRES.dll
[2016/07/16 09:25:29 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WwaExt.dll
[2016/07/16 09:25:29 | 000,030,749 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vbajet32.dll
[2016/07/16 09:25:29 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptdlg.dll
[2016/07/16 09:25:29 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\hh.exe
[2016/07/16 09:25:29 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrating.dll
[2016/07/16 09:25:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odpdx32.dll
[2016/07/16 09:25:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odfox32.dll
[2016/07/16 09:25:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\simpdata.tlb
[2016/07/16 09:25:29 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3r.dll
[2016/07/16 09:25:28 | 003,795,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accessibilitycpl.dll
[2016/07/16 09:25:28 | 001,589,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msjet40.dll
[2016/07/16 09:25:28 | 001,386,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvbvm60.dll
[2016/07/16 09:25:28 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc42u.dll
[2016/07/16 09:25:28 | 001,187,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc42.dll
[2016/07/16 09:25:28 | 000,924,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc40u.dll
[2016/07/16 09:25:28 | 000,924,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc40.dll
[2016/07/16 09:25:28 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswdat10.dll
[2016/07/16 09:25:28 | 000,844,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdosys.dll
[2016/07/16 09:25:28 | 000,665,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlsrv32.dll
[2016/07/16 09:25:28 | 000,643,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrepl40.dll
[2016/07/16 09:25:28 | 000,618,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswstr10.dll
[2016/07/16 09:25:28 | 000,608,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbc32.dll
[2016/07/16 09:25:28 | 000,587,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osk.exe
[2016/07/16 09:25:28 | 000,454,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxbde40.dll
[2016/07/16 09:25:28 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msexch40.dll
[2016/07/16 09:25:28 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspbde40.dll
[2016/07/16 09:25:28 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrd3x40.dll
[2016/07/16 09:25:28 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msexcl40.dll
[2016/07/16 09:25:28 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrd2x40.dll
[2016/07/16 09:25:28 | 000,317,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcjt32.dll
[2016/07/16 09:25:28 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msjtes40.dll
[2016/07/16 09:25:28 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EaseOfAccessDialog.exe
[2016/07/16 09:25:28 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sethc.exe
[2016/07/16 09:25:28 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcrt20.dll
[2016/07/16 09:25:28 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msltus40.dll
[2016/07/16 09:25:28 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcint.dll
[2016/07/16 09:25:28 | 000,188,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlunirl.dll
[2016/07/16 09:25:28 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\itircl.dll
[2016/07/16 09:25:28 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msorcl32.dll
[2016/07/16 09:25:28 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdadiag.dll
[2016/07/16 09:25:28 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\itss.dll
[2016/07/16 09:25:28 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbctrac.dll
[2016/07/16 09:25:28 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdart.dll
[2016/07/16 09:25:28 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccp32.dll
[2016/07/16 09:25:28 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbnetlib.dll
[2016/07/16 09:25:28 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlsrv32.rll
[2016/07/16 09:25:28 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapistub.dll
[2016/07/16 09:25:28 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2016/07/16 09:25:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atl.dll
[2016/07/16 09:25:28 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wudriver.dll
[2016/07/16 09:25:28 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cliconfg.dll
[2016/07/16 09:25:28 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Utilman.exe
[2016/07/16 09:25:28 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcad32.exe
[2016/07/16 09:25:28 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scripto.dll
[2016/07/16 09:25:28 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msjter40.dll
[2016/07/16 09:25:28 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HelpPaneProxy.dll
[2016/07/16 09:25:28 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AtBroker.exe
[2016/07/16 09:25:28 | 000,043,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlwoa.dll
[2016/07/16 09:25:28 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcbcp.dll
[2016/07/16 09:25:28 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cliconfg.rll
[2016/07/16 09:25:28 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cliconfg.exe
[2016/07/16 09:25:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msjint40.dll
[2016/07/16 09:25:28 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ctl3d32.dll
[2016/07/16 09:25:28 | 000,026,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbc16gt.dll
[2016/07/16 09:25:28 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcconf.exe
[2016/07/16 09:25:28 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbnmpntw.dll
[2016/07/16 09:25:28 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlwid.dll
[2016/07/16 09:25:28 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fixmapi.exe
[2016/07/16 09:25:28 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscpxl32.dLL
[2016/07/16 09:25:28 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbc32gt.dll
[2016/07/16 09:25:28 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\winhlp32.exe
[2016/07/16 09:25:28 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcji32.dll
[2016/07/16 09:25:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OskSupport.dll
[2016/07/16 09:25:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odtext32.dll
[2016/07/16 09:25:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odexl32.dll
[2016/07/16 09:25:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oddbse32.dll
[2016/07/16 09:25:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ds32gt.dll
[2016/07/16 09:25:28 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdatsrc.tlb
[2016/07/16 09:25:28 | 000,004,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ds16gt.dLL
[2016/07/16 09:25:28 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msorc32r.dll
[2016/07/16 09:25:28 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscpx32r.dLL
[2016/07/16 09:25:24 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certutil.exe
[2016/07/16 09:25:24 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpedit.dll
[2016/07/16 09:25:24 | 000,673,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Vault.dll
[2016/07/16 09:25:24 | 000,564,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SppExtComObj.Exe
[2016/07/16 09:25:24 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate.exe
[2016/07/16 09:25:24 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_ssp.exe
[2016/07/16 09:25:24 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdrm.dll
[2016/07/16 09:25:24 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certCredProvider.dll
[2016/07/16 09:25:24 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slui.exe
[2016/07/16 09:25:24 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppcomapi.dll
[2016/07/16 09:25:24 | 000,351,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc.dll
[2016/07/16 09:25:24 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Narrator.exe
[2016/07/16 09:25:24 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstext40.dll
[2016/07/16 09:25:24 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\activeds.dll
[2016/07/16 09:25:24 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsldpc.dll
[2016/07/16 09:25:24 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SCardSvr.dll
[2016/07/16 09:25:24 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IdListen.dll
[2016/07/16 09:25:24 | 000,141,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\consent.exe
[2016/07/16 09:25:24 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profsvcext.dll
[2016/07/16 09:25:24 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\activeds.tlb
[2016/07/16 09:25:24 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthBrokerUI.dll
[2016/07/16 09:25:24 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertPolEng.dll
[2016/07/16 09:25:24 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AxInstSv.dll
[2016/07/16 09:25:24 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_ssp.dll
[2016/07/16 09:25:24 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nslookup.exe
[2016/07/16 09:25:24 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SCardDlg.dll
[2016/07/16 09:25:24 | 000,060,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlrmdr.exe
[2016/07/16 09:25:24 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AxInstUI.exe
[2016/07/16 09:25:24 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cngprovider.dll
[2016/07/16 09:25:24 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certenc.dll
[2016/07/16 09:25:24 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capiprovider.dll
[2016/07/16 09:25:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pautoenr.dll
[2016/07/16 09:25:24 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adprovider.dll
[2016/07/16 09:25:24 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapiprovider.dll
[2016/07/16 09:25:24 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wincredprovider.dll
[2016/07/16 09:25:24 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2016/07/16 09:25:24 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UI0Detect.exe
[2016/07/16 09:25:24 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SCardBi.dll
[2016/07/16 09:25:24 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scfilter.sys
[2016/07/16 09:25:24 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esevss.dll
[2016/07/16 09:25:24 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksetup.exe
[2016/07/16 09:25:24 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\proquota.exe
[2016/07/16 09:25:24 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credwiz.exe
[2016/07/16 09:25:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winlogonext.dll
[2016/07/16 09:25:24 | 000,028,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininitext.dll
[2016/07/16 09:25:24 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnscacheugc.exe
[2016/07/16 09:25:24 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shutdownext.dll
[2016/07/16 09:25:24 | 000,025,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDACLSys.dll
[2016/07/16 09:25:24 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrnr.dll
[2016/07/16 09:25:24 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gptext.dll
[2016/07/16 09:25:24 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capisp.dll
[2016/07/16 09:25:24 | 000,019,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlS0WndH.dll
[2016/07/16 09:25:24 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easconsent.dll
[2016/07/16 09:25:24 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpnotify.exe
[2016/07/16 09:25:24 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pstorec.dll
[2016/07/16 09:25:24 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msidcrl40.dll
[2016/07/16 09:25:24 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsui.exe
[2016/07/16 09:25:24 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LogonUI.exe
[2016/07/16 09:25:24 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\softpub.dll
[2016/07/16 09:25:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sas.dll
[2016/07/16 09:25:24 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssip32.dll
[2016/07/16 09:25:23 | 000,792,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2016/07/16 09:25:23 | 000,637,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartcardCredentialProvider.dll
[2016/07/16 09:25:23 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_isv.exe
[2016/07/16 09:25:23 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidcli.dll
[2016/07/16 09:25:23 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_ssp_isv.exe
[2016/07/16 09:25:23 | 000,365,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptuiwizard.dll
[2016/07/16 09:25:23 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certreq.exe
[2016/07/16 09:25:23 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_isv.dll
[2016/07/16 09:25:23 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppcommdlg.dll
[2016/07/16 09:25:23 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertEnrollUI.dll
[2016/07/16 09:25:23 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsldp.dll
[2016/07/16 09:25:23 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpresult.exe
[2016/07/16 09:25:23 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidcredprov.dll
[2016/07/16 09:25:23 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowslivelogin.dll
[2016/07/16 09:25:23 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceregistration.dll
[2016/07/16 09:25:23 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keymgr.dll
[2016/07/16 09:25:23 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LicensingDiagSpp.dll
[2016/07/16 09:25:23 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\auditcse.dll
[2016/07/16 09:25:23 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easwrt.dll
[2016/07/16 09:25:23 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wincredui.dll
[2016/07/16 09:25:23 | 000,133,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LicensingUI.exe
[2016/07/16 09:25:23 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi.dll
[2016/07/16 09:25:23 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidpolicyconverter.exe
[2016/07/16 09:25:23 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppwmi.dll
[2016/07/16 09:25:23 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rekeywiz.exe
[2016/07/16 09:25:23 | 000,093,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\changepk.exe
[2016/07/16 09:25:23 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_ssp_isv.dll
[2016/07/16 09:25:23 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profprov.dll
[2016/07/16 09:25:23 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapimig.exe
[2016/07/16 09:25:23 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slwga.dll
[2016/07/16 09:25:23 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidfdp.dll
[2016/07/16 09:25:23 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esentprf.dll
[2016/07/16 09:25:23 | 000,062,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.exe
[2016/07/16 09:25:23 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssign32.dll
[2016/07/16 09:25:23 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptext.dll
[2016/07/16 09:25:23 | 000,054,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidapi.dll
[2016/07/16 09:25:23 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidnsp.dll
[2016/07/16 09:25:23 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\edptask.dll
[2016/07/16 09:25:23 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsjob.dll
[2016/07/16 09:25:23 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\klist.exe
[2016/07/16 09:25:23 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hidserv.dll
[2016/07/16 09:25:23 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UpgradeResultsUI.exe
[2016/07/16 09:25:23 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syskey.exe
[2016/07/16 09:25:23 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys
[2016/07/16 09:25:23 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AzSqlExt.dll
[2016/07/16 09:25:23 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpupdate.exe
[2016/07/16 09:25:23 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setspn.exe
[2016/07/16 09:25:23 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wephostsvc.dll
[2016/07/16 09:25:23 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shutdown.exe
[2016/07/16 09:25:23 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\userinitext.dll
[2016/07/16 09:25:23 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.proxystub.dll
[2016/07/16 09:25:23 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscat32.dll
[2016/07/16 09:25:22 | 001,312,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdc.dll
[2016/07/16 09:25:22 | 001,295,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comres.dll
[2016/07/16 09:25:22 | 000,753,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi2fs.dll
[2016/07/16 09:25:22 | 000,647,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2016/07/16 09:25:22 | 000,528,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatq.dll
[2016/07/16 09:25:22 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFx.dll
[2016/07/16 09:25:22 | 000,476,160 | ---- | C] (Microsoft® Windows® Operating System) -- C:\WINDOWS\System32\wvc.dll
[2016/07/16 09:25:22 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2016/07/16 09:25:22 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2016/07/16 09:25:22 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\es.dll
[2016/07/16 09:25:22 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtckrm.dll
[2016/07/16 09:25:22 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwlauncher.dll
[2016/07/16 09:25:22 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ninput.dll
[2016/07/16 09:25:22 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2016/07/16 09:25:22 | 000,232,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityUxHost.exe
[2016/07/16 09:25:22 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InkEd.dll
[2016/07/16 09:25:22 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wisp.dll
[2016/07/16 09:25:22 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicpl.dll
[2016/07/16 09:25:22 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorShell.dll
[2016/07/16 09:25:22 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpchttp.dll
[2016/07/16 09:25:22 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicli.exe
[2016/07/16 09:25:22 | 000,146,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scsiport.sys
[2016/07/16 09:25:22 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtc.exe
[2016/07/16 09:25:22 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TabSvc.dll
[2016/07/16 09:25:22 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsquirt.exe
[2016/07/16 09:25:22 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicpl.exe
[2016/07/16 09:25:22 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorAuthn.exe
[2016/07/16 09:25:22 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2016/07/16 09:25:22 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorAPI.dll
[2016/07/16 09:25:22 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsiexe.dll
[2016/07/16 09:25:22 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtstocom.exe
[2016/07/16 09:25:22 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oledlg.dll
[2016/07/16 09:25:22 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorPwdMgr.dll
[2016/07/16 09:25:22 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2016/07/16 09:25:22 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\txflog.dll
[2016/07/16 09:25:22 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2016/07/16 09:25:22 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsiwmiv2.dll
[2016/07/16 09:25:22 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationWinPalMisc.dll
[2016/07/16 09:25:22 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olethk32.dll
[2016/07/16 09:25:22 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthci.dll
[2016/07/16 09:25:22 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\trkwks.dll
[2016/07/16 09:25:22 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olecli32.dll
[2016/07/16 09:25:22 | 000,075,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\EhStorClass.sys
[2016/07/16 09:25:22 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2016/07/16 09:25:22 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hbaapi.dll
[2016/07/16 09:25:22 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TabbtnEx.dll
[2016/07/16 09:25:22 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdBth.dll
[2016/07/16 09:25:22 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Storprop.dll
[2016/07/16 09:25:22 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umb.dll
[2016/07/16 09:25:22 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys
[2016/07/16 09:25:22 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsidsc.dll
[2016/07/16 09:25:22 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2016/07/16 09:25:22 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationNotificationWindows.exe
[2016/07/16 09:25:22 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WudfSMCClassExt.dll
[2016/07/16 09:25:22 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WindowsActionDialog.exe
[2016/07/16 09:25:22 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pdhui.dll
[2016/07/16 09:25:22 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFCoinstaller.dll
[2016/07/16 09:25:22 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthudtask.exe
[2016/07/16 09:25:22 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olesvr32.dll
[2016/07/16 09:25:22 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2016/07/16 09:25:22 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwlauncher.exe
[2016/07/16 09:25:22 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsium.dll
[2016/07/16 09:25:22 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpcnsh.dll
[2016/07/16 09:25:22 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcsubs.dll
[2016/07/16 09:25:22 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBCAMD.sys
[2016/07/16 09:25:22 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RpcPing.exe
[2016/07/16 09:25:22 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwsso.dll
[2016/07/16 09:25:22 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2016/07/16 09:25:22 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2016/07/16 09:25:22 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys
[2016/07/16 09:25:22 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcVSp1res.dll
[2016/07/16 09:25:22 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys
[2016/07/16 09:25:22 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys
[2016/07/16 09:25:22 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbperf.dll
[2016/07/16 09:25:22 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdBthProxy.dll
[2016/07/16 09:25:22 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2016/07/16 09:25:22 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsied.dll
[2016/07/16 09:25:22 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Locator.exe
[2016/07/16 09:25:22 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comcat.dll
[2016/07/16 09:25:22 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2016/07/16 09:25:22 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\beep.sys
[2016/07/16 09:25:22 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzsyncres.dll
[2016/07/16 09:25:22 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iprop.dll
[2016/07/16 09:25:21 | 005,865,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwizimg.dll
[2016/07/16 09:25:21 | 001,064,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdskres.dll
[2016/07/16 09:25:21 | 001,061,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diagperf.dll
[2016/07/16 09:25:21 | 000,901,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhuxpresentation.dll
[2016/07/16 09:25:21 | 000,581,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apphelp.dll
[2016/07/16 09:25:21 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psr.exe
[2016/07/16 09:25:21 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfrgui.exe
[2016/07/16 09:25:21 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdbui.dll
[2016/07/16 09:25:21 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\configurationclient.dll
[2016/07/16 09:25:21 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\newdev.dll
[2016/07/16 09:25:21 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scapi.dll
[2016/07/16 09:25:21 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysmon.ocx
[2016/07/16 09:25:21 | 000,415,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwizeng.dll
[2016/07/16 09:25:21 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdlgs.dll
[2016/07/16 09:25:21 | 000,373,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hdwwiz.cpl
[2016/07/16 09:25:21 | 000,339,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2016/07/16 09:25:21 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\swprv.dll
[2016/07/16 09:25:21 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskraid.exe
[2016/07/16 09:25:21 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TieringEngineService.exe
[2016/07/16 09:25:21 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PowerWmiProvider.dll
[2016/07/16 09:25:21 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FileHistory.exe
[2016/07/16 09:25:21 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcat.dll
[2016/07/16 09:25:21 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsbas.dll
[2016/07/16 09:25:21 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uireng.dll
[2016/07/16 09:25:21 | 000,166,400 | ---- | C] (Microsoft® Windows® Operating System) -- C:\WINDOWS\System32\msconfig.exe
[2016/07/16 09:25:21 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ocsetapi.dll
[2016/07/16 09:25:21 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfmon.exe
[2016/07/16 09:25:21 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskpart.exe
[2016/07/16 09:25:21 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dps.dll
[2016/07/16 09:25:21 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhmanagew.exe
[2016/07/16 09:25:21 | 000,133,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uxlib.dll
[2016/07/16 09:25:21 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhuxadapter.dll
[2016/07/16 09:25:21 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhshl.dll
[2016/07/16 09:25:21 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpclean.dll
[2016/07/16 09:25:21 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmview.ocx
[2016/07/16 09:25:21 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\resmon.exe
[2016/07/16 09:25:21 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsvc.dll
[2016/07/16 09:25:21 | 000,095,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootsect.exe
[2016/07/16 09:25:21 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdSched.exe
[2016/07/16 09:25:21 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PNPXAssoc.dll
[2016/07/16 09:25:21 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\davclnt.dll
[2016/07/16 09:25:21 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hotplug.dll
[2016/07/16 09:25:21 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spinf.dll
[2016/07/16 09:25:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhuxgraphics.dll
[2016/07/16 09:25:21 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perftrack.dll
[2016/07/16 09:25:21 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spbcd.dll
[2016/07/16 09:25:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\driverquery.exe
[2016/07/16 09:25:21 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\newdev.exe
[2016/07/16 09:25:21 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\radarrs.dll
[2016/07/16 09:25:21 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndadmin.exe
[2016/07/16 09:25:21 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hdwwiz.exe
[2016/07/16 09:25:21 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsrchapi.dll
[2016/07/16 09:25:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhautoplay.dll
[2016/07/16 09:25:21 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\whoami.exe
[2016/07/16 09:25:21 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhevents.dll
[2016/07/16 09:25:21 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortWindows6Compat.dll
[2016/07/16 09:25:21 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsrchph.dll
[2016/07/16 09:25:21 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PNPXAssocPrx.dll
[2016/07/16 09:25:21 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhlisten.dll
[2016/07/16 09:25:21 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32appinventorycsp.dll
[2016/07/16 09:25:21 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhuxcommon.dll
[2016/07/16 09:25:21 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcleanup.dll
[2016/07/16 09:25:21 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sfc_os.dll
[2016/07/16 09:25:21 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spopk.dll
[2016/07/16 09:25:21 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortWindows61.dll
[2016/07/16 09:25:21 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaui.exe
[2016/07/16 09:25:21 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortServer2003Compat.dll
[2016/07/16 09:25:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddodiag.exe
[2016/07/16 09:25:21 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\waitfor.exe
[2016/07/16 09:25:21 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Apphlpdm.dll
[2016/07/16 09:25:21 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\filetrace.sys
[2016/07/16 09:25:21 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\choice.exe
[2016/07/16 09:25:21 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FdDevQuery.dll
[2016/07/16 09:25:21 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RacEngn.dll
[2016/07/16 09:25:21 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netcfg.exe
[2016/07/16 09:25:21 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mode.com
[2016/07/16 09:25:21 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdProxy.dll
[2016/07/16 09:25:21 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmiprop.dll
[2016/07/16 09:25:21 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ureg.dll
[2016/07/16 09:25:21 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWNet.dll
[2016/07/16 09:25:21 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceEject.exe
[2016/07/16 09:25:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxsstore.dll
[2016/07/16 09:25:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmintf.dll
[2016/07/16 09:25:21 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acu.exe
[2016/07/16 09:25:21 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DefaultPrinterProvider.dll
[2016/07/16 09:25:21 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdbinst.exe
[2016/07/16 09:25:21 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osbaseln.dll
[2016/07/16 09:25:21 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmutil.dll
[2016/07/16 09:25:21 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\replace.exe
[2016/07/16 09:25:21 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsvcctl.dll
[2016/07/16 09:25:21 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tree.com
[2016/07/16 09:25:21 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\runas.exe
[2016/07/16 09:25:21 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdPHost.dll
[2016/07/16 09:25:21 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhuxapi.dll
[2016/07/16 09:25:21 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\doskey.exe
[2016/07/16 09:25:21 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwizres.dll
[2016/07/16 09:25:21 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syssetup.dll
[2016/07/16 09:25:21 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\find.exe
[2016/07/16 09:25:21 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\subst.exe
[2016/07/16 09:25:21 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\print.exe
[2016/07/16 09:25:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pstask.dll
[2016/07/16 09:25:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TieringEngineProxy.dll
[2016/07/16 09:25:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwinsat.dll
[2016/07/16 09:25:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chcp.com
[2016/07/16 09:25:21 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgentTask.dll
[2016/07/16 09:25:21 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InfDefaultInstall.exe
[2016/07/16 09:25:21 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uxlibres.dll
[2016/07/16 09:25:21 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\svsvc.dll
[2016/07/16 09:25:21 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spnet.dll
[2016/07/16 09:25:21 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Nlsdl.dll
[2016/07/16 09:25:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\idndl.dll
[2016/07/16 09:25:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shimeng.dll
[2016/07/16 09:25:21 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sfc.dll
[2016/07/16 09:25:21 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdskres2.dll
[2016/07/16 09:25:16 | 015,048,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDORes.dll
[2016/07/16 09:25:16 | 004,268,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupapi.dll
[2016/07/16 09:25:16 | 001,536,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pla.dll
[2016/07/16 09:25:16 | 001,508,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdt.exe
[2016/07/16 09:25:16 | 001,120,256 | ---- | C] (Microsoft® Windows® Operating System) -- C:\WINDOWS\System32\Taskmgr.exe
[2016/07/16 09:25:16 | 001,014,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DiagCpl.dll
[2016/07/16 09:25:16 | 000,848,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autofmt.exe
[2016/07/16 09:25:16 | 000,624,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devmgr.dll
[2016/07/16 09:25:16 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSATAPI.dll
[2016/07/16 09:25:16 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wusa.exe
[2016/07/16 09:25:16 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdskmgr.dll
[2016/07/16 09:25:16 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LaunchTM.exe
[2016/07/16 09:25:16 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RstrtMgr.dll
[2016/07/16 09:25:16 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmvdsitf.dll
[2016/07/16 09:25:16 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWSD.dll
[2016/07/16 09:25:16 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fundisc.dll
[2016/07/16 09:25:16 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvinst.exe
[2016/07/16 09:25:16 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vssadmin.exe
[2016/07/16 09:25:16 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsutil.dll
[2016/07/16 09:25:16 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Robocopy.exe
[2016/07/16 09:25:16 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupcln.dll
[2016/07/16 09:25:16 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\radardt.dll
[2016/07/16 09:25:16 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmInit.exe
[2016/07/16 09:25:16 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spfileq.dll
[2016/07/16 09:25:16 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdRes.exe
[2016/07/16 09:25:16 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcwutl.dll
[2016/07/16 09:25:16 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sigverif.exe
[2016/07/16 09:25:16 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\openfiles.exe
[2016/07/16 09:25:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzsync.exe
[2016/07/16 09:25:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaui.dll
[2016/07/16 09:25:16 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fmapi.dll
[2016/07/16 09:25:16 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fthsvc.dll
[2016/07/16 09:25:16 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setbcdlocale.dll
[2016/07/16 09:25:16 | 000,055,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ploptin.dll
[2016/07/16 09:25:16 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PnPUnattend.exe
[2016/07/16 09:25:16 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\takeown.exe
[2016/07/16 09:25:16 | 000,052,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gacinstall.dll
[2016/07/16 09:25:16 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsvd.dll
[2016/07/16 09:25:16 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdPnp.dll
[2016/07/16 09:25:16 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpowmi.dll
[2016/07/16 09:25:16 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vds_ps.dll
[2016/07/16 09:25:16 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmocx.dll
[2016/07/16 09:25:16 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnppolicy.dll
[2016/07/16 09:25:16 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cscapi.dll
[2016/07/16 09:25:16 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmcompc.dll
[2016/07/16 09:25:16 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\forfiles.exe
[2016/07/16 09:25:16 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcacli.dll
[2016/07/16 09:25:16 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsiCofire.dll
[2016/07/16 09:25:16 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcadm.dll
[2016/07/16 09:25:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\where.exe
[2016/07/16 09:25:16 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpui.dll
[2016/07/16 09:25:16 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FDResPub.dll
[2016/07/16 09:25:16 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceDisplayStatusManager.dll
[2016/07/16 09:25:16 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vss_ps.dll
[2016/07/16 09:25:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cofiredm.dll
[2016/07/16 09:25:16 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\witnesswmiv2provider.dll
[2016/07/16 09:25:16 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cacls.exe
[2016/07/16 09:25:16 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\timeout.exe
[2016/07/16 09:25:16 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stordiag.exe
[2016/07/16 09:25:16 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MemoryDiagnostic.dll
[2016/07/16 09:25:16 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcalua.exe
[2016/07/16 09:25:16 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clip.exe
[2016/07/16 09:25:16 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cscdll.dll
[2016/07/16 09:25:16 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comp.exe
[2016/07/16 09:25:16 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsldr.exe
[2016/07/16 09:25:16 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fc.exe
[2016/07/16 09:25:16 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\davhlpr.dll
[2016/07/16 09:25:16 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcdProp.dll
[2016/07/16 09:25:16 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cofire.exe
[2016/07/16 09:25:16 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkwudrv.dll
[2016/07/16 09:25:16 | 000,017,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psapi.dll
[2016/07/16 09:25:16 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EsdSip.dll
[2016/07/16 09:25:16 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RmClient.exe
[2016/07/16 09:25:16 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ktmutil.exe
[2016/07/16 09:25:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\label.exe
[2016/07/16 09:25:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clb.dll
[2016/07/16 09:25:16 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secinit.exe
[2016/07/16 09:25:16 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsavailux.exe
[2016/07/16 09:25:16 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regidle.dll
[2016/07/16 09:25:16 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDOIProxy.dll
[2016/07/16 09:25:16 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcwrun.exe
[2016/07/16 09:25:16 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifsutilx.dll
[2016/07/16 09:25:16 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaevts.dll
[2016/07/16 09:25:16 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeSyncTask.dll
[2016/07/16 09:25:16 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_ISCII.DLL
[2016/07/16 09:25:16 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpts.dll
[2016/07/16 09:25:16 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FamilySafetyExt.dll
[2016/07/16 09:25:16 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regedt32.exe
[2016/07/16 09:25:16 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acproxy.dll
[2016/07/16 09:25:16 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\help.exe
[2016/07/16 09:25:16 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DefaultDeviceManager.dll
[2016/07/16 09:25:16 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeDateMUICallback.dll
[2016/07/16 09:25:16 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmpm.dll
[2016/07/16 09:25:16 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\plasrv.exe
[2016/07/16 09:25:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft-windows-storage-tiering-events.dll
[2016/07/16 09:25:15 | 003,055,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSAT.exe
[2016/07/16 09:25:15 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcndmgr.dll
[2016/07/16 09:25:15 | 001,543,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmc.exe
[2016/07/16 09:25:15 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMSPDMOD.DLL
[2016/07/16 09:25:15 | 000,871,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autoconv.exe
[2016/07/16 09:25:15 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\objsel.dll
[2016/07/16 09:25:15 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsdyn.dll
[2016/07/16 09:25:15 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\filemgmt.dll
[2016/07/16 09:25:15 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\localsec.dll
[2016/07/16 09:25:15 | 000,394,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shrpubw.exe
[2016/07/16 09:25:15 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMPhoto.dll
[2016/07/16 09:25:15 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msihnd.dll
[2016/07/16 09:25:15 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcbuilder.exe
[2016/07/16 09:25:15 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcbase.dll
[2016/07/16 09:25:15 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mycomput.dll
[2016/07/16 09:25:15 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WebClnt.dll
[2016/07/16 09:25:15 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\els.dll
[2016/07/16 09:25:15 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\miguiresource.dll
[2016/07/16 09:25:15 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cic.dll
[2016/07/16 09:25:15 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wecsvc.dll
[2016/07/16 09:25:15 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsprop.dll
[2016/07/16 09:25:15 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netid.dll
[2016/07/16 09:25:15 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysclass.dll
[2016/07/16 09:25:15 | 000,124,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HdcpHandler.dll
[2016/07/16 09:25:15 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmwmicsp.dll
[2016/07/16 09:25:15 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcshext.dll
[2016/07/16 09:25:15 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\luafv.sys
[2016/07/16 09:25:15 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompMgmtLauncher.exe
[2016/07/16 09:25:15 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdi.dll
[2016/07/16 09:25:15 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxSysprep.dll
[2016/07/16 09:25:15 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtfwd.dll
[2016/07/16 09:25:15 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventvwr.exe
[2016/07/16 09:25:15 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wecutil.exe
[2016/07/16 09:25:15 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\loghours.dll
[2016/07/16 09:25:15 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MaintenanceUI.dll
[2016/07/16 09:25:15 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msiexec.exe
[2016/07/16 09:25:15 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EnterpriseDesktopAppMgmtCSP.dll
[2016/07/16 09:25:15 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wecapi.dll
[2016/07/16 09:25:15 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DfsShlEx.dll
[2016/07/16 09:25:15 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provplatformdesktop.dll
[2016/07/16 09:25:15 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Playback.ProxyStub.dll
[2016/07/16 09:25:15 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\bfsvc.exe
[2016/07/16 09:25:15 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MDMAgent.exe
[2016/07/16 09:25:15 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsigd.dll
[2016/07/16 09:25:15 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provisioningcommandscsp.dll
[2016/07/16 09:25:15 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acppage.dll
[2016/07/16 09:25:15 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\signdrv.dll
[2016/07/16 09:25:15 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DmApiSetExtImplDesktop.dll
[2016/07/16 09:25:15 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\compact.exe
[2016/07/16 09:25:15 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cipher.exe
[2016/07/16 09:25:15 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provlaunch.exe
[2016/07/16 09:25:15 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VoiceActivationManager.dll
[2016/07/16 09:25:15 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cnvfat.dll
[2016/07/16 09:25:15 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pots.dll
[2016/07/16 09:25:15 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DmNotificationBroker.exe
[2016/07/16 09:25:15 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msisip.dll
[2016/07/16 09:25:15 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsutilext.dll
[2016/07/16 09:25:15 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provmigrate.dll
[2016/07/16 09:25:15 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\convert.exe
[2016/07/16 09:25:15 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msiltcfg.dll
[2016/07/16 09:25:15 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kernelceip.dll
[2016/07/16 09:25:15 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.BackgroundPlayback.exe
[2016/07/16 09:25:15 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensApi.dll
[2016/07/16 09:25:15 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdext.dll
[2016/07/16 09:25:15 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acledit.dll
[2016/07/16 09:25:15 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osuninst.dll
[2016/07/16 09:25:14 | 001,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certmgr.dll
[2016/07/16 09:25:14 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedyn.dll
[2016/07/16 09:25:14 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OmaDmAgent.dll
[2016/07/16 09:25:14 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSchedExe.exe
[2016/07/16 09:25:14 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Management.Lockdown.dll
[2016/07/16 09:25:14 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Management.Workplace.WorkplaceSettings.dll
[2016/07/16 09:25:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msimsg.dll
[2016/07/16 09:25:14 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msiwer.dll
[2016/07/16 09:25:10 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanpref.dll
[2016/07/16 09:25:10 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CellularAPI.dll
[2016/07/16 09:25:10 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmsRouterSvc.dll
[2016/07/16 09:25:10 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlangpui.dll
[2016/07/16 09:25:10 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2016/07/16 09:25:10 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpui.dll
[2016/07/16 09:25:10 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3svc.dll
[2016/07/16 09:25:10 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafWfdProvider.dll
[2016/07/16 09:25:10 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll
[2016/07/16 09:25:10 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlandlg.dll
[2016/07/16 09:25:10 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WiFiDisplay.dll
[2016/07/16 09:25:10 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WLanHC.dll
[2016/07/16 09:25:10 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\L2SecHC.dll
[2016/07/16 09:25:10 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3mm.dll
[2016/07/16 09:25:10 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlgpclnt.dll
[2016/07/16 09:25:10 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2016/07/16 09:25:10 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll
[2016/07/16 09:25:10 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanext.exe
[2016/07/16 09:25:10 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwancfg.dll
[2016/07/16 09:25:10 | 000,067,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwapi.dll
[2016/07/16 09:25:10 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vwififlt.sys
[2016/07/16 09:25:10 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2016/07/16 09:25:10 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2016/07/16 09:25:10 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2nacp.dll
[2016/07/16 09:25:10 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWanHC.dll
[2016/07/16 09:25:10 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WwanRadioManager.dll
[2016/07/16 09:25:10 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlanRadioManager.dll
[2016/07/16 09:25:10 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll
[2016/07/16 09:25:10 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ihvrilproxy.dll
[2016/07/16 09:25:10 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2016/07/16 09:25:10 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rilproxy.dll
[2016/07/16 09:25:10 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CredentialMigrationHandler.dll
[2016/07/16 09:25:10 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsplib.dll
[2016/07/16 09:25:10 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dot3Conn.dll
[2016/07/16 09:25:10 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vwifibus.sys
[2016/07/16 09:25:10 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanutil.dll
[2016/07/16 09:25:09 | 005,088,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWSnapin.dll
[2016/07/16 09:25:09 | 001,648,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RASMM.dll
[2016/07/16 09:25:09 | 001,315,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\connect.dll
[2016/07/16 09:25:09 | 001,184,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\networkexplorer.dll
[2016/07/16 09:25:09 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onexui.dll
[2016/07/16 09:25:09 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasdlg.dll
[2016/07/16 09:25:09 | 000,577,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IasMigPlugin.dll
[2016/07/16 09:25:09 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VAN.dll
[2016/07/16 09:25:09 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WLanConn.dll
[2016/07/16 09:25:09 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprofmsvc.dll
[2016/07/16 09:25:09 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irprops.cpl
[2016/07/16 09:25:09 | 000,379,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcncsvc.dll
[2016/07/16 09:25:09 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iassdo.dll
[2016/07/16 09:25:09 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netcorehc.dll
[2016/07/16 09:25:09 | 000,301,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWGP.dll
[2016/07/16 09:25:09 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hnetcfg.dll
[2016/07/16 09:25:09 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfgui.dll
[2016/07/16 09:25:09 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwtpdui.dll
[2016/07/16 09:25:09 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lltdsvc.dll
[2016/07/16 09:25:09 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netman.dll
[2016/07/16 09:25:09 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iassam.dll
[2016/07/16 09:25:09 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsigd.dll
[2016/07/16 09:25:09 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irftp.exe
[2016/07/16 09:25:09 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprofm.dll
[2016/07/16 09:25:09 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmgp.dll
[2016/07/16 09:25:09 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tunnel.sys
[2016/07/16 09:25:09 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys
[2016/07/16 09:25:09 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasnap.dll
[2016/07/16 09:25:09 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWWizFwk.dll
[2016/07/16 09:25:09 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpprxm.dll
[2016/07/16 09:25:09 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkStatus.dll
[2016/07/16 09:25:09 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafWCN.dll
[2016/07/16 09:25:09 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnApi.dll
[2016/07/16 09:25:09 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeParserTask.exe
[2016/07/16 09:25:09 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fphc.dll
[2016/07/16 09:25:09 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWCN.dll
[2016/07/16 09:25:09 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irda.sys
[2016/07/16 09:25:09 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdSSDP.dll
[2016/07/16 09:25:09 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnshc.dll
[2016/07/16 09:25:09 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndishc.dll
[2016/07/16 09:25:09 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iashlpr.dll
[2016/07/16 09:25:09 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsockhc.dll
[2016/07/16 09:25:09 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\correngine.dll
[2016/07/16 09:25:09 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rspndr.sys
[2016/07/16 09:25:09 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adhsvc.dll
[2016/07/16 09:25:09 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unimdmat.dll
[2016/07/16 09:25:09 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasdiag.dll
[2016/07/16 09:25:09 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SMSRouter.dll
[2016/07/16 09:25:09 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3hc.dll
[2016/07/16 09:25:09 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NapiNSP.dll
[2016/07/16 09:25:09 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\lltdio.sys
[2016/07/16 09:25:09 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NAPCRYPT.DLL
[2016/07/16 09:25:09 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\networkitemfactory.dll
[2016/07/16 09:25:09 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeXmlParser.dll
[2016/07/16 09:25:09 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Wwanpref.dll
[2016/07/16 09:25:09 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnNetsh.dll
[2016/07/16 09:25:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kmddsp.tsp
[2016/07/16 09:25:09 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lltdapi.dll
[2016/07/16 09:25:09 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SetNetworkLocationFlyout.dll
[2016/07/16 09:25:09 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nshhttp.dll
[2016/07/16 09:25:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SetProxyCredential.dll
[2016/07/16 09:25:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnEapPeerProxy.dll
[2016/07/16 09:25:09 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnEapAuthProxy.dll
[2016/07/16 09:25:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\RNDISMP.sys
[2016/07/16 09:25:09 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthpanapi.dll
[2016/07/16 09:25:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SetNetworkLocation.dll
[2016/07/16 09:25:09 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncuprov.dll
[2016/07/16 09:25:09 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\npmproxy.dll
[2016/07/16 09:25:09 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll
[2016/07/16 09:25:09 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\serwvdrv.dll
[2016/07/16 09:25:09 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmsDeviceAccessRevocation.dll
[2016/07/16 09:25:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmproxy.dll
[2016/07/16 09:25:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adhapi.dll
[2016/07/16 09:25:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmlprovi.dll
[2016/07/16 09:25:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umdmxfrm.dll
[2016/07/16 09:25:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshelper.dll
[2016/07/16 09:25:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys
[2016/07/16 09:25:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpprxp.dll
[2016/07/16 09:25:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsock32.dll
[2016/07/16 09:25:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys
[2016/07/16 09:25:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpprxc.dll
[2016/07/16 09:25:09 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshrm.dll
[2016/07/16 09:25:09 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmsprep.dll
[2016/07/16 09:25:09 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hnetmon.dll
[2016/07/16 09:25:09 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcmonitor.dll
[2016/07/16 09:25:09 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Firewall.cpl
[2016/07/16 09:25:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ws2help.dll
[2016/07/16 09:25:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rnr20.dll
[2016/07/16 09:25:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msafd.dll
[2016/07/16 09:25:09 | 000,002,560 | ---- | C] (Micro