OTL logfile created on: 15/04/2017 13:25:33 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\S.INFO\Desktop
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.14393.0)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
3,89 Gb Total Physical Memory | 2,47 Gb Available Physical Memory | 63,54% Memory free
5,26 Gb Paging File | 3,87 Gb Available in Paging File | 73,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,46 Gb Total Space | 123,74 Gb Free Space | 83,35% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 148,71 Gb Free Space | 99,78% Space Free | Partition Type: NTFS
 
Computer Name: TOSHIBA | User Name: S.INFO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - File not found -- 
PRC - [2017/04/15 03:13:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\S.INFO\Desktop\OTL.exe
PRC - [2017/04/14 22:48:12 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler.exe
PRC - [2017/04/14 22:38:44 | 000,554,176 | ---- | M] (Microsoft Corporation) -- C:\Users\S.INFO\AppData\Local\Microsoft\OneDrive\OneDrive.exe
PRC - [2015/10/08 19:34:18 | 000,255,168 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2017/04/14 22:37:38 | 000,679,624 | ---- | M] () -- C:\Users\S.INFO\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\ClientTelemetry.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2017/04/14 21:37:04 | 000,447,488 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2017/04/14 21:36:41 | 000,781,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:36:07 | 000,337,408 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:36:06 | 000,409,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:35:17 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2017/04/14 21:34:59 | 001,980,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2017/04/14 21:34:36 | 001,836,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:33:23 | 000,077,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2017/04/14 21:32:49 | 000,803,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
SRV:[b]64bit:[/b] - [2017/04/14 21:32:07 | 000,765,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2017/04/14 21:32:00 | 000,539,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:56 | 001,025,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:39 | 000,326,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:37 | 000,614,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:35 | 004,136,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:27 | 002,889,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe -- (Sense)
SRV:[b]64bit:[/b] - [2017/04/14 21:31:00 | 000,095,232 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:29 | 000,203,776 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2017/04/14 21:29:38 | 000,407,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:29:35 | 000,691,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2017/04/14 21:29:23 | 003,318,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2017/04/14 21:29:10 | 000,103,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2017/04/14 21:29:07 | 001,020,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2017/04/14 21:28:54 | 002,104,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:28:12 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2017/04/14 21:27:53 | 001,312,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2017/04/14 21:27:49 | 001,184,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:27:36 | 001,012,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2017/04/14 21:27:15 | 000,347,328 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:27:14 | 000,337,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:39 | 000,650,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:37 | 000,285,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:16 | 000,265,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:11 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:11 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2017/04/14 21:26:08 | 000,983,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:52 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:35 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:34 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:25 | 000,718,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:22 | 000,823,136 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:15 | 002,264,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:25:00 | 000,560,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2017/04/14 21:24:26 | 001,512,448 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2017/04/14 21:24:12 | 000,765,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2017/04/14 21:24:11 | 001,234,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2016/07/16 23:45:53 | 001,227,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService)
SRV:[b]64bit:[/b] - [2016/07/16 23:45:46 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2016/07/16 12:43:50 | 000,082,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2016/07/16 12:43:47 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2016/07/16 12:43:18 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:42 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:39 | 000,161,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:38 | 000,057,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:38 | 000,055,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:36 | 000,183,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,093,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_a206a2)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:23 | 000,366,592 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:20 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:16 | 000,287,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:16 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:16 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:13 | 000,590,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:12 | 000,519,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:12 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,387,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,358,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,234,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:07 | 001,159,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:06 | 000,729,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:06 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:05 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:05 | 000,152,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:05 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2016/07/16 12:42:04 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
SRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,321,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2016/05/03 23:30:46 | 000,337,888 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV:[b]64bit:[/b] - [2015/10/08 19:34:18 | 000,255,168 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService)
SRV - [2017/04/14 21:36:56 | 003,369,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\syswow64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2017/04/14 21:35:06 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2017/04/14 21:32:25 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\syswow64\Unistore.dll -- (UnistoreSvc)
SRV - [2017/04/14 21:29:23 | 003,318,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2017/04/14 21:27:26 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\syswow64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2017/04/14 21:25:54 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\smphost.dll -- (smphost)
SRV - [2016/05/03 23:30:46 | 000,299,488 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\IntelCpHeciSvc.exe -- (cphs)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2017/04/14 21:37:05 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2017/04/14 21:37:04 | 000,220,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2017/04/14 21:36:50 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2017/04/14 21:35:13 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2017/04/14 21:34:51 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2017/04/14 21:34:16 | 000,045,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
DRV:[b]64bit:[/b] - [2017/04/14 21:31:15 | 000,108,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2017/04/14 21:30:56 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2017/04/14 21:29:58 | 000,544,608 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2017/04/14 21:29:37 | 000,719,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2017/04/14 21:29:06 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2017/04/14 21:29:00 | 000,062,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2017/04/14 21:27:02 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
DRV:[b]64bit:[/b] - [2017/04/14 21:26:27 | 000,198,496 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2017/04/14 21:26:02 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2017/04/14 21:25:55 | 000,227,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2017/04/14 21:25:25 | 000,279,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2017/04/14 21:25:22 | 000,126,304 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm)
DRV:[b]64bit:[/b] - [2017/04/14 21:25:13 | 000,119,648 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
DRV:[b]64bit:[/b] - [2017/04/14 21:25:07 | 000,376,160 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2017/04/14 21:24:39 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2017/04/14 21:24:06 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2016/09/03 00:40:44 | 000,052,904 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
DRV:[b]64bit:[/b] - [2016/07/21 21:24:44 | 000,053,888 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:[b]64bit:[/b] - [2016/07/16 23:46:05 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:57 | 000,179,040 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:53 | 000,040,288 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:47 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:44 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:42 | 000,157,024 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr)
DRV:[b]64bit:[/b] - [2016/07/16 23:45:42 | 000,141,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs)
DRV:[b]64bit:[/b] - [2016/07/16 12:44:01 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2016/07/16 12:43:06 | 000,123,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2016/07/16 12:43:04 | 000,290,144 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2016/07/16 12:43:04 | 000,044,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:38 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:36 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:36 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:36 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:35 | 000,928,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:28 | 000,107,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:28 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,263,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,201,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,151,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:27 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:23 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:22 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:18 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:12 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:11 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,168,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,156,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,070,144 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\registry.sys -- (clreg)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:09 | 000,066,560 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,210,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,126,816 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,090,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2016/07/16 12:42:03 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,535,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,381,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,137,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,096,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:55 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,176,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,064,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,050,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,033,280 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:54 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 002,104,160 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,842,584 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,589,824 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,526,176 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,346,976 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,123,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scmdisk0101.sys -- (scmdisk0101)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,108,896 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,105,824 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,101,216 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,082,776 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,077,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,064,864 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,061,792 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,032,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,032,096 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,016,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:52 | 003,418,976 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:52 | 002,224,128 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:52 | 000,533,856 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:52 | 000,048,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:52 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 003,717,120 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane_13.sys -- (rtwlane_13)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2016/07/16 12:41:50 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
DRV:[b]64bit:[/b] - [2016/05/03 23:30:46 | 003,811,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2015/12/01 20:46:03 | 000,038,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2015/10/08 19:34:16 | 000,627,392 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2015/10/08 19:34:16 | 000,051,392 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2015/10/08 19:34:16 | 000,050,880 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Smb_driver_AMDASF.sys -- (SmbDrv)
DRV:[b]64bit:[/b] - [2015/08/21 11:50:48 | 000,463,112 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2015/07/29 06:54:54 | 000,054,424 | ---- | M] (Toshiba Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Thotkey.sys -- (Thotkey)
DRV:[b]64bit:[/b] - [2014/10/10 09:37:16 | 000,129,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV - [2016/07/16 12:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
 
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcbeddldohkakodfncjnkkjfojggbahp\1.3_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
CHR - Extension: No name found = C:\Users\S.INFO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
 
O1 HOSTS File: ([2017/04/14 21:38:16 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe File not found
O4:[b]64bit:[/b] - HKLM..\Run: [WindowsDefender] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
O4 - HKCU..\Run: [OneDrive] C:\Users\S.INFO\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{14658dfc-07d8-4c43-8b63-48080c09dee0}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{32d1d7fe-6bd8-445d-b5ec-66ea04d93073}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{607b0516-75f0-4506-80a1-cd7c8a8f846b}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\syswow64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\syswow64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dosvc - C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] shpamsvc - C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DcpSvc - C:\Windows\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] WpnService - C:\Windows\SysNative\wpnservice.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wisvc - C:\Windows\SysNative\FlightSettings.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] RetailDemo - C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
 
 
SafeBootMin:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] iai2c.sys - C:\Windows\SysNative\drivers\iai2c.sys (Intel(R) Corporation)
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] SpbCx.sys - C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] uefi.sys - C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin:[b]64bit:[/b] {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\Windows\syswow64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\Windows\syswow64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
 
SafeBootNet:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] SpbCx.sys - C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] uefi.sys - C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet:[b]64bit:[/b] {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: CoreMessagingRegistrar - C:\Windows\syswow64\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: StateRepository - C:\Windows\syswow64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
 
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
ActiveX:[b]64bit:[/b] {31699572-6286-3C1C-A03C-511D59181038} - .NET Framework
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - U
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {71A5A636-652F-3BE0-BC14-02545E9F5EC7} - .NET Framework
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - 
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\syswow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2017/04/15 03:12:47 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\S.INFO\Desktop\OTL.exe
[2017/04/14 22:41:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2017/04/14 22:41:44 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Google
[2017/04/14 22:37:56 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\MicrosoftEdge
[2017/04/14 22:37:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2017/04/14 22:36:41 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Comms
[2017/04/14 22:34:33 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Publishers
[2017/04/14 22:33:20 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\VirtualStore
[2017/04/14 22:33:15 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2017/04/14 22:33:15 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\Searches
[2017/04/14 22:33:15 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2017/04/14 22:33:04 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Packages
[2017/04/14 22:33:04 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Roaming\Adobe
[2017/04/14 22:33:00 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\TileDataLayer
[2017/04/14 22:32:55 | 000,000,000 | -H-D | C] -- C:\Users\S.INFO\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2017/04/14 22:32:47 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\ConnectedDevicesPlatform
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
[2017/04/14 22:32:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2017/04/14 22:28:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2017/04/14 22:21:23 | 000,000,000 | --SD | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft
[2017/04/14 22:21:23 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2017/04/14 22:21:23 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2017/04/14 22:21:23 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2017/04/14 22:21:23 | 000,000,000 | R--D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Voisinage réseau
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Voisinage d'impression
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\AppData\Local\Temporary Internet Files
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\SendTo
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Recent
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Modèles
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Documents\Mes vidéos
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Documents\Mes images
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Mes documents
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Menu Démarrer
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Documents\Ma musique
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Local Settings
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\AppData\Local\Historique
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Cookies
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\Application Data
[2017/04/14 22:21:23 | 000,000,000 | -HSD | C] -- C:\Users\S.INFO\AppData\Local\Application Data
[2017/04/14 22:21:23 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Temp
[2017/04/14 22:21:23 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Local\Microsoft
[2017/04/14 22:21:23 | 000,000,000 | ---D | C] -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2017/04/14 22:21:22 | 000,000,000 | -H-D | C] -- C:\Users\S.INFO\AppData
[2017/04/14 22:13:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SRSLabs
[2017/04/14 22:12:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2017/04/14 22:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2017/04/14 22:12:19 | 000,081,416 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL
[2017/04/14 22:12:07 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2017/04/14 22:11:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2017/04/14 22:06:50 | 002,716,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2017/04/14 22:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2017/04/14 22:05:20 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2017/04/14 22:03:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2017/04/14 22:01:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\InfusedApps
[2017/04/14 22:01:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2017/04/14 22:00:55 | 000,000,000 | ---D | C] -- C:\Windows.old
[2017/04/14 22:00:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2017/04/14 22:00:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Microsoft
[2017/04/14 21:59:23 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2017/04/14 21:58:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\Setup
[2017/04/14 21:53:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2017/04/14 21:53:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\OCR
[2017/04/14 21:53:24 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2017/04/14 21:53:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2017/04/14 21:53:24 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2017/04/14 21:53:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2017/04/14 21:51:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\winrm
[2017/04/14 21:51:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WCN
[2017/04/14 21:51:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sysprep
[2017/04/14 21:51:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\slmgr
[2017/04/14 21:51:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Printing_Admin_Scripts
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winrm
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WCN
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\slmgr
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Printing_Admin_Scripts
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\fr-FR
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\fr-FR
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\en-US
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\en-US
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en
[2017/04/14 21:51:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\0409
[2017/04/14 21:51:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr
[2017/04/14 21:51:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en
[2017/04/14 21:51:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\fr-FR
[2017/04/14 21:51:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\fr-FR
[2017/04/14 21:51:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\en-US
[2017/04/14 21:51:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\en-US
[2017/04/14 21:51:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\0409
[2017/04/14 21:51:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\fr-FR
[2017/04/14 21:51:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\en-US
[2017/04/14 21:51:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\DigitalLocker
[2017/04/14 21:45:39 | 000,828,408 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2017/04/14 21:45:39 | 000,176,632 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2017/04/14 21:43:15 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msclmd.dll
[2017/04/14 21:43:15 | 000,077,832 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\opencl.dll
[2017/04/14 21:42:56 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msclmd.dll
[2017/04/14 21:42:40 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Nui
[2017/04/14 21:42:40 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\F12
[2017/04/14 21:42:40 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\DiagSvcs
[2017/04/14 21:42:40 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Configuration
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-TW
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-HK
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-CN
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WinMetadata
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WindowsPowerShell
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Web
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\wbem
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Vss
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\uk-UA
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\tr-TR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\tracing
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\th-TH
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Tasks
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Tasks
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\TAPI
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sv-SE
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sru
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-RS
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-CS
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sppui
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\spp
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech_OneCore
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\SMI
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sl-SI
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sk-SK
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\setup
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ru-RU
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ro-RO
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\restore
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Recovery
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RasToast
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ras
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-PT
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-BR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pl-PL
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\oobe
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nl-NL
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\networklist
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\NDF
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nb-NO
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MUI
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MsDtc
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MSDRM
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migwiz
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migration
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MailContactsCalendarSync
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Macromed
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lv-LV
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lt-LT
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\LogFiles
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Licenses
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ko-KR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ja-JP
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\it-IT
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Ipmi
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InstallShield
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InputMethod
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\inetsrv
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\IME
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\icsxml
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hu-HU
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hr-HR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\he-IL
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicyUsers
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicy
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\FxsTmp
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-FR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-CA
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fi-FI
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\et-EE
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-MX
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-ES
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-US
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-GB
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\el-GR
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\DriverStore
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\downlevel
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Dism
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\de-DE
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\da-DK
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\cs-CZ
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\config
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Com
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\catroot
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Bthprops
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\bg-BG
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ar-SA
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AppLocker
[2017/04/14 21:42:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AdvancedInstallers
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Nui
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\F12
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\dsc
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\DiagSvcs
[2017/04/14 21:42:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Configuration
[2017/04/14 21:42:39 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Media
[2017/04/14 21:42:39 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\PrintDialog
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\MiracastView
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\Microsoft.NET
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\ImmersiveControlPanel
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\WINDOWS\assembly
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[2017/04/14 21:42:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
[2017/04/14 21:42:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Windows Sidebar
[2017/04/14 21:42:39 | 000,000,000 | -HSD | C] -- C:\Program Files (x86)\Windows Sidebar
[2017/04/14 21:42:39 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2017/04/14 21:42:39 | 000,000,000 | -HSD | C] -- C:\WINDOWS\BitLockerDiscoveryVolumeContents
[2017/04/14 21:42:39 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsApps
[2017/04/14 21:42:39 | 000,000,000 | -H-D | C] -- C:\ProgramData
[2017/04/14 21:42:39 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ELAMBKUP
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-TW
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-HK
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-CN
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinMetadata
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winevt
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WindowsPowerShell
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\WindowsPowerShell
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WindowsPowerShell
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Photo Viewer
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows NT
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Multimedia Platform
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Mail
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender Advanced Threat Protection
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Defender
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioPlugIns
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioDatabase
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WDI
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\wbem
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\USOPrivate
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\uk-UA
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\tr-TR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\th-TH
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Tasks
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\syswow64
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemResources
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SystemResetPlatform
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemApps
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\System
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Sysprep
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sv-SE
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sru
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-RS
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-CS
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sppui
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spp
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spool
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech_OneCore
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech_OneCore
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System\Speech
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftwareDistribution
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sl-SI
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sk-SK
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SKB
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellExperiences
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\setup
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Services
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SecureBootUpdates
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\schemas
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SchCache
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ru-RU
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ro-RO
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\restore
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\rescache
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\RemotePackages
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Recovery
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\RasToast
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ras
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-PT
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-BR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ProximityToast
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\prefetch
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\PolicyDefinitions
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\PointOfService
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pl-PL
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\PLA
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Performance
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\oobe
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nl-NL
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\networklist
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\NDF
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nb-NO
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MUI
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MsDtc
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MSDRM
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\ModemLogs
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migwiz
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migration
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Migration
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Shared
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MailContactsCalendarSync
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Macromed
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lv-LV
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lt-LT
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\LogFiles
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\LiveKernelReports
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Licenses
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ko-KR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ja-jp
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\it-IT
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Ipmi
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Explorer
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\InputMethod
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\InputMethod
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\inetsrv
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\IME
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\IME
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\icsxml
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hu-HU
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hr-HR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\he-IL
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\GroupPolicyUsers
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\GroupPolicy
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\GameBarPresenceWriter
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\FxsTmp
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-FR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-CA
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fi-FI
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\et-EE
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\etc
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-MX
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-ES
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-US
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-GB
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\el-GR
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\downlevel
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Dism
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\diagnostics
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\de-DE
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\debug
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DDFs
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\da-DK
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\cs-CZ
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Comms
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Com
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CodeIntegrity
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\catroot2
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Bthprops
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Branding
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Boot
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Boot
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\bg-BG
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\bcastdvr
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ar-SA
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppReadiness
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appraiser
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AppLocker
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\appcompat
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AdvancedInstallers
[2017/04/14 21:42:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2017/04/14 21:42:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF
[2017/04/14 21:42:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers
[2017/04/14 21:40:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\INF
[2017/04/14 21:18:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\CbsTemp
[2017/04/14 21:09:10 | 000,000,000 | R--D | C] -- C:\Users
[2017/04/14 21:09:10 | 000,000,000 | R--D | C] -- C:\Program Files
[2017/04/14 21:09:10 | 000,000,000 | R--D | C] -- C:\Program Files (x86)
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\Windows
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SMI
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\servicing
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DriverStore
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\config
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files
[2017/04/14 21:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CatRoot
[2017/04/14 21:08:43 | 000,000,000 | ---D | C] -- C:\$WINDOWS.~BT
[2017/04/01 16:18:32 | 000,857,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EmailApis.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2017/04/15 13:26:52 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2017/04/15 13:17:59 | 1669,038,080 | -HS- | M] () -- C:\hiberfil.sys
[2017/04/15 13:17:58 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2017/04/15 03:21:35 | 001,886,156 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2017/04/15 03:21:35 | 000,844,746 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2017/04/15 03:21:35 | 000,740,720 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2017/04/15 03:21:35 | 000,161,842 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2017/04/15 03:21:35 | 000,144,310 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2017/04/15 03:17:22 | 000,000,144 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2017/04/15 03:17:17 | 000,002,358 | ---- | M] () -- C:\Users\S.INFO\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/04/15 03:16:02 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2017/04/15 03:13:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\S.INFO\Desktop\OTL.exe
[2017/04/14 22:46:38 | 000,002,334 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2017/04/14 22:33:12 | 000,000,451 | ---- | M] () -- C:\WINDOWS\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
[2017/04/14 22:31:14 | 000,005,512 | ---- | M] () -- C:\Users\S.INFO\Desktop\Applications supprimées.html
[2017/04/14 22:24:30 | 000,206,392 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2017/04/14 22:12:53 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf
[2017/04/14 22:12:24 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
[2017/04/14 22:12:23 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
[2017/04/14 22:11:25 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2017/04/14 21:50:55 | 000,350,774 | ---- | M] () -- C:\WINDOWS\SysNative\perfi00C.dat
[2017/04/14 21:50:55 | 000,040,528 | ---- | M] () -- C:\WINDOWS\SysNative\perfd00C.dat
[2017/04/14 21:50:48 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\fr-FR\spaceport.sys.mui
[2017/04/14 21:50:20 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\fr-FR\ndis.sys.mui
[2017/04/14 21:38:34 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2017/04/14 21:38:33 | 000,209,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msclmd.dll
[2017/04/14 21:38:32 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysWow64\dssec.dat
[2017/04/14 21:38:16 | 000,017,463 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\services
[2017/04/14 21:38:16 | 000,003,683 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2017/04/14 21:38:16 | 000,001,358 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\protocol
[2017/04/14 21:38:16 | 000,000,824 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2017/04/14 21:38:16 | 000,000,407 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\networks
[2017/04/14 21:38:10 | 000,015,462 | ---- | M] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2017/04/14 21:38:09 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msclmd.dll
[2017/04/14 21:38:09 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2017/04/14 21:38:06 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysNative\dssec.dat
[2017/04/14 21:38:05 | 000,000,858 | ---- | M] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2017/04/14 21:37:52 | 000,296,742 | ---- | M] () -- C:\WINDOWS\SysNative\perfi009.dat
[2017/04/14 21:37:52 | 000,033,362 | ---- | M] () -- C:\WINDOWS\SysNative\perfd009.dat
[2017/04/14 21:37:16 | 001,709,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll
[2017/04/14 21:37:16 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininetlui.dll
[2017/04/14 21:37:15 | 002,681,200 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2017/04/14 21:37:15 | 001,358,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2017/04/14 21:37:15 | 000,572,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhotoScreensaver.scr
[2017/04/14 21:37:14 | 001,762,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll
[2017/04/14 21:37:14 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmpdxm.dll
[2017/04/14 21:37:13 | 001,726,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2017/04/14 21:37:13 | 000,579,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddraw.dll
[2017/04/14 21:37:13 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ddrawex.dll
[2017/04/14 21:37:11 | 000,820,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintRenderAPIHost.DLL
[2017/04/14 21:37:10 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2017/04/14 21:37:10 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.SystemManagement.dll
[2017/04/14 21:37:09 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2017/04/14 21:37:09 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pdh.dll
[2017/04/14 21:37:07 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2017/04/14 21:37:06 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontext.dll
[2017/04/14 21:37:05 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcuiu.dll
[2017/04/14 21:37:05 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\xinputhid.sys
[2017/04/14 21:37:04 | 000,447,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\das.dll
[2017/04/14 21:37:04 | 000,220,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys
[2017/04/14 21:37:04 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dasHost.exe
[2017/04/14 21:37:04 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceassociation.dll
[2017/04/14 21:37:03 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfui.dll
[2017/04/14 21:37:02 | 000,380,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Classpnp.sys
[2017/04/14 21:37:02 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpninprc.dll
[2017/04/14 21:37:00 | 000,360,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bdechangepin.exe
[2017/04/14 21:36:59 | 003,617,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2017/04/14 21:36:59 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
[2017/04/14 21:36:59 | 000,114,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32u.dll
[2017/04/14 21:36:57 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BluetoothDesktopHandlers.dll
[2017/04/14 21:36:56 | 003,369,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
[2017/04/14 21:36:56 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rshx32.dll
[2017/04/14 21:36:55 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Radios.dll
[2017/04/14 21:36:55 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
[2017/04/14 21:36:51 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
[2017/04/14 21:36:50 | 000,798,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2017/04/14 21:36:50 | 000,379,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
[2017/04/14 21:36:50 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2017/04/14 21:36:50 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
[2017/04/14 21:36:48 | 000,981,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll
[2017/04/14 21:36:47 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll
[2017/04/14 21:36:46 | 001,354,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2017/04/14 21:36:46 | 000,526,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2017/04/14 21:36:44 | 000,653,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AccountsControl.dll
[2017/04/14 21:36:43 | 000,640,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\evr.dll
[2017/04/14 21:36:42 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEStoreEventHandlers.dll
[2017/04/14 21:36:41 | 000,781,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2017/04/14 21:36:41 | 000,496,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.UserAccountsHandlers.dll
[2017/04/14 21:36:40 | 001,562,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vssapi.dll
[2017/04/14 21:36:39 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2017/04/14 21:36:39 | 000,079,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmbkmcl.sys
[2017/04/14 21:36:38 | 000,366,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2017/04/14 21:36:37 | 000,711,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2017/04/14 21:36:37 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Shell.Search.UriHandler.dll
[2017/04/14 21:36:35 | 001,714,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll
[2017/04/14 21:36:34 | 000,691,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2017/04/14 21:36:34 | 000,491,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2017/04/14 21:36:34 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BcastDVRHelper.dll
[2017/04/14 21:36:34 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppCapture.dll
[2017/04/14 21:36:34 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbauth.dll
[2017/04/14 21:36:33 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
[2017/04/14 21:36:33 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
[2017/04/14 21:36:33 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerCookies.exe
[2017/04/14 21:36:32 | 007,217,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2017/04/14 21:36:32 | 001,360,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2017/04/14 21:36:31 | 003,769,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2017/04/14 21:36:31 | 000,850,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasgcw.dll
[2017/04/14 21:36:30 | 000,038,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll
[2017/04/14 21:36:29 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovhost.dll
[2017/04/14 21:36:28 | 000,869,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2017/04/14 21:36:28 | 000,388,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\zipfldr.dll
[2017/04/14 21:36:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2017/04/14 21:36:27 | 000,509,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
[2017/04/14 21:36:27 | 000,437,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
[2017/04/14 21:36:25 | 007,468,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2017/04/14 21:36:25 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WwaApi.dll
[2017/04/14 21:36:24 | 000,741,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\internetmail.dll
[2017/04/14 21:36:24 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll
[2017/04/14 21:36:24 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssitlb.dll
[2017/04/14 21:36:23 | 002,643,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2017/04/14 21:36:23 | 001,987,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2017/04/14 21:36:23 | 000,714,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
[2017/04/14 21:36:23 | 000,291,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll
[2017/04/14 21:36:23 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2017/04/14 21:36:22 | 000,544,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\uReFS.dll
[2017/04/14 21:36:21 | 000,097,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
[2017/04/14 21:36:20 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DXP.dll
[2017/04/14 21:36:19 | 004,312,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2017/04/14 21:36:18 | 000,467,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
[2017/04/14 21:36:17 | 000,443,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MMDevAPI.dll
[2017/04/14 21:36:17 | 000,249,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scksp.dll
[2017/04/14 21:36:17 | 000,201,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\basecsp.dll
[2017/04/14 21:36:17 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupugc.exe
[2017/04/14 21:36:16 | 002,800,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netshell.dll
[2017/04/14 21:36:15 | 002,712,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\esent.dll
[2017/04/14 21:36:15 | 000,679,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdh.dll
[2017/04/14 21:36:15 | 000,603,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
[2017/04/14 21:36:13 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
[2017/04/14 21:36:13 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2017/04/14 21:36:12 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthExt.dll
[2017/04/14 21:36:11 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iscsiwmi.dll
[2017/04/14 21:36:10 | 000,378,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
[2017/04/14 21:36:10 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\discan.dll
[2017/04/14 21:36:10 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
[2017/04/14 21:36:09 | 000,556,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iprtrmgr.dll
[2017/04/14 21:36:07 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpusersvc.dll
[2017/04/14 21:36:06 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpsvc.dll
[2017/04/14 21:36:05 | 002,183,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hevcdecoder.dll
[2017/04/14 21:36:05 | 000,204,288 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\DscCoreConfProv.dll
[2017/04/14 21:36:04 | 001,201,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2017/04/14 21:36:02 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
[2017/04/14 21:36:02 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2017/04/14 21:36:01 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModel.dll
[2017/04/14 21:36:01 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModelOOBE.exe
[2017/04/14 21:36:01 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BackgroundMediaPolicy.dll
[2017/04/14 21:36:00 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmpshell.dll
[2017/04/14 21:35:59 | 000,553,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptui.dll
[2017/04/14 21:35:59 | 000,300,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mscandui.dll
[2017/04/14 21:35:58 | 000,620,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
[2017/04/14 21:35:58 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2017/04/14 21:35:58 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgentc.exe
[2017/04/14 21:35:58 | 000,019,968 | ---- | M] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
[2017/04/14 21:35:57 | 002,277,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2017/04/14 21:35:57 | 000,122,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\migisol.dll
[2017/04/14 21:35:55 | 000,573,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NgcCtnrGidsHandler.dll
[2017/04/14 21:35:53 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
[2017/04/14 21:35:53 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2017/04/14 21:35:53 | 000,284,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
[2017/04/14 21:35:51 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmregistration.dll
[2017/04/14 21:35:50 | 000,252,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Identity.Provider.dll
[2017/04/14 21:35:49 | 001,077,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
[2017/04/14 21:35:48 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenterCPL.dll
[2017/04/14 21:35:48 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
[2017/04/14 21:35:47 | 000,538,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2017/04/14 21:35:46 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TpmCoreProvisioning.dll
[2017/04/14 21:35:46 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DataExchange.dll
[2017/04/14 21:35:43 | 000,828,408 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2017/04/14 21:35:43 | 000,176,632 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2017/04/14 21:35:42 | 002,458,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themecpl.dll
[2017/04/14 21:35:42 | 001,990,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2017/04/14 21:35:41 | 001,274,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
[2017/04/14 21:35:41 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll
[2017/04/14 21:35:40 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
[2017/04/14 21:35:40 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncSettings.dll
[2017/04/14 21:35:39 | 002,716,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2017/04/14 21:35:39 | 000,628,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2017/04/14 21:35:39 | 000,378,720 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2017/04/14 21:35:39 | 000,045,056 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2017/04/14 21:35:38 | 000,959,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2017/04/14 21:35:37 | 000,576,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
[2017/04/14 21:35:37 | 000,185,368 | ---- | M] () -- C:\WINDOWS\SysWow64\weretw.dll
[2017/04/14 21:35:36 | 000,787,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sbe.dll
[2017/04/14 21:35:35 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icm32.dll
[2017/04/14 21:35:34 | 000,525,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv
[2017/04/14 21:35:34 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
[2017/04/14 21:35:34 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.UserDeviceAssociation.dll
[2017/04/14 21:35:32 | 001,992,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2017/04/14 21:35:32 | 000,936,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2017/04/14 21:35:32 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceAgent.exe
[2017/04/14 21:35:31 | 001,040,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalLanguage6.dll
[2017/04/14 21:35:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CastLaunch.dll
[2017/04/14 21:35:31 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvSysprep.dll
[2017/04/14 21:35:30 | 000,653,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2017/04/14 21:35:29 | 000,574,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_StorageSense.dll
[2017/04/14 21:35:29 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDMAppInstaller.exe
[2017/04/14 21:35:28 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
[2017/04/14 21:35:27 | 001,364,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2017/04/14 21:35:27 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2017/04/14 21:35:26 | 000,412,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVolSSO.dll
[2017/04/14 21:35:26 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VCardParser.dll
[2017/04/14 21:35:26 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppointmentActivation.dll
[2017/04/14 21:35:26 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
[2017/04/14 21:35:26 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AddressParser.dll
[2017/04/14 21:35:26 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactActivation.dll
[2017/04/14 21:35:26 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTypeHelperUtil.dll
[2017/04/14 21:35:26 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataLanguageUtil.dll
[2017/04/14 21:35:26 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExtrasXmlParser.dll
[2017/04/14 21:35:26 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataAccessRes.dll
[2017/04/14 21:35:25 | 000,263,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExSMime.dll
[2017/04/14 21:35:25 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\POSyncServices.dll
[2017/04/14 21:35:25 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataPlatformHelperUtil.dll
[2017/04/14 21:35:24 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe
[2017/04/14 21:35:24 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe
[2017/04/14 21:35:24 | 000,152,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTWorkQ.dll
[2017/04/14 21:35:23 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppc.dll
[2017/04/14 21:35:23 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\slc.dll
[2017/04/14 21:35:22 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usbmon.dll
[2017/04/14 21:35:20 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Devices.dll
[2017/04/14 21:35:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll
[2017/04/14 21:35:17 | 003,244,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mispace.dll
[2017/04/14 21:35:17 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smphost.dll
[2017/04/14 21:35:15 | 001,277,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2017/04/14 21:35:14 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eapphost.dll
[2017/04/14 21:35:14 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eappcfg.dll
[2017/04/14 21:35:14 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eappgnui.dll
[2017/04/14 21:35:14 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eappprxy.dll
[2017/04/14 21:35:13 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\eapp3hst.dll
[2017/04/14 21:35:13 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys
[2017/04/14 21:35:12 | 000,353,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2017/04/14 21:35:12 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2017/04/14 21:35:12 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2017/04/14 21:35:12 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2017/04/14 21:35:12 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2017/04/14 21:35:11 | 002,138,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
[2017/04/14 21:35:11 | 001,320,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2017/04/14 21:35:10 | 000,655,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sud.dll
[2017/04/14 21:35:09 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SerialCommunication.dll
[2017/04/14 21:35:09 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerDeviceEncryption.exe
[2017/04/14 21:35:08 | 002,206,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2017/04/14 21:35:07 | 003,194,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2017/04/14 21:35:06 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
[2017/04/14 21:35:06 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XamlTileRender.dll
[2017/04/14 21:35:05 | 000,322,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\input.dll
[2017/04/14 21:35:04 | 000,963,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebcamUi.dll
[2017/04/14 21:35:04 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
[2017/04/14 21:35:03 | 000,538,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcext.dll
[2017/04/14 21:35:03 | 000,178,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostUser.dll
[2017/04/14 21:35:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\slcext.dll
[2017/04/14 21:35:02 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Printers.dll
[2017/04/14 21:35:01 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2017/04/14 21:34:59 | 001,980,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2017/04/14 21:34:57 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblGameSaveExt.dll
[2017/04/14 21:34:56 | 008,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2017/04/14 21:34:56 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakrathunk.dll
[2017/04/14 21:34:55 | 001,081,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
[2017/04/14 21:34:55 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll
[2017/04/14 21:34:55 | 000,396,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll
[2017/04/14 21:34:55 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2017/04/14 21:34:55 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WiFiConfigSP.dll
[2017/04/14 21:34:55 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanhlp.dll
[2017/04/14 21:34:54 | 000,462,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2017/04/14 21:34:54 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifiprofilessettinghandler.dll
[2017/04/14 21:34:54 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansvcpal.dll
[2017/04/14 21:34:51 | 000,131,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storahci.sys
[2017/04/14 21:34:48 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngccredprov.dll
[2017/04/14 21:34:48 | 000,527,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWanAPI.dll
[2017/04/14 21:34:47 | 000,471,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll
[2017/04/14 21:34:47 | 000,470,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2017/04/14 21:34:47 | 000,459,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll
[2017/04/14 21:34:41 | 000,861,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
[2017/04/14 21:34:38 | 005,723,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2017/04/14 21:34:37 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
[2017/04/14 21:34:37 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicePairingFolder.dll
[2017/04/14 21:34:36 | 001,836,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\workfolderssvc.dll
[2017/04/14 21:34:36 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\autoplay.dll
[2017/04/14 21:34:36 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFolders.exe
[2017/04/14 21:34:35 | 000,774,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkfoldersControl.dll
[2017/04/14 21:34:35 | 000,222,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersShell.dll
[2017/04/14 21:34:34 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CameraCaptureUI.dll
[2017/04/14 21:34:34 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EAMProgressHandler.dll
[2017/04/14 21:34:33 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BlockedShutdown.dll
[2017/04/14 21:34:33 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CbtBackgroundManagerPolicy.dll
[2017/04/14 21:34:20 | 001,738,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
[2017/04/14 21:34:17 | 001,154,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Pimstore.dll
[2017/04/14 21:34:17 | 000,558,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\clusapi.dll
[2017/04/14 21:34:17 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\resutils.dll
[2017/04/14 21:34:16 | 000,760,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appwiz.cpl
[2017/04/14 21:34:16 | 000,685,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dsregcmd.exe
[2017/04/14 21:34:16 | 000,045,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\iorate.sys
[2017/04/14 21:34:15 | 000,404,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dsreg.dll
[2017/04/14 21:34:15 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
[2017/04/14 21:34:15 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.Ngc.dll
[2017/04/14 21:34:14 | 000,864,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2017/04/14 21:34:13 | 001,155,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll
[2017/04/14 21:34:13 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Core.dll
[2017/04/14 21:34:12 | 000,374,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2017/04/14 21:34:12 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthBroker.dll
[2017/04/14 21:34:11 | 000,806,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pmcsnap.dll
[2017/04/14 21:34:11 | 000,264,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ppcsnap.dll
[2017/04/14 21:34:10 | 002,095,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2017/04/14 21:34:09 | 000,998,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
[2017/04/14 21:34:08 | 001,037,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nettrace.dll
[2017/04/14 21:34:07 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\splwow64.exe
[2017/04/14 21:34:04 | 000,856,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll
[2017/04/14 21:34:04 | 000,611,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.dll
[2017/04/14 21:34:04 | 000,265,728 | ---- | M] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
[2017/04/14 21:34:01 | 000,425,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmrdvcore.dll
[2017/04/14 21:34:01 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.LowLevel.dll
[2017/04/14 21:33:59 | 001,228,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2017/04/14 21:33:59 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSrvPolicyManager.dll
[2017/04/14 21:33:57 | 000,318,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wow64.dll
[2017/04/14 21:33:56 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WsmWmiPl.dll
[2017/04/14 21:33:56 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll
[2017/04/14 21:33:53 | 005,611,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
[2017/04/14 21:33:52 | 000,884,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2017/04/14 21:33:52 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinesam.dll
[2017/04/14 21:33:52 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samlib.dll
[2017/04/14 21:33:50 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\stdole2.tlb
[2017/04/14 21:33:48 | 001,013,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Http.dll
[2017/04/14 21:33:48 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcpipcfg.dll
[2017/04/14 21:33:48 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netiougc.exe
[2017/04/14 21:33:47 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cmifw.dll
[2017/04/14 21:33:46 | 000,769,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsecsnp.dll
[2017/04/14 21:33:46 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsmsnap.dll
[2017/04/14 21:33:46 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\container.dll
[2017/04/14 21:33:44 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
[2017/04/14 21:33:44 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiapi.dll
[2017/04/14 21:33:44 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DafPrintProvider.dll
[2017/04/14 21:33:43 | 001,128,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
[2017/04/14 21:33:43 | 001,022,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll
[2017/04/14 21:33:42 | 002,424,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Perception.dll
[2017/04/14 21:33:42 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\easwrt.dll
[2017/04/14 21:33:34 | 002,646,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
[2017/04/14 21:33:33 | 000,408,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tsmf.dll
[2017/04/14 21:33:32 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spaceman.exe
[2017/04/14 21:33:29 | 000,762,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2017/04/14 21:33:29 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
[2017/04/14 21:33:27 | 000,945,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
[2017/04/14 21:33:27 | 000,411,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCenter.dll
[2017/04/14 21:33:27 | 000,248,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\policymanager.dll
[2017/04/14 21:33:26 | 003,434,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapRouter.dll
[2017/04/14 21:33:26 | 000,366,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NmaDirect.dll
[2017/04/14 21:33:26 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapsupdatetask.dll
[2017/04/14 21:33:25 | 007,655,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2017/04/14 21:33:25 | 000,936,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll
[2017/04/14 21:33:25 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosResource.dll
[2017/04/14 21:33:25 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll
[2017/04/14 21:33:25 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosHostClient.dll
[2017/04/14 21:33:25 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapstoasttask.dll
[2017/04/14 21:33:25 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosHost.dll
[2017/04/14 21:33:24 | 001,060,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll
[2017/04/14 21:33:24 | 001,029,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2017/04/14 21:33:24 | 000,905,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2017/04/14 21:33:24 | 000,820,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingOnlineServices.dll
[2017/04/14 21:33:24 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvc.dll
[2017/04/14 21:33:24 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MapControls.dll
[2017/04/14 21:33:24 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nativemap.dll
[2017/04/14 21:33:24 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvcProxy.dll
[2017/04/14 21:33:24 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft-Windows-MosTrace.dll
[2017/04/14 21:33:23 | 007,792,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2017/04/14 21:33:23 | 002,947,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapGeocoder.dll
[2017/04/14 21:33:23 | 000,446,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2017/04/14 21:33:23 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsCSP.dll
[2017/04/14 21:33:23 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosStorage.dll
[2017/04/14 21:33:23 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshost.dll
[2017/04/14 21:33:22 | 000,857,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mprddm.dll
[2017/04/14 21:33:22 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CryptoWinRT.dll
[2017/04/14 21:33:22 | 000,156,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Client.dll
[2017/04/14 21:33:21 | 000,868,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2017/04/14 21:33:20 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCPTpm12.dll
[2017/04/14 21:33:20 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfksproxy.dll
[2017/04/14 21:33:19 | 000,806,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll
[2017/04/14 21:33:19 | 000,681,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2017/04/14 21:33:18 | 004,612,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2017/04/14 21:33:17 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.PointOfService.dll
[2017/04/14 21:33:17 | 000,583,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintDialogs.dll
[2017/04/14 21:33:17 | 000,501,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\imapi2.dll
[2017/04/14 21:33:16 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
[2017/04/14 21:33:15 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dialclient.dll
[2017/04/14 21:33:15 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.HostName.dll
[2017/04/14 21:33:11 | 002,208,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.3D.dll
[2017/04/14 21:33:11 | 001,272,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2017/04/14 21:33:10 | 000,254,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmpeffects.dll
[2017/04/14 21:33:08 | 001,424,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
[2017/04/14 21:33:08 | 000,852,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
[2017/04/14 21:33:06 | 001,691,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2017/04/14 21:33:06 | 000,110,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys
[2017/04/14 21:33:06 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2017/04/14 21:33:03 | 001,067,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2017/04/14 21:33:03 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
[2017/04/14 21:33:02 | 005,398,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aclui.dll
[2017/04/14 21:33:01 | 002,009,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRHInproc.dll
[2017/04/14 21:33:01 | 001,002,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll
[2017/04/14 21:33:00 | 000,840,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcRefreshTask.dll
[2017/04/14 21:33:00 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcTok.exe
[2017/04/14 21:33:00 | 000,146,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
[2017/04/14 21:33:00 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ConfigureExpandedStorage.dll
[2017/04/14 21:32:59 | 000,471,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DscCore.dll
[2017/04/14 21:32:58 | 001,220,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscui.cpl
[2017/04/14 21:32:58 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscinterop.dll
[2017/04/14 21:32:56 | 000,101,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceReactivation.dll
[2017/04/14 21:32:55 | 000,907,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2017/04/14 21:32:55 | 000,160,768 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll
[2017/04/14 21:32:55 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BrowserSettingSync.dll
[2017/04/14 21:32:54 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Scanners.dll
[2017/04/14 21:32:54 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2017/04/14 21:32:53 | 000,690,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2017/04/14 21:32:51 | 002,740,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2017/04/14 21:32:51 | 000,545,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2017/04/14 21:32:50 | 001,217,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
[2017/04/14 21:32:50 | 000,552,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
[2017/04/14 21:32:50 | 000,303,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
[2017/04/14 21:32:49 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2017/04/14 21:32:49 | 000,803,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll
[2017/04/14 21:32:49 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.UXRes.dll
[2017/04/14 21:32:49 | 000,294,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll
[2017/04/14 21:32:48 | 000,313,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll
[2017/04/14 21:32:46 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe
[2017/04/14 21:32:45 | 009,125,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2017/04/14 21:32:45 | 000,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll
[2017/04/14 21:32:44 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
[2017/04/14 21:32:44 | 000,075,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfaudiocnv.dll
[2017/04/14 21:32:43 | 001,937,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmc.exe
[2017/04/14 21:32:41 | 002,143,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\storagewmi.dll
[2017/04/14 21:32:40 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\delegatorprovider.dll
[2017/04/14 21:32:40 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\storagewmi_passthru.dll
[2017/04/14 21:32:39 | 000,996,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2017/04/14 21:32:38 | 001,883,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2017/04/14 21:32:36 | 017,184,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2017/04/14 21:32:36 | 001,631,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.dll
[2017/04/14 21:32:35 | 001,349,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2017/04/14 21:32:35 | 001,163,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2017/04/14 21:32:35 | 001,046,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2017/04/14 21:32:35 | 000,885,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2017/04/14 21:32:35 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToReceiver.dll
[2017/04/14 21:32:34 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\main.cpl
[2017/04/14 21:32:34 | 000,078,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys
[2017/04/14 21:32:33 | 000,334,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DavSyncProvider.dll
[2017/04/14 21:32:33 | 000,198,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
[2017/04/14 21:32:32 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanui.dll
[2017/04/14 21:32:30 | 005,384,192 | ---- | M] (Microsoft) -- C:\WINDOWS\SysNative\dbgeng.dll
[2017/04/14 21:32:30 | 000,650,240 | ---- | M] (Microsoft) -- C:\WINDOWS\SysNative\DbgModel.dll
[2017/04/14 21:32:29 | 000,727,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapi.dll
[2017/04/14 21:32:29 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BioFeedback.dll
[2017/04/14 21:32:29 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapibase.dll
[2017/04/14 21:32:28 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2017/04/14 21:32:28 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NPSM.dll
[2017/04/14 21:32:27 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Wpc.dll
[2017/04/14 21:32:27 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adsmsext.dll
[2017/04/14 21:32:26 | 000,811,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll
[2017/04/14 21:32:26 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.ServiceDiscovery.Dnssd.dll
[2017/04/14 21:32:25 | 000,968,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2017/04/14 21:32:25 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.XboxLive.Storage.dll
[2017/04/14 21:32:25 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.SecureAssessment.dll
[2017/04/14 21:32:24 | 001,656,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2017/04/14 21:32:24 | 000,137,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthHost.exe
[2017/04/14 21:32:23 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Phoneutil.dll
[2017/04/14 21:32:22 | 000,218,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
[2017/04/14 21:32:21 | 001,694,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2017/04/14 21:32:21 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVSENCD.DLL
[2017/04/14 21:32:19 | 003,116,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAJApi.dll
[2017/04/14 21:32:18 | 001,255,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
[2017/04/14 21:32:18 | 000,200,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipboardServer.dll
[2017/04/14 21:32:16 | 001,348,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2017/04/14 21:32:16 | 000,423,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifitask.exe
[2017/04/14 21:32:16 | 000,137,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wificonnapi.dll
[2017/04/14 21:32:15 | 000,489,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupShim.dll
[2017/04/14 21:32:15 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetCfgNotifyObjectHost.exe
[2017/04/14 21:32:14 | 000,871,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtcprx.dll
[2017/04/14 21:32:13 | 000,939,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\pidgenx.dll
[2017/04/14 21:32:13 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFiDirect.dll
[2017/04/14 21:32:13 | 000,128,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll
[2017/04/14 21:32:11 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hgcpl.dll
[2017/04/14 21:32:10 | 000,715,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsp_sr.dll
[2017/04/14 21:32:10 | 000,275,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\accountaccessor.dll
[2017/04/14 21:32:09 | 001,461,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppVEntSubsystems32.dll
[2017/04/14 21:32:09 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BluetoothApis.dll
[2017/04/14 21:32:07 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2017/04/14 21:32:07 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Wallet.dll
[2017/04/14 21:32:06 | 003,059,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2017/04/14 21:32:04 | 003,753,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bootux.dll
[2017/04/14 21:32:04 | 001,917,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2017/04/14 21:32:04 | 001,322,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpx.dll
[2017/04/14 21:32:03 | 001,710,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2017/04/14 21:32:03 | 001,247,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll
[2017/04/14 21:32:03 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GlobCollationHost.dll
[2017/04/14 21:32:02 | 000,217,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpdxm.dll
[2017/04/14 21:32:01 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptngc.dll
[2017/04/14 21:32:00 | 001,415,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2017/04/14 21:32:00 | 000,539,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2017/04/14 21:32:00 | 000,424,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
[2017/04/14 21:31:59 | 000,523,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DMRServer.dll
[2017/04/14 21:31:59 | 000,336,896 | ---- | M] () -- C:\WINDOWS\SysWow64\msinfo32.exe
[2017/04/14 21:31:58 | 000,462,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhsettingsprovider.dll
[2017/04/14 21:31:58 | 000,440,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcfg.dll
[2017/04/14 21:31:58 | 000,272,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_WorkAccess.dll
[2017/04/14 21:31:56 | 001,025,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XboxNetApiSvc.dll
[2017/04/14 21:31:55 | 000,678,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneProviders.dll
[2017/04/14 21:31:55 | 000,665,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GenValObj.exe
[2017/04/14 21:31:54 | 000,553,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll
[2017/04/14 21:31:54 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe
[2017/04/14 21:31:53 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlancfg.dll
[2017/04/14 21:31:53 | 000,222,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgentUserBroker.exe
[2017/04/14 21:31:52 | 000,753,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\imapi2fs.dll
[2017/04/14 21:31:52 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.SystemManagement.dll
[2017/04/14 21:31:50 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netiohlp.dll
[2017/04/14 21:31:49 | 000,506,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DevicePairing.dll
[2017/04/14 21:31:48 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmTasks.dll
[2017/04/14 21:31:48 | 000,021,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\cmimcext.sys
[2017/04/14 21:31:47 | 000,841,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2017/04/14 21:31:46 | 001,429,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2017/04/14 21:31:46 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/04/14 21:31:45 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2017/04/14 21:31:45 | 000,338,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fhcpl.dll
[2017/04/14 21:31:44 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
[2017/04/14 21:31:43 | 001,336,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll
[2017/04/14 21:31:41 | 000,279,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bdeunlock.exe
[2017/04/14 21:31:41 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
[2017/04/14 21:31:41 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\umpoext.dll
[2017/04/14 21:31:40 | 000,356,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSetupUI.dll
[2017/04/14 21:31:39 | 001,723,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe
[2017/04/14 21:31:39 | 000,326,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NgcCtnrSvc.dll
[2017/04/14 21:31:38 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2017/04/14 21:31:37 | 000,614,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
[2017/04/14 21:31:35 | 004,136,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
[2017/04/14 21:31:35 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
[2017/04/14 21:31:35 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryBroker.dll
[2017/04/14 21:31:34 | 000,326,656 | ---- | M] () -- C:\WINDOWS\SysNative\wc_storage.dll
[2017/04/14 21:31:32 | 000,381,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll
[2017/04/14 21:31:32 | 000,075,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\remoteaudioendpoint.dll
[2017/04/14 21:31:31 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudBackupSettings.dll
[2017/04/14 21:31:30 | 000,782,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2017/04/14 21:31:29 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfp.dll
[2017/04/14 21:31:28 | 000,442,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
[2017/04/14 21:31:28 | 000,128,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpapi.dll
[2017/04/14 21:31:27 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2017/04/14 21:31:26 | 000,747,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Ocr.dll
[2017/04/14 21:31:25 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.AccountsControl.dll
[2017/04/14 21:31:25 | 000,755,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\evr.dll
[2017/04/14 21:31:25 | 000,323,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\domgmt.dll
[2017/04/14 21:31:22 | 003,400,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncCenter.dll
[2017/04/14 21:31:22 | 001,231,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wcnwiz.dll
[2017/04/14 21:31:21 | 001,637,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2017/04/14 21:31:20 | 001,600,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
[2017/04/14 21:31:20 | 000,579,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2017/04/14 21:31:19 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Phone.dll
[2017/04/14 21:31:19 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Shell.Search.UriHandler.dll
[2017/04/14 21:31:18 | 001,106,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsp_health.dll
[2017/04/14 21:31:18 | 000,908,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2017/04/14 21:31:17 | 000,605,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2017/04/14 21:31:17 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BcastDVRHelper.dll
[2017/04/14 21:31:17 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppCapture.dll
[2017/04/14 21:31:16 | 000,875,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2017/04/14 21:31:16 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2017/04/14 21:31:16 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbauth.dll
[2017/04/14 21:31:16 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerCookies.exe
[2017/04/14 21:31:15 | 000,108,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
[2017/04/14 21:31:14 | 001,454,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2017/04/14 21:31:13 | 000,709,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll
[2017/04/14 21:31:12 | 000,434,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2017/04/14 21:31:12 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Tabbtn.dll
[2017/04/14 21:31:10 | 000,992,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2017/04/14 21:31:08 | 001,755,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DeviceFlows.DataModel.dll
[2017/04/14 21:31:08 | 000,584,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
[2017/04/14 21:31:07 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WwaApi.dll
[2017/04/14 21:31:06 | 000,336,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\azroleui.dll
[2017/04/14 21:31:04 | 000,262,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
[2017/04/14 21:31:04 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2017/04/14 21:31:04 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2017/04/14 21:31:04 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2017/04/14 21:31:03 | 003,405,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2017/04/14 21:31:03 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll
[2017/04/14 21:31:02 | 002,538,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2017/04/14 21:31:02 | 000,778,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
[2017/04/14 21:31:02 | 000,390,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll
[2017/04/14 21:31:02 | 000,349,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2017/04/14 21:31:02 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll
[2017/04/14 21:31:02 | 000,205,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe
[2017/04/14 21:31:02 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
[2017/04/14 21:31:00 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tzautoupdate.dll
[2017/04/14 21:30:59 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uReFS.dll
[2017/04/14 21:30:59 | 000,379,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2017/04/14 21:30:58 | 000,747,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll
[2017/04/14 21:30:58 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offreg.dll
[2017/04/14 21:30:57 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll
[2017/04/14 21:30:57 | 001,082,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2017/04/14 21:30:57 | 000,717,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskbarcpl.dll
[2017/04/14 21:30:57 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.exe
[2017/04/14 21:30:56 | 000,354,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe
[2017/04/14 21:30:56 | 000,118,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\EhStorTcgDrv.sys
[2017/04/14 21:30:56 | 000,041,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SysResetErr.exe
[2017/04/14 21:30:55 | 004,673,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2017/04/14 21:30:55 | 000,540,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2017/04/14 21:30:55 | 000,212,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cemapi.dll
[2017/04/14 21:30:54 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qdvd.dll
[2017/04/14 21:30:53 | 000,682,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2017/04/14 21:30:53 | 000,236,488 | ---- | M] () -- C:\WINDOWS\SysNative\weretw.dll
[2017/04/14 21:30:52 | 003,056,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll
[2017/04/14 21:30:52 | 000,306,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtcuiu.dll
[2017/04/14 21:30:51 | 000,935,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmclient.dll
[2017/04/14 21:30:50 | 001,078,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
[2017/04/14 21:30:50 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
[2017/04/14 21:30:47 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
[2017/04/14 21:30:46 | 002,746,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpcore.dll
[2017/04/14 21:30:46 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iscsiwmi.dll
[2017/04/14 21:30:42 | 001,300,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2017/04/14 21:30:42 | 000,326,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll
[2017/04/14 21:30:41 | 000,587,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
[2017/04/14 21:30:41 | 000,050,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2017/04/14 21:30:40 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ffbroker.dll
[2017/04/14 21:30:39 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
[2017/04/14 21:30:38 | 006,474,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
[2017/04/14 21:30:38 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
[2017/04/14 21:30:37 | 000,845,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2017/04/14 21:30:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.UI.GameBar.dll
[2017/04/14 21:30:35 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BackgroundMediaPolicy.dll
[2017/04/14 21:30:34 | 000,751,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
[2017/04/14 21:30:32 | 001,086,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll
[2017/04/14 21:30:32 | 000,775,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2017/04/14 21:30:32 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cmintegrator.dll
[2017/04/14 21:30:32 | 000,025,088 | ---- | M] () -- C:\WINDOWS\SysNative\GamePanelExternalHook.dll
[2017/04/14 21:30:31 | 002,828,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2017/04/14 21:30:31 | 000,819,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
[2017/04/14 21:30:31 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
[2017/04/14 21:30:30 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetails.dll
[2017/04/14 21:30:30 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetailsUpdate.dll
[2017/04/14 21:30:29 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PimIndexMaintenance.dll
[2017/04/14 21:30:29 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.UserConsentVerifier.dll
[2017/04/14 21:30:28 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
[2017/04/14 21:30:28 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RADCUI.dll
[2017/04/14 21:30:28 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncPolicy.dll
[2017/04/14 21:30:26 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcli.dll
[2017/04/14 21:30:26 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
[2017/04/14 21:30:26 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enrollmentapi.dll
[2017/04/14 21:30:24 | 001,402,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
[2017/04/14 21:30:23 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2017/04/14 21:30:22 | 000,873,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
[2017/04/14 21:30:22 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
[2017/04/14 21:30:21 | 000,857,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EmailApis.dll
[2017/04/14 21:30:21 | 000,850,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactApis.dll
[2017/04/14 21:30:21 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentApis.dll
[2017/04/14 21:30:21 | 000,567,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ChatApis.dll
[2017/04/14 21:30:21 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccountApis.dll
[2017/04/14 21:30:20 | 000,531,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TpmCoreProvisioning.dll
[2017/04/14 21:30:20 | 000,289,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2017/04/14 21:30:19 | 002,389,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smartscreen.exe
[2017/04/14 21:30:19 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.Input.dll
[2017/04/14 21:30:19 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vaultcli.dll
[2017/04/14 21:30:19 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XInputUap.dll
[2017/04/14 21:30:15 | 000,945,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasgcw.dll
[2017/04/14 21:30:14 | 001,266,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll
[2017/04/14 21:30:14 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanprotdim.dll
[2017/04/14 21:30:13 | 003,478,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2017/04/14 21:30:13 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2017/04/14 21:30:12 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\biwinrt.dll
[2017/04/14 21:30:12 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\pwrshplugin.dll
[2017/04/14 21:30:11 | 000,966,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sbe.dll
[2017/04/14 21:30:10 | 008,075,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2017/04/14 21:30:09 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpRelayTransport.dll
[2017/04/14 21:30:08 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfui.dll
[2017/04/14 21:30:08 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dggpext.dll
[2017/04/14 21:30:07 | 002,289,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2017/04/14 21:30:07 | 000,529,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll
[2017/04/14 21:30:07 | 000,036,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfpmp.exe
[2017/04/14 21:30:06 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceEnroller.exe
[2017/04/14 21:30:05 | 000,445,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mprapi.dll
[2017/04/14 21:30:05 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icsvc.dll
[2017/04/14 21:30:04 | 000,255,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
[2017/04/14 21:30:03 | 000,749,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drvstore.dll
[2017/04/14 21:30:03 | 000,602,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupEngine.dll
[2017/04/14 21:30:03 | 000,111,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupApi.dll
[2017/04/14 21:29:59 | 001,122,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2017/04/14 21:29:58 | 001,305,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsp_fs.dll
[2017/04/14 21:29:58 | 000,544,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spaceport.sys
[2017/04/14 21:29:57 | 000,350,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cloudAP.dll
[2017/04/14 21:29:56 | 000,700,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.Search.dll
[2017/04/14 21:29:56 | 000,163,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTWorkQ.dll
[2017/04/14 21:29:51 | 006,654,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2017/04/14 21:29:51 | 000,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2017/04/14 21:29:50 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Devices.dll
[2017/04/14 21:29:49 | 002,852,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll
[2017/04/14 21:29:49 | 000,360,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
[2017/04/14 21:29:48 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll
[2017/04/14 21:29:48 | 000,307,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintDialogs3D.dll
[2017/04/14 21:29:45 | 001,702,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2017/04/14 21:29:44 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StorageUsage.dll
[2017/04/14 21:29:43 | 000,433,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2017/04/14 21:29:43 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eapp3hst.dll
[2017/04/14 21:29:43 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eapphost.dll
[2017/04/14 21:29:43 | 000,243,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eappcfg.dll
[2017/04/14 21:29:43 | 000,119,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll
[2017/04/14 21:29:43 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eappgnui.dll
[2017/04/14 21:29:43 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eappprxy.dll
[2017/04/14 21:29:43 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll
[2017/04/14 21:29:42 | 002,820,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll
[2017/04/14 21:29:42 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
[2017/04/14 21:29:42 | 000,261,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll
[2017/04/14 21:29:42 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll
[2017/04/14 21:29:40 | 002,481,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2017/04/14 21:29:39 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptui.dll
[2017/04/14 21:29:39 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
[2017/04/14 21:29:39 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpshell.dll
[2017/04/14 21:29:39 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
[2017/04/14 21:29:39 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgentc.exe
[2017/04/14 21:29:38 | 005,110,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2017/04/14 21:29:38 | 000,407,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
[2017/04/14 21:29:38 | 000,142,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\migisol.dll
[2017/04/14 21:29:37 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2017/04/14 21:29:37 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidprov.dll
[2017/04/14 21:29:36 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAnimation.dll
[2017/04/14 21:29:35 | 000,691,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsm.dll
[2017/04/14 21:29:34 | 001,293,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMPDMC.exe
[2017/04/14 21:29:33 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll
[2017/04/14 21:29:32 | 001,507,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2017/04/14 21:29:31 | 000,658,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2017/04/14 21:29:31 | 000,401,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2017/04/14 21:29:31 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdd.dll
[2017/04/14 21:29:30 | 000,160,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostBroker.dll
[2017/04/14 21:29:30 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Lights.dll
[2017/04/14 21:29:26 | 000,776,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TabletPC.cpl
[2017/04/14 21:29:26 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tabcal.exe
[2017/04/14 21:29:26 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmbkmclr.sys
[2017/04/14 21:29:26 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MultiDigiMon.exe
[2017/04/14 21:29:25 | 002,512,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themecpl.dll
[2017/04/14 21:29:25 | 000,720,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll
[2017/04/14 21:29:25 | 000,718,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2017/04/14 21:29:25 | 000,702,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll
[2017/04/14 21:29:24 | 000,306,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\esentutl.exe
[2017/04/14 21:29:24 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shdocvw.dll
[2017/04/14 21:29:23 | 002,476,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2017/04/14 21:29:22 | 000,298,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtapi.dll
[2017/04/14 21:29:22 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovslegacy.dll
[2017/04/14 21:29:21 | 001,176,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2017/04/14 21:29:21 | 001,062,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
[2017/04/14 21:29:18 | 007,222,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2017/04/14 21:29:17 | 000,206,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2017/04/14 21:29:16 | 002,214,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2017/04/14 21:29:16 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
[2017/04/14 21:29:16 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\powercfg.exe
[2017/04/14 21:29:15 | 002,914,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
[2017/04/14 21:29:15 | 000,143,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EDPCleanup.exe
[2017/04/14 21:29:12 | 001,399,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Pimstore.dll
[2017/04/14 21:29:12 | 000,509,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2017/04/14 21:29:12 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudDomainJoinDataModelServer.dll
[2017/04/14 21:29:12 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Flights.dll
[2017/04/14 21:29:11 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2017/04/14 21:29:09 | 000,948,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
[2017/04/14 21:29:09 | 000,480,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dsreg.dll
[2017/04/14 21:29:09 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
[2017/04/14 21:29:09 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.Ngc.dll
[2017/04/14 21:29:08 | 000,424,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2017/04/14 21:29:08 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mtxclu.dll
[2017/04/14 21:29:08 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Core.dll
[2017/04/14 21:29:07 | 001,020,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usermgr.dll
[2017/04/14 21:29:07 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCCSEngineShared.dll
[2017/04/14 21:29:07 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthBroker.dll
[2017/04/14 21:29:06 | 000,074,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vpci.sys
[2017/04/14 21:29:05 | 000,542,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2017/04/14 21:29:05 | 000,432,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll
[2017/04/14 21:29:05 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneBackupHandler.dll
[2017/04/14 21:29:04 | 003,520,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
[2017/04/14 21:29:04 | 000,637,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2017/04/14 21:29:03 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winhvr.sys
[2017/04/14 21:29:02 | 002,511,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL
[2017/04/14 21:29:02 | 001,791,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2017/04/14 21:29:02 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Midi.dll
[2017/04/14 21:29:01 | 006,574,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanmm.dll
[2017/04/14 21:29:01 | 000,862,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll
[2017/04/14 21:29:01 | 000,418,304 | ---- | M] () -- C:\WINDOWS\SysNative\Windows.Perception.Stub.dll
[2017/04/14 21:29:00 | 000,947,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.Handlers.dll
[2017/04/14 21:29:00 | 000,468,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanconn.dll
[2017/04/14 21:29:00 | 000,062,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2017/04/14 21:28:55 | 000,568,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.LowLevel.dll
[2017/04/14 21:28:54 | 003,893,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2017/04/14 21:28:54 | 002,104,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2017/04/14 21:28:54 | 000,121,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfps.dll
[2017/04/14 21:28:53 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationController.dll
[2017/04/14 21:28:53 | 000,306,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MediaControl.dll
[2017/04/14 21:28:52 | 001,639,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2017/04/14 21:28:51 | 000,521,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2017/04/14 21:28:51 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stdole2.tlb
[2017/04/14 21:28:50 | 000,321,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkUXBroker.dll
[2017/04/14 21:28:49 | 001,328,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Http.dll
[2017/04/14 21:28:49 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\container.dll
[2017/04/14 21:28:48 | 000,827,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2017/04/14 21:28:48 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.AllJoyn.dll
[2017/04/14 21:28:48 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll
[2017/04/14 21:28:48 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll
[2017/04/14 21:28:47 | 001,112,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll
[2017/04/14 21:28:47 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nshwfp.dll
[2017/04/14 21:28:47 | 000,157,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudStorageWizard.exe
[2017/04/14 21:28:46 | 000,866,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2017/04/14 21:28:45 | 000,687,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2017/04/14 21:28:44 | 000,634,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll
[2017/04/14 21:28:39 | 002,510,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2017/04/14 21:28:39 | 000,980,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
[2017/04/14 21:28:39 | 000,424,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msutb.dll
[2017/04/14 21:28:35 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\poqexec.exe
[2017/04/14 21:28:32 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll
[2017/04/14 21:28:32 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll
[2017/04/14 21:28:31 | 000,266,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\policymanager.dll
[2017/04/14 21:28:30 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CryptoWinRT.dll
[2017/04/14 21:28:28 | 001,069,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2017/04/14 21:28:27 | 001,006,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll
[2017/04/14 21:28:27 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\C_G18030.DLL
[2017/04/14 21:28:27 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\C_IS2022.DLL
[2017/04/14 21:28:27 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\c_GSM7.DLL
[2017/04/14 21:28:26 | 006,284,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2017/04/14 21:28:26 | 000,318,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpencom.dll
[2017/04/14 21:28:26 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wininetlui.dll
[2017/04/14 21:28:25 | 000,949,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.PointOfService.dll
[2017/04/14 21:28:25 | 000,116,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2017/04/14 21:28:24 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SmartCards.dll
[2017/04/14 21:28:24 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
[2017/04/14 21:28:23 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.HostName.dll
[2017/04/14 21:28:23 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dialclient.dll
[2017/04/14 21:28:22 | 007,814,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2017/04/14 21:28:22 | 000,842,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2017/04/14 21:28:20 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.CredDialogController.dll
[2017/04/14 21:28:19 | 000,828,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2017/04/14 21:28:19 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nltest.exe
[2017/04/14 21:28:18 | 002,166,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2017/04/14 21:28:17 | 000,846,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2017/04/14 21:28:17 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll
[2017/04/14 21:28:17 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.dll
[2017/04/14 21:28:16 | 000,965,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2017/04/14 21:28:16 | 000,633,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2017/04/14 21:28:15 | 001,243,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.FaceAnalysis.dll
[2017/04/14 21:28:15 | 000,409,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS
[2017/04/14 21:28:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvenotify.exe
[2017/04/14 21:28:14 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dpapisrv.dll
[2017/04/14 21:28:14 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinRtTracing.dll
[2017/04/14 21:28:13 | 000,779,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
[2017/04/14 21:28:13 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2017/04/14 21:28:13 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
[2017/04/14 21:28:12 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2017/04/14 21:28:12 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleacc.dll
[2017/04/14 21:28:12 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
[2017/04/14 21:28:12 | 000,083,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\devenum.dll
[2017/04/14 21:28:11 | 000,241,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
[2017/04/14 21:28:11 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinelsa.dll
[2017/04/14 21:28:10 | 001,359,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2017/04/14 21:28:10 | 001,343,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2017/04/14 21:28:10 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDEServer.exe
[2017/04/14 21:28:10 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafBth.dll
[2017/04/14 21:28:09 | 000,109,056 | ---- | M] () -- C:\WINDOWS\SysWow64\chartv.dll
[2017/04/14 21:28:08 | 003,105,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
[2017/04/14 21:28:08 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sendmail.dll
[2017/04/14 21:28:08 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BluetoothApis.dll
[2017/04/14 21:28:08 | 000,031,232 | ---- | M] () -- C:\WINDOWS\SysWow64\efsext.dll
[2017/04/14 21:28:07 | 003,203,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2017/04/14 21:28:07 | 000,870,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2017/04/14 21:28:07 | 000,455,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetworkCollectionAgent.dll
[2017/04/14 21:28:07 | 000,172,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll
[2017/04/14 21:28:06 | 001,643,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2017/04/14 21:28:06 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.UXRes.dll
[2017/04/14 21:28:04 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lpremove.exe
[2017/04/14 21:28:03 | 000,211,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\manage-bde.exe
[2017/04/14 21:28:02 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
[2017/04/14 21:28:02 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll
[2017/04/14 21:28:02 | 000,109,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfaudiocnv.dll
[2017/04/14 21:28:01 | 002,846,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storagewmi.dll
[2017/04/14 21:28:01 | 002,678,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll
[2017/04/14 21:28:01 | 001,092,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplicationFrame.dll
[2017/04/14 21:28:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\delegatorprovider.dll
[2017/04/14 21:28:01 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storagewmi_passthru.dll
[2017/04/14 21:28:00 | 001,220,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Audio.dll
[2017/04/14 21:28:00 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll
[2017/04/14 21:28:00 | 000,461,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webio.dll
[2017/04/14 21:28:00 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\autoplay.dll
[2017/04/14 21:28:00 | 000,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintWSDAHost.dll
[2017/04/14 21:27:59 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
[2017/04/14 21:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToReceiver.dll
[2017/04/14 21:27:58 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2017/04/14 21:27:58 | 000,555,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnprv.dll
[2017/04/14 21:27:58 | 000,383,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DavSyncProvider.dll
[2017/04/14 21:27:57 | 000,510,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PhotoScreensaver.scr
[2017/04/14 21:27:56 | 000,715,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\clusapi.dll
[2017/04/14 21:27:56 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\resutils.dll
[2017/04/14 21:27:55 | 019,422,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2017/04/14 21:27:54 | 001,280,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werconcpl.dll
[2017/04/14 21:27:54 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\indexeddbserver.dll
[2017/04/14 21:27:53 | 001,312,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2017/04/14 21:27:53 | 000,425,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdedit.exe
[2017/04/14 21:27:53 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RelPost.exe
[2017/04/14 21:27:53 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MediaFoundation.DefaultPerceptionProvider.dll
[2017/04/14 21:27:52 | 000,349,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2017/04/14 21:27:52 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2017/04/14 21:27:52 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCore.dll
[2017/04/14 21:27:52 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provops.dll
[2017/04/14 21:27:52 | 000,200,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2017/04/14 21:27:52 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NPSM.dll
[2017/04/14 21:27:52 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KnobsCsp.dll
[2017/04/14 21:27:52 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NFCProvisioningPlugin.dll
[2017/04/14 21:27:52 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll
[2017/04/14 21:27:52 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BarcodeProvisioningPlugin.dll
[2017/04/14 21:27:52 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProvPluginEng.dll
[2017/04/14 21:27:52 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe
[2017/04/14 21:27:52 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemovableMediaProvisioningPlugin.dll
[2017/04/14 21:27:52 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll
[2017/04/14 21:27:51 | 003,733,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
[2017/04/14 21:27:51 | 001,792,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wpc.dll
[2017/04/14 21:27:50 | 000,598,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
[2017/04/14 21:27:50 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.ServiceDiscovery.Dnssd.dll
[2017/04/14 21:27:49 | 001,184,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2017/04/14 21:27:49 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.XboxLive.Storage.dll
[2017/04/14 21:27:48 | 000,646,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll
[2017/04/14 21:27:48 | 000,623,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCPTpm12.dll
[2017/04/14 21:27:48 | 000,331,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2017/04/14 21:27:46 | 004,749,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2017/04/14 21:27:46 | 004,423,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2017/04/14 21:27:46 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Picker.dll
[2017/04/14 21:27:45 | 001,851,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\crypt32.dll
[2017/04/14 21:27:45 | 001,564,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
[2017/04/14 21:27:44 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveui.dll
[2017/04/14 21:27:44 | 000,278,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netplwiz.dll
[2017/04/14 21:27:44 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bdeui.dll
[2017/04/14 21:27:42 | 001,535,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpeechPal.dll
[2017/04/14 21:27:42 | 000,435,095 | ---- | M] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2017/04/14 21:27:41 | 000,292,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpeffects.dll
[2017/04/14 21:27:38 | 002,155,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntSubsystems64.dll
[2017/04/14 21:27:38 | 000,940,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsp_sr.dll
[2017/04/14 21:27:38 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\accountaccessor.dll
[2017/04/14 21:27:37 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scksp.dll
[2017/04/14 21:27:37 | 000,172,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\basecsp.dll
[2017/04/14 21:27:36 | 001,012,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManager.dll
[2017/04/14 21:27:36 | 000,553,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdh.dll
[2017/04/14 21:27:35 | 000,587,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vpnike.dll
[2017/04/14 21:27:35 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cmifw.dll
[2017/04/14 21:27:34 | 001,586,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll
[2017/04/14 21:27:34 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GlobCollationHost.dll
[2017/04/14 21:27:33 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidclass.sys
[2017/04/14 21:27:33 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys
[2017/04/14 21:27:32 | 001,572,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
[2017/04/14 21:27:32 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptngc.dll
[2017/04/14 21:27:31 | 000,369,664 | ---- | M] () -- C:\WINDOWS\SysNative\msinfo32.exe
[2017/04/14 21:27:31 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Energy.dll
[2017/04/14 21:27:30 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
[2017/04/14 21:27:30 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
[2017/04/14 21:27:30 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BrowserSettingSync.dll
[2017/04/14 21:27:29 | 000,961,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\imapi2fs.dll
[2017/04/14 21:27:29 | 000,468,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.InkControls.dll
[2017/04/14 21:27:29 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgentUserBroker.exe
[2017/04/14 21:27:28 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
[2017/04/14 21:27:27 | 004,148,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2017/04/14 21:27:27 | 000,092,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2017/04/14 21:27:26 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2017/04/14 21:27:26 | 000,205,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netiohlp.dll
[2017/04/14 21:27:26 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\encapi.dll
[2017/04/14 21:27:25 | 009,260,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmploc.DLL
[2017/04/14 21:27:24 | 012,342,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2017/04/14 21:27:24 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spwmp.dll
[2017/04/14 21:27:24 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdxm.ocx
[2017/04/14 21:27:24 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxmasf.dll
[2017/04/14 21:27:23 | 001,362,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmpmde.dll
[2017/04/14 21:27:23 | 001,258,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2017/04/14 21:27:23 | 000,622,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpaceControl.dll
[2017/04/14 21:27:22 | 001,858,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2017/04/14 21:27:22 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/04/14 21:27:21 | 000,976,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll
[2017/04/14 21:27:21 | 000,975,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2017/04/14 21:27:20 | 005,682,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2017/04/14 21:27:20 | 000,411,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2017/04/14 21:27:19 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
[2017/04/14 21:27:18 | 002,484,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gameux.dll
[2017/04/14 21:27:18 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mdmregistration.dll
[2017/04/14 21:27:17 | 002,048,496 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2017/04/14 21:27:16 | 001,556,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2017/04/14 21:27:16 | 001,357,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll
[2017/04/14 21:27:16 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dialserver.dll
[2017/04/14 21:27:15 | 000,549,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenterCPL.dll
[2017/04/14 21:27:14 | 000,590,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2017/04/14 21:27:14 | 000,534,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2017/04/14 21:27:14 | 000,417,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2017/04/14 21:27:14 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2017/04/14 21:27:14 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudBackupSettings.dll
[2017/04/14 21:27:14 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_ClosedCaptioning.dll
[2017/04/14 21:27:14 | 000,087,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\remoteaudioendpoint.dll
[2017/04/14 21:27:13 | 000,857,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2017/04/14 21:27:13 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\pdh.dll
[2017/04/14 21:27:12 | 000,681,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ClipSp.sys
[2017/04/14 21:27:12 | 000,406,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2017/04/14 21:27:12 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncSettings.dll
[2017/04/14 21:27:11 | 001,080,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Ocr.dll
[2017/04/14 21:27:11 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe
[2017/04/14 21:27:11 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\setupugc.exe
[2017/04/14 21:27:10 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netshell.dll
[2017/04/14 21:27:10 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontext.dll
[2017/04/14 21:27:09 | 001,293,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcnwiz.dll
[2017/04/14 21:27:09 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceassociation.dll
[2017/04/14 21:27:08 | 005,511,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aclui.dll
[2017/04/14 21:27:07 | 001,908,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
[2017/04/14 21:27:07 | 001,369,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Phone.dll
[2017/04/14 21:27:07 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Bluetooth.dll
[2017/04/14 21:27:07 | 000,266,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConsoleLogon.dll
[2017/04/14 21:27:06 | 002,999,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2017/04/14 21:27:06 | 001,546,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsp_health.dll
[2017/04/14 21:27:06 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32k.sys
[2017/04/14 21:27:06 | 000,079,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32u.dll
[2017/04/14 21:27:05 | 000,631,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2017/04/14 21:27:05 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Authentication.dll
[2017/04/14 21:27:04 | 001,066,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pidgenx.dll
[2017/04/14 21:27:04 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFi.dll
[2017/04/14 21:27:03 | 000,396,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2017/04/14 21:27:03 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Radios.dll
[2017/04/14 21:27:03 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ProximityCommon.dll
[2017/04/14 21:27:02 | 001,099,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
[2017/04/14 21:27:02 | 000,987,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
[2017/04/14 21:27:02 | 000,942,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.efi
[2017/04/14 21:27:02 | 000,807,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.exe
[2017/04/14 21:27:02 | 000,073,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvservice.sys
[2017/04/14 21:27:02 | 000,020,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kdhvcom.dll
[2017/04/14 21:27:01 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
[2017/04/14 21:27:01 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
[2017/04/14 21:27:00 | 002,083,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceFlows.DataModel.dll
[2017/04/14 21:27:00 | 000,807,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.OnlineId.dll
[2017/04/14 21:27:00 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mscandui.dll
[2017/04/14 21:26:59 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2017/04/14 21:26:58 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\energy.dll
[2017/04/14 21:26:58 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2017/04/14 21:26:58 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll
[2017/04/14 21:26:58 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll
[2017/04/14 21:26:57 | 000,426,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2017/04/14 21:26:57 | 000,328,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
[2017/04/14 21:26:56 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlancfg.dll
[2017/04/14 21:26:55 | 000,983,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemoteNaturalLanguage.dll
[2017/04/14 21:26:55 | 000,453,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2017/04/14 21:26:54 | 000,567,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicePairing.dll
[2017/04/14 21:26:54 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cemapi.dll
[2017/04/14 21:26:54 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafpos.dll
[2017/04/14 21:26:53 | 000,632,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sud.dll
[2017/04/14 21:26:52 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveprompt.exe
[2017/04/14 21:26:51 | 001,477,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll
[2017/04/14 21:26:51 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AccountsRt.dll
[2017/04/14 21:26:51 | 000,276,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\input.dll
[2017/04/14 21:26:50 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
[2017/04/14 21:26:49 | 003,132,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcore.dll
[2017/04/14 21:26:49 | 002,812,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2017/04/14 21:26:49 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
[2017/04/14 21:26:48 | 000,691,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll
[2017/04/14 21:26:47 | 000,712,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2017/04/14 21:26:47 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
[2017/04/14 21:26:47 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovhost.dll
[2017/04/14 21:26:45 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll
[2017/04/14 21:26:43 | 006,664,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mspaint.exe
[2017/04/14 21:26:43 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.HumanInterfaceDevice.dll
[2017/04/14 21:26:43 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll
[2017/04/14 21:26:42 | 000,924,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
[2017/04/14 21:26:42 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.UI.GameBar.dll
[2017/04/14 21:26:40 | 001,060,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
[2017/04/14 21:26:40 | 000,560,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2017/04/14 21:26:40 | 000,357,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
[2017/04/14 21:26:40 | 000,217,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfp.dll
[2017/04/14 21:26:39 | 000,798,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pwcreator.exe
[2017/04/14 21:26:39 | 000,650,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2017/04/14 21:26:39 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetails.dll
[2017/04/14 21:26:39 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetailsUpdate.dll
[2017/04/14 21:26:37 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll
[2017/04/14 21:26:36 | 000,495,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DataSenseHandlers.dll
[2017/04/14 21:26:35 | 000,455,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll
[2017/04/14 21:26:35 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
[2017/04/14 21:26:35 | 000,168,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll
[2017/04/14 21:26:34 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sppc.dll
[2017/04/14 21:26:34 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2017/04/14 21:26:33 | 001,107,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
[2017/04/14 21:26:33 | 000,128,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tm.sys
[2017/04/14 21:26:32 | 001,145,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmailApis.dll
[2017/04/14 21:26:32 | 001,013,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactApis.dll
[2017/04/14 21:26:32 | 000,770,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppointmentApis.dll
[2017/04/14 21:26:32 | 000,748,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ChatApis.dll
[2017/04/14 21:26:32 | 000,318,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
[2017/04/14 21:26:32 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
[2017/04/14 21:26:31 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultcli.dll
[2017/04/14 21:26:31 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
[2017/04/14 21:26:30 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.Input.dll
[2017/04/14 21:26:30 | 000,531,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iprtrmgr.dll
[2017/04/14 21:26:30 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XInputUap.dll
[2017/04/14 21:26:29 | 000,425,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ws2_32.dll
[2017/04/14 21:26:28 | 001,966,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hevcdecoder.dll
[2017/04/14 21:26:28 | 000,141,824 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysWow64\DscCoreConfProv.dll
[2017/04/14 21:26:27 | 000,240,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkDesktopSettings.dll
[2017/04/14 21:26:27 | 000,198,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wof.sys
[2017/04/14 21:26:25 | 001,189,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sdengin2.dll
[2017/04/14 21:26:25 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sdshext.dll
[2017/04/14 21:26:24 | 004,060,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2017/04/14 21:26:24 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2017/04/14 21:26:23 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pwrshplugin.dll
[2017/04/14 21:26:22 | 000,796,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvewiz.dll
[2017/04/14 21:26:22 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvecpl.dll
[2017/04/14 21:26:22 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\biwinrt.dll
[2017/04/14 21:26:20 | 000,387,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
[2017/04/14 21:26:19 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\thumbcache.dll
[2017/04/14 21:26:18 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WebcamUi.dll
[2017/04/14 21:26:18 | 000,594,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2017/04/14 21:26:18 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
[2017/04/14 21:26:18 | 000,044,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfpmp.exe
[2017/04/14 21:26:17 | 001,418,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll
[2017/04/14 21:26:17 | 000,511,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mprapi.dll
[2017/04/14 21:26:16 | 000,907,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drvstore.dll
[2017/04/14 21:26:16 | 000,848,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupEngine.dll
[2017/04/14 21:26:16 | 000,265,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2017/04/14 21:26:16 | 000,148,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupApi.dll
[2017/04/14 21:26:16 | 000,033,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll
[2017/04/14 21:26:15 | 001,472,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2017/04/14 21:26:15 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Identity.Provider.dll
[2017/04/14 21:26:14 | 001,883,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsp_fs.dll
[2017/04/14 21:26:14 | 000,455,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe
[2017/04/14 21:26:14 | 000,438,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDec.dll
[2017/04/14 21:26:14 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll
[2017/04/14 21:26:13 | 001,344,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmclient.dll
[2017/04/14 21:26:13 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmscan.dll
[2017/04/14 21:26:13 | 000,400,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
[2017/04/14 21:26:13 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2017/04/14 21:26:13 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ImplatSetup.dll
[2017/04/14 21:26:12 | 001,460,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll
[2017/04/14 21:26:12 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DataExchange.dll
[2017/04/14 21:26:11 | 008,155,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2017/04/14 21:26:11 | 000,349,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icsvcext.dll
[2017/04/14 21:26:10 | 001,853,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2017/04/14 21:26:10 | 000,323,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.pcshell.dll
[2017/04/14 21:26:09 | 000,795,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MiracastReceiver.dll
[2017/04/14 21:26:09 | 000,758,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2017/04/14 21:26:09 | 000,545,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2017/04/14 21:26:09 | 000,408,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NgcCtnr.dll
[2017/04/14 21:26:09 | 000,315,744 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2017/04/14 21:26:09 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2017/04/14 21:26:08 | 000,983,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngcsvc.dll
[2017/04/14 21:26:08 | 000,911,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
[2017/04/14 21:26:08 | 000,450,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\werui.dll
[2017/04/14 21:26:06 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
[2017/04/14 21:26:06 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.UserDeviceAssociation.dll
[2017/04/14 21:26:05 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2017/04/14 21:26:05 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
[2017/04/14 21:26:04 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Midi.dll
[2017/04/14 21:26:03 | 000,671,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
[2017/04/14 21:26:03 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseModernAppMgmtCSP.dll
[2017/04/14 21:26:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iepeers.dll
[2017/04/14 21:26:02 | 000,588,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidprov.dll
[2017/04/14 21:26:02 | 000,258,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\xboxgip.sys
[2017/04/14 21:26:01 | 000,347,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Display.dll
[2017/04/14 21:26:01 | 000,273,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAnimation.dll
[2017/04/14 21:26:01 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DuCsps.dll
[2017/04/14 21:26:00 | 000,340,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RADCUI.dll
[2017/04/14 21:26:00 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExSMime.dll
[2017/04/14 21:26:00 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VCardParser.dll
[2017/04/14 21:26:00 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentActivation.dll
[2017/04/14 21:26:00 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
[2017/04/14 21:26:00 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\POSyncServices.dll
[2017/04/14 21:26:00 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataPlatformHelperUtil.dll
[2017/04/14 21:26:00 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AddressParser.dll
[2017/04/14 21:26:00 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactActivation.dll
[2017/04/14 21:26:00 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTypeHelperUtil.dll
[2017/04/14 21:26:00 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataLanguageUtil.dll
[2017/04/14 21:26:00 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExtrasXmlParser.dll
[2017/04/14 21:26:00 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccessRes.dll
[2017/04/14 21:25:59 | 001,555,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMPDMC.exe
[2017/04/14 21:25:59 | 000,886,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll
[2017/04/14 21:25:59 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncPolicy.dll
[2017/04/14 21:25:58 | 002,026,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2017/04/14 21:25:58 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll
[2017/04/14 21:25:57 | 000,324,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\microsoft-windows-system-events.dll
[2017/04/14 21:25:57 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\flvprophandler.dll
[2017/04/14 21:25:56 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
[2017/04/14 21:25:55 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ahcache.sys
[2017/04/14 21:25:55 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Lights.dll
[2017/04/14 21:25:54 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RjvMDMConfig.dll
[2017/04/14 21:25:54 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\smphost.dll
[2017/04/14 21:25:53 | 002,710,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mispace.dll
[2017/04/14 21:25:53 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppnp.dll
[2017/04/14 21:25:52 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RMapi.dll
[2017/04/14 21:25:52 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offreg.dll
[2017/04/14 21:25:51 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovslegacy.dll
[2017/04/14 21:25:50 | 000,725,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll
[2017/04/14 21:25:50 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tspubwmi.dll
[2017/04/14 21:25:49 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SerialCommunication.dll
[2017/04/14 21:25:49 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\baaupdate.exe
[2017/04/14 21:25:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\powercfg.exe
[2017/04/14 21:25:48 | 000,355,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
[2017/04/14 21:25:48 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dab.dll
[2017/04/14 21:25:47 | 000,466,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sppcext.dll
[2017/04/14 21:25:47 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
[2017/04/14 21:25:47 | 000,136,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostUser.dll
[2017/04/14 21:25:47 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\slcext.dll
[2017/04/14 21:25:46 | 004,748,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2017/04/14 21:25:46 | 000,805,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2017/04/14 21:25:45 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2017/04/14 21:25:44 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCCSEngineShared.dll
[2017/04/14 21:25:44 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReportingCSP.dll
[2017/04/14 21:25:44 | 000,038,400 | ---- | M] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2017/04/14 21:25:43 | 000,701,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2017/04/14 21:25:43 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OnDemandConnRouteHelper.dll
[2017/04/14 21:25:42 | 004,596,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
[2017/04/14 21:25:41 | 006,044,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2017/04/14 21:25:41 | 000,809,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Search.dll
[2017/04/14 21:25:41 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakrathunk.dll
[2017/04/14 21:25:40 | 000,822,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll
[2017/04/14 21:25:40 | 000,313,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll
[2017/04/14 21:25:40 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2017/04/14 21:25:40 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanhlp.dll
[2017/04/14 21:25:38 | 000,433,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWanAPI.dll
[2017/04/14 21:25:38 | 000,361,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tsmf.dll
[2017/04/14 21:25:37 | 001,543,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmc.exe
[2017/04/14 21:25:37 | 001,368,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2017/04/14 21:25:37 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ngccredprov.dll
[2017/04/14 21:25:36 | 000,343,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.Phone.dll
[2017/04/14 21:25:36 | 000,244,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2017/04/14 21:25:35 | 004,131,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2017/04/14 21:25:35 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mprddm.dll
[2017/04/14 21:25:35 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerSvc.dll
[2017/04/14 21:25:34 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ScDeviceEnum.dll
[2017/04/14 21:25:33 | 000,582,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2017/04/14 21:25:33 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CameraCaptureUI.dll
[2017/04/14 21:25:32 | 001,004,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2017/04/14 21:25:32 | 000,545,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\timedate.cpl
[2017/04/14 21:25:29 | 000,713,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2017/04/14 21:25:26 | 000,971,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2017/04/14 21:25:26 | 000,651,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.AllJoyn.dll
[2017/04/14 21:25:26 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\adsmsext.dll
[2017/04/14 21:25:25 | 001,456,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2017/04/14 21:25:25 | 000,718,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2017/04/14 21:25:25 | 000,279,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2017/04/14 21:25:25 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll
[2017/04/14 21:25:25 | 000,187,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2017/04/14 21:25:25 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NfcRadioMedia.dll
[2017/04/14 21:25:24 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
[2017/04/14 21:25:24 | 000,762,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
[2017/04/14 21:25:24 | 000,729,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nshwfp.dll
[2017/04/14 21:25:24 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll
[2017/04/14 21:25:23 | 001,388,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2017/04/14 21:25:23 | 000,500,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.dll
[2017/04/14 21:25:22 | 000,975,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2017/04/14 21:25:22 | 000,823,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVClient.exe
[2017/04/14 21:25:22 | 000,691,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2017/04/14 21:25:22 | 000,126,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\AppVStrm.sys
[2017/04/14 21:25:21 | 001,467,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2017/04/14 21:25:20 | 001,071,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
[2017/04/14 21:25:20 | 000,168,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcrypt.dll
[2017/04/14 21:25:19 | 000,340,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2017/04/14 21:25:19 | 000,236,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WsmWmiPl.dll
[2017/04/14 21:25:19 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinesam.dll
[2017/04/14 21:25:18 | 000,389,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtapi.dll
[2017/04/14 21:25:18 | 000,119,808 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecureAssessmentHandlers.dll
[2017/04/14 21:25:18 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll
[2017/04/14 21:25:18 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll
[2017/04/14 21:25:17 | 000,306,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2017/04/14 21:25:17 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthRadioMedia.dll
[2017/04/14 21:25:16 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\C_G18030.DLL
[2017/04/14 21:25:16 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\C_IS2022.DLL
[2017/04/14 21:25:16 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\c_GSM7.DLL
[2017/04/14 21:25:15 | 002,264,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2017/04/14 21:25:15 | 001,690,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
[2017/04/14 21:25:15 | 000,956,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
[2017/04/14 21:25:15 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll
[2017/04/14 21:25:15 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tcpipcfg.dll
[2017/04/14 21:25:15 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netiougc.exe
[2017/04/14 21:25:14 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpencom.dll
[2017/04/14 21:25:13 | 000,912,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.dll
[2017/04/14 21:25:13 | 000,119,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wcifs.sys
[2017/04/14 21:25:12 | 000,256,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.CredDialogController.dll
[2017/04/14 21:25:11 | 003,541,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2017/04/14 21:25:09 | 000,368,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiobj.dll
[2017/04/14 21:25:09 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DafPrintProvider.dll
[2017/04/14 21:25:09 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\findnetprinters.dll
[2017/04/14 21:25:08 | 002,913,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2017/04/14 21:25:08 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSCard.dll
[2017/04/14 21:25:08 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiapi.dll
[2017/04/14 21:25:07 | 001,267,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2017/04/14 21:25:07 | 000,380,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wincorlib.dll
[2017/04/14 21:25:07 | 000,376,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys
[2017/04/14 21:25:07 | 000,358,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.dll
[2017/04/14 21:25:06 | 001,656,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Perception.dll
[2017/04/14 21:25:06 | 001,507,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.FaceAnalysis.dll
[2017/04/14 21:25:06 | 000,631,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\main.cpl
[2017/04/14 21:25:05 | 000,368,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanui.dll
[2017/04/14 21:25:05 | 000,289,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
[2017/04/14 21:25:05 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tapi32.dll
[2017/04/14 21:25:05 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinRtTracing.dll
[2017/04/14 21:25:03 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
[2017/04/14 21:25:03 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\csrsrv.dll
[2017/04/14 21:25:01 | 001,490,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2017/04/14 21:25:01 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinelsa.dll
[2017/04/14 21:25:01 | 000,090,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devenum.dll
[2017/04/14 21:25:01 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
[2017/04/14 21:25:00 | 002,360,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapRouter.dll
[2017/04/14 21:25:00 | 000,560,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll
[2017/04/14 21:25:00 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NmaDirect.dll
[2017/04/14 21:24:59 | 006,109,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2017/04/14 21:24:59 | 002,107,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapGeocoder.dll
[2017/04/14 21:24:59 | 000,838,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll
[2017/04/14 21:24:59 | 000,761,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NMAA.dll
[2017/04/14 21:24:59 | 000,715,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll
[2017/04/14 21:24:59 | 000,536,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingOnlineServices.dll
[2017/04/14 21:24:59 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosResource.dll
[2017/04/14 21:24:59 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapsBtSvc.dll
[2017/04/14 21:24:59 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MapControls.dll
[2017/04/14 21:24:59 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosHostClient.dll
[2017/04/14 21:24:59 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosTrace.dll
[2017/04/14 21:24:59 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Microsoft-Windows-MosHost.dll
[2017/04/14 21:24:58 | 005,375,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2017/04/14 21:24:58 | 001,847,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2017/04/14 21:24:58 | 000,331,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2017/04/14 21:24:58 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosStorage.dll
[2017/04/14 21:24:57 | 001,609,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2017/04/14 21:24:57 | 000,184,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfksproxy.dll
[2017/04/14 21:24:56 | 000,549,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2017/04/14 21:24:55 | 000,525,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintDialogs.dll
[2017/04/14 21:24:55 | 000,433,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\imapi2.dll
[2017/04/14 21:24:54 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
[2017/04/14 21:24:54 | 000,130,048 | ---- | M] () -- C:\WINDOWS\SysNative\chartv.dll
[2017/04/14 21:24:53 | 003,299,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe
[2017/04/14 21:24:53 | 000,039,424 | ---- | M] () -- C:\WINDOWS\SysNative\efsext.dll
[2017/04/14 21:24:52 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HttpsDataSource.dll
[2017/04/14 21:24:51 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2017/04/14 21:24:50 | 001,534,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.3D.dll
[2017/04/14 21:24:50 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esentutl.exe
[2017/04/14 21:24:48 | 001,232,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
[2017/04/14 21:24:48 | 001,217,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Audio.dll
[2017/04/14 21:24:47 | 000,609,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
[2017/04/14 21:24:47 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hgcpl.dll
[2017/04/14 21:24:47 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersGPExt.dll
[2017/04/14 21:24:46 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webio.dll
[2017/04/14 21:24:46 | 000,187,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudStorageWizard.exe
[2017/04/14 21:24:45 | 000,794,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2017/04/14 21:24:45 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2017/04/14 21:24:43 | 000,958,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2017/04/14 21:24:42 | 001,892,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pnidui.dll
[2017/04/14 21:24:42 | 000,454,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe
[2017/04/14 21:24:42 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll
[2017/04/14 21:24:42 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DdcWnsListener.dll
[2017/04/14 21:24:41 | 000,632,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2017/04/14 21:24:41 | 000,116,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
[2017/04/14 21:24:40 | 000,464,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msutb.dll
[2017/04/14 21:24:40 | 000,345,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll
[2017/04/14 21:24:39 | 001,196,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
[2017/04/14 21:24:39 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\capimg.sys
[2017/04/14 21:24:39 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscinterop.dll
[2017/04/14 21:24:38 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2017/04/14 21:24:38 | 000,026,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2017/04/14 21:24:36 | 022,571,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2017/04/14 21:24:35 | 000,579,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.UX.EapRequestHandler.dll
[2017/04/14 21:24:35 | 000,261,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\indexeddbserver.dll
[2017/04/14 21:24:34 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Scanners.dll
[2017/04/14 21:24:33 | 004,474,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
[2017/04/14 21:24:33 | 000,774,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
[2017/04/14 21:24:33 | 000,730,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d8.dll
[2017/04/14 21:24:32 | 000,831,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll
[2017/04/14 21:24:32 | 000,471,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2017/04/14 21:24:32 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll
[2017/04/14 21:24:32 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsensorgroup.dll
[2017/04/14 21:24:31 | 001,669,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVIntegration.dll
[2017/04/14 21:24:31 | 001,054,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVPolicy.dll
[2017/04/14 21:24:31 | 000,992,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVManifest.dll
[2017/04/14 21:24:31 | 000,751,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVOrchestration.dll
[2017/04/14 21:24:31 | 000,699,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntVirtualization.dll
[2017/04/14 21:24:31 | 000,696,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVPublishing.dll
[2017/04/14 21:24:31 | 000,512,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TransportDSA.dll
[2017/04/14 21:24:31 | 000,190,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVDllSurrogate.exe
[2017/04/14 21:24:30 | 001,381,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntSubsystemController.dll
[2017/04/14 21:24:30 | 000,813,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVEntStreamingManager.dll
[2017/04/14 21:24:30 | 000,779,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVReporting.dll
[2017/04/14 21:24:30 | 000,562,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVCatalog.dll
[2017/04/14 21:24:30 | 000,405,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVScripting.dll
[2017/04/14 21:24:30 | 000,241,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVShNotify.exe
[2017/04/14 21:24:29 | 007,623,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2017/04/14 21:24:29 | 000,422,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll
[2017/04/14 21:24:29 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LaunchWinApp.exe
[2017/04/14 21:24:28 | 004,708,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2017/04/14 21:24:28 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Picker.dll
[2017/04/14 21:24:27 | 001,589,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
[2017/04/14 21:24:26 | 001,633,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
[2017/04/14 21:24:26 | 001,512,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2017/04/14 21:24:26 | 000,661,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2017/04/14 21:24:26 | 000,366,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
[2017/04/14 21:24:25 | 001,117,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2017/04/14 21:24:25 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\systemcpl.dll
[2017/04/14 21:24:24 | 013,864,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2017/04/14 21:24:24 | 001,631,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Resources.dll
[2017/04/14 21:24:23 | 000,512,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll
[2017/04/14 21:24:23 | 000,372,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MediaControl.dll
[2017/04/14 21:24:23 | 000,167,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
[2017/04/14 21:24:22 | 004,557,824 | ---- | M] (Microsoft) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2017/04/14 21:24:21 | 000,461,312 | ---- | M] (Microsoft) -- C:\WINDOWS\SysWow64\DbgModel.dll
[2017/04/14 21:24:21 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BioFeedback.dll
[2017/04/14 21:24:20 | 000,899,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2017/04/14 21:24:20 | 000,219,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IPHLPAPI.DLL
[2017/04/14 21:24:18 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.SyncEngine.dll
[2017/04/14 21:24:16 | 000,260,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Phoneutil.dll
[2017/04/14 21:24:16 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFi.dll
[2017/04/14 21:24:16 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Energy.dll
[2017/04/14 21:24:15 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkCollectionAgent.dll
[2017/04/14 21:24:15 | 000,641,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.InkControls.dll
[2017/04/14 21:24:14 | 002,422,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAJApi.dll
[2017/04/14 21:24:14 | 001,557,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2017/04/14 21:24:14 | 000,823,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2017/04/14 21:24:13 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2017/04/14 21:24:13 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ClipboardServer.dll
[2017/04/14 21:24:13 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\encapi.dll
[2017/04/14 21:24:12 | 009,260,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmploc.DLL
[2017/04/14 21:24:12 | 000,765,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2017/04/14 21:24:11 | 013,431,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2017/04/14 21:24:11 | 001,234,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2017/04/14 21:24:11 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spwmp.dll
[2017/04/14 21:24:11 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdxm.ocx
[2017/04/14 21:24:11 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxmasf.dll
[2017/04/14 21:24:10 | 000,746,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
[2017/04/14 21:24:10 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupShim.dll
[2017/04/14 21:24:10 | 000,253,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll
[2017/04/14 21:24:10 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetCfgNotifyObjectHost.exe
[2017/04/14 21:24:10 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xolehlp.dll
[2017/04/14 21:24:08 | 002,049,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2017/04/14 21:24:08 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\poqexec.exe
[2017/04/14 21:24:07 | 001,157,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2017/04/14 21:24:07 | 001,063,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll
[2017/04/14 21:24:07 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFiDirect.dll
[2017/04/14 21:24:06 | 000,082,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2017/04/14 21:24:06 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll
[2017/04/14 21:24:05 | 002,611,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gameux.dll
[2017/04/14 21:24:05 | 000,426,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Wallet.dll
[2017/03/18 22:15:46 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2017/04/15 03:25:22 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2017/04/15 03:17:22 | 000,000,144 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2017/04/14 22:46:38 | 000,002,358 | ---- | C] () -- C:\Users\S.INFO\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/04/14 22:46:38 | 000,002,346 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[2017/04/14 22:46:38 | 000,002,334 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2017/04/14 22:38:46 | 000,002,414 | ---- | C] () -- C:\Users\S.INFO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2017/04/14 22:33:12 | 000,000,451 | ---- | C] () -- C:\WINDOWS\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
[2017/04/14 22:31:14 | 000,005,512 | ---- | C] () -- C:\Users\S.INFO\Desktop\Applications supprimées.html
[2017/04/14 22:29:27 | 001,886,156 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2017/04/14 22:24:15 | 1669,038,080 | -HS- | C] () -- C:\hiberfil.sys
[2017/04/14 22:21:23 | 000,000,352 | ---- | C] () -- C:\Users\S.INFO\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2017/04/14 22:21:23 | 000,000,334 | ---- | C] () -- C:\Users\S.INFO\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2017/04/14 22:12:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf
[2017/04/14 22:12:24 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
[2017/04/14 22:12:23 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
[2017/04/14 22:11:25 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2017/04/14 22:05:12 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2017/04/14 22:03:31 | 000,206,392 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2017/04/14 22:01:27 | 000,000,774 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf
[2017/04/14 22:01:27 | 000,000,774 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf
[2017/04/14 21:52:12 | 000,844,746 | ---- | C] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2017/04/14 21:52:12 | 000,350,774 | ---- | C] () -- C:\WINDOWS\SysNative\perfi00C.dat
[2017/04/14 21:52:12 | 000,161,842 | ---- | C] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2017/04/14 21:52:12 | 000,040,528 | ---- | C] () -- C:\WINDOWS\SysNative\perfd00C.dat
[2017/04/14 21:46:12 | 000,740,720 | ---- | C] () -- C:\WINDOWS\SysNative\perfh009.dat
[2017/04/14 21:46:12 | 000,296,742 | ---- | C] () -- C:\WINDOWS\SysNative\perfi009.dat
[2017/04/14 21:46:12 | 000,144,310 | ---- | C] () -- C:\WINDOWS\SysNative\perfc009.dat
[2017/04/14 21:46:12 | 000,033,362 | ---- | C] () -- C:\WINDOWS\SysNative\perfd009.dat
[2017/04/14 21:43:15 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2017/04/14 21:43:14 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2017/04/14 21:43:02 | 000,017,463 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\services
[2017/04/14 21:43:02 | 000,003,683 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2017/04/14 21:43:02 | 000,001,358 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\protocol
[2017/04/14 21:43:02 | 000,000,824 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2017/04/14 21:43:02 | 000,000,407 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\networks
[2017/04/14 21:42:57 | 000,015,462 | ---- | C] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2017/04/14 21:42:57 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2017/04/14 21:42:54 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysNative\dssec.dat
[2017/04/14 21:42:54 | 000,000,858 | ---- | C] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2016/07/16 12:43:04 | 000,055,296 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2016/07/16 12:43:00 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
[2016/07/16 12:42:56 | 000,185,368 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2016/07/16 12:42:55 | 002,048,496 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2016/07/16 12:42:55 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2016/07/16 12:42:55 | 000,038,400 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2016/07/16 12:42:54 | 000,265,728 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
[2016/07/16 12:42:53 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2016/07/16 12:42:49 | 000,304,640 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2016/07/16 12:42:48 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2016/07/16 12:42:46 | 000,109,056 | ---- | C] () -- C:\WINDOWS\SysWow64\chartv.dll
[2016/07/16 12:42:46 | 000,031,232 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2016/07/16 12:42:45 | 000,336,896 | ---- | C] () -- C:\WINDOWS\SysWow64\msinfo32.exe
[2016/07/16 12:42:43 | 000,002,307 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2016/07/16 12:42:12 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2016/05/03 23:30:46 | 000,200,200 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll
[2016/05/03 23:30:44 | 000,161,288 | ---- | C] () -- C:\WINDOWS\SysWow64\igdail32.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2017/04/14 21:29:18 | 007,222,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2017/04/14 21:34:38 | 005,723,344 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2016/07/16 12:42:31 | 000,977,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2016/07/16 12:42:56 | 000,779,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2016/07/16 12:42:31 | 000,518,656 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]<  %SYSTEMDRIVE%\*.*  >[/color]
[2013/09/30 05:24:45 | 000,398,356 | RHS- | M] () -- C:\bootmgr
[2015/10/30 08:18:34 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2017/04/15 13:17:59 | 1669,038,080 | -HS- | M] () -- C:\hiberfil.sys
[2017/04/15 03:16:02 | 1476,395,008 | -HS- | M] () -- C:\pagefile.sys
[2017/04/15 13:26:52 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2017/04/15 03:16:02 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
 
[color=#A23BEC]<  %SYSTEMDRIVE%\*.exe  >[/color]
 
[color=#A23BEC]<  %PROGRAMFILES%\*.*  >[/color]
[2017/04/14 21:37:41 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
 
[color=#A23BEC]<  %PROGRAMFILES%\*.  >[/color]
[2017/04/14 22:11:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2017/04/14 22:46:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2017/04/14 21:51:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2017/04/14 21:42:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2017/04/14 21:53:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2017/04/14 21:53:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2017/04/14 21:51:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2017/04/14 21:51:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2017/04/14 21:51:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2017/04/14 21:42:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2017/04/14 21:42:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2017/04/14 21:51:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2017/04/14 21:42:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2017/04/14 21:42:39 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2017/04/14 21:42:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WindowsPowerShell
 
[color=#A23BEC]< MD5 for: APPMGMTS.DLL  >[/color]
[2016/07/16 23:45:46 | 000,197,632 | ---- | M] (Microsoft Corporation) MD5=76A12AC673B0F8A607ACDD0583C247D4 -- C:\WINDOWS\SysNative\appmgmts.dll
[2016/07/16 23:45:46 | 000,197,632 | ---- | M] (Microsoft Corporation) MD5=76A12AC673B0F8A607ACDD0583C247D4 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.14393.0_none_af4353df72bc45a0\appmgmts.dll
[2016/07/16 23:45:43 | 000,165,376 | ---- | M] (Microsoft Corporation) MD5=964B3242103F4CBC5174A301B6F2ED0F -- C:\Windows\syswow64\appmgmts.dll
[2016/07/16 23:45:43 | 000,165,376 | ---- | M] (Microsoft Corporation) MD5=964B3242103F4CBC5174A301B6F2ED0F -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.14393.0_none_b997fe31a71d079b\appmgmts.dll
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2016/07/16 12:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=A10F989A812B57B9695F6C305907C9C6 -- C:\WINDOWS\SysNative\drivers\atapi.sys
[2016/07/16 12:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=A10F989A812B57B9695F6C305907C9C6 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_67bad2c7196330b6\atapi.sys
[2016/07/16 12:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=A10F989A812B57B9695F6C305907C9C6 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.14393.0_none_0aac9395383c7303\atapi.sys
[2016/07/16 12:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=A10F989A812B57B9695F6C305907C9C6 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.14393.953_none_170361fcbf7e14a8\atapi.sys
 
[color=#A23BEC]< MD5 for: AUTOCHK.EXE  >[/color]
[2016/07/16 12:43:50 | 000,968,704 | ---- | M] (Microsoft Corporation) MD5=4066535B4A326CFCD98850096468D0F0 -- C:\WINDOWS\SysNative\autochk.exe
[2016/07/16 12:43:50 | 000,968,704 | ---- | M] (Microsoft Corporation) MD5=4066535B4A326CFCD98850096468D0F0 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.14393.0_none_0f6858c4d873c756\autochk.exe
[2016/07/16 12:43:52 | 000,886,784 | ---- | M] (Microsoft Corporation) MD5=814B8F7C56B2AE547E82A90B451A0EED -- C:\Windows\syswow64\autochk.exe
[2016/07/16 12:43:52 | 000,886,784 | ---- | M] (Microsoft Corporation) MD5=814B8F7C56B2AE547E82A90B451A0EED -- C:\Windows\WinSxS\wow64_microsoft-windows-autochk_31bf3856ad364e35_10.0.14393.0_none_19bd03170cd48951\autochk.exe
 
[color=#A23BEC]< MD5 for: BEEP.SYS  >[/color]
[2016/07/16 12:42:17 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=0A508274355745EEF01C6BE3198D02C4 -- C:\Windows.old\WINDOWS\System32\drivers\beep.sys
[2016/07/16 12:42:17 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=0A508274355745EEF01C6BE3198D02C4 -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_10.0.14393.0_none_f1950cce1e4fecc2\beep.sys
[2016/07/16 12:42:17 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=0A508274355745EEF01C6BE3198D02C4 -- C:\WINDOWS\SysNative\drivers\beep.sys
[2016/07/16 12:42:17 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=0A508274355745EEF01C6BE3198D02C4 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_10.0.14393.0_none_f1950cce1e4fecc2\beep.sys
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2017/04/14 21:30:55 | 004,673,304 | ---- | M] (Microsoft Corporation) MD5=05181A5AC4197D6C5C02ACE6070AF234 -- C:\Windows\explorer.exe
[2017/04/14 21:30:55 | 004,673,304 | ---- | M] (Microsoft Corporation) MD5=05181A5AC4197D6C5C02ACE6070AF234 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.14393.0_none_7f29128d906f1326\explorer.exe
[2017/03/04 07:46:40 | 004,312,248 | ---- | M] (Microsoft Corporation) MD5=805E293E2A440F7464B10D58988818F2 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.14393.953_none_95d48b474c1176c6\explorer.exe
[2017/04/14 21:36:19 | 004,312,248 | ---- | M] (Microsoft Corporation) MD5=8931C71ADDC9B0944332336B9F4A3505 -- C:\Windows\syswow64\explorer.exe
[2017/04/14 21:36:19 | 004,312,248 | ---- | M] (Microsoft Corporation) MD5=8931C71ADDC9B0944332336B9F4A3505 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.14393.0_none_897dbcdfc4cfd521\explorer.exe
[2017/03/04 08:03:07 | 004,674,360 | ---- | M] (Microsoft Corporation) MD5=F2D58A2E27C2CD486F8F0A123A3F34C3 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.14393.953_none_8b7fe0f517b0b4cb\explorer.exe
 
[color=#A23BEC]< MD5 for: HIDSERV.DLL  >[/color]
[2016/07/16 12:42:46 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=BE6A279ED7023652DD94FA19E9B27882 -- C:\Windows\syswow64\hidserv.dll
[2016/07/16 12:42:46 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=BE6A279ED7023652DD94FA19E9B27882 -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.14393.0_none_0e755e3ad2820e99\hidserv.dll
[2016/07/16 12:42:18 | 000,036,864 | ---- | M] (Microsoft Corporation) MD5=C900FE0DD6A1E2220084B8F1C427790C -- C:\Windows.old\WINDOWS\System32\hidserv.dll
[2016/07/16 12:42:18 | 000,036,864 | ---- | M] (Microsoft Corporation) MD5=C900FE0DD6A1E2220084B8F1C427790C -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.14393.0_none_0420b3e89e214c9e\hidserv.dll
[2016/07/16 12:42:18 | 000,036,864 | ---- | M] (Microsoft Corporation) MD5=C900FE0DD6A1E2220084B8F1C427790C -- C:\WINDOWS\SysNative\hidserv.dll
[2016/07/16 12:42:18 | 000,036,864 | ---- | M] (Microsoft Corporation) MD5=C900FE0DD6A1E2220084B8F1C427790C -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.14393.0_none_0420b3e89e214c9e\hidserv.dll
 
[color=#A23BEC]< MD5 for: IASTORV.SYS  >[/color]
[2016/07/16 12:41:53 | 000,412,000 | ---- | M] (Intel Corporation) MD5=8350FE3BCDE3428BC040877BB7E9EAEB -- C:\WINDOWS\SysNative\drivers\iaStorV.sys
[2016/07/16 12:41:53 | 000,412,000 | ---- | M] (Intel Corporation) MD5=8350FE3BCDE3428BC040877BB7E9EAEB -- C:\WINDOWS\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2016/07/16 12:41:53 | 000,412,000 | ---- | M] (Intel Corporation) MD5=8350FE3BCDE3428BC040877BB7E9EAEB -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.14393.0_none_dc85bdf39e7a9ef6\iaStorV.sys
 
[color=#A23BEC]< MD5 for: IMM32.DLL  >[/color]
[2016/07/16 12:42:49 | 000,144,632 | ---- | M] (Microsoft Corporation) MD5=203F58BA41B48A59D6A047E0233DB422 -- C:\Windows.old\WINDOWS\SysWOW64\imm32.dll
[2016/07/16 12:42:49 | 000,144,632 | ---- | M] (Microsoft Corporation) MD5=203F58BA41B48A59D6A047E0233DB422 -- C:\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_10.0.14393.0_none_941f33e3c57e6364\imm32.dll
[2016/07/16 12:42:49 | 000,144,632 | ---- | M] (Microsoft Corporation) MD5=203F58BA41B48A59D6A047E0233DB422 -- C:\Windows\syswow64\imm32.dll
[2016/07/16 12:42:49 | 000,144,632 | ---- | M] (Microsoft Corporation) MD5=203F58BA41B48A59D6A047E0233DB422 -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_10.0.14393.0_none_941f33e3c57e6364\imm32.dll
[2016/07/16 12:42:23 | 000,175,672 | ---- | M] (Microsoft Corporation) MD5=E1024CF2E35DD3467F52BC83F7FEDA3F -- C:\Windows.old\WINDOWS\System32\imm32.dll
[2016/07/16 12:42:23 | 000,175,672 | ---- | M] (Microsoft Corporation) MD5=E1024CF2E35DD3467F52BC83F7FEDA3F -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.14393.0_none_89ca8991911da169\imm32.dll
[2016/07/16 12:42:23 | 000,175,672 | ---- | M] (Microsoft Corporation) MD5=E1024CF2E35DD3467F52BC83F7FEDA3F -- C:\WINDOWS\SysNative\imm32.dll
[2016/07/16 12:42:23 | 000,175,672 | ---- | M] (Microsoft Corporation) MD5=E1024CF2E35DD3467F52BC83F7FEDA3F -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.14393.0_none_89ca8991911da169\imm32.dll
 
[color=#A23BEC]< MD5 for: KERNEL32.DLL  >[/color]
[2016/07/16 12:42:16 | 000,699,880 | ---- | M] (Microsoft Corporation) MD5=6955067712F2F4752CA12192B08EF860 -- C:\Windows.old\WINDOWS\System32\kernel32.dll
[2016/07/16 12:42:16 | 000,699,880 | ---- | M] (Microsoft Corporation) MD5=6955067712F2F4752CA12192B08EF860 -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.14393.0_none_c13250bc6cfe2d15\kernel32.dll
[2016/07/16 12:42:16 | 000,699,880 | ---- | M] (Microsoft Corporation) MD5=6955067712F2F4752CA12192B08EF860 -- C:\WINDOWS\SysNative\kernel32.dll
[2016/07/16 12:42:16 | 000,699,880 | ---- | M] (Microsoft Corporation) MD5=6955067712F2F4752CA12192B08EF860 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.14393.0_none_c13250bc6cfe2d15\kernel32.dll
[2016/07/16 12:42:45 | 000,616,048 | ---- | M] (Microsoft Corporation) MD5=956DB4B52F2CE6365ADE6B5D2D74A267 -- C:\Windows.old\WINDOWS\SysWOW64\kernel32.dll
[2016/07/16 12:42:45 | 000,616,048 | ---- | M] (Microsoft Corporation) MD5=956DB4B52F2CE6365ADE6B5D2D74A267 -- C:\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.14393.0_none_cb86fb0ea15eef10\kernel32.dll
[2016/07/16 12:42:45 | 000,616,048 | ---- | M] (Microsoft Corporation) MD5=956DB4B52F2CE6365ADE6B5D2D74A267 -- C:\Windows\syswow64\kernel32.dll
[2016/07/16 12:42:45 | 000,616,048 | ---- | M] (Microsoft Corporation) MD5=956DB4B52F2CE6365ADE6B5D2D74A267 -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.14393.0_none_cb86fb0ea15eef10\kernel32.dll
 
[color=#A23BEC]< MD5 for: MSWSOCK.DLL  >[/color]
[2016/07/16 12:42:27 | 000,357,216 | ---- | M] (Microsoft Corporation) MD5=10A6561536EC8ECC53BE5EABC40177A1 -- C:\Windows.old\WINDOWS\System32\mswsock.dll
[2016/07/16 12:42:27 | 000,357,216 | ---- | M] (Microsoft Corporation) MD5=10A6561536EC8ECC53BE5EABC40177A1 -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.14393.0_none_e5c7c28143fe62f5\mswsock.dll
[2016/07/16 12:42:27 | 000,357,216 | ---- | M] (Microsoft Corporation) MD5=10A6561536EC8ECC53BE5EABC40177A1 -- C:\WINDOWS\SysNative\mswsock.dll
[2016/07/16 12:42:27 | 000,357,216 | ---- | M] (Microsoft Corporation) MD5=10A6561536EC8ECC53BE5EABC40177A1 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.14393.0_none_e5c7c28143fe62f5\mswsock.dll
[2016/07/16 12:42:55 | 000,306,016 | ---- | M] (Microsoft Corporation) MD5=8E6958813B6FAAFF8A6EE9F2A7040299 -- C:\Windows.old\WINDOWS\SysWOW64\mswsock.dll
[2016/07/16 12:42:55 | 000,306,016 | ---- | M] (Microsoft Corporation) MD5=8E6958813B6FAAFF8A6EE9F2A7040299 -- C:\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.14393.0_none_f01c6cd3785f24f0\mswsock.dll
[2016/07/16 12:42:55 | 000,306,016 | ---- | M] (Microsoft Corporation) MD5=8E6958813B6FAAFF8A6EE9F2A7040299 -- C:\Windows\syswow64\mswsock.dll
[2016/07/16 12:42:55 | 000,306,016 | ---- | M] (Microsoft Corporation) MD5=8E6958813B6FAAFF8A6EE9F2A7040299 -- C:\Windows\WinSxS\wow64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.14393.0_none_f01c6cd3785f24f0\mswsock.dll
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2017/04/14 21:31:55 | 001,182,048 | ---- | M] (Microsoft Corporation) MD5=36DD2C614720EC2970CB5E870BA69D8D -- C:\WINDOWS\SysNative\drivers\ndis.sys
[2017/04/14 21:31:55 | 001,182,048 | ---- | M] (Microsoft Corporation) MD5=36DD2C614720EC2970CB5E870BA69D8D -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.14393.0_none_86c9e9b03ebeb024\ndis.sys
[2017/03/28 07:20:04 | 001,181,024 | ---- | M] (Microsoft Corporation) MD5=63560E6BC9BCA978A6B72DF65F7A8930 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.14393.1066_none_cf22a33882932c87\ndis.sys
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2016/07/16 12:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=38315FF91B99DCA9468827D8DB22D08B -- C:\Windows.old\WINDOWS\System32\netlogon.dll
[2016/07/16 12:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=38315FF91B99DCA9468827D8DB22D08B -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.14393.0_none_2b2c22be4eac8cbe\netlogon.dll
[2016/07/16 12:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=38315FF91B99DCA9468827D8DB22D08B -- C:\WINDOWS\SysNative\netlogon.dll
[2016/07/16 12:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) MD5=38315FF91B99DCA9468827D8DB22D08B -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.14393.0_none_2b2c22be4eac8cbe\netlogon.dll
[2016/07/16 12:42:55 | 000,670,720 | ---- | M] (Microsoft Corporation) MD5=C4A39409D825D4808832C7B9243FC9B7 -- C:\Windows\syswow64\netlogon.dll
[2016/07/16 12:42:55 | 000,670,720 | ---- | M] (Microsoft Corporation) MD5=C4A39409D825D4808832C7B9243FC9B7 -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.14393.0_none_3580cd10830d4eb9\netlogon.dll
 
[color=#A23BEC]< MD5 for: NTFS.SYS  >[/color]
[2017/03/04 08:21:04 | 002,255,712 | ---- | M] (Microsoft Corporation) MD5=98BBD81DC481E9D58EEB31C81EBDEFF5 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.14393.953_none_e03c639fbadfdf9f\ntfs.sys
[2017/04/14 21:31:25 | 002,257,248 | ---- | M] (Microsoft Corporation) MD5=D1AF837A1555990602A51A3ED238EC80 -- C:\WINDOWS\SysNative\drivers\ntfs.sys
[2017/04/14 21:31:25 | 002,257,248 | ---- | M] (Microsoft Corporation) MD5=D1AF837A1555990602A51A3ED238EC80 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.14393.0_none_d3e59538339e3dfa\ntfs.sys
 
[color=#A23BEC]< MD5 for: NVSTOR.SYS  >[/color]
[2016/07/16 12:41:53 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=23B702B555EB0436B9DAA0BC63DA65CE -- C:\WINDOWS\SysNative\drivers\nvstor.sys
[2016/07/16 12:41:53 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=23B702B555EB0436B9DAA0BC63DA65CE -- C:\WINDOWS\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_3ee6d81b22b3ea66\nvstor.sys
[2016/07/16 12:41:53 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=23B702B555EB0436B9DAA0BC63DA65CE -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.14393.0_none_674f2ea2d5b148ce\nvstor.sys
 
[color=#A23BEC]< MD5 for: PROQUOTA.EXE  >[/color]
[2016/07/16 12:42:19 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=802CD1CDD76235BEEFA5406F0A5773A6 -- C:\WINDOWS\SysNative\proquota.exe
[2016/07/16 12:42:19 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=802CD1CDD76235BEEFA5406F0A5773A6 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_10.0.14393.0_none_553b6352a917cc50\proquota.exe
[2016/07/16 12:42:48 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=A7A8990035457CE44E9565363A872784 -- C:\Windows\syswow64\proquota.exe
[2016/07/16 12:42:48 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=A7A8990035457CE44E9565363A872784 -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_10.0.14393.0_none_f91cc7cef0ba5b1a\proquota.exe
 
[color=#A23BEC]< MD5 for: QMGR.DLL  >[/color]
[2016/10/15 04:48:52 | 001,054,208 | ---- | M] (Microsoft Corporation) MD5=D876C567AB767258036F05E4766189FD -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client-core_31bf3856ad364e35_10.0.14393.351_none_600e0ac228cd022c\qmgr.dll
[2017/04/14 21:33:21 | 001,052,672 | ---- | M] (Microsoft Corporation) MD5=D99CD8421A546B5AC727CD947C61DC83 -- C:\WINDOWS\SysNative\qmgr.dll
[2017/04/14 21:33:21 | 001,052,672 | ---- | M] (Microsoft Corporation) MD5=D99CD8421A546B5AC727CD947C61DC83 -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client-core_31bf3856ad364e35_10.0.14393.0_none_53b94852a189821f\qmgr.dll
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2016/07/16 12:42:32 | 000,270,336 | ---- | M] (Microsoft Corporation) MD5=7ED53A9C37AE7ADE2A72A1C2EE86879B -- C:\Windows.old\WINDOWS\System32\scecli.dll
[2016/07/16 12:42:32 | 000,270,336 | ---- | M] (Microsoft Corporation) MD5=7ED53A9C37AE7ADE2A72A1C2EE86879B -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.14393.0_none_65824dd6efce1379\scecli.dll
[2016/07/16 12:42:32 | 000,270,336 | ---- | M] (Microsoft Corporation) MD5=7ED53A9C37AE7ADE2A72A1C2EE86879B -- C:\WINDOWS\SysNative\scecli.dll
[2016/07/16 12:42:32 | 000,270,336 | ---- | M] (Microsoft Corporation) MD5=7ED53A9C37AE7ADE2A72A1C2EE86879B -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.14393.0_none_65824dd6efce1379\scecli.dll
[2016/07/16 12:43:01 | 000,211,968 | ---- | M] (Microsoft Corporation) MD5=C8AEECE11B63D90D4FFE43CFDF1A04A8 -- C:\Windows\syswow64\scecli.dll
[2016/07/16 12:43:01 | 000,211,968 | ---- | M] (Microsoft Corporation) MD5=C8AEECE11B63D90D4FFE43CFDF1A04A8 -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.14393.0_none_6fd6f829242ed574\scecli.dll
 
[color=#A23BEC]< MD5 for: SPOOLSV.EXE  >[/color]
[2017/03/04 07:08:30 | 000,792,576 | ---- | M] (Microsoft Corporation) MD5=1DFE222F8D6A422B7ADC909E0C8840DA -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.14393.953_none_1016dd045f7d0b22\spoolsv.exe
[2017/04/14 21:34:07 | 000,787,968 | ---- | M] (Microsoft Corporation) MD5=DA5A9752A702E86AFC10F06115A8AF4C -- C:\WINDOWS\SysNative\spoolsv.exe
[2017/04/14 21:34:07 | 000,787,968 | ---- | M] (Microsoft Corporation) MD5=DA5A9752A702E86AFC10F06115A8AF4C -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.14393.0_none_03c00e9cd83b697d\spoolsv.exe
 
[color=#A23BEC]< MD5 for: SVCHOST.EXE  >[/color]
[2016/07/16 12:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=1F8434DD4907C832E6E90D6298EAB85B -- C:\Windows\syswow64\svchost.exe
[2016/07/16 12:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=1F8434DD4907C832E6E90D6298EAB85B -- C:\Windows\WinSxS\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.14393.0_none_ed846f6e50612447\svchost.exe
[2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) MD5=36F670D89040709013F6A460176767EC -- C:\Windows.old\WINDOWS\System32\svchost.exe
[2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) MD5=36F670D89040709013F6A460176767EC -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.14393.0_none_e32fc51c1c00624c\svchost.exe
[2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) MD5=36F670D89040709013F6A460176767EC -- C:\WINDOWS\SysNative\svchost.exe
[2016/07/16 12:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) MD5=36F670D89040709013F6A460176767EC -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.14393.0_none_e32fc51c1c00624c\svchost.exe
 
[color=#A23BEC]< MD5 for: TERMSRV.DLL  >[/color]
[2016/07/16 12:42:34 | 000,987,648 | ---- | M] (Microsoft Corporation) MD5=FB68E5F02316C42BE7282DA492351C6F -- C:\WINDOWS\SysNative\termsrv.dll
[2016/07/16 12:42:34 | 000,987,648 | ---- | M] (Microsoft Corporation) MD5=FB68E5F02316C42BE7282DA492351C6F -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.14393.0_none_bc13ad436af6bbc9\termsrv.dll
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2016/07/16 12:42:27 | 000,033,280 | ---- | M] (Microsoft Corporation) MD5=C1B1FFC800BE2F31EB2CF8CB40629C69 -- C:\WINDOWS\SysNative\userinit.exe
[2016/07/16 12:42:27 | 000,033,280 | ---- | M] (Microsoft Corporation) MD5=C1B1FFC800BE2F31EB2CF8CB40629C69 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.14393.0_none_099d2590e8629c72\userinit.exe
[2016/07/16 12:42:55 | 000,027,648 | ---- | M] (Microsoft Corporation) MD5=FA900E6CCCF0A429D5B720C6F0E2274B -- C:\Windows\syswow64\userinit.exe
[2016/07/16 12:42:55 | 000,027,648 | ---- | M] (Microsoft Corporation) MD5=FA900E6CCCF0A429D5B720C6F0E2274B -- C:\Windows\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.14393.0_none_13f1cfe31cc35e6d\userinit.exe
 
[color=#A23BEC]< MD5 for: VOLSNAP.SYS  >[/color]
[2016/07/16 12:42:35 | 000,391,520 | ---- | M] (Microsoft Corporation) MD5=BF2546583BB75F01DDA60A7921DFB230 -- C:\WINDOWS\SysNative\drivers\volsnap.sys
[2016/07/16 12:42:35 | 000,391,520 | ---- | M] (Microsoft Corporation) MD5=BF2546583BB75F01DDA60A7921DFB230 -- C:\Windows\WinSxS\amd64_microsoft-windows-volsnap_31bf3856ad364e35_10.0.14393.0_none_8c9e6103b822e42e\volsnap.sys
 
[color=#A23BEC]< MD5 for: WININET.DLL  >[/color]
[2017/03/28 06:10:44 | 002,483,200 | ---- | M] (Microsoft Corporation) MD5=3B0C16C02AD9A6C70240280FC03AC60A -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.14393.1066_none_5f4f90f06d715963\wininet.dll
[2017/04/14 21:31:29 | 002,630,144 | ---- | M] (Microsoft Corporation) MD5=6284717704B063B036BE00F2CB512A74 -- C:\WINDOWS\SysNative\wininet.dll
[2017/04/14 21:31:29 | 002,630,144 | ---- | M] (Microsoft Corporation) MD5=6284717704B063B036BE00F2CB512A74 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.14393.0_none_634ed9d1235f9424\wininet.dll
[2017/03/28 06:08:18 | 002,895,872 | ---- | M] (Microsoft Corporation) MD5=C9028EFC81B0AD00D2E5037AAF377FB5 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.14393.1066_none_bb6e2c7425ceca99\wininet.dll
[2017/04/14 21:24:49 | 002,217,472 | ---- | M] (Microsoft Corporation) MD5=FE2911011440606411C6B4CFBDE22CAD -- C:\Windows\syswow64\wininet.dll
[2017/04/14 21:24:49 | 002,217,472 | ---- | M] (Microsoft Corporation) MD5=FE2911011440606411C6B4CFBDE22CAD -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.14393.0_none_07303e4d6b0222ee\wininet.dll
 
[color=#A23BEC]< MD5 for: WININIT.EXE  >[/color]
[2016/07/16 12:42:27 | 000,304,240 | ---- | M] (Microsoft Corporation) MD5=99A19C9A74E2F9820E501DCE77F84F70 -- C:\Windows.old\WINDOWS\System32\wininit.exe
[2016/07/16 12:42:27 | 000,304,240 | ---- | M] (Microsoft Corporation) MD5=99A19C9A74E2F9820E501DCE77F84F70 -- C:\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.14393.0_none_5e67244a1b034b09\wininit.exe
[2016/07/16 12:42:27 | 000,304,240 | ---- | M] (Microsoft Corporation) MD5=99A19C9A74E2F9820E501DCE77F84F70 -- C:\WINDOWS\SysNative\wininit.exe
[2016/07/16 12:42:27 | 000,304,240 | ---- | M] (Microsoft Corporation) MD5=99A19C9A74E2F9820E501DCE77F84F70 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.14393.0_none_5e67244a1b034b09\wininit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2017/04/14 21:35:27 | 000,674,304 | ---- | M] (Microsoft Corporation) MD5=770DB86BF679CA34FC927F25FBAA350C -- C:\WINDOWS\SysNative\winlogon.exe
[2017/04/14 21:35:27 | 000,674,304 | ---- | M] (Microsoft Corporation) MD5=770DB86BF679CA34FC927F25FBAA350C -- C:\WINDOWS\SysNative\winlogon.exe
[2017/04/14 21:35:27 | 000,674,304 | ---- | M] (Microsoft Corporation) MD5=770DB86BF679CA34FC927F25FBAA350C -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.0_none_9d376c91eba4205c\winlogon.exe
[2017/04/14 21:35:27 | 000,674,304 | ---- | M] (Microsoft Corporation) MD5=770DB86BF679CA34FC927F25FBAA350C -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.0_none_9d376c91eba4205c\winlogon.exe
[2016/12/14 05:24:12 | 000,673,792 | ---- | M] (Microsoft Corporation) MD5=917F081E2AB667C44F7D96DE1D16DFAE -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.594_none_a963f3fb73055680\winlogon.exe
[2016/12/14 05:24:12 | 000,673,792 | ---- | M] (Microsoft Corporation) MD5=917F081E2AB667C44F7D96DE1D16DFAE -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.594_none_a963f3fb73055680\winlogon.exe
 
[color=#A23BEC]< MD5 for: WS2_32.DLL  >[/color]
[2016/10/31 00:22:42 | 000,424,640 | ---- | M] (Microsoft Corporation) MD5=19DBA20EA39E641B940156DF8D2E96E2 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.14393.206_none_2cbbedd56c1f200f\ws2_32.dll
[2017/04/14 21:30:16 | 000,403,888 | ---- | M] (Microsoft Corporation) MD5=469477EE283ABDC81CB4E26BAB57EBAD -- C:\Windows\syswow64\ws2_32.dll
[2017/04/14 21:30:16 | 000,403,888 | ---- | M] (Microsoft Corporation) MD5=469477EE283ABDC81CB4E26BAB57EBAD -- C:\Windows\WinSxS\wow64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.14393.0_none_2a80c69019696c26\ws2_32.dll
[2016/10/31 00:22:29 | 000,402,352 | ---- | M] (Microsoft Corporation) MD5=7A262815259F912431813FEF6C2F8E0B -- C:\Windows\WinSxS\wow64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.14393.206_none_37109827a07fe20a\ws2_32.dll
[2017/04/14 21:26:29 | 000,425,664 | ---- | M] (Microsoft Corporation) MD5=ADBE2E07DAB260B9FDDC1D360722B486 -- C:\WINDOWS\SysNative\ws2_32.dll
[2017/04/14 21:26:29 | 000,425,664 | ---- | M] (Microsoft Corporation) MD5=ADBE2E07DAB260B9FDDC1D360722B486 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.14393.0_none_202c1c3de508aa2b\ws2_32.dll
 
[color=#A23BEC]<  HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\Session Manager\SubSystems /s  >[/color]
 
[color=#A23BEC]<  %systemroot%\*. /mp /s  >[/color]
 
[color=#A23BEC]<  %systemroot%\system32\*.dll /lockedfiles  >[/color]
 
[color=#A23BEC]<  %systemroot%\Tasks\*.job /lockedfiles  >[/color]
 
[color=#A23BEC]<  %systemroot%\system32\drivers\​*.sys /lockedfiles  >[/color]
 
[color=#A23BEC]<  %systemroot%\System32\config\*​.sav  >[/color]
 
[color=#A23BEC]<  c:\$recycle.bin\*.* /s  >[/color]
[2016/05/06 21:59:16 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I00GTIU.mp3
[2016/05/06 21:59:16 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I02FDP5.mp3
[2016/05/06 21:59:15 | 000,000,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I09GYG9.mp3
[2016/05/06 21:59:16 | 000,000,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0FSRWH.mp3
[2016/05/06 21:59:16 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0KE7EJ.mp3
[2016/05/06 21:59:16 | 000,000,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0LOMST.mp3
[2016/05/06 21:59:16 | 000,000,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0Q1Z3M.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0TIHBM.mp3
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0W8SVJ.mp3
[2016/05/06 21:59:16 | 000,000,284 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I0WRRWD.mp3
[2016/05/06 21:59:15 | 000,000,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I15EO5F.mp3
[2016/05/06 21:59:16 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I16KU7D.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I18F7LR.mp3
[2016/05/06 21:59:16 | 000,000,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I1QXOST.mp3
[2016/05/06 21:59:16 | 000,000,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I1V4AXO.mp3
[2016/05/06 21:59:16 | 000,000,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I1V66QF.mp3
[2016/05/06 21:59:15 | 000,000,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I1WS59H.mp3
[2016/05/06 21:59:16 | 000,000,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I1XZQM3.mp3
[2016/05/06 21:59:16 | 000,000,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I201954.mp3
[2016/05/06 21:59:15 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I26WT4N.mp3
[2016/05/01 22:28:56 | 000,000,170 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I2GDQ9G.TorrentRTFREE_qtx9tqphctw9r!App
[2016/05/06 21:59:16 | 000,000,236 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I2Q0BBL.mp3
[2016/05/06 21:59:16 | 000,000,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I2RU8WL.mp3
[2016/05/06 21:59:16 | 000,000,238 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I2S2D74.mp3
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3BSEKZ.mp3
[2016/05/06 21:59:16 | 000,000,218 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3HB4NY.mp3
[2016/05/06 21:59:15 | 000,000,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3IGAJ5.mp3
[2016/05/06 21:59:16 | 000,000,134 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3RDJ7Z.mp3
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3VBY6D.mp3
[2016/05/06 21:59:16 | 000,000,132 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I3VL7UF.mp3
[2016/05/06 21:59:16 | 000,000,114 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I43BH6F.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I44TAI4.mp3
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I47B59B.mp3
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I47U8UW.mp3
[2016/05/06 21:59:16 | 000,000,234 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I4C8CGA.mp3
[2016/05/06 21:59:16 | 000,000,238 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I4I16G6.mp3
[2016/05/06 21:59:16 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I4JA4JW.mp3
[2016/05/06 21:59:15 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I4NHZTF.mp3
[2016/05/06 21:59:16 | 000,000,134 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I4U13YT.mp3
[2016/05/06 21:59:16 | 000,000,230 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5577HM.mp3
[2016/05/06 21:59:15 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I55F96V.mp3
[2016/05/06 21:59:16 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I55KS0G.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I57O8FE.mp3
[2016/05/06 21:59:15 | 000,000,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5A0BZ9.mp3
[2016/05/06 21:59:16 | 000,000,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5B8VQO.mp3
[2016/05/06 21:59:16 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5GXK89.mp3
[2016/05/06 21:59:16 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5H5MQC.mp3
[2016/05/06 21:59:16 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5HMH8K.mp3
[2016/05/06 21:59:16 | 000,000,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5I0VRU.mp3
[2016/05/06 21:59:16 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5KP2JB.mp3
[2016/05/06 21:59:16 | 000,000,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5MZ9X5.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5NNULU.mp3
[2016/05/06 21:59:15 | 000,000,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I5OZZPF.mp3
[2016/05/06 21:59:15 | 000,000,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6160W5.mp3
[2016/05/06 21:59:16 | 000,000,230 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I62NJMA.mp3
[2016/05/06 21:59:16 | 000,000,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6AYVCM.mp3
[2016/05/06 21:59:16 | 000,000,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6HFVBF.mp3
[2016/05/06 21:59:16 | 000,000,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6HQ0M2.mp3
[2016/05/06 21:59:16 | 000,000,170 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6LTG3F.mp3
[2016/05/06 21:59:16 | 000,000,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6MYFPU.mp3
[2016/05/06 21:59:16 | 000,000,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6NQTIW.mp3
[2016/05/06 21:59:16 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6O30UH.mp3
[2016/05/06 21:59:16 | 000,000,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6POKC0.mp3
[2016/05/06 21:59:15 | 000,000,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6THNXX.mp3
[2016/05/06 21:59:16 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I6UPAES.mp3
[2016/05/06 21:59:15 | 000,000,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I76KNWJ.mp3
[2016/05/06 21:59:16 | 000,000,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7A7CSY.mp3
[2016/05/06 21:59:16 | 000,000,162 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7GOY7E.mp3
[2016/05/06 21:59:16 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7I4V2B.mp3
[2016/05/06 21:59:16 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7I8DBA.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7ITXAZ.mp3
[2016/05/06 21:59:16 | 000,000,160 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7NJ1JW.mp3
[2016/05/06 21:59:16 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7PP5K7.mp3
[2016/05/06 21:59:15 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I7ZJOCB.mp3
[2016/05/06 21:59:15 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I8388YK.mp3
[2016/05/06 21:59:16 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I871I59.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I89CWWY.mp3
[2016/05/06 21:59:16 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I8HTRZK.mp3
[2016/05/06 21:59:16 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I8MLN3U.mp3
[2016/05/06 21:59:16 | 000,000,200 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I8WUS92.mp3
[2016/05/06 21:59:22 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I8WZ3KM.mp3
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I94PIFG.mp3
[2016/05/06 21:59:15 | 000,000,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I94UFCT.mp3
[2016/05/06 21:59:16 | 000,000,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I94YM3O.mp3
[2016/05/06 21:59:16 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9F3321.mp3
[2016/05/06 21:59:22 | 000,000,160 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9LOR1Y.mp3
[2016/05/06 21:59:16 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9NFFI2.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9RDHIY.mp3
[2016/05/06 21:59:15 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9SFXJU.mp3
[2016/05/06 21:59:15 | 000,000,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9VOOPH.mp3
[2016/05/06 21:59:16 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$I9VPH2K.mp3
[2016/05/06 21:59:22 | 000,000,134 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IA5SR1Q.mp3
[2016/05/06 21:59:16 | 000,000,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAC0RUP.mp3
[2016/05/06 21:59:15 | 000,000,110 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAGNAO2.mp3
[2016/05/06 21:59:16 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IANAF3M.mp3
[2016/05/06 21:59:16 | 000,000,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IANLEBQ.mp3
[2016/05/06 21:59:16 | 000,000,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAR6ANN.mp3
[2016/05/06 21:59:15 | 000,000,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IASSFHM.mp3
[2016/05/06 21:59:16 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAUPOVZ.mp3
[2016/05/06 21:59:16 | 000,000,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAW4ZE0.mp3
[2016/05/06 21:59:15 | 000,000,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IAYU7WT.mp3
[2016/05/06 21:59:15 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IB0TB1C.mp3
[2016/05/06 21:59:16 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IB41E1N.mp3
[2016/05/06 21:59:16 | 000,000,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IBBDNQN.mp3
[2016/05/06 21:59:44 | 000,000,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IBP2Q5F.lnk
[2016/05/06 21:59:16 | 000,000,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IBPDXXP.mp3
[2016/05/06 21:59:16 | 000,000,132 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IBZ0FPM.mp3
[2016/05/06 21:59:16 | 000,000,200 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IC2Z8LJ.mp3
[2016/05/06 21:59:16 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IC8KRF6.mp3
[2016/05/06 21:59:15 | 000,000,280 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IC9RLJY.mp3
[2016/05/06 21:59:16 | 000,000,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICD1GRF.mp3
[2016/05/06 21:59:16 | 000,000,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICTOMMF.mp3
[2016/05/06 21:59:15 | 000,000,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICUHD1W.mp3
[2016/05/06 21:59:22 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICW0IRG.jpg
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICYV3KP.mp3
[2016/05/06 21:59:16 | 000,000,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICZ3BL9.mp3
[2016/05/06 21:59:15 | 000,000,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ICZCWZ9.mp3
[2016/05/06 21:59:15 | 000,000,270 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ID1S7PH.mp3
[2016/05/06 21:59:16 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ID1YPUE.mp3
[2016/05/06 21:59:15 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ID3QW9Q.mp3
[2016/05/06 21:59:16 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IDAKU43.mp3
[2016/05/06 21:59:16 | 000,000,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IDCHG4E.mp3
[2016/05/06 21:59:16 | 000,000,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IDCLSZM.mp3
[2016/05/06 21:59:16 | 000,000,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IDRAEKC.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IE1PFJR.mp3
[2016/05/06 21:59:16 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IE86SQ6.mp3
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IE9K53M.mp3
[2016/05/06 21:59:16 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEE8PPK.mp3
[2016/05/06 21:59:16 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEEETEW.mp3
[2016/05/06 21:59:16 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEGR0RB.mp3
[2016/05/06 21:59:16 | 000,000,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEI4YEV.mp3
[2016/05/06 21:59:16 | 000,000,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEJEWC5.mp3
[2016/05/06 21:59:15 | 000,000,162 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEKJ25K.mp3
[2016/05/06 21:59:16 | 000,000,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEM9W4P.mp3
[2016/05/06 21:59:16 | 000,000,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEMBNX8.mp3
[2016/05/06 21:59:16 | 000,000,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEND2XF.mp3
[2016/05/06 21:59:15 | 000,000,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IEOVIMX.mp3
[2016/05/06 21:59:16 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IES0EJJ.mp3
[2016/05/06 21:59:16 | 000,000,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFA4JBN.jpg
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFL3I6S.mp3
[2016/02/21 19:23:19 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFLZAN4.jpg
[2016/05/06 21:59:16 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFNLNGS.mp3
[2016/05/06 21:59:16 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFPS6X6.mp3
[2016/05/06 21:59:16 | 000,000,280 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFY3DQM.mp3
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IFZ8HB3.mp3
[2016/05/06 21:59:15 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IG4ZT82.mp3
[2016/05/06 21:59:16 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGH1OKP.mp3
[2016/05/06 21:59:16 | 000,000,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGH8MT1.mp3
[2016/05/06 21:59:16 | 000,000,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGLGLAH.mp3
[2016/05/06 21:59:16 | 000,000,282 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGLHBBW.mp3
[2016/05/06 21:59:16 | 000,000,250 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGQWB56.mp3
[2016/05/06 21:59:16 | 000,000,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IGSOG9Z.mp3
[2016/05/06 21:59:16 | 000,000,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IH3FLFH.txt
[2016/05/06 21:59:16 | 000,000,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IH5OC8T.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IHCWQHE.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IHILQJJ.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IHJPZS4.mp3
[2016/05/06 21:59:16 | 000,000,230 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$II0ICKB.mp3
[2016/05/06 21:59:16 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$II3DER8.mp3
[2016/05/06 21:59:16 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIEIMQS.mp3
[2016/05/06 21:59:16 | 000,000,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIEVLEN.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIK9MAN.mp3
[2016/05/06 21:59:16 | 000,000,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIOYIDW.mp3
[2016/05/06 21:59:16 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IITMFCI.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIWGAZ5.mp3
[2016/05/06 21:59:16 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IIWPLFP.mp3
[2016/05/06 21:59:16 | 000,000,286 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJ3QPBQ.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJC8HFQ.mp3
[2016/05/06 21:59:15 | 000,000,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJIIXQA.mp3
[2016/05/06 21:59:22 | 000,000,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJPCZFN.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJTMRW7.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJTYKGW.mp3
[2016/05/06 21:59:16 | 000,000,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IJZI804.mp3
[2016/05/06 21:59:16 | 000,000,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IK1PYDB.mp3
[2016/05/06 21:59:16 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IK1ZI4O.mp3
[2016/05/06 21:59:16 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IK81H7Y.mp3
[2016/05/06 21:59:16 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKB5VNG.mp3
[2016/05/06 21:59:16 | 000,000,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKBE9OE.mp3
[2016/05/06 21:59:16 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKD83P7.mp3
[2016/05/06 21:59:15 | 000,000,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKDME6O.mp3
[2016/05/06 21:59:16 | 000,000,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKHOBQG.mp3
[2016/05/06 21:59:16 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKK3K5U.mp3
[2016/05/06 21:59:16 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKMX3UH.mp3
[2016/05/06 21:59:15 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IKQNYXQ.mp3
[2016/05/06 21:59:16 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IL0KLL0.mp3
[2016/02/02 19:44:53 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IL7EVP3.lnk
[2016/05/06 21:59:22 | 000,000,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IL7ROND.mp3
[2016/05/06 21:59:16 | 000,000,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IL952EM.mp3
[2016/05/06 21:59:16 | 000,000,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ILIFJZ7.mp3
[2016/05/06 21:59:15 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ILNG4UT.mp3
[2016/05/06 21:59:16 | 000,000,230 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ILT4N6W.mp3
[2016/05/06 21:59:16 | 000,000,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ILXRZJ8.mp3
[2016/05/06 21:59:16 | 000,000,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IM2H0W4.mp3
[2016/05/06 21:59:22 | 000,000,104 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMB3F0W.mp3
[2016/05/06 21:59:16 | 000,000,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMK6PMI.mp3
[2016/05/06 21:59:16 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMMUNJ4.mp3
[2016/05/06 21:59:15 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMQL57F.mp3
[2016/05/06 21:59:16 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMRMZPR.mp3
[2016/05/06 21:59:15 | 000,000,114 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMUEK2D.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IMVLC33.mp3
[2016/05/06 21:59:16 | 000,000,208 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IN74ZQJ.mp3
[2016/05/06 21:59:16 | 000,000,208 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IN84ZDT.mp3
[2016/05/06 21:59:15 | 000,000,218 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INA68UB.mp3
[2016/05/06 21:59:22 | 000,000,114 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INF9A8U.mp3
[2016/05/06 21:59:16 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INGS5FB.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INO3JZ8.mp3
[2016/05/06 21:59:22 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INQFZSK.png
[2016/05/06 21:59:16 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INQNL92.mp3
[2016/05/06 21:59:15 | 000,000,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INSOZG9.mp3
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INU3VSW.mp3
[2016/05/06 21:59:16 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$INVO6LE.mp3
[2016/05/06 21:59:16 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IO5WBEE.mp3
[2016/05/06 21:59:16 | 000,000,194 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IOFEMWL.mp3
[2016/05/06 21:59:15 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IOG9GHU.mp3
[2016/05/06 21:59:16 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IOJIHC9.mp3
[2016/05/06 21:59:16 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IP33FNH.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IP6OA0E.mp3
[2016/05/06 21:59:16 | 000,000,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPB1HLX.mp3
[2016/05/06 21:59:16 | 000,000,236 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPHBG6F.mp3
[2016/05/06 21:59:16 | 000,000,236 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPNI6CC.mp3
[2016/05/06 21:59:15 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPO5YW8.mp3
[2016/05/06 21:59:22 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPRSJ19.mp3
[2016/05/06 21:59:16 | 000,000,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPTTNHJ.mp3
[2016/05/06 21:59:16 | 000,000,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IPZ6T6K.mp3
[2016/03/28 03:57:56 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQ50Z7B.jpg
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQ9PZAT.mp3
[2016/05/06 21:59:16 | 000,000,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQFJGFF.mp3
[2016/05/06 21:59:16 | 000,000,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQGG09W.mp3
[2016/05/06 21:59:16 | 000,000,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQGZQDE.mp3
[2016/05/06 21:59:16 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQRDXUX.mp3
[2016/05/06 21:59:16 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQU4K5P.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQUJ7CF.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQUO8YE.mp3
[2016/05/06 21:59:16 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IQZRS2Y.mp3
[2016/05/06 21:59:15 | 000,000,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IR0Q3JG.mp3
[2016/05/06 21:59:16 | 000,000,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IR12QWD.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IR6H1FI.mp3
[2016/05/06 21:59:16 | 000,000,244 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IR7M78N.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IRD3EC4.mp3
[2016/05/06 21:59:16 | 000,000,194 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IREPUQO.mp3
[2016/05/06 21:59:16 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IRN2L0T.mp3
[2016/09/11 01:55:37 | 000,000,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IROBLBQ.mp3
[2016/05/06 21:59:15 | 000,000,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IRS392Z.mp3
[2016/05/06 21:59:16 | 000,000,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IRU1CN5.mp3
[2016/05/06 21:59:16 | 000,000,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IS3COND.mp3
[2016/05/06 21:59:15 | 000,000,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IS8BNIG.mp3
[2016/05/06 21:59:16 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IS9IJ12.mp3
[2016/05/06 21:59:16 | 000,000,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ISGI0NL.mp3
[2016/05/06 21:59:16 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ISHK0H8.mp3
[2016/05/06 21:59:16 | 000,000,226 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ISKCIJ1.mp3
[2016/05/06 21:59:16 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ISQ0ICC.mp3
[2016/05/06 21:59:16 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ISVIA6D.mp3
[2016/05/06 21:59:16 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IT2CC8F.mp3
[2016/05/06 21:59:16 | 000,000,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IT7Z1O0.mp3
[2016/05/06 21:59:16 | 000,000,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IT8MPI0.mp3
[2016/05/06 21:59:16 | 000,000,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IT9FSE5.mp3
[2016/05/06 21:59:16 | 000,000,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IT9RELX.mp3
[2016/05/06 21:59:16 | 000,000,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITISH8Y.mp3
[2016/05/06 21:59:15 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITMKW4P.mp3
[2016/05/06 21:59:16 | 000,000,250 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITNM2N1.mp3
[2016/05/06 21:59:16 | 000,000,250 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITWSFBT.mp3
[2016/05/06 21:59:16 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITXOCBS.mp3
[2016/05/06 21:59:16 | 000,000,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITZ6D5H.mp3
[2016/05/06 21:59:15 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$ITZULNT.mp3
[2016/05/06 21:59:16 | 000,000,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IU0S75O.mp3
[2016/05/06 21:59:16 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IU6DSAA.mp3
[2016/05/06 21:59:16 | 000,000,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IU7N3WC.mp3
[2016/05/06 21:59:16 | 000,000,262 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IUAFS4H.mp3
[2016/06/10 01:41:37 | 000,000,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IUSE9WW
[2016/05/06 21:59:16 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IUUJLAE.mp3
[2016/05/06 21:59:15 | 000,000,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IUUM3M1.mp3
[2016/05/06 21:59:16 | 000,000,108 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IV9WYUP.mp3
[2016/05/06 21:59:16 | 000,000,234 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IVJBDTY.mp3
[2016/05/06 21:59:16 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IVK7DZV.jpg
[2016/05/06 21:59:16 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IVO2E6G.mp3
[2016/05/06 21:59:16 | 000,000,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IVQKJI9.mp3
[2016/05/06 21:59:16 | 000,000,284 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IVZHVUS.mp3
[2016/05/06 21:59:16 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IW6YNV2.mp3
[2016/05/06 21:59:16 | 000,000,280 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IWB2J8P.mp3
[2016/05/06 21:59:15 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IWDJK2R.mp3
[2016/05/06 21:59:16 | 000,000,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IWE55CV.mp3
[2016/05/06 21:59:16 | 000,000,230 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IWJF73O.mp3
[2016/05/06 21:59:16 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IWV9LCA.mp3
[2016/05/06 21:59:16 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IX1OWZM.mp3
[2016/05/06 21:59:15 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IX3LHS0.mp3
[2016/01/29 19:56:22 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IX3ZI24.lnk
[2016/05/06 21:59:16 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IX55LHT.mp3
[2016/05/06 21:59:16 | 000,000,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IX8OJYS.mp3
[2016/05/06 21:59:16 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXJ32CE.mp3
[2016/05/21 22:54:10 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXLFL7P
[2016/05/06 21:59:16 | 000,000,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXPN0JY.mp3
[2016/05/06 21:59:15 | 000,000,134 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXQ563L.mp3
[2016/05/06 21:59:16 | 000,000,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXQ8BC8.mp3
[2016/05/06 21:59:15 | 000,000,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXRCNAS.mp3
[2016/05/06 21:59:15 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IXYBSHF.mp3
[2016/05/06 21:59:16 | 000,000,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IY327FJ.mp3
[2016/05/06 21:59:16 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYA0VGA.mp3
[2016/05/06 21:59:15 | 000,000,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYEGC1M.mp3
[2016/05/06 21:59:16 | 000,000,250 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYFNMHG.mp3
[2016/05/06 21:59:15 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYG7MHE.mp3
[2016/05/06 21:59:16 | 000,000,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYIDUFN.mp3
[2016/05/06 21:59:15 | 000,000,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYMOYVQ.mp3
[2016/05/06 21:59:15 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IYVF3WS.mp3
[2016/05/06 21:59:16 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZDN5QB.mp3
[2016/05/06 21:59:16 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZEFCFZ.mp3
[2016/05/06 21:59:16 | 000,000,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZEWK49.mp3
[2016/05/06 21:59:16 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZGRWLU.mp3
[2016/05/06 21:59:16 | 000,000,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZH9B8S.mp3
[2016/05/06 21:59:16 | 000,000,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZNS6ZY.mp3
[2016/05/06 21:59:15 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZP0X0J.mp3
[2016/05/06 21:59:15 | 000,000,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$IZYDUMV.mp3
[2016/09/11 01:53:31 | 148,686,410 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\$RROBLBQ.mp3
[2013/09/30 04:39:03 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-1018432735-2000538633-3691423505-1001\desktop.ini
[2017/04/14 22:04:27 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 183 bytes -> C:\Users\S.INFO\SkyDrive:ms-properties

< End of report >