Премини към съдържанието

    Препоръчан отговор

    D101149    382

    Здравейте! Преди имах същият вирус и го премахнах благодарение на вас, но сега си преинсталирах компютръра и той отново е тук...Пробвах с Adwcleaner, но не намери нищо.. ето инфо

    1UKNizm.png

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:14-12-2015
    Ran by Ilyazov (administrator) on ILYAZOV-PC (15-12-2015 19:12:10)
    Running from C:\Users\Ilyazov\Downloads
    Loaded Profiles: Ilyazov (Available Profiles: Ilyazov)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
    Internet Explorer Version 9 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
    HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4859592 2015-11-18] (Advanced Micro Devices, Inc.)
    HKU\S-1-5-21-1573074542-3340695132-3413548029-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50377336 2015-12-14] (Skype Technologies S.A.)
    HKU\S-1-5-21-1573074542-3340695132-3413548029-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{DBB167E3-23A6-4269-8277-DA43F59E908B}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================

    FireFox:
    ========
    FF ProfilePath: C:\Users\Ilyazov\AppData\Roaming\Mozilla\Firefox\Profiles\02e8fvv1.default
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)

    Chrome:
    =======
    CHR StartupUrls: Default -> "hxxp://www.google.bg/"
    CHR Profile: C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Диск) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-15]
    CHR Extension: (YouTube) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-15]
    CHR Extension: (Google Търсене) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-15]
    CHR Extension: (Google Документи офлайн) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-15]
    CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-15]
    CHR Extension: (Gmail) - C:\Users\Ilyazov\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-15]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [185672 2015-12-15] () [File not signed]
    S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [185672 2015-12-15] () [File not signed]
    S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [368768 2015-12-15] () [File not signed]
    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
    R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-16 03:28 - 2015-12-15 17:35 - 00000000 ____D C:\Windows\Panther
    2015-12-15 19:12 - 2015-12-15 19:12 - 00005189 _____ C:\Users\Ilyazov\Downloads\FRST.txt
    2015-12-15 19:12 - 2015-12-15 19:12 - 00000000 ____D C:\FRST
    2015-12-15 19:10 - 2015-12-15 19:11 - 02369536 _____ (Farbar) C:\Users\Ilyazov\Downloads\FRST64.exe
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000000 ____D C:\Program Files\WinRAR
    2015-12-15 19:10 - 2015-12-15 19:10 - 00000000 ____D C:\Program Files (x86)\Steam
    2015-12-15 19:09 - 2015-12-15 19:09 - 01476720 _____ C:\Users\Ilyazov\Downloads\SteamSetup(1).exe
    2015-12-15 19:00 - 2015-12-15 19:01 - 00000000 ____D C:\AdwCleaner
    2015-12-15 19:00 - 2015-12-15 19:00 - 01740288 _____ C:\Users\Ilyazov\Downloads\adwcleaner_5.025.exe
    2015-12-15 18:44 - 2015-12-15 18:44 - 02026520 _____ (BitTorrent Inc.) C:\Users\Ilyazov\Downloads\uTorrent.exe
    2015-12-15 18:40 - 2015-12-15 18:46 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\Mozilla
    2015-12-15 18:40 - 2015-12-15 18:40 - 00001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-12-15 18:40 - 2015-12-15 18:40 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-12-15 18:40 - 2015-12-15 18:40 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Mozilla
    2015-12-15 18:40 - 2015-12-15 18:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2015-12-15 18:40 - 2015-12-15 18:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2015-12-15 18:38 - 2015-12-15 18:39 - 00243656 _____ C:\Users\Ilyazov\Downloads\Firefox Setup Stub 42.0.exe
    2015-12-15 18:16 - 2015-12-15 18:16 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\AMD
    2015-12-15 18:16 - 2015-12-15 18:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
    2015-12-15 18:14 - 2015-12-15 18:14 - 00000000 ____D C:\Program Files (x86)\AMD
    2015-12-15 18:12 - 2015-12-15 18:12 - 00000000 ____H C:\ProgramData\DP45977C.lfl
    2015-12-15 18:11 - 2015-12-15 18:11 - 00000000 ____D C:\Windows\system32\DAX2
    2015-12-15 18:10 - 2015-12-15 18:10 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
    2015-12-15 18:10 - 2015-12-15 18:10 - 00000000 ____D C:\Program Files\Realtek
    2015-12-15 18:09 - 2015-12-15 18:09 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
    2015-12-15 18:08 - 2015-12-15 19:10 - 02034464 _____ C:\Users\Ilyazov\Downloads\winrar-x64-530bg.exe
    2015-12-15 18:08 - 2015-12-15 19:10 - 00000033 _____ C:\Windows\directx.sys
    2015-12-15 18:08 - 2015-12-15 18:13 - 00000000 ____D C:\ProgramData\Package Cache
    2015-12-15 18:08 - 2015-06-18 18:45 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
    2015-12-15 18:08 - 2015-06-11 19:40 - 03157796 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
    2015-12-15 18:08 - 2015-05-18 14:47 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
    2015-12-15 18:08 - 2015-05-15 19:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
    2015-12-15 18:08 - 2015-04-24 05:42 - 00858256 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
    2015-12-15 18:08 - 2015-04-24 05:42 - 00684176 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
    2015-12-15 18:08 - 2015-04-24 05:42 - 00435856 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
    2015-12-15 18:08 - 2015-04-24 05:41 - 00555664 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
    2015-12-15 18:08 - 2015-04-13 16:25 - 03262184 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
    2015-12-15 18:08 - 2015-02-04 00:38 - 01413776 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
    2015-12-15 18:08 - 2015-02-04 00:38 - 00454288 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
    2015-12-15 18:08 - 2015-02-04 00:38 - 00369296 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
    2015-12-15 18:08 - 2015-02-04 00:38 - 00329360 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
    2015-12-15 18:08 - 2015-02-04 00:38 - 00329360 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
    2015-12-15 18:08 - 2015-01-23 18:16 - 00213432 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaemaxapo64.dll
    2015-12-15 18:08 - 2014-12-11 08:10 - 01104040 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
    2015-12-15 18:08 - 2014-12-11 08:10 - 00943784 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
    2015-12-15 18:08 - 2014-12-11 08:10 - 00734376 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
    2015-12-15 18:08 - 2014-12-11 08:10 - 00250536 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
    2015-12-15 18:08 - 2014-08-14 19:16 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
    2015-12-15 18:08 - 2014-06-17 19:17 - 00856992 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
    2015-12-15 18:08 - 2014-04-10 12:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
    2015-12-15 18:08 - 2014-02-27 20:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
    2015-12-15 18:08 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
    2015-12-15 18:08 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
    2015-12-15 18:08 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
    2015-12-15 18:08 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
    2015-12-15 18:08 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
    2015-12-15 18:08 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
    2015-12-15 18:08 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
    2015-12-15 18:08 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
    2015-12-15 18:08 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
    2015-12-15 18:08 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
    2015-12-15 18:08 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
    2015-12-15 18:08 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
    2015-12-15 18:08 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
    2015-12-15 18:08 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
    2015-12-15 18:08 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
    2015-12-15 18:08 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
    2015-12-15 18:07 - 2015-06-18 17:59 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
    2015-12-15 18:07 - 2015-06-17 19:47 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
    2015-12-15 18:07 - 2015-06-17 19:47 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
    2015-12-15 18:07 - 2015-06-17 14:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
    2015-12-15 18:07 - 2015-06-15 17:39 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
    2015-12-15 18:07 - 2015-06-10 13:20 - 03129672 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
    2015-12-15 18:07 - 2015-06-10 13:20 - 00728392 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
    2015-12-15 18:07 - 2015-06-09 11:17 - 05708736 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
    2015-12-15 18:07 - 2015-05-27 18:51 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
    2015-12-15 18:07 - 2015-05-26 11:59 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
    2015-12-15 18:07 - 2015-05-25 15:18 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
    2015-12-15 18:07 - 2015-05-15 16:32 - 01316056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
    2015-12-15 18:07 - 2015-05-11 18:53 - 12996528 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
    2015-12-15 18:07 - 2015-05-11 13:08 - 01374640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
    2015-12-15 18:07 - 2015-05-11 13:08 - 01192368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
    2015-12-15 18:07 - 2015-05-11 13:08 - 01145264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
    2015-12-15 18:07 - 2015-05-11 13:08 - 00980400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
    2015-12-15 18:07 - 2015-04-27 16:09 - 00328816 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
    2015-12-15 18:07 - 2015-02-05 17:48 - 12834736 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
    2015-12-15 18:07 - 2015-02-05 17:48 - 02789808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
    2015-12-15 18:07 - 2015-01-19 18:10 - 72113152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
    2015-12-15 18:07 - 2014-11-11 13:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
    2015-12-15 18:07 - 2014-10-24 10:12 - 05234952 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
    2015-12-15 18:07 - 2014-10-24 10:12 - 00995120 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
    2015-12-15 18:07 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
    2015-12-15 18:07 - 2014-01-31 17:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
    2015-12-15 18:07 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
    2015-12-15 18:07 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
    2015-12-15 18:07 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
    2015-12-15 18:07 - 2013-08-14 15:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
    2015-12-15 18:07 - 2013-08-14 15:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
    2015-12-15 18:07 - 2013-07-23 15:39 - 14048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
    2015-12-15 18:07 - 2013-07-23 15:39 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
    2015-12-15 18:07 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
    2015-12-15 18:07 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
    2015-12-15 18:07 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
    2015-12-15 18:07 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
    2015-12-15 18:07 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
    2015-12-15 18:07 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
    2015-12-15 18:07 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
    2015-12-15 18:07 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
    2015-12-15 18:07 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
    2015-12-15 18:07 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
    2015-12-15 18:07 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
    2015-12-15 18:06 - 2015-12-15 18:57 - 00041472 _____ C:\Windows\svchost.com
    2015-12-15 18:06 - 2015-12-15 18:08 - 16913644 _____ C:\Users\Ilyazov\Downloads\ets2mp_20400.zip
    2015-12-15 18:06 - 2015-12-15 18:06 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
    2015-12-15 18:06 - 2015-12-15 18:06 - 00000000 ____D C:\Program Files (x86)\Realtek
    2015-12-15 18:06 - 2015-06-02 19:25 - 01576976 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
    2015-12-15 18:06 - 2015-05-27 18:51 - 02461016 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
    2015-12-15 18:06 - 2015-05-27 18:51 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
    2015-12-15 18:06 - 2015-05-27 18:51 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
    2015-12-15 18:06 - 2014-11-04 13:42 - 06242576 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
    2015-12-15 18:06 - 2014-11-04 13:42 - 01933584 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
    2015-12-15 18:06 - 2014-11-04 13:42 - 00336144 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
    2015-12-15 18:06 - 2014-11-04 13:42 - 00284944 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
    2015-12-15 18:06 - 2014-09-24 11:31 - 07087448 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
    2015-12-15 18:06 - 2014-09-24 11:31 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
    2015-12-15 18:06 - 2014-09-24 11:31 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
    2015-12-15 18:06 - 2014-09-24 11:31 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
    2015-12-15 18:06 - 2014-06-09 10:59 - 00560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
    2015-12-15 18:06 - 2014-05-22 16:24 - 00096568 _____ C:\Windows\system32\audioLibVc.dll
    2015-12-15 18:06 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
    2015-12-15 18:06 - 2013-06-21 11:01 - 00109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll
    2015-12-15 18:06 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
    2015-12-15 18:04 - 2015-12-15 18:19 - 00000000 ___HD C:\Program Files (x86)\Temp
    2015-12-15 18:04 - 2015-05-27 17:38 - 02825944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
    2015-12-15 18:00 - 2015-12-15 18:00 - 00749404 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
    2015-12-15 17:55 - 2015-12-15 17:55 - 00000000 ____D C:\Users\Ilyazov\Tracing
    2015-12-15 17:54 - 2015-12-15 18:00 - 131494359 _____ (Realtek Semiconductor Corp.) C:\Users\Ilyazov\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe
    2015-12-15 17:53 - 2015-12-15 19:06 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Skype
    2015-12-15 17:53 - 2015-12-15 18:14 - 00000000 ____D C:\Program Files\AMD
    2015-12-15 17:53 - 2015-12-15 17:54 - 00000000 ____D C:\AMD
    2015-12-15 17:53 - 2015-12-15 17:53 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
    2015-12-15 17:53 - 2015-12-15 17:53 - 00000000 ___RD C:\Program Files (x86)\Skype
    2015-12-15 17:53 - 2015-12-15 17:53 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\Steam
    2015-12-15 17:53 - 2015-12-15 17:53 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\CEF
    2015-12-15 17:53 - 2015-12-15 17:53 - 00000000 ____D C:\ProgramData\Skype
    2015-12-15 17:53 - 2015-12-15 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2015-12-15 17:50 - 2015-12-15 18:23 - 04988640 _____ C:\Users\Ilyazov\Downloads\autodetectutility.exe
    2015-12-15 17:50 - 2015-12-15 18:11 - 01545344 _____ C:\Users\Ilyazov\Downloads\SkypeSetup.exe
    2015-12-15 17:50 - 2015-12-15 17:50 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Macromedia
    2015-12-15 17:49 - 2015-12-15 18:11 - 01518192 _____ C:\Users\Ilyazov\Downloads\SteamSetup.exe
    2015-12-15 17:49 - 2015-12-15 17:49 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Adobe
    2015-12-15 17:49 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-12-15 17:49 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2015-12-15 17:49 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2015-12-15 17:49 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2015-12-15 17:49 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2015-12-15 17:49 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2015-12-15 17:49 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2015-12-15 17:49 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2015-12-15 17:49 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2015-12-15 17:49 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2015-12-15 17:49 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2015-12-15 17:49 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2015-12-15 17:49 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2015-12-15 17:49 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2015-12-15 17:48 - 2015-12-15 19:03 - 00000996 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-12-15 17:48 - 2015-12-15 18:59 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-12-15 17:48 - 2015-12-15 18:53 - 00001000 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-12-15 17:48 - 2015-12-15 18:33 - 00000000 ____D C:\Program Files (x86)\Google
    2015-12-15 17:48 - 2015-12-15 17:50 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\Google
    2015-12-15 17:48 - 2015-12-15 17:48 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-12-15 17:48 - 2015-12-15 17:48 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-12-15 17:48 - 2015-12-15 17:48 - 00003996 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-12-15 17:48 - 2015-12-15 17:48 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-12-15 17:48 - 2015-12-15 17:48 - 00003744 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-12-15 17:48 - 2015-12-15 17:48 - 00000000 ____D C:\Windows\SysWOW64\Macromed
    2015-12-15 17:48 - 2015-12-15 17:48 - 00000000 ____D C:\Windows\system32\Macromed
    2015-12-15 17:47 - 2015-12-15 17:48 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\Deployment
    2015-12-15 17:47 - 2015-12-15 17:47 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\Apps\2.0
    2015-12-15 17:45 - 2015-12-15 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
    2015-12-15 17:44 - 2015-12-15 18:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
    2015-12-15 17:44 - 2015-12-15 17:44 - 00000000 ____D C:\ProgramData\TP-LINK
    2015-12-15 17:44 - 2013-06-28 14:49 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
    2015-12-15 17:44 - 2013-06-28 14:49 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
    2015-12-15 17:44 - 2013-06-28 14:49 - 00007518 _____ C:\Windows\system32\athurextx.cat
    2015-12-15 17:42 - 2015-12-15 17:42 - 00057560 _____ C:\Users\Ilyazov\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-12-15 17:35 - 2015-12-15 17:55 - 00000000 ____D C:\Users\Ilyazov
    2015-12-15 17:35 - 2015-12-15 17:35 - 00001431 _____ C:\Users\Ilyazov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-12-15 17:35 - 2015-12-15 17:35 - 00001397 _____ C:\Users\Ilyazov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
    2015-12-15 17:35 - 2015-12-15 17:35 - 00000020 ___SH C:\Users\Ilyazov\ntuser.ini
    2015-12-15 17:35 - 2015-12-15 17:35 - 00000000 ____D C:\Users\Ilyazov\AppData\Local\VirtualStore
    2015-12-15 17:35 - 2011-04-12 10:28 - 00000000 ____D C:\Users\Ilyazov\AppData\Roaming\Media Center Programs
    2015-12-15 17:33 - 2015-12-15 17:33 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    2015-12-15 17:32 - 2015-12-15 17:32 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
    2015-12-15 17:31 - 2015-12-15 17:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
    2015-12-14 21:20 - 2015-12-15 17:41 - 00000000 ____D C:\Users\Ilyazov\Documents\My Games
    2015-12-14 21:18 - 2015-12-15 18:53 - 00000000 ____D C:\Users\Ilyazov\Documents\Euro Truck Simulator 2
    2015-12-10 19:07 - 2015-12-10 19:07 - 00776318 _____ C:\Users\Ilyazov\Documents\12342157_818887238221261_331821804_n.mp4

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-16 03:28 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
    2015-12-15 19:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows
    2015-12-15 19:09 - 2009-07-14 07:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
    2015-12-15 19:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
    2015-12-15 19:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-12-15 19:01 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-12-15 19:01 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-12-15 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
    2015-12-15 17:33 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-12-15 17:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
    2015-12-15 17:30 - 2011-04-12 10:28 - 00000000 ____D C:\Windows\CSC
    2015-12-15 17:30 - 2009-07-14 06:45 - 00274320 _____ C:\Windows\system32\FNTCACHE.DAT

    ==================== Files in the root of some directories =======

    2015-12-15 18:12 - 2015-12-15 18:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

    Some files in TEMP:
    ====================
    C:\Users\Ilyazov\AppData\Local\Temp\radeon-crimson-15.11-minimalsetup.exe
    C:\Users\Ilyazov\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-12-15 17:29

    ==================== End of FRST.txt ============================

     

     

     

    Additional scan result of Farbar Recovery Scan Tool (x64) Version:14-12-2015
    Ran by Ilyazov (2015-12-15 19:13:14)
    Running from C:\Users\Ilyazov\Downloads
    Windows 7 Ultimate Service Pack 1 (X64) (2015-12-15 15:35:17)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-1573074542-3340695132-3413548029-500 - Administrator - Disabled)
    Guest (S-1-5-21-1573074542-3340695132-3413548029-501 - Limited - Disabled)
    Ilyazov (S-1-5-21-1573074542-3340695132-3413548029-1000 - Administrator - Enabled) => C:\Users\Ilyazov

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
    AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
    Catalyst Control Center Next Localization BR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CHS (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CHT (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CS (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization DA (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization DE (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization EL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization ES (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization FI (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization FR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization HU (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization IT (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization JA (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization KO (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization NL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization NO (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization PL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization RU (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization SV (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization TH (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization TR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
    Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
    Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Mozilla Firefox 42.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 en-US)) (Version: 42.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
    Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.104 - Skype Technologies S.A.)
    Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
    TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
    WinRAR 5.30 (64-битова версия) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== Restore Points =========================

    15-12-2015 17:44:28 Installed TP-LINK Wireless Configuration Utility and Driver
    15-12-2015 17:46:26 Windows Update
    15-12-2015 18:05:09 Installed Realtek High Definition Audio Driver
    15-12-2015 18:05:40 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
    15-12-2015 18:08:53 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
    15-12-2015 18:09:03 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
    15-12-2015 18:09:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {2E432866-EEC9-4912-AFAF-C4FE00C9CEA1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-15] ()
    Task: {5A3F8CD5-5387-4888-A00E-16A644616589} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-15] ()
    Task: {867F821E-12D0-4548-B4B3-629F1985FF54} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-15] (Adobe Systems Incorporated)

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    ==================== Loaded Modules (Whitelisted) ==============

    2015-12-05 10:21 - 2015-12-05 10:21 - 00933056 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)


    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKLM\...\exefile\open\command: C:\Windows\svchost.com "%1" %* <===== ATTENTION

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-1573074542-3340695132-3413548029-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ilyazov\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 192.168.0.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is disabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [{79E970E1-9398-47E8-99E9-0C5C1F002BE4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{1038925B-7E69-4208-A99C-B10AB56A07BD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{C41B7719-5AC3-4029-BDAC-B8A339E686DA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{7E06B940-0A50-449A-ACFD-E7CD46D00536}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{88551858-AD81-4F81-9F62-F910FDCD58F2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{DEC99A7C-65F0-47F9-9C42-FDA8BAF99219}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{7FEEFFAB-3EBF-4B69-9DB3-273556462049}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{EA1AE110-1E8D-47C3-932D-D1E249E53270}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{44ACB3BE-1BE8-4679-A65C-E63C564ED7A0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [TCP Query User{23C288C5-71F2-41A0-998E-D1A9FE1A3766}D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe
    FirewallRules: [UDP Query User{7C3BDB06-83A7-4522-AB55-E28186763992}D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe
    FirewallRules: [{EA002398-7B67-44B2-AD99-4F4C07EC506F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{8B80DD09-165F-4DEC-B717-28A90DB73D94}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{AFA02985-975A-40F2-B7FF-ED6E814133D8}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{C836D00B-4330-40D3-BE4C-BE1EAFAB51A9}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (12/15/2015 07:13:24 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to add firewall exception for C:\PROGRA~2\Steam\bin\steamwebhelper.exe

    Error: (12/15/2015 07:13:24 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to add firewall exception for C:\PROGRA~2\Steam\steam.exe

    Error: (12/15/2015 07:09:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 07:09:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 07:08:17 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Име на приложение с грешки: cnext.exe, версия: 10.1.1.1522, времево клеймо: 0x564c17eb
    Име на модул с грешки: unknown, версия: 0.0.0.0, времево клеймо: 0x00000000
    Код на изключение: 0xc0000005
    Отместване на грешка: 0x0000000000000000
    ИД на процес на грешка: 0x768
    Начален час на приложението с грешки: 0xcnext.exe0
    Път на приложението с грешки: cnext.exe1
    Път на модула с грешки: cnext.exe2
    ИД на доклад: cnext.exe3

    Error: (12/15/2015 07:07:10 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to copy new service file to temp location

    Error: (12/15/2015 07:05:30 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to copy new service file to temp location

    Error: (12/15/2015 07:05:26 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to copy new service file to temp location

    Error: (12/15/2015 07:04:47 PM) (Source: Steam Client Service) (EventID: 1) (User: )
    Description: Error: Failed to copy new service file to temp location

    Error: (12/15/2015 07:04:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


    System errors:
    =============
    Error: (12/15/2015 07:13:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка:
    %%1053

    Error: (12/15/2015 07:13:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.

    Error: (12/15/2015 07:07:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка:
    %%1053

    Error: (12/15/2015 07:07:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.

    Error: (12/15/2015 07:07:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка:
    %%1053

    Error: (12/15/2015 07:07:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.

    Error: (12/15/2015 07:07:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка:
    %%1053

    Error: (12/15/2015 07:07:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.

    Error: (12/15/2015 07:07:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка:
    %%1053

    Error: (12/15/2015 07:07:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz
    Percentage of memory in use: 48%
    Total physical RAM: 4094.49 MB
    Available physical RAM: 2104.35 MB
    Total Virtual: 8187.18 MB
    Available Virtual: 5749.3 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:99.56 GB) (Free:75.73 GB) NTFS
    Drive d: () (Fixed) (Total:831.41 GB) (Free:538.47 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CE1AE8C5)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=99.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
    Partition 4: (Not Active) - (Size=831.4 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    B-boy/StyLe/    19538

    Привет,

    Като вечерям ще прегледам логовете. Мисля, че съм срещал гореспоменатия бацил (червей Neshta) и ще го оправим лесно.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    B-boy/StyLe/    19538

    Явно не сте си взели поука, защото имате същата зараза, като в предишната ви тема...явно имате заразена игра или крак за такава, която ви заразява отново и отново...

    Изтеглете KKdS6sj.pngfixlist.txt и го запазете в папката от която стартирахте FRST.exe.
    Стартирайте FRST.exe и натиснете бутона Fix веднъж!
    След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата на програмата.
     
    Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    D101149    382

    Здравейте отново! Преинсталирах си компютъра, защото стана буквално айрян.. Можете ли да ми кажете дали ми е заразена системата, защото в таск-а svhost.exe товари много.. по 600-700мб рам ми взема... 

    Additional scan result of Farbar Recovery Scan Tool (x64) Version:16-12-2015 01
    Ran by Ali (2015-12-16 17:10:20)
    Running from C:\Users\Ali\Downloads
    Windows 7 Ultimate Service Pack 1 (X64) (2015-12-15 19:43:07)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-1513062547-706245244-4014153856-500 - Administrator - Disabled)
    Ali (S-1-5-21-1513062547-706245244-4014153856-1000 - Administrator - Enabled) => C:\Users\Ali
    Guest (S-1-5-21-1513062547-706245244-4014153856-501 - Limited - Disabled)

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    µTorrent (HKU\S-1-5-21-1513062547-706245244-4014153856-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
    Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
    AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
    Catalyst Control Center Next Localization BR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CHS (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CHT (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization CS (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization DA (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization DE (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization EL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization ES (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization FI (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization FR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization HU (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization IT (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization JA (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization KO (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization NL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization NO (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization PL (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization RU (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization SV (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization TH (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Catalyst Control Center Next Localization TR (Version: 2015.1118.123.2413 - Advanced Micro Devices, Inc.) Hidden
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
    Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
    Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
    Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Mozilla Firefox 42.0 (x86 bg) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 bg)) (Version: 42.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
    Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.104 - Skype Technologies S.A.)
    Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
    TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.3.1 - TP-LINK)
    WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EF}) (Version: 20.0.11659 - WinZip Computing, S.L. )

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== Restore Points =========================

    15-12-2015 21:54:36 Installed TP-LINK Wireless Configuration Utility and Driver
    15-12-2015 21:55:57 Windows Update
    15-12-2015 22:09:14 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
    15-12-2015 22:09:51 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
    15-12-2015 22:10:18 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
    15-12-2015 22:10:46 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
    15-12-2015 22:42:08 Installed DirectX
    16-12-2015 15:31:03 Installed DirectX
    16-12-2015 15:50:59 Windows Update

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {21E2042A-F80E-40C9-B287-F68DBA500BCC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-16] (Adobe Systems Incorporated)
    Task: {2EB011AA-E3FE-4A4F-8502-3DB0E83BDAA0} - System32\Tasks\FRAPS => C:\Fraps\fraps.exe [2013-02-26] (Beepa P/L)
    Task: {8A757697-DCF1-4F03-95BC-E79B54B46901} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-16] (Google Inc.)
    Task: {CBDCBE24-A3BA-4D77-B294-C21A430BC71A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-16] (Google Inc.)

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    ==================== Loaded Modules (Whitelisted) ==============

    2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
    2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
    2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
    2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
    2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
    2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00103424 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    2015-12-15 22:00 - 2015-11-10 21:55 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
    2015-12-15 22:00 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
    2015-12-15 22:00 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
    2015-12-15 22:00 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
    2015-12-15 22:00 - 2015-12-14 22:01 - 02547280 _____ () C:\Program Files (x86)\Steam\video.dll
    2015-12-15 22:00 - 2015-09-24 02:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
    2015-12-15 22:00 - 2015-09-24 02:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
    2015-12-15 22:00 - 2015-09-24 02:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
    2015-12-15 22:00 - 2015-09-24 02:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
    2015-12-15 22:00 - 2015-09-24 02:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
    2015-12-15 22:00 - 2015-12-14 22:01 - 00804432 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
    2015-12-15 22:00 - 2015-11-04 00:00 - 00201728 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
    2015-12-16 15:55 - 2015-12-16 15:55 - 00155232 ___HT () C:\Users\Ali\AppData\Local\Temp\~97E1.tmp
    2015-12-15 22:00 - 2015-11-17 02:31 - 47846176 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
    2015-12-15 22:00 - 2015-09-25 01:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
    2015-12-05 10:21 - 2015-12-05 10:21 - 00933056 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00198144 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00317952 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00203776 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00390144 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 06925312 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\engine.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00166912 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 01174016 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vphysics.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 01240064 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00351744 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\datacache.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00607744 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\studiorender.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00164864 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00708096 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vscript.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00134656 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 01336320 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00395264 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vgui2.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 03274240 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 01766400 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00143360 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\localize.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00230912 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00996864 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00585216 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 12588544 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 10042368 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00094208 _____ () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00084992 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00071680 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
    2015-12-16 13:32 - 2015-12-16 13:32 - 00012800 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
    2015-12-16 13:32 - 2015-12-16 13:32 - 00055808 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\msseax.flt
    2015-12-16 13:32 - 2015-12-16 13:32 - 00974336 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
    2015-12-16 13:32 - 2015-12-16 13:32 - 00173568 _____ () d:\steamlibrary\steamapps\common\counter-strike global offensive\bin\vaudio_celt.dll
    2015-12-16 15:33 - 2015-12-04 23:32 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libglesv2.dll
    2015-12-16 15:33 - 2015-12-04 23:32 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libegl.dll
    2015-12-16 15:33 - 2015-12-04 23:32 - 16573256 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\PepperFlash\pepflashplayer.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)


    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-1513062547-706245244-4014153856-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 192.168.0.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [{E23955A3-4CA1-4FB6-8027-F0B90F65AF1C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{ABB7977D-0BE5-4A69-999C-AA994873AB46}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{0F4EF1DC-C5E0-4C01-A585-C8D8BE596B1F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{F10225E7-7AA2-40BE-9948-D5B9FE986151}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{246C9607-DEB4-4FBB-9629-ED7A3DED5A2C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{DF70BF77-2801-4E2A-9CAA-8D69DF869017}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{2CE539F0-8E7B-4E6E-9DAE-ADD09D7B8663}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
    FirewallRules: [{BA1AD045-5EF8-4E36-8C67-B2347AB65D81}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
    FirewallRules: [{BEBF12D1-3E06-4205-B140-9EA086AA391C}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
    FirewallRules: [{74CC0A41-99A3-4423-9394-D49EA0F4D042}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
    FirewallRules: [{1F57526F-DE1C-4F54-BC22-0690ED0DAFB6}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{A71D6650-FA9D-441F-A9AD-B8458D3FEC1A}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{83DFC4E6-A1C4-4886-9660-D370CEB1DCCB}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{A9DBD1EF-0110-47D8-B6AB-83B030FC0E38}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{78BCC684-F13E-45DF-BAE6-6049D9791F5F}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{925BB7C2-795D-4C7D-A935-B2C362B66447}] => (Allow) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{27B88676-F692-4104-A500-D797E6F58B1C}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{94B391DF-3DDE-4409-9FF6-3C73A0518BE5}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{0E30C5F8-A198-429D-8C09-08356E61E2E3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{4915D27E-38A8-461B-8948-A0221CCE9088}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (12/16/2015 01:36:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/16/2015 01:36:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/16/2015 01:31:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (12/15/2015 10:50:58 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 10:50:58 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 10:48:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 10:48:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
    Description: Unable to read the performance counter strings defined for the 002 language ID. The first DWORD in the Data section contains the Win32 error code.

    Error: (12/15/2015 10:46:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (12/15/2015 10:34:04 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Име на приложение с грешки: cnext.exe, версия: 10.1.1.1522, времево клеймо: 0x564c17eb
    Име на модул с грешки: MSVCR120.dll, версия: 12.0.21005.1, времево клеймо: 0x524f83ff
    Код на изключение: 0x40000015
    Отместване на грешка: 0x0000000000074a46
    ИД на процес на грешка: 0x7d8
    Начален час на приложението с грешки: 0xcnext.exe0
    Път на приложението с грешки: cnext.exe1
    Път на модула с грешки: cnext.exe2
    ИД на доклад: cnext.exe3

    Error: (12/15/2015 10:32:43 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Име на приложение с грешки: eurotrucks2.exe, версия: 1.22.0.20, времево клеймо: 0x566eb4fa
    Име на модул с грешки: CLBCatQ.DLL, версия: 2001.12.8530.16385, времево клеймо: 0x4a5bd9b1
    Код на изключение: 0xc0000005
    Отместване на грешка: 0x00057809
    ИД на процес на грешка: 0x1264
    Начален час на приложението с грешки: 0xeurotrucks2.exe0
    Път на приложението с грешки: eurotrucks2.exe1
    Път на модула с грешки: eurotrucks2.exe2
    ИД на доклад: eurotrucks2.exe3


    System errors:
    =============
    Error: (12/15/2015 10:16:19 PM) (Source: DCOM) (EventID: 10016) (User: Ali-PC)
    Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Ali-PCAliS-1-5-21-1513062547-706245244-4014153856-1000LocalHost (Using LRPC)

    Error: (12/15/2015 10:16:19 PM) (Source: DCOM) (EventID: 10016) (User: Ali-PC)
    Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Ali-PCAliS-1-5-21-1513062547-706245244-4014153856-1000LocalHost (Using LRPC)

    Error: (12/15/2015 10:00:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Услуга Steam Client Service не може да бъде стартирана поради следната грешка: 
    %%1053

    Error: (12/15/2015 10:00:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: Изтекъл период на изчакване (30000 милисекунди) при изчакване на услуга Steam Client Service да се свърже.

    Error: (12/15/2015 09:38:25 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: Неуспешно зареждане на следния драйвер, който се активира с включване на компютъра или стартиране на системата: 
    cdrom


    ==================== Memory info =========================== 

    Processor: Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz
    Percentage of memory in use: 66%
    Total physical RAM: 4094.49 MB
    Available physical RAM: 1369.42 MB
    Total Virtual: 8187.18 MB
    Available Virtual: 4196.09 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:97.56 GB) (Free:68.98 GB) NTFS
    Drive d: () (Fixed) (Total:195.31 GB) (Free:182.71 GB) NTFS
    Drive e: () (Fixed) (Total:638.54 GB) (Free:635.1 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CE1AE8C5)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
    Partition 4: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================

     

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:16-12-2015 01
    Ran by Ali (administrator) on ALI-PC (16-12-2015 17:09:13)
    Running from C:\Users\Ali\Downloads
    Loaded Profiles: Ali (Available Profiles: Ali)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
    Internet Explorer Version 9 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
    (Nico Mak Computing) C:\Program Files\WinZip\FAHWindow64.exe
    (Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe
    (WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    () D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (BitTorrent Inc.) C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe
    (BitTorrent Inc.) C:\Users\Ali\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
    (BitTorrent Inc.) C:\Users\Ali\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
    (Beepa P/L) C:\Fraps\fraps.exe
    (Beepa P/L) C:\Fraps\fraps64.dat
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4859592 2015-11-18] (Advanced Micro Devices, Inc.)
    HKU\S-1-5-21-1513062547-706245244-4014153856-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation)
    HKU\S-1-5-21-1513062547-706245244-4014153856-1000\...\Run: [uTorrent] => C:\Users\Ali\AppData\Roaming\uTorrent\uTorrent.exe [2026520 2015-12-15] (BitTorrent Inc.)
    HKU\S-1-5-21-1513062547-706245244-4014153856-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50377336 2015-12-14] (Skype Technologies S.A.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-12-15]
    ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Notifier.lnk [2015-12-15]
    ShortcutTarget: Update Notifier.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-12-15]
    ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{F537C3F8-4E07-4C4D-9275-6F732F7C1C21}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================

    FireFox:
    ========
    FF ProfilePath: C:\Users\Ali\AppData\Roaming\Mozilla\Firefox\Profiles\0cgxo0py.default
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-16] ()
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-16] ()
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-16] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-16] (Google Inc.)

    Chrome: 
    =======
    CHR StartupUrls: Default -> "hxxp://www.google.bg/"
    CHR Profile: C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Диск) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-16]
    CHR Extension: (YouTube) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-16]
    CHR Extension: (Google Търсене) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-16]
    CHR Extension: (Google Документи офлайн) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-16]
    CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-16]
    CHR Extension: (Gmail) - C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-16]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
    R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-16 17:09 - 2015-12-16 17:09 - 00007007 _____ C:\Users\Ali\Downloads\FRST.txt
    2015-12-16 17:08 - 2015-12-16 17:09 - 00000000 ____D C:\FRST
    2015-12-16 17:07 - 2015-12-16 17:07 - 02370048 _____ (Farbar) C:\Users\Ali\Downloads\FRST64.exe
    2015-12-16 16:11 - 2015-12-16 16:11 - 00003130 _____ C:\Windows\System32\Tasks\FRAPS
    2015-12-16 16:11 - 2015-12-16 16:11 - 00000562 _____ C:\Users\Public\Desktop\Fraps.lnk
    2015-12-16 16:11 - 2015-12-16 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
    2015-12-16 16:11 - 2015-12-16 16:11 - 00000000 ____D C:\Fraps
    2015-12-16 16:09 - 2015-12-16 16:09 - 00000000 ____D C:\Users\Ali\Downloads\Fraps 3.5.99 Build 15618 Retail
    2015-12-16 16:08 - 2015-12-16 16:08 - 00057560 _____ C:\Users\Ali\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-12-16 16:08 - 2015-12-16 16:08 - 00003719 _____ C:\Users\Ali\Downloads\Fraps 3.5.99 Build 15618 Retail.torrent
    2015-12-16 16:08 - 2015-12-16 16:08 - 00000000 ____D C:\Users\Ali\AppData\LocalLow\uTorrent
    2015-12-16 15:34 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
    2015-12-16 15:34 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
    2015-12-16 15:34 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
    2015-12-16 15:34 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
    2015-12-16 15:34 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
    2015-12-16 15:34 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
    2015-12-16 15:33 - 2015-12-16 15:33 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2015-12-16 15:33 - 2015-12-16 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-12-16 15:31 - 2015-12-16 16:36 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-12-16 15:31 - 2015-12-16 15:36 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-12-16 15:31 - 2015-12-16 15:31 - 00003988 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-12-16 15:31 - 2015-12-16 15:31 - 00003736 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-12-16 15:30 - 2015-12-16 15:33 - 00000000 ____D C:\Users\Ali\AppData\Local\Google
    2015-12-16 15:30 - 2015-12-16 15:33 - 00000000 ____D C:\Program Files (x86)\Google
    2015-12-16 15:30 - 2015-12-16 15:30 - 00927824 _____ (Google Inc.) C:\Users\Ali\Downloads\ChromeSetup.exe
    2015-12-16 15:29 - 2015-12-16 15:29 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Macromedia
    2015-12-16 15:29 - 2015-12-16 15:29 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Adobe
    2015-12-16 15:29 - 2015-12-16 15:29 - 00000000 ____D C:\Users\Ali\AppData\Local\Macromedia
    2015-12-16 15:28 - 2015-12-16 17:10 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-12-16 15:28 - 2015-12-16 15:29 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-12-16 15:28 - 2015-12-16 15:28 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-12-16 15:28 - 2015-12-16 15:28 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-12-16 15:28 - 2015-12-16 15:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
    2015-12-16 15:28 - 2015-12-16 15:28 - 00000000 ____D C:\Windows\system32\Macromed
    2015-12-16 15:27 - 2015-12-16 15:29 - 00000000 ____D C:\Users\Ali\AppData\Local\Adobe
    2015-12-16 15:24 - 2015-12-16 15:24 - 00000000 ____D C:\Users\Ali\Tracing
    2015-12-16 15:23 - 2015-12-16 17:10 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Skype
    2015-12-16 15:22 - 2015-12-16 15:23 - 00000000 ____D C:\ProgramData\Skype
    2015-12-16 15:22 - 2015-12-16 15:22 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
    2015-12-16 15:22 - 2015-12-16 15:22 - 00000000 ___RD C:\Program Files (x86)\Skype
    2015-12-16 15:22 - 2015-12-16 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2015-12-16 13:32 - 2015-12-16 13:32 - 00000219 _____ C:\Users\Ali\Desktop\Counter-Strike Global Offensive.url
    2015-12-16 07:36 - 2015-12-15 21:43 - 00000000 ____D C:\Windows\Panther
    2015-12-15 22:44 - 2015-12-15 22:44 - 00000000 _____ C:\Windows\ativpsrm.bin
    2015-12-15 22:42 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
    2015-12-15 22:42 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
    2015-12-15 22:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
    2015-12-15 22:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
    2015-12-15 22:42 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
    2015-12-15 22:42 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
    2015-12-15 22:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
    2015-12-15 22:42 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
    2015-12-15 22:42 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
    2015-12-15 22:42 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
    2015-12-15 22:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
    2015-12-15 22:42 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
    2015-12-15 22:42 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
    2015-12-15 22:42 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
    2015-12-15 22:42 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
    2015-12-15 22:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
    2015-12-15 22:42 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
    2015-12-15 22:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
    2015-12-15 22:42 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
    2015-12-15 22:42 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
    2015-12-15 22:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
    2015-12-15 22:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
    2015-12-15 22:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
    2015-12-15 22:42 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
    2015-12-15 22:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
    2015-12-15 22:42 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
    2015-12-15 22:42 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
    2015-12-15 22:42 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
    2015-12-15 22:42 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
    2015-12-15 22:42 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
    2015-12-15 22:42 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
    2015-12-15 22:42 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
    2015-12-15 22:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
    2015-12-15 22:42 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
    2015-12-15 22:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
    2015-12-15 22:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
    2015-12-15 22:42 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
    2015-12-15 22:42 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
    2015-12-15 22:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
    2015-12-15 22:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
    2015-12-15 22:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
    2015-12-15 22:42 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
    2015-12-15 22:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
    2015-12-15 22:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
    2015-12-15 22:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
    2015-12-15 22:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
    2015-12-15 22:42 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
    2015-12-15 22:42 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
    2015-12-15 22:42 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
    2015-12-15 22:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
    2015-12-15 22:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
    2015-12-15 22:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
    2015-12-15 22:42 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
    2015-12-15 22:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
    2015-12-15 22:42 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
    2015-12-15 22:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
    2015-12-15 22:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
    2015-12-15 22:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
    2015-12-15 22:42 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
    2015-12-15 22:42 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
    2015-12-15 22:42 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
    2015-12-15 22:42 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
    2015-12-15 22:42 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
    2015-12-15 22:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
    2015-12-15 22:42 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
    2015-12-15 22:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
    2015-12-15 22:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
    2015-12-15 22:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
    2015-12-15 22:42 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
    2015-12-15 22:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
    2015-12-15 22:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
    2015-12-15 22:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
    2015-12-15 22:42 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
    2015-12-15 22:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
    2015-12-15 22:42 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
    2015-12-15 22:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
    2015-12-15 22:42 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
    2015-12-15 22:42 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
    2015-12-15 22:42 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
    2015-12-15 22:42 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
    2015-12-15 22:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
    2015-12-15 22:42 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
    2015-12-15 22:42 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
    2015-12-15 22:42 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
    2015-12-15 22:42 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
    2015-12-15 22:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
    2015-12-15 22:42 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
    2015-12-15 22:42 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
    2015-12-15 22:42 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
    2015-12-15 22:42 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
    2015-12-15 22:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
    2015-12-15 22:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
    2015-12-15 22:42 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
    2015-12-15 22:42 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
    2015-12-15 22:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
    2015-12-15 22:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
    2015-12-15 22:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
    2015-12-15 22:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
    2015-12-15 22:42 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
    2015-12-15 22:42 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
    2015-12-15 22:42 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
    2015-12-15 22:42 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
    2015-12-15 22:42 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
    2015-12-15 22:42 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
    2015-12-15 22:42 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
    2015-12-15 22:42 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
    2015-12-15 22:42 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
    2015-12-15 22:42 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
    2015-12-15 22:42 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
    2015-12-15 22:42 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
    2015-12-15 22:42 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
    2015-12-15 22:42 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
    2015-12-15 22:42 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
    2015-12-15 22:42 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
    2015-12-15 22:36 - 2015-12-15 22:36 - 00002591 _____ C:\Users\Ali\Desktop\µTorrent.lnk
    2015-12-15 22:36 - 2015-12-15 22:36 - 00002591 _____ C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
    2015-12-15 22:35 - 2015-12-16 17:10 - 00000000 ____D C:\Users\Ali\AppData\Roaming\uTorrent
    2015-12-15 22:35 - 2015-12-15 22:42 - 00000000 ____D C:\Windows\SysWOW64\directx
    2015-12-15 22:35 - 2015-12-15 22:35 - 00292184 _____ (Microsoft Corporation) C:\Users\Ali\Downloads\dxwebsetup.exe
    2015-12-15 22:34 - 2015-12-15 22:34 - 00000000 ___HD C:\Program Files (x86)\Temp
    2015-12-15 22:32 - 2015-12-15 22:46 - 00000000 ____D C:\Users\Ali\Documents\Euro Truck Simulator 2
    2015-12-15 22:31 - 2015-12-15 22:32 - 00000000 ____D C:\Users\Ali\AppData\Local\WinZip
    2015-12-15 22:31 - 2015-12-15 22:32 - 00000000 ____D C:\ProgramData\WinZip
    2015-12-15 22:31 - 2015-12-15 22:31 - 00002283 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
    2015-12-15 22:31 - 2015-12-15 22:31 - 00000000 ____D C:\Users\Ali\AppData\Local\Nico Mak Computing
    2015-12-15 22:31 - 2015-12-15 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
    2015-12-15 22:31 - 2015-12-15 22:31 - 00000000 ____D C:\Program Files\WinZip
    2015-12-15 22:27 - 2015-12-15 22:28 - 02026520 _____ (BitTorrent Inc.) C:\Users\Ali\Downloads\uTorrent.exe
    2015-12-15 22:27 - 2015-12-15 22:27 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Ali\Downloads\SkypeSetup.exe
    2015-12-15 22:26 - 2015-12-15 22:26 - 00000000 ____D C:\Users\Ali\AppData\Local\AMD
    2015-12-15 22:26 - 2015-12-15 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
    2015-12-15 22:25 - 2015-12-15 22:25 - 00000000 ____D C:\Program Files (x86)\AMD
    2015-12-15 22:18 - 2015-12-15 22:29 - 00000000 ____D C:\Users\Ali\AppData\Local\Mozilla
    2015-12-15 22:18 - 2015-12-15 22:23 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Mozilla
    2015-12-15 22:18 - 2015-12-15 22:18 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-12-15 22:18 - 2015-12-15 22:18 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-12-15 22:18 - 2015-12-15 22:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2015-12-15 22:17 - 2015-12-15 22:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2015-12-15 22:17 - 2015-12-15 22:17 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
    2015-12-15 22:09 - 2015-12-15 22:11 - 00000000 ____D C:\ProgramData\Package Cache
    2015-12-15 22:05 - 2015-12-16 13:32 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
    2015-12-15 22:05 - 2015-12-15 22:05 - 00749404 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
    2015-12-15 22:05 - 2015-12-15 22:05 - 00000222 _____ C:\Users\Ali\Desktop\Euro Truck Simulator 2.url
    2015-12-15 22:00 - 2015-12-15 22:00 - 00000000 ____D C:\Users\Ali\AppData\Local\Steam
    2015-12-15 22:00 - 2015-12-15 22:00 - 00000000 ____D C:\Users\Ali\AppData\Local\CEF
    2015-12-15 21:59 - 2015-12-15 22:26 - 00000000 ____D C:\Program Files\AMD
    2015-12-15 21:58 - 2015-12-15 22:01 - 00000000 ____D C:\AMD
    2015-12-15 21:57 - 2015-12-16 15:55 - 00000000 ____D C:\Program Files (x86)\Steam
    2015-12-15 21:57 - 2015-12-15 21:58 - 12897976 _____ (AMD Inc.) C:\Users\Ali\Downloads\radeon-crimson-15.11-minimalsetup_web.exe
    2015-12-15 21:57 - 2015-12-15 21:57 - 00000963 _____ C:\Users\Public\Desktop\Steam.lnk
    2015-12-15 21:57 - 2015-12-15 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
    2015-12-15 21:56 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-12-15 21:56 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2015-12-15 21:56 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2015-12-15 21:56 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2015-12-15 21:56 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2015-12-15 21:56 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2015-12-15 21:56 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2015-12-15 21:56 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2015-12-15 21:56 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2015-12-15 21:56 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2015-12-15 21:56 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2015-12-15 21:56 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2015-12-15 21:56 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2015-12-15 21:56 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2015-12-15 21:55 - 2015-12-15 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
    2015-12-15 21:54 - 2015-12-15 21:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
    2015-12-15 21:54 - 2015-12-15 21:54 - 00000000 ____D C:\ProgramData\TP-LINK
    2015-12-15 21:54 - 2014-05-23 16:37 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
    2015-12-15 21:54 - 2014-05-23 16:37 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
    2015-12-15 21:54 - 2014-05-23 16:37 - 00007518 _____ C:\Windows\system32\athurextx.cat
    2015-12-15 21:43 - 2015-12-16 15:24 - 00000000 ____D C:\Users\Ali
    2015-12-15 21:43 - 2015-12-15 21:43 - 00001427 _____ C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-12-15 21:43 - 2015-12-15 21:43 - 00001393 _____ C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
    2015-12-15 21:43 - 2015-12-15 21:43 - 00000020 ___SH C:\Users\Ali\ntuser.ini
    2015-12-15 21:43 - 2015-12-15 21:43 - 00000000 ____D C:\Users\Ali\AppData\Local\VirtualStore
    2015-12-15 21:43 - 2011-04-12 10:28 - 00000000 ____D C:\Users\Ali\AppData\Roaming\Media Center Programs
    2015-12-15 21:41 - 2015-12-15 21:41 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    2015-12-15 21:41 - 2015-12-15 21:41 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
    2015-12-15 21:39 - 2015-12-15 21:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
    2015-11-18 10:20 - 2015-11-18 10:20 - 13189336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 10907328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 01496736 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 01229984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00152568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00118608 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00110344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
    2015-11-18 10:20 - 2015-11-18 10:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
    2015-11-18 10:19 - 2015-11-18 10:19 - 10815664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
    2015-11-18 10:19 - 2015-11-18 10:19 - 09070320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
    2015-11-18 10:19 - 2015-11-18 10:19 - 09017808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
    2015-11-18 10:19 - 2015-11-18 10:19 - 08089248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
    2015-11-18 10:17 - 2015-11-18 10:17 - 00296648 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
    2015-11-18 10:13 - 2015-11-18 10:13 - 23960064 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
    2015-11-18 10:08 - 2015-11-18 10:08 - 49984000 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
    2015-11-18 10:08 - 2015-11-18 10:08 - 00235008 _____ C:\Windows\system32\clinfo.exe
    2015-11-18 10:02 - 2015-11-18 10:02 - 41510912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
    2015-11-18 09:58 - 2015-11-18 09:58 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
    2015-11-18 09:57 - 2015-11-18 09:57 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
    2015-11-18 09:50 - 2015-11-18 09:50 - 27596288 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
    2015-11-18 09:49 - 2015-11-18 09:49 - 22348288 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
    2015-11-18 07:50 - 2015-11-18 07:50 - 00677888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
    2015-11-18 07:48 - 2015-11-18 07:48 - 00562688 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
    2015-11-18 07:46 - 2015-11-18 07:46 - 06643200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
    2015-11-18 07:46 - 2015-11-18 07:46 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
    2015-11-18 07:46 - 2015-11-18 07:46 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
    2015-11-18 07:14 - 2015-11-18 07:14 - 05223936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
    2015-11-18 06:48 - 2015-11-18 06:48 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
    2015-11-18 06:48 - 2015-11-18 06:48 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
    2015-11-18 06:08 - 2015-11-18 06:08 - 00683960 _____ C:\Windows\SysWOW64\atiapfxx.blb
    2015-11-18 06:08 - 2015-11-18 06:08 - 00683960 _____ C:\Windows\system32\atiapfxx.blb
    2015-11-18 06:05 - 2015-11-18 06:05 - 31376896 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
    2015-11-18 05:43 - 2015-11-18 05:43 - 15711744 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
    2015-11-18 05:43 - 2015-11-18 05:43 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
    2015-11-18 05:43 - 2015-11-18 05:43 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
    2015-11-18 05:43 - 2015-11-18 05:43 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
    2015-11-18 05:43 - 2015-11-18 05:43 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
    2015-11-18 05:43 - 2015-11-18 05:43 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
    2015-11-18 05:40 - 2015-11-18 05:40 - 25840128 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
    2015-11-18 05:40 - 2015-11-18 05:40 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
    2015-11-18 05:40 - 2015-11-18 05:40 - 00865280 _____ (AMD) C:\Windows\system32\coinst_15.30.dll
    2015-11-18 05:32 - 2015-11-18 05:32 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
    2015-11-18 05:32 - 2015-11-18 05:32 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
    2015-11-18 05:27 - 2015-11-18 05:27 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
    2015-11-18 05:26 - 2015-11-18 05:26 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
    2015-11-18 05:26 - 2015-11-18 05:26 - 00223744 _____ C:\Windows\system32\dgtrayicon.exe
    2015-11-18 05:25 - 2015-11-18 05:25 - 00552448 _____ (AMD) C:\Windows\system32\atieclxx.exe
    2015-11-18 05:25 - 2015-11-18 05:25 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
    2015-11-18 05:25 - 2015-11-18 05:25 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
    2015-11-18 05:25 - 2015-11-18 05:25 - 00162304 _____ C:\Windows\system32\atieah64.exe
    2015-11-18 05:25 - 2015-11-18 05:25 - 00145408 _____ C:\Windows\SysWOW64\atieah32.exe
    2015-11-18 05:25 - 2015-11-18 05:25 - 00031744 _____ (AMD) C:\Windows\system32\atimuixx.dll
    2015-11-18 05:24 - 2015-11-18 05:24 - 00246272 _____ (AMD) C:\Windows\system32\atiesrxx.exe
    2015-11-18 05:24 - 2015-11-18 05:24 - 00204952 _____ C:\Windows\SysWOW64\ativvsvl.dat
    2015-11-18 05:24 - 2015-11-18 05:24 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
    2015-11-18 05:24 - 2015-11-18 05:24 - 00157144 _____ C:\Windows\SysWOW64\ativvsva.dat
    2015-11-18 05:24 - 2015-11-18 05:24 - 00157144 _____ C:\Windows\system32\ativvsva.dat
    2015-11-18 05:22 - 2015-11-18 05:22 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
    2015-11-18 05:10 - 2015-11-18 05:10 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
    2015-11-18 04:58 - 2015-11-18 04:58 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
    2015-11-18 04:58 - 2015-11-18 04:58 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 01272832 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00157696 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00075776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
    2015-11-18 04:54 - 2015-11-18 04:54 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
    2015-11-18 04:53 - 2015-11-18 04:53 - 00671232 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
    2015-11-18 04:53 - 2015-11-18 04:53 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
    2015-11-18 04:45 - 2015-11-18 04:45 - 00195072 _____ C:\Windows\system32\hsa-thunk64.dll
    2015-11-18 04:45 - 2015-11-18 04:45 - 00174592 _____ C:\Windows\SysWOW64\hsa-thunk.dll
    2015-11-18 04:43 - 2015-11-18 04:43 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-12-16 17:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows
    2015-12-16 17:01 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-12-16 17:01 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-12-16 13:36 - 2009-07-14 07:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
    2015-12-16 13:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
    2015-12-16 13:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-12-16 07:36 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
    2015-12-15 22:45 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
    2015-12-15 21:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
    2015-12-15 21:41 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-12-15 21:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
    2015-12-15 21:38 - 2011-04-12 10:28 - 00000000 ____D C:\Windows\CSC
    2015-12-15 21:38 - 2009-07-14 06:45 - 00274320 _____ C:\Windows\system32\FNTCACHE.DAT
    2015-12-02 13:18 - 2010-11-21 05:27 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-12-15 21:37

    ==================== End of FRST.txt ============================

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    B-boy/StyLe/    19538

    Знаете ли какво, не този път вече няма да се занимавам с вас и да си губя времето. В предишната ви тема отново преинсталирахте без да се съобразявате с инструкциите ми и сега отново направихте същото...компютъра си е ваш и това е ваше право, но времето си е мое и аз също мога да се откажа.

     

    Успех!


    • Харесва ми 5

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове
    hristo58    1635
    преди 45 минути, B-boy/StyLe/ написа:

    Знаете ли какво, не този път вече няма да се занимавам с вас и да си губя времето. В предишната ви тема отново преинсталирахте без да се съобразявате с инструкциите ми и сега отново направихте същото...компютъра си е ваш и това е ваше право, но времето си е мое и аз също мога да се откажа.

     

    Успех!

    Точно така,браво.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    • Подобни теми

      • от hjhj
        Здравейте.
        Съмнява ме, че системата е заразена с някоя гадинка. Почти през час се налага я рестартирам защото забива и нищо не се отваря. Понякога се губи интернета и се налага отново рестарт. Дори и диспечера със задачи не се отваря всекой път., а когато се отвори диска е почти на 100%  натовареност.
         
         
         
        Addition.txt
         
        FRST.txt
      • от kaloyan.k219
        Здравейте! Преди няколко дена си занесох лаптопа в сервиз, защото беше много бавничък и ми казаха, че са изтрили 36 вируса. Взех го вчера и забелязвам, че все още е бавен! Благодаря предварително! 
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-08-2017
        Ran by User (administrator) on PC (30-08-2017 12:20:06)
        Running from C:\Users\User\Desktop
        Loaded Profiles: User (Available Profiles: User)
        Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: Български (България)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
        (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
        (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
        (Hewlett-Packard Company) C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe
        (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
        (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
        (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
        (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
        (Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe
        (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
        (HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
        (Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
        (TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
        (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
        (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
        (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
        (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
        (RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_bg.exe
        (Dell Inc.) C:\Program Files\Dell\Ambient Light Sensor\AlsSvc.exe
        (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
        (Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
        (AVAST Software s.r.o.) C:\Program Files\Alwil Software\Avast5\aswidsagent.exe
        (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
        (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
        (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        ==================== Registry (Whitelisted) ====================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [488816 2011-01-04] (Alps Electric Co., Ltd.)
        HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [570664 2008-05-28] (Nero AG)
        HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvLaunch.exe [213824 2017-04-16] (AVAST Software)
        HKLM\...\Run: [StatusAlerts] => C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe [330040 2014-02-12] (Hewlett-Packard Company)
        HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5282584 2014-11-21] (Piriform Ltd)
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27815896 2017-07-28] (Skype Technologies S.A.)
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\MountPoints2: F - F:\AutoRun.exe
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\MountPoints2: {c54fd4f3-97a9-11e3-8443-0025644a7ccf} - F:\AutoRun.exe
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\...\MountPoints2: {c54fd500-97a9-11e3-8443-0025644a7ccf} - G:\AutoRun.exe
        HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files\Garmin\Express Tray\tray.exe"
        Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell System Manager.lnk [2012-11-23]
        ShortcutTarget: Dell System Manager.lnk -> C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe (Dell Inc.)
        GroupPolicy: Restriction ? <==== ATTENTION
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
        Tcpip\..\Interfaces\{4F0D9387-60AA-46CC-A545-F4C0A516EA0C}: [DhcpNameServer] 192.168.0.1 192.168.0.1
        Tcpip\..\Interfaces\{DDAEF4EF-0718-4A0A-898E-481BCBE7DAE9}: [DhcpNameServer] 192.168.10.1
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
        HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
        HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
        HKU\S-1-5-21-533062283-1319507512-3948496807-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        SearchScopes: HKLM -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        SearchScopes: HKU\S-1-5-21-533062283-1319507512-3948496807-1000 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        SearchScopes: HKU\S-1-5-21-533062283-1319507512-3948496807-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2017-04-16] (AVAST Software)
        BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
        Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-06-01] (Skype Technologies)
        Filter: text/x-mrml - {C51721BE-858B-4A66-A8BF-D2882FF49820} - C:\Program Files\Common Files\A&W\MidRadio.ocx [2003-02-11] (YAMAHA CORPORATION)
        FireFox:
        ========
        FF DefaultProfile: 04k4c1sj.default-1495476444165
        FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\04k4c1sj.default-1495476444165 [2017-08-30]
        FF Homepage: Mozilla\Firefox\Profiles\04k4c1sj.default-1495476444165 -> google.bg
        FF Extension: (Firefox Screenshots) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\04k4c1sj.default-1495476444165\features\{9d2e852d-caeb-40cd-972f-0baa543745c6}\screenshots@mozilla.org.xpi [2017-08-26]
        FF Extension: (No Name) - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2017-06-21] [not signed]
        FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF48
        FF Extension: (Avast Online Security) - C:\Program Files\Alwil Software\Avast5\WebRep\FF48 [2017-04-16]
        FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\Alwil Software\Avast5\SafePrice\FF48
        FF Extension: (Avast SafePrice) - C:\Program Files\Alwil Software\Avast5\SafePrice\FF48 [2017-04-16]
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
        FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
        FF Plugin: @spoon.net/Spoon Plugin 3.33 -> C:\Program Files\Spoon\3.33.8.527\npMozillaSpoonPlugin.dll [No File]
        FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
        FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
        FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
        Chrome: 
        =======
        CHR DefaultProfile: Default
        CHR HomePage: Default -> hxxp://google.bg/
        CHR StartupUrls: Default -> "hxxp://google.bg/"
        CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
        CHR DefaultSearchKeyword: Default -> bing1.com
        CHR DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}&FORM=AVASDF&PC=AV01
        CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-08-30]
        CHR Extension: (Google Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-28]
        CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-27]
        CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-04]
        CHR Extension: (Google Търсене) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-27]
        CHR Extension: (Avast SafePrice) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-08-29]
        CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-24]
        CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-29]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
        CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-28]
        CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-28]
        CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx <not found>
        CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 alssvc; C:\Program Files\Dell\Ambient Light Sensor\AlsSvc.exe [382232 2008-06-03] (Dell Inc.)
        R3 aswbIDSAgent; C:\Program Files\Alwil Software\Avast5\aswidsagent.exe [5758120 2017-04-16] (AVAST Software s.r.o.)
        R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [261712 2017-04-16] (AVAST Software)
        R2 dcpsysmgrsvc; C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe [390000 2011-07-28] (Dell Inc.)
        R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [File not signed]
        R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
        R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [302872 2017-08-12] (RaMMicHaeL)
        S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [255184 2017-04-16] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [148208 2017-04-16] (AVAST Software s.r.o.)
        R0 aswblog; C:\Windows\system32\drivers\aswblogx.sys [267528 2017-04-16] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [41176 2017-04-16] (AVAST Software s.r.o.)
        S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34136 2017-04-16] (AVAST Software)
        R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [31064 2017-04-16] (AVAST Software)
        R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107928 2017-04-29] (AVAST Software)
        R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [90336 2017-04-16] (AVAST Software)
        R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [62152 2017-04-16] (AVAST Software)
        R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [764064 2017-04-16] (AVAST Software)
        R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [472760 2017-04-29] (AVAST Software)
        R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118800 2017-04-16] (AVAST Software)
        R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [279800 2017-04-16] (AVAST Software)
        R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [82168 2013-11-21] (EZB Systems, Inc.)
        S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [179520 2010-09-17] (DEVGURU Co., LTD.(www.devguru.co.kr))
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-08-30 12:13 - 2017-08-30 12:20 - 000014792 _____ C:\Users\User\Desktop\FRST.txt
        2017-08-30 12:13 - 2017-08-30 12:13 - 000000000 ____D C:\FRST
        2017-08-30 12:10 - 2017-08-30 12:10 - 001792512 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
        2017-08-30 09:33 - 2017-08-30 09:33 - 000000000 ____D C:\ProgramData\SWCUTemp
        2017-08-29 17:30 - 2009-07-30 20:08 - 008418199 _____ C:\Users\User\Desktop\Teст Температури.exe
        2017-08-29 16:18 - 2012-03-08 11:55 - 007170657 _____ C:\Users\User\Desktop\Тест хард диск.exe
        2017-08-29 16:17 - 2017-08-29 16:17 - 000001164 _____ C:\Users\User\Desktop\Auslogics Disk Defrag.lnk
        2017-08-29 16:17 - 2017-08-29 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
        2017-08-29 16:17 - 2017-08-29 16:17 - 000000000 ____D C:\Program Files\Auslogics
        2017-08-29 15:56 - 2017-08-29 15:57 - 000000000 ____D C:\Users\User\Desktop\от работен плот
        2017-08-29 14:40 - 2017-08-29 14:40 - 000000000 ____D C:\ProgramData\Malwarebytes
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-08-30 12:14 - 2009-07-14 07:34 - 000021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
        2017-08-30 12:14 - 2009-07-14 07:34 - 000021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
        2017-08-30 11:51 - 2016-02-09 21:35 - 000000000 ____D C:\Users\User\Desktop\Хотел
        2017-08-30 09:36 - 2010-11-21 00:01 - 000786558 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-08-30 09:36 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\inf
        2017-08-30 09:34 - 2012-11-23 08:41 - 000000000 ____D C:\Users\User\AppData\Roaming\Skype
        2017-08-30 09:33 - 2013-06-01 18:15 - 000000428 _____ C:\Windows\system32\Drivers\etc\hosts.ics
        2017-08-30 09:31 - 2009-07-14 07:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-08-29 17:26 - 2015-03-21 14:49 - 000000432 __RSH C:\ProgramData\ntuser.pol
        2017-08-29 15:31 - 2012-12-30 22:30 - 000000000 ____D C:\Program Files\Google
        2017-08-29 15:30 - 2015-02-27 23:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
        2017-08-29 15:28 - 2013-02-21 17:07 - 000000000 ____D C:\Program Files\Scratch
        2017-08-29 15:27 - 2016-08-08 11:08 - 000000000 ____D C:\Users\User\AppData\Roaming\iFunbox_UserCache
        2017-08-29 15:19 - 2016-09-09 18:05 - 000000000 ____D C:\Users\User\AppData\Roaming\JAM Software
        2017-08-29 15:06 - 2011-04-12 04:37 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
        2017-08-29 14:35 - 2015-12-31 17:35 - 000000000 ____D C:\AdwCleaner
        2017-08-29 14:21 - 2012-12-29 15:57 - 000000000 ____D C:\ProgramData\Kaspersky Lab
        2017-08-29 14:21 - 2012-12-29 15:57 - 000000000 ____D C:\Program Files\Kaspersky Lab
        2017-08-29 14:18 - 2012-12-29 17:38 - 000262144 _____ C:\Windows\system32\config\elam
        2017-08-29 14:17 - 2015-12-04 01:12 - 000000000 ____D C:\Program Files\Common Files\AV
        2017-08-29 09:45 - 2014-05-21 23:12 - 000002099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-08-29 09:45 - 2014-05-21 23:12 - 000002087 _____ C:\Users\Public\Desktop\Google Chrome.lnk
        2017-08-27 08:15 - 2014-05-04 13:41 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
        2017-08-26 14:53 - 2017-06-21 12:29 - 000000000 ____D C:\Program Files\Mozilla Firefox
        2017-08-17 11:06 - 2016-11-18 17:33 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
        2017-08-08 12:43 - 2012-11-23 16:40 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
        2017-08-08 12:43 - 2012-11-23 08:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
        2017-08-08 12:43 - 2012-11-23 08:40 - 000000000 ____D C:\Windows\system32\Macromed
        2017-08-05 17:05 - 2016-03-09 10:09 - 000000984 _____ C:\Users\Public\Desktop\VLC media player.lnk
        2017-08-05 17:04 - 2012-11-23 08:38 - 000000000 ____D C:\Program Files\Common Files\Adobe AIR
        2017-08-03 23:20 - 2012-11-23 08:41 - 000000000 ____D C:\ProgramData\Skype
        2017-08-02 14:11 - 2013-01-13 18:31 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
        2017-08-02 12:18 - 2016-08-15 19:31 - 000012304 _____ C:\Windows\system32\Native.exe
        ==================== Files in the root of some directories =======
        2012-12-25 20:32 - 2012-12-25 20:32 - 000000000 ____H () C:\Users\User\AppData\Roaming\76f77676ff6f.txt
        2012-12-25 19:51 - 2012-12-27 10:24 - 000000000 ____H () C:\Users\User\AppData\Roaming\789g979gg.txt
        2012-12-25 10:12 - 2012-12-25 10:12 - 000000000 ____H () C:\Users\User\AppData\Roaming\futf6d786d.txt
        2013-09-17 09:07 - 2014-03-31 09:51 - 000000175 _____ () C:\Users\User\AppData\Roaming\WB.CFG
        2013-03-04 14:58 - 2013-03-04 14:58 - 000003584 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2013-02-06 19:13 - 2013-02-06 19:13 - 000004096 ____H () C:\Users\User\AppData\Local\keyfile3.drm
        2014-04-27 11:17 - 2014-04-27 11:17 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
        2012-11-25 19:22 - 2012-11-25 19:22 - 004446016 ____N () C:\Users\User\AppData\Local\Tempmusic.ogg
        Some files in TEMP:
        ====================
        2017-08-29 22:56 - 2017-08-29 22:56 - 000000000 _____ () C:\Users\User\AppData\Local\Temp\iieim70b.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-08-21 09:54
        ==================== End of FRST.txt ============================
        Addition.txt
      • от mustang_94
        Здравейте! Първо искам да кажа, че не съм сигурен дали лаптопа е заразен и какво точно се случва. Проблема е, че лаптопа започва да товари твърдия диск на 100% започва да работи адски бавно... Нищо не може да се бутне по него през това време. Прави го когато си иска. И товаренето продължава от минути  до часове и няма никаква закономерност, кога се появява проблема и кога изчезва. През този период няма значение дали го изключвам, рестартирам, вадя му батерията. Като го изключа и включа, той се включва по 20-30мин. и ефекта е никакъв! Мисля, че е хардуерен проблем защото преди месец го преинсталирах същия проблем, нямаше никакви проблеми до преди 2-3 дни. Прикачил съм и допълнителни снимки показващи точно момента когато проблема изчезва от само себе си, както и кой е процеса, който уж го товари.
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
        Ran by CrossX (administrator) on DESKTOP-092OIEH (31-08-2017 02:59:58)
        Running from C:\Users\CrossX\Desktop
        Loaded Profiles: CrossX (Available Profiles: defaultuser0 & CrossX)
        Platform: Windows 10 Pro Version 1607 (X64) Language: Bulgarian (Bulgaria)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (AMD) C:\Windows\System32\atiesrxx.exe
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (Microsoft Corporation) C:\Windows\System32\wlanext.exe
        (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
        (Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
        (AMD) C:\Windows\System32\atieclxx.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        () C:\Windows\System32\igfxTray.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        (Rainmeter) C:\Program Files\Rainmeter\Rainmeter.exe
        (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
        (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (BitTorrent Inc.) C:\Users\CrossX\AppData\Roaming\BitTorrent\BitTorrent.exe
        (BitTorrent Inc.) C:\Users\CrossX\AppData\Roaming\BitTorrent\updates\7.10.0_43917\bittorrentie.exe
        (BitTorrent Inc.) C:\Users\CrossX\AppData\Roaming\BitTorrent\updates\7.10.0_43917\bittorrentie.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ====================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
        HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-08-27] (Realtek Semiconductor)
        HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1408752 2015-08-27] (Realtek Semiconductor)
        HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1408752 2015-08-27] (Realtek Semiconductor)
        HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1408752 2015-08-27] (Realtek Semiconductor)
        HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3947704 2015-08-13] (Synaptics Incorporated)
        HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
        HKU\S-1-5-21-536562023-1860876538-2531301155-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
        Startup: C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2017-08-18]
        ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Rainmeter)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
        Tcpip\..\Interfaces\{3ce54f89-b0c8-4ba3-9c26-2b1a1a04db7e}: [DhcpNameServer] 192.168.43.1
        Tcpip\..\Interfaces\{53b1fcd2-f23a-4596-bab5-5824234c9980}: [DhcpNameServer] 77.78.60.2 192.168.0.1
        Internet Explorer:
        ==================
        HKU\S-1-5-21-536562023-1860876538-2531301155-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-17] (Oracle Corporation)
        BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-17] (Oracle Corporation)
        FireFox:
        ========
        FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-17] (Oracle Corporation)
        FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-17] (Oracle Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-03] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-03] (Google Inc.)
        Chrome: 
        =======
        CHR StartupUrls: Default -> "hxxp://www.istartsurf.com/?type=hp&ts=1440100543&z=f4e9d116117aded271319cfg1z0z0e4g5e5e4z3zeg&from=obw&uid=HitachiXHDP725050GLA360_GEA534RV0T05SA0T05SAX"
        CHR Profile: C:\Users\CrossX\AppData\Local\Google\Chrome\User Data\Default [2017-08-31]
        CHR Extension: (Отдалечен работен плот на Chrome) - C:\Users\CrossX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-23]
        CHR Extension: (AdBlock) - C:\Users\CrossX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-03]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\CrossX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
        CHR Extension: (Chrome Media Router) - C:\Users\CrossX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-03]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373752 2017-04-23] (Intel Corporation)
        S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168672 2017-08-16] (Electronic Arts)
        S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148128 2017-08-16] (Electronic Arts)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889888 2017-08-01] (Microsoft Corporation)
        R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [86544 2016-10-21] (Synaptics Incorporated)
        R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [56848 2016-10-21] (Synaptics Incorporated)
        R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\c0316467.inf_amd64_3d8fbd78102e53d7\atikmdag.sys [38439848 2017-07-27] (Advanced Micro Devices, Inc.)
        R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\c0316467.inf_amd64_3d8fbd78102e53d7\atikmpag.sys [549800 2017-07-27] (Advanced Micro Devices, Inc.)
        R1 MpKslc5eb8e2e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{539CC724-0E5D-4C84-B9BD-25E6741151DE}\MpKslc5eb8e2e.sys [44928 2017-08-30] (Microsoft Corporation)
        S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
        R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-09-23] (Realtek Semiconductor Corp.)
        R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
        R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [600832 2015-08-29] (Realtek Semiconductor Corporation)
        R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [6625792 2017-01-20] (Realtek Semiconductor Corporation )
        R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44216 2015-08-13] (Synaptics Incorporated)
        R1 SMIDriverGen; C:\Windows\system32\DRIVERS\smi.sys [40176 2016-10-21] (Synaptics Incorporated)
        R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [3481696 2015-06-24] (Sonix Co. Ltd.)
        S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
        R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
        R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-08-31 02:59 - 2017-08-31 03:00 - 000010509 _____ C:\Users\CrossX\Desktop\FRST.txt
        2017-08-31 02:59 - 2017-08-31 02:59 - 000000000 ____D C:\FRST
        2017-08-31 02:55 - 2017-08-31 02:55 - 002395648 _____ (Farbar) C:\Users\CrossX\Desktop\FRST64.exe
        2017-08-20 12:41 - 2015-12-15 16:08 - 000075671 _____ C:\Users\CrossX\Downloads\The.Visit.2015.HDRip.XviD.AC3-EVO.srt
        2017-08-20 12:39 - 2017-08-30 13:57 - 000000000 ____D C:\Users\CrossX\AppData\LocalLow\BitTorrent
        2017-08-17 02:50 - 2017-08-17 02:50 - 000001220 _____ C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft.lnk
        2017-08-17 02:50 - 2017-08-17 02:50 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\java
        2017-08-17 02:48 - 2017-08-17 02:48 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
        2017-08-17 02:48 - 2017-08-17 02:48 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Sun
        2017-08-17 02:48 - 2017-08-17 02:48 - 000000000 ____D C:\Users\CrossX\AppData\LocalLow\Sun
        2017-08-17 02:48 - 2017-08-17 02:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
        2017-08-17 02:47 - 2017-08-17 02:49 - 000000000 ____D C:\ProgramData\Oracle
        2017-08-17 02:47 - 2017-08-17 02:47 - 000000000 ____D C:\Program Files (x86)\Java
        2017-08-17 02:45 - 2017-08-17 02:53 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\.minecraft
        2017-08-16 04:10 - 2017-08-16 04:11 - 000000000 ____D C:\ProgramData\Battle.net
        2017-08-16 04:08 - 2017-08-16 04:08 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Origin
        2017-08-16 04:07 - 2017-08-16 04:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
        2017-08-16 04:07 - 2017-08-16 04:07 - 000000000 ____D C:\Program Files (x86)\Origin
        2017-08-16 04:04 - 2017-08-16 04:09 - 000000000 ____D C:\ProgramData\Origin
        2017-08-16 04:04 - 2017-08-16 04:04 - 000000000 ____D C:\Users\CrossX\AppData\Local\Origin
        2017-08-16 04:04 - 2017-08-16 04:04 - 000000000 ____D C:\Users\CrossX\.QtWebEngineProcess
        2017-08-16 04:04 - 2017-08-16 04:04 - 000000000 ____D C:\Users\CrossX\.Origin
        2017-08-16 02:58 - 2017-08-16 02:58 - 000001747 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
        2017-08-16 02:58 - 2017-08-16 02:58 - 000000000 ____D C:\Users\CrossX\Documents\Rainmeter
        2017-08-16 02:58 - 2017-08-16 02:58 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Rainmeter
        2017-08-16 02:58 - 2017-08-16 02:58 - 000000000 ____D C:\Program Files\Rainmeter
        2017-08-13 23:55 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
        2017-08-13 23:55 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
        2017-08-13 23:55 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
        2017-08-13 23:55 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
        2017-08-13 23:55 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
        2017-08-13 23:55 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
        2017-08-13 23:55 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
        2017-08-13 23:55 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
        2017-08-13 23:55 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
        2017-08-13 23:55 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
        2017-08-13 23:55 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
        2017-08-13 23:55 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
        2017-08-13 23:55 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
        2017-08-13 23:55 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
        2017-08-13 23:54 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
        2017-08-13 23:54 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
        2017-08-13 23:54 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
        2017-08-13 23:54 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
        2017-08-13 23:54 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
        2017-08-13 23:54 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
        2017-08-13 23:54 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
        2017-08-13 23:54 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
        2017-08-13 23:54 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
        2017-08-13 23:54 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
        2017-08-13 23:54 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
        2017-08-13 23:54 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
        2017-08-13 23:54 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
        2017-08-13 23:54 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
        2017-08-13 23:54 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
        2017-08-13 23:54 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
        2017-08-13 23:54 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
        2017-08-13 23:54 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
        2017-08-13 23:54 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
        2017-08-13 23:54 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
        2017-08-13 23:54 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
        2017-08-13 23:54 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
        2017-08-13 23:54 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
        2017-08-13 23:54 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
        2017-08-13 23:54 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
        2017-08-13 23:54 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
        2017-08-13 23:54 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
        2017-08-13 23:54 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
        2017-08-13 23:54 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
        2017-08-13 23:54 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
        2017-08-13 23:54 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
        2017-08-13 23:54 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
        2017-08-13 23:54 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
        2017-08-13 23:54 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
        2017-08-13 23:54 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
        2017-08-13 23:54 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
        2017-08-13 23:54 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
        2017-08-13 23:54 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
        2017-08-13 23:54 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
        2017-08-13 23:54 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
        2017-08-13 23:54 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
        2017-08-13 23:54 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
        2017-08-13 23:54 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
        2017-08-13 23:54 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
        2017-08-13 23:54 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
        2017-08-13 23:54 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
        2017-08-13 23:54 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
        2017-08-13 23:54 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
        2017-08-13 23:54 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
        2017-08-13 23:54 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
        2017-08-13 23:54 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
        2017-08-13 23:54 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
        2017-08-13 23:54 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
        2017-08-13 23:54 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
        2017-08-13 23:54 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
        2017-08-13 23:54 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
        2017-08-13 23:54 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
        2017-08-13 23:54 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
        2017-08-13 23:54 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
        2017-08-13 23:54 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
        2017-08-13 23:54 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
        2017-08-13 23:54 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
        2017-08-13 23:54 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
        2017-08-13 23:54 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
        2017-08-13 23:54 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
        2017-08-13 23:54 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
        2017-08-13 23:54 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
        2017-08-13 23:54 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
        2017-08-13 23:54 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
        2017-08-13 23:54 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
        2017-08-13 23:54 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
        2017-08-13 23:54 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
        2017-08-13 23:54 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
        2017-08-13 23:54 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
        2017-08-13 23:54 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
        2017-08-13 23:54 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
        2017-08-13 23:54 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
        2017-08-13 23:54 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
        2017-08-13 23:54 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
        2017-08-13 23:54 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
        2017-08-13 23:54 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
        2017-08-13 23:54 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
        2017-08-13 23:54 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
        2017-08-13 23:54 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
        2017-08-13 23:54 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
        2017-08-13 23:54 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
        2017-08-13 23:54 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
        2017-08-13 23:54 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
        2017-08-13 23:54 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
        2017-08-13 23:54 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
        2017-08-13 23:54 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
        2017-08-13 23:54 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
        2017-08-13 23:54 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
        2017-08-13 23:54 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
        2017-08-13 23:54 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
        2017-08-13 23:54 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
        2017-08-13 23:54 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
        2017-08-13 23:54 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
        2017-08-13 23:54 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
        2017-08-13 23:54 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
        2017-08-13 23:54 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
        2017-08-13 23:54 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
        2017-08-13 23:53 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
        2017-08-13 23:53 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
        2017-08-13 23:53 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
        2017-08-13 23:53 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
        2017-08-13 23:53 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
        2017-08-13 23:53 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
        2017-08-13 21:59 - 2017-08-19 20:11 - 000000000 ____D C:\Users\CrossX\AppData\Local\Steam
        2017-08-13 21:59 - 2017-08-13 21:59 - 000000000 ____D C:\Users\CrossX\AppData\Local\CEF
        2017-08-13 21:53 - 2017-08-30 01:04 - 000000000 ____D C:\Program Files (x86)\Steam
        2017-08-13 21:53 - 2017-08-13 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
        2017-08-11 19:51 - 2017-08-31 02:37 - 000007593 _____ C:\Users\CrossX\AppData\Local\Resmon.ResmonCfg
        2017-08-11 16:43 - 2017-08-11 16:43 - 000000000 ____D C:\Users\CrossX\AppData\Local\UNP
        2017-08-11 16:38 - 2017-08-11 16:39 - 000001410 _____ C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update and Privacy Settings.lnk
        2017-08-11 16:37 - 2017-07-31 18:14 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-08-11 16:37 - 2017-07-31 18:14 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-08-11 16:33 - 2017-08-29 04:00 - 000079846 _____ C:\Windows\system32\perfh002.dat
        2017-08-11 16:33 - 2017-08-29 04:00 - 000024344 _____ C:\Windows\system32\perfc002.dat
        2017-08-11 16:26 - 2017-08-11 16:27 - 000000000 ___SD C:\Windows\UpdateAssistantV2
        2017-08-10 19:51 - 2017-08-10 19:51 - 000000000 ____D C:\Users\CrossX\AppData\Local\PeerDistRepub
        2017-08-10 19:01 - 2017-08-10 19:03 - 000000000 ____D C:\Windows\system32\MRT
        2017-08-10 19:01 - 2017-08-10 19:01 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
        2017-08-10 19:00 - 2017-08-11 16:04 - 000000000 ____D C:\Program Files\rempl
        2017-08-10 19:00 - 2017-08-11 15:46 - 000000000 ____D C:\Program Files\UNP
        2017-08-10 19:00 - 2017-08-10 19:00 - 000000000 ____D C:\Windows\system32\UNP
        2017-08-10 18:55 - 2017-04-22 00:53 - 000029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
        2017-08-10 18:55 - 2017-04-22 00:50 - 000030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
        2017-08-10 18:55 - 2017-04-22 00:50 - 000018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
        2017-08-10 18:55 - 2017-04-11 21:27 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
        2017-08-10 18:55 - 2017-03-15 21:15 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
        2017-08-10 18:54 - 2017-04-22 00:53 - 000018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
        2017-08-10 18:54 - 2017-04-11 21:27 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
        2017-08-10 18:54 - 2017-03-15 21:15 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
        2017-08-10 18:44 - 2017-08-01 19:47 - 000846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
        2017-08-10 18:44 - 2017-08-01 19:39 - 001255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
        2017-08-10 18:44 - 2017-08-01 19:36 - 007468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
        2017-08-10 18:44 - 2017-06-21 10:22 - 000361104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
        2017-08-10 18:44 - 2017-06-21 09:59 - 000255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
        2017-08-10 18:44 - 2017-06-21 09:56 - 000237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
        2017-08-10 18:44 - 2017-06-21 09:35 - 000732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
        2017-08-10 18:44 - 2017-06-21 09:30 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
        2017-08-10 18:44 - 2017-04-28 04:28 - 000965472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
        2017-08-10 18:44 - 2017-04-28 03:35 - 000276832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
        2017-08-10 18:44 - 2017-04-28 03:22 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
        2017-08-10 18:44 - 2017-04-28 03:08 - 001228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
        2017-08-10 18:44 - 2017-03-28 08:08 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
        2017-08-10 18:44 - 2017-03-04 09:45 - 000173408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
        2017-08-10 18:44 - 2017-03-04 09:42 - 001260784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
        2017-08-10 18:44 - 2017-03-04 09:29 - 000091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfp.dll
        2017-08-10 18:44 - 2017-03-04 09:25 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscandui.dll
        2017-08-10 18:44 - 2017-03-04 09:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
        2017-08-10 18:44 - 2017-03-04 09:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
        2017-08-10 18:44 - 2017-03-04 09:24 - 000093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfui.dll
        2017-08-10 18:44 - 2017-03-04 09:21 - 000196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapi32.dll
        2017-08-10 18:44 - 2017-03-04 09:20 - 000632832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
        2017-08-10 18:44 - 2017-03-04 09:20 - 000424960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
        2017-08-10 18:44 - 2017-03-04 09:20 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
        2017-08-10 18:44 - 2017-03-04 09:19 - 000318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
        2017-08-10 18:44 - 2017-03-04 09:16 - 001456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
        2017-08-10 18:44 - 2017-03-04 09:13 - 002458112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
        2017-08-10 18:44 - 2017-03-04 09:01 - 000560640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
        2017-08-10 18:44 - 2017-03-04 09:00 - 000444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
        2017-08-10 18:44 - 2016-11-11 10:26 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
        2017-08-10 18:44 - 2016-11-11 10:18 - 001336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
        2017-08-10 18:44 - 2016-11-11 10:04 - 000358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
        2017-08-10 18:44 - 2016-11-02 14:04 - 000596832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
        2017-08-10 18:44 - 2016-11-02 13:48 - 000095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
        2017-08-10 18:44 - 2016-10-15 06:52 - 000288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
        2017-08-10 18:44 - 2016-09-15 20:00 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
        2017-08-10 18:44 - 2016-09-15 19:58 - 000248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlancfg.dll
        2017-08-10 18:44 - 2016-08-06 06:41 - 000068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
        2017-08-10 18:44 - 2016-08-05 12:10 - 000939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
        2017-08-10 18:44 - 2016-08-05 11:23 - 000105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
        2017-08-10 18:44 - 2016-08-05 11:18 - 000118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
        2017-08-10 18:43 - 2017-08-01 20:20 - 002264344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
        2017-08-10 18:43 - 2017-08-01 20:20 - 001431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
        2017-08-10 18:43 - 2017-08-01 20:20 - 000781144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
        2017-08-10 18:43 - 2017-08-01 20:16 - 006665952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-08-10 18:43 - 2017-08-01 20:15 - 020967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
        2017-08-10 18:43 - 2017-08-01 20:10 - 000306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
        2017-08-10 18:43 - 2017-08-01 20:07 - 005686784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
        2017-08-10 18:43 - 2017-08-01 19:59 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tokenbinding.dll
        2017-08-10 18:43 - 2017-08-01 19:58 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
        2017-08-10 18:43 - 2017-08-01 19:56 - 000177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
        2017-08-10 18:43 - 2017-08-01 19:54 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
        2017-08-10 18:43 - 2017-08-01 19:53 - 000557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
        2017-08-10 18:43 - 2017-08-01 19:52 - 000117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
        2017-08-10 18:43 - 2017-08-01 19:51 - 000426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
        2017-08-10 18:43 - 2017-08-01 19:51 - 000388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
        2017-08-10 18:43 - 2017-08-01 19:51 - 000306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
        2017-08-10 18:43 - 2017-08-01 19:51 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
        2017-08-10 18:43 - 2017-08-01 19:51 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
        2017-08-10 18:43 - 2017-08-01 19:50 - 000431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
        2017-08-10 18:43 - 2017-08-01 19:50 - 000260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
        2017-08-10 18:43 - 2017-08-01 19:49 - 004615168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
        2017-08-10 18:43 - 2017-08-01 19:48 - 000297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
        2017-08-10 18:43 - 2017-08-01 19:47 - 000787968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
        2017-08-10 18:43 - 2017-08-01 19:47 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
        2017-08-10 18:43 - 2017-08-01 19:47 - 000525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
        2017-08-10 18:43 - 2017-08-01 19:47 - 000396288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
        2017-08-10 18:43 - 2017-08-01 19:47 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
        2017-08-10 18:43 - 2017-08-01 19:45 - 002333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
        2017-08-10 18:43 - 2017-08-01 19:45 - 001985536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll
        2017-08-10 18:43 - 2017-08-01 19:39 - 007626240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
        2017-08-10 18:43 - 2017-08-01 19:38 - 000458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
        2017-08-10 18:43 - 2017-08-01 19:37 - 003520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
        2017-08-10 18:43 - 2017-08-01 19:37 - 002641920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
        2017-08-10 18:43 - 2017-08-01 19:37 - 000647168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comuid.dll
        2017-08-10 18:43 - 2017-08-01 19:37 - 000468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
        2017-08-10 18:43 - 2017-08-01 19:34 - 001170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
        2017-08-10 18:43 - 2017-08-01 19:34 - 000886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
        2017-08-10 18:43 - 2017-08-01 19:34 - 000709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
        2017-08-10 18:43 - 2017-08-01 19:33 - 006031872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
        2017-08-10 18:43 - 2017-08-01 19:33 - 000589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
        2017-08-10 18:43 - 2017-08-01 19:32 - 002682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
        2017-08-10 18:43 - 2017-08-01 19:32 - 002648576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
        2017-08-10 18:43 - 2017-08-01 19:31 - 003664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
        2017-08-10 18:43 - 2017-08-01 19:31 - 001988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
        2017-08-10 18:43 - 2017-08-01 19:31 - 000773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
        2017-08-10 18:43 - 2017-08-01 19:31 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
        2017-08-10 18:43 - 2017-08-01 19:31 - 000598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
        2017-08-10 18:43 - 2017-08-01 19:30 - 002997248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
        2017-08-10 18:43 - 2017-08-01 19:30 - 002482688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
        2017-08-10 18:43 - 2017-08-01 19:30 - 001886720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
        2017-08-10 18:43 - 2017-08-01 19:30 - 001556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
        2017-08-10 18:43 - 2017-08-01 19:30 - 001013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
        2017-08-10 18:43 - 2017-08-01 19:30 - 000711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
        2017-08-10 18:43 - 2017-08-01 19:29 - 003106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
        2017-08-10 18:43 - 2017-08-01 19:28 - 000783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
        2017-08-10 18:43 - 2017-08-01 17:15 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
        2017-08-10 18:43 - 2017-07-12 09:12 - 001573280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
        2017-08-10 18:43 - 2017-07-12 08:32 - 000068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\frprov.dll
        2017-08-10 18:43 - 2017-07-12 08:31 - 000130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll
        2017-08-10 18:43 - 2017-07-12 08:31 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfnet.dll
        2017-08-10 18:43 - 2017-07-12 08:23 - 000671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
        2017-08-10 18:43 - 2017-07-12 08:23 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
        2017-08-10 18:43 - 2017-07-12 08:21 - 000711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
        2017-08-10 18:43 - 2017-07-12 08:13 - 000855040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
        2017-08-10 18:43 - 2017-07-12 08:12 - 002750464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
        2017-08-10 18:43 - 2017-07-12 08:11 - 002154496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
        2017-08-10 18:43 - 2017-07-12 08:10 - 000878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
        2017-08-10 18:43 - 2017-07-07 10:49 - 000340824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
        2017-08-10 18:43 - 2017-07-07 10:20 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
        2017-08-10 18:43 - 2017-07-07 10:19 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll
        2017-08-10 18:43 - 2017-07-07 10:18 - 000450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
        2017-08-10 18:43 - 2017-07-07 10:18 - 000210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
        2017-08-10 18:43 - 2017-07-07 10:17 - 000118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
        2017-08-10 18:43 - 2017-07-07 10:11 - 000340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
        2017-08-10 18:43 - 2017-07-07 10:10 - 000755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
        2017-08-10 18:43 - 2017-07-07 10:09 - 000637952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
        2017-08-10 18:43 - 2017-07-07 10:09 - 000506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
        2017-08-10 18:43 - 2017-07-07 10:02 - 001313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
        2017-08-10 18:43 - 2017-07-07 10:00 - 000476160 _____ (Microsoft® Windows® Operating System) C:\Windows\SysWOW64\wvc.dll
        2017-08-10 18:43 - 2017-07-07 09:54 - 002027008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
        2017-08-10 18:43 - 2017-07-07 09:52 - 004561408 _____ (Microsoft) C:\Windows\SysWOW64\dbgeng.dll
        2017-08-10 18:43 - 2017-07-07 09:52 - 001599488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
        2017-08-10 18:43 - 2017-07-07 09:52 - 001413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
        2017-08-10 18:43 - 2017-06-21 10:42 - 000601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
        2017-08-10 18:43 - 2017-06-21 10:38 - 000790752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
        2017-08-10 18:43 - 2017-06-21 10:28 - 001504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
        2017-08-10 18:43 - 2017-06-21 10:27 - 000975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
        2017-08-10 18:43 - 2017-06-21 10:27 - 000861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
        2017-08-10 18:43 - 2017-06-21 10:27 - 000549088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
        2017-08-10 18:43 - 2017-06-21 10:24 - 000154432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntmarta.dll
        2017-08-10 18:43 - 2017-06-21 10:21 - 001557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
        2017-08-10 18:43 - 2017-06-21 10:00 - 000519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
        2017-08-10 18:43 - 2017-06-21 10:00 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
        2017-08-10 18:43 - 2017-06-21 09:59 - 000285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
        2017-08-10 18:43 - 2017-06-21 09:59 - 000097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
        2017-08-10 18:43 - 2017-06-21 09:58 - 000136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
        2017-08-10 18:43 - 2017-06-21 09:58 - 000094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
        2017-08-10 18:43 - 2017-06-21 09:58 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
        2017-08-10 18:43 - 2017-06-21 09:57 - 000122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
        2017-08-10 18:43 - 2017-06-21 09:57 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
        2017-08-10 18:43 - 2017-06-21 09:56 - 000392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
        2017-08-10 18:43 - 2017-06-21 09:56 - 000315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
        2017-08-10 18:43 - 2017-06-21 09:56 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
        2017-08-10 18:43 - 2017-06-21 09:55 - 000404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
        2017-08-10 18:43 - 2017-06-21 09:55 - 000265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
        2017-08-10 18:43 - 2017-06-21 09:55 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
        2017-08-10 18:43 - 2017-06-21 09:55 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
        2017-08-10 18:43 - 2017-06-21 09:54 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
        2017-08-10 18:43 - 2017-06-21 09:53 - 000325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
        2017-08-10 18:43 - 2017-06-21 09:53 - 000218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
        2017-08-10 18:43 - 2017-06-21 09:53 - 000185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
        2017-08-10 18:43 - 2017-06-21 09:53 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
        2017-08-10 18:43 - 2017-06-21 09:52 - 000182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
        2017-08-10 18:43 - 2017-06-21 09:51 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
        2017-08-10 18:43 - 2017-06-21 09:51 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
        2017-08-10 18:43 - 2017-06-21 09:51 - 000258048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
        2017-08-10 18:43 - 2017-06-21 09:50 - 001167360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
        2017-08-10 18:43 - 2017-06-21 09:50 - 000857600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
        2017-08-10 18:43 - 2017-06-21 09:50 - 000529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
        2017-08-10 18:43 - 2017-06-21 09:49 - 000500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
        2017-08-10 18:43 - 2017-06-21 09:49 - 000295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
        2017-08-10 18:43 - 2017-06-21 09:48 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
        2017-08-10 18:43 - 2017-06-21 09:46 - 001323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
        2017-08-10 18:43 - 2017-06-21 09:46 - 001137152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
        2017-08-10 18:43 - 2017-06-21 09:46 - 001077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
        2017-08-10 18:43 - 2017-06-21 09:46 - 000355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
        2017-08-10 18:43 - 2017-06-21 09:45 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
        2017-08-10 18:43 - 2017-06-21 09:44 - 000343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
        2017-08-10 18:43 - 2017-06-21 09:44 - 000027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdProxy.dll
        2017-08-10 18:43 - 2017-06-21 09:43 - 001534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
        2017-08-10 18:43 - 2017-06-21 09:43 - 000713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
        2017-08-10 18:43 - 2017-06-21 09:43 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cnvfat.dll
        2017-08-10 18:43 - 2017-06-21 09:42 - 000470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-08-10 18:43 - 2017-06-21 09:41 - 000459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
        2017-08-10 18:43 - 2017-06-21 09:40 - 000220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
        2017-08-10 18:43 - 2017-06-21 09:40 - 000090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
        2017-08-10 18:43 - 2017-06-21 09:37 - 000400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
        2017-08-10 18:43 - 2017-06-21 09:35 - 001656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
        2017-08-10 18:43 - 2017-06-21 09:35 - 001232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
        2017-08-10 18:43 - 2017-06-21 09:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
        2017-08-10 18:43 - 2017-06-21 09:34 - 000621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
        2017-08-10 18:43 - 2017-06-21 09:33 - 001170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
        2017-08-10 18:43 - 2017-06-03 12:33 - 000095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
        2017-08-10 18:43 - 2017-06-03 12:31 - 000224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
        2017-08-10 18:43 - 2017-06-03 12:26 - 000100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBrokerUI.dll
        2017-08-10 18:43 - 2017-06-03 12:22 - 000327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
        2017-08-10 18:43 - 2017-06-03 12:22 - 000181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
        2017-08-10 18:43 - 2017-04-28 03:45 - 000493920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
        2017-08-10 18:43 - 2017-04-28 03:20 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\virtdisk.dll
        2017-08-10 18:43 - 2017-04-28 03:19 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
        2017-08-10 18:43 - 2017-04-28 03:15 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastlsext.dll
        2017-08-10 18:43 - 2017-04-28 03:13 - 000506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
        2017-08-10 18:43 - 2017-04-28 03:13 - 000114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
        2017-08-10 18:43 - 2017-04-28 03:10 - 000819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
        2017-08-10 18:43 - 2017-04-28 03:10 - 000816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
        2017-08-10 18:43 - 2017-04-28 03:10 - 000764928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
        2017-08-10 18:43 - 2017-04-28 03:07 - 000256512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
        2017-08-10 18:43 - 2017-04-28 03:03 - 000291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsnt.dll
        2017-08-10 18:43 - 2017-04-28 02:57 - 000719872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_sr.dll
        2017-08-10 18:43 - 2017-04-28 02:55 - 001004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
        2017-08-10 18:43 - 2017-04-28 02:54 - 002747904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
        2017-08-10 18:43 - 2017-04-28 02:54 - 001509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
        2017-08-10 18:43 - 2017-04-28 02:53 - 000798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
        2017-08-10 18:43 - 2017-03-28 09:21 - 000167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
        2017-08-10 18:43 - 2017-03-28 08:40 - 000049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthManagerProxy.dll
        2017-08-10 18:43 - 2017-03-28 08:38 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthTokenBrokerExt.dll
        2017-08-10 18:43 - 2017-03-28 08:37 - 000215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
        2017-08-10 18:43 - 2017-03-28 08:36 - 000769024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsecsnp.dll
        2017-08-10 18:43 - 2017-03-28 08:33 - 000436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
        2017-08-10 18:43 - 2017-03-28 08:25 - 001196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
        2017-08-10 18:43 - 2017-03-28 08:22 - 000516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
        2017-08-10 18:43 - 2017-03-28 08:13 - 000079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
        2017-08-10 18:43 - 2017-03-28 08:12 - 000862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
        2017-08-10 18:43 - 2017-03-04 10:09 - 001969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
        2017-08-10 18:43 - 2017-03-04 10:04 - 001362512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
        2017-08-10 18:43 - 2017-03-04 10:02 - 000184416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
        2017-08-10 18:43 - 2017-03-04 09:56 - 000263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
        2017-08-10 18:43 - 2017-03-04 09:53 - 000313568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
        2017-08-10 18:43 - 2017-03-04 09:52 - 000272720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
        2017-08-10 18:43 - 2017-03-04 09:30 - 000034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
        2017-08-10 18:43 - 2017-03-04 09:29 - 000112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
        2017-08-10 18:43 - 2017-03-04 09:29 - 000039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XInputUap.dll
        2017-08-10 18:43 - 2017-03-04 09:29 - 000019968 _____ C:\Windows\SysWOW64\GamePanelExternalHook.dll
        2017-08-10 18:43 - 2017-03-04 09:27 - 000055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
        2017-08-10 18:43 - 2017-03-04 09:27 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
        2017-08-10 18:43 - 2017-03-04 09:26 - 000147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
        2017-08-10 18:43 - 2017-03-04 09:26 - 000065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.UI.GameBar.dll
        2017-08-10 18:43 - 2017-03-04 09:26 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
        2017-08-10 18:43 - 2017-03-04 09:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
        2017-08-10 18:43 - 2017-03-04 09:26 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
        2017-08-10 18:43 - 2017-03-04 09:25 - 000175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
        2017-08-10 18:43 - 2017-03-04 09:25 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
        2017-08-10 18:43 - 2017-03-04 09:25 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
        2017-08-10 18:43 - 2017-03-04 09:24 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
        2017-08-10 18:43 - 2017-03-04 09:23 - 000531456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
        2017-08-10 18:43 - 2017-03-04 09:23 - 000291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
        2017-08-10 18:43 - 2017-03-04 09:23 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
        2017-08-10 18:43 - 2017-03-04 09:22 - 000822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
        2017-08-10 18:43 - 2017-03-04 09:22 - 000212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
        2017-08-10 18:43 - 2017-03-04 09:22 - 000183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
        2017-08-10 18:43 - 2017-03-04 09:22 - 000092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
        2017-08-10 18:43 - 2017-03-04 09:21 - 001243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
        2017-08-10 18:43 - 2017-03-04 09:21 - 000631296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
        2017-08-10 18:43 - 2017-03-04 09:21 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
        2017-08-10 18:43 - 2017-03-04 09:20 - 000534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
        2017-08-10 18:43 - 2017-03-04 09:20 - 000426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
        2017-08-10 18:43 - 2017-03-04 09:20 - 000206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
        2017-08-10 18:43 - 2017-03-04 09:19 - 000714752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
        2017-08-10 18:43 - 2017-03-04 09:19 - 000635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
        2017-08-10 18:43 - 2017-03-04 09:19 - 000414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
        2017-08-10 18:43 - 2017-03-04 09:18 - 001231360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
        2017-08-10 18:43 - 2017-03-04 09:18 - 000567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
        2017-08-10 18:43 - 2017-03-04 09:18 - 000548352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
        2017-08-10 18:43 - 2017-03-04 09:18 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
        2017-08-10 18:43 - 2017-03-04 09:18 - 000253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-08-10 18:43 - 2017-03-04 09:18 - 000140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
        2017-08-10 18:43 - 2017-03-04 09:16 - 000968704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
        2017-08-10 18:43 - 2017-03-04 09:16 - 000850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
        2017-08-10 18:43 - 2017-03-04 09:16 - 000760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
        2017-08-10 18:43 - 2017-03-04 09:16 - 000636928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
        2017-08-10 18:43 - 2017-03-04 09:16 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
        2017-08-10 18:43 - 2017-03-04 09:15 - 001543680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
        2017-08-10 18:43 - 2017-03-04 09:14 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
        2017-08-10 18:43 - 2017-03-04 09:13 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
        2017-08-10 18:43 - 2017-03-04 09:12 - 000884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
        2017-08-10 18:43 - 2017-03-04 09:12 - 000700416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Search.dll
        2017-08-10 18:43 - 2017-03-04 09:11 - 001320448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
        2017-08-10 18:43 - 2017-03-04 09:10 - 000300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regedit.exe
        2017-08-10 18:43 - 2017-03-04 09:10 - 000259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
        2017-08-10 18:43 - 2017-03-04 09:09 - 000570368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
        2017-08-10 18:43 - 2017-03-04 09:09 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommon.dll
        2017-08-10 18:43 - 2017-03-04 09:07 - 000935936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
        2017-08-10 18:43 - 2017-03-04 09:05 - 001133568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
        2017-08-10 18:43 - 2017-03-04 09:05 - 000298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
        2017-08-10 18:43 - 2017-03-04 09:03 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
        2017-08-10 18:43 - 2017-03-04 09:03 - 000359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
        2017-08-10 18:43 - 2017-03-04 09:02 - 000580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
        2017-08-10 18:43 - 2017-03-04 09:02 - 000510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
        2017-08-10 18:43 - 2017-03-04 09:01 - 003478528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
        2017-08-10 18:43 - 2017-03-04 09:01 - 001493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
        2017-08-10 18:43 - 2017-03-04 09:01 - 001293312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
        2017-08-10 18:43 - 2017-03-04 09:01 - 001154560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Pimstore.dll
        2017-08-10 18:43 - 2017-03-04 09:01 - 000422400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
        2017-08-10 18:43 - 2017-03-04 09:00 - 000850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
        2017-08-10 18:43 - 2017-03-04 08:57 - 000449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
        2017-08-10 18:43 - 2016-12-21 07:41 - 000253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
        2017-08-10 18:43 - 2016-12-21 07:40 - 000318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
        2017-08-10 18:43 - 2016-12-21 07:38 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
        2017-08-10 18:43 - 2016-12-21 07:30 - 005398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
        2017-08-10 18:43 - 2016-12-14 07:45 - 000147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
        2017-08-10 18:43 - 2016-12-14 07:42 - 000167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
        2017-08-10 18:43 - 2016-12-14 07:35 - 000553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
        2017-08-10 18:43 - 2016-12-09 12:52 - 001435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
        2017-08-10 18:43 - 2016-12-09 12:18 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
        2017-08-10 18:43 - 2016-11-11 10:54 - 000122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
        2017-08-10 18:43 - 2016-11-11 10:42 - 000152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
        2017-08-10 18:43 - 2016-11-11 10:41 - 000157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
        2017-08-10 18:43 - 2016-11-11 10:18 - 000108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
        2017-08-10 18:43 - 2016-11-11 10:17 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
        2017-08-10 18:43 - 2016-11-11 10:15 - 001357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
        2017-08-10 18:43 - 2016-11-11 10:15 - 000348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
        2017-08-10 18:43 - 2016-11-11 10:15 - 000285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
        2017-08-10 18:43 - 2016-11-11 10:05 - 003370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
        2017-08-10 18:43 - 2016-11-11 10:04 - 000912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
        2017-08-10 18:43 - 2016-11-11 10:03 - 000772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
        2017-08-10 18:43 - 2016-11-02 14:01 - 001425000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
        2017-08-10 18:43 - 2016-11-02 13:46 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
        2017-08-10 18:43 - 2016-11-02 13:44 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthExt.dll
        2017-08-10 18:43 - 2016-11-02 13:43 - 000731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8.dll
        2017-08-10 18:43 - 2016-11-02 13:42 - 000549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
        2017-08-10 18:43 - 2016-11-02 13:39 - 000236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
        2017-08-10 18:43 - 2016-11-02 13:28 - 000807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
        2017-08-10 18:43 - 2016-11-02 13:23 - 002356736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
        2017-08-10 18:43 - 2016-10-15 07:15 - 000687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
        2017-08-10 18:43 - 2016-10-15 07:10 - 000254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
        2017-08-10 18:43 - 2016-10-15 07:00 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
        2017-08-10 18:43 - 2016-10-15 06:57 - 000039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
        2017-08-10 18:43 - 2016-10-15 06:56 - 000306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentutl.exe
        2017-08-10 18:43 - 2016-10-15 06:54 - 000410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
        2017-08-10 18:43 - 2016-10-15 06:54 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
        2017-08-10 18:43 - 2016-10-15 06:54 - 000102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
        2017-08-10 18:43 - 2016-10-15 06:44 - 000747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
        2017-08-10 18:43 - 2016-10-15 06:42 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
        2017-08-10 18:43 - 2016-10-15 06:36 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmifw.dll
        2017-08-10 18:43 - 2016-10-05 12:31 - 000058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
        2017-08-10 18:43 - 2016-10-05 12:17 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
        2017-08-10 18:43 - 2016-10-05 12:13 - 000055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
        2017-08-10 18:43 - 2016-09-15 20:37 - 000402352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
        2017-08-10 18:43 - 2016-09-15 20:22 - 000433832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
        2017-08-10 18:43 - 2016-09-15 20:03 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TempSignedLicenseExchangeTask.dll
        2017-08-10 18:43 - 2016-09-15 19:58 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-08-10 18:43 - 2016-09-15 19:57 - 000171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
        2017-08-10 18:43 - 2016-09-15 19:56 - 000262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
        2017-08-10 18:43 - 2016-09-15 19:56 - 000057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManagerApi.dll
        2017-08-10 18:43 - 2016-09-15 19:55 - 000455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetworkCollectionAgent.dll
        2017-08-10 18:43 - 2016-09-15 19:54 - 000461312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
        2017-08-10 18:43 - 2016-09-15 19:54 - 000431104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
        2017-08-10 18:43 - 2016-09-15 19:53 - 000466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
        2017-08-10 18:43 - 2016-09-15 19:50 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
        2017-08-10 18:43 - 2016-09-15 19:44 - 000209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
        2017-08-10 18:43 - 2016-09-15 19:42 - 000049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundMediaPolicy.dll
        2017-08-10 18:43 - 2016-09-15 19:35 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
        2017-08-10 18:43 - 2016-09-07 07:59 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AddressParser.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccessRes.dll
        2017-08-10 18:43 - 2016-09-07 07:58 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneutilRes.dll
        2017-08-10 18:43 - 2016-09-07 07:57 - 000045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
        2017-08-10 18:43 - 2016-09-07 07:56 - 000048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactActivation.dll
        2017-08-10 18:43 - 2016-09-07 07:54 - 000055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
        2017-08-10 18:43 - 2016-09-07 07:53 - 000118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
        2017-08-10 18:43 - 2016-09-07 07:31 - 000461312 _____ (Microsoft) C:\Windows\SysWOW64\DbgModel.dll
        2017-08-10 18:43 - 2016-08-20 08:04 - 000592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
        2017-08-10 18:43 - 2016-08-20 08:00 - 000141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
        2017-08-10 18:43 - 2016-08-20 07:58 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
        2017-08-10 18:43 - 2016-08-20 07:56 - 000020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
        2017-08-10 18:43 - 2016-08-06 06:48 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
        2017-08-10 18:43 - 2016-08-06 06:44 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
        2017-08-10 18:43 - 2016-08-06 06:33 - 000020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
        2017-08-10 18:43 - 2016-08-05 11:29 - 000568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
        2017-08-10 18:43 - 2016-08-05 11:29 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
        2017-08-10 18:43 - 2016-08-02 07:47 - 000079536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
        2017-08-10 18:43 - 2016-08-02 07:37 - 000121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
        2017-08-10 18:43 - 2016-07-22 04:18 - 000297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
        2017-08-10 18:43 - 2016-05-29 21:38 - 008886976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSetup.exe
        2017-08-10 18:42 - 2017-08-01 20:20 - 000116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
        2017-08-10 18:42 - 2017-08-01 20:19 - 001980776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
        2017-08-10 18:42 - 2017-08-01 20:19 - 000577976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
        2017-08-10 18:42 - 2017-08-01 20:19 - 000339896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
        2017-08-10 18:42 - 2017-08-01 20:19 - 000266080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
        2017-08-10 18:42 - 2017-08-01 20:19 - 000120416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
        2017-08-10 18:42 - 2017-08-01 20:18 - 000139104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
        2017-08-10 18:42 - 2017-08-01 20:16 - 004023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
        2017-08-10 18:42 - 2017-08-01 20:16 - 001845512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
        2017-08-10 18:42 - 2017-08-01 20:15 - 001360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
        2017-08-10 18:42 - 2017-08-01 20:15 - 001277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
        2017-08-10 18:42 - 2017-08-01 20:15 - 000981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
        2017-08-10 18:42 - 2017-08-01 19:56 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
        2017-08-10 18:42 - 2017-08-01 19:55 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-08-10 18:42 - 2017-08-01 19:54 - 000505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
        2017-08-10 18:42 - 2017-08-01 19:54 - 000184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
        2017-08-10 18:42 - 2017-08-01 19:52 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
        2017-08-10 18:42 - 2017-08-01 19:51 - 000483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
        2017-08-10 18:42 - 2017-08-01 19:50 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
        2017-08-10 18:42 - 2017-08-01 19:50 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
        2017-08-10 18:42 - 2017-08-01 19:48 - 000267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
        2017-08-10 18:42 - 2017-08-01 19:42 - 018364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
        2017-08-10 18:42 - 2017-08-01 19:41 - 000248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
        2017-08-10 18:42 - 2017-08-01 19:40 - 019415040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
        2017-08-10 18:42 - 2017-08-01 19:40 - 012187136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
        2017-08-10 18:42 - 2017-08-01 19:37 - 012349440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
        2017-08-10 18:42 - 2017-08-01 19:35 - 000675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
        2017-08-10 18:42 - 2017-08-01 19:31 - 000566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
        2017-08-10 18:42 - 2017-08-01 19:31 - 000542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
        2017-08-10 18:42 - 2017-08-01 19:30 - 000751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
        2017-08-10 18:42 - 2017-07-12 09:15 - 000496872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
        2017-08-10 18:42 - 2017-07-12 09:12 - 001706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
        2017-08-10 18:42 - 2017-07-12 08:55 - 000607072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
        2017-08-10 18:42 - 2017-07-12 08:55 - 000111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
        2017-08-10 18:42 - 2017-07-12 08:52 - 004312760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
        2017-08-10 18:42 - 2017-07-12 08:35 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dabapi.dll
        2017-08-10 18:42 - 2017-07-12 08:32 - 000227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
        2017-08-10 18:42 - 2017-07-12 08:30 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll
        2017-08-10 18:42 - 2017-07-12 08:29 - 000328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
        2017-08-10 18:42 - 2017-07-12 08:29 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
        2017-08-10 18:42 - 2017-07-12 08:25 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
        2017-08-10 18:42 - 2017-07-12 08:19 - 006474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
        2017-08-10 18:42 - 2017-07-12 08:18 - 000525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
        2017-08-10 18:42 - 2017-07-12 08:15 - 000893440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
        2017-08-10 18:42 - 2017-07-12 08:15 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
        2017-08-10 18:42 - 2017-07-12 08:14 - 000536064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
        2017-08-10 18:42 - 2017-07-12 08:10 - 000546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
        2017-08-10 18:42 - 2017-07-12 08:09 - 000641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
        2017-08-10 18:42 - 2017-07-12 08:07 - 001572352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
        2017-08-10 18:42 - 2017-07-12 08:05 - 000565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
        2017-08-10 18:42 - 2017-07-07 10:19 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
        2017-08-10 18:42 - 2017-07-07 10:14 - 000270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
        2017-08-10 18:42 - 2017-07-07 10:14 - 000126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
        2017-08-10 18:42 - 2017-07-07 10:13 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
        2017-08-10 18:42 - 2017-07-07 10:03 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
        2017-08-10 18:42 - 2017-07-07 09:57 - 000691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
        2017-08-10 18:42 - 2017-07-07 09:55 - 004423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
        2017-08-10 18:42 - 2017-06-21 11:18 - 001470816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
        2017-08-10 18:42 - 2017-06-21 10:39 - 002048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
        2017-08-10 18:42 - 2017-06-21 10:30 - 000869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
        2017-08-10 18:42 - 2017-06-21 10:30 - 000196960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
        2017-08-10 18:42 - 2017-06-21 10:29 - 005722320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
        2017-08-10 18:42 - 2017-06-21 10:28 - 002277288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
        2017-08-10 18:42 - 2017-06-21 10:28 - 000524776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
        2017-08-10 18:42 - 2017-06-21 10:28 - 000170960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
        2017-08-10 18:42 - 2017-06-21 10:27 - 001122344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
        2017-08-10 18:42 - 2017-06-21 10:25 - 002168288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
        2017-08-10 18:42 - 2017-06-21 10:24 - 000846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
        2017-08-10 18:42 - 2017-06-21 10:21 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
        2017-08-10 18:42 - 2017-06-21 10:21 - 000374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
        2017-08-10 18:42 - 2017-06-21 10:20 - 000962768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
        2017-08-10 18:42 - 2017-06-21 10:20 - 000312472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
        2017-08-10 18:42 - 2017-06-21 10:04 - 001631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-08-10 18:42 - 2017-06-21 10:04 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
        2017-08-10 18:42 - 2017-06-21 10:01 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
        2017-08-10 18:42 - 2017-06-21 10:00 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uudf.dll
        2017-08-10 18:42 - 2017-06-21 10:00 - 000138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
        2017-08-10 18:42 - 2017-06-21 09:58 - 000129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
        2017-08-10 18:42 - 2017-06-21 09:57 - 000142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
        2017-08-10 18:42 - 2017-06-21 09:56 - 000374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
        2017-08-10 18:42 - 2017-06-21 09:56 - 000231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
        2017-08-10 18:42 - 2017-06-21 09:56 - 000203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
        2017-08-10 18:42 - 2017-06-21 09:56 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
        2017-08-10 18:42 - 2017-06-21 09:54 - 000609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
        2017-08-10 18:42 - 2017-06-21 09:54 - 000298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
        2017-08-10 18:42 - 2017-06-21 09:53 - 000201728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
        2017-08-10 18:42 - 2017-06-21 09:52 - 000262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
        2017-08-10 18:42 - 2017-06-21 09:51 - 000314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
        2017-08-10 18:42 - 2017-06-21 09:50 - 000238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
        2017-08-10 18:42 - 2017-06-21 09:49 - 000288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
        2017-08-10 18:42 - 2017-06-21 09:48 - 000395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
        2017-08-10 18:42 - 2017-06-21 09:47 - 013873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
        2017-08-10 18:42 - 2017-06-21 09:45 - 000313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
        2017-08-10 18:42 - 2017-06-21 09:45 - 000102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uexfat.dll
        2017-08-10 18:42 - 2017-06-21 09:44 - 000795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
        2017-08-10 18:42 - 2017-06-21 09:44 - 000136704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ufat.dll
        2017-08-10 18:42 - 2017-06-21 09:43 - 000653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
        2017-08-10 18:42 - 2017-06-21 09:42 - 003307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
        2017-08-10 18:42 - 2017-06-21 09:42 - 000380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFSv1.dll
        2017-08-10 18:42 - 2017-06-21 09:40 - 000901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
        2017-08-10 18:42 - 2017-06-21 09:40 - 000895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
        2017-08-10 18:42 - 2017-06-21 09:38 - 003733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
        2017-08-10 18:42 - 2017-06-21 09:38 - 001221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
        2017-08-10 18:42 - 2017-06-21 09:38 - 000753152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
        2017-08-10 18:42 - 2017-06-21 09:37 - 006109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
        2017-08-10 18:42 - 2017-06-21 09:37 - 000357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
        2017-08-10 18:42 - 2017-06-21 09:37 - 000103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
        2017-08-10 18:42 - 2017-06-21 09:36 - 001247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
        2017-08-10 18:42 - 2017-06-21 09:35 - 002740224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
        2017-08-10 18:42 - 2017-06-21 09:35 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
        2017-08-10 18:42 - 2017-06-21 09:34 - 000654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
        2017-08-10 18:42 - 2017-06-21 09:32 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
        2017-08-10 18:42 - 2017-06-21 09:10 - 000483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
        2017-08-10 18:42 - 2017-06-03 13:50 - 000315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
        2017-08-10 18:42 - 2017-06-03 12:52 - 001021784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
        2017-08-10 18:42 - 2017-06-03 12:44 - 001412640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
        2017-08-10 18:42 - 2017-06-03 12:44 - 000545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
        2017-08-10 18:42 - 2017-06-03 12:32 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
        2017-08-10 18:42 - 2017-06-03 12:31 - 000037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
        2017-08-10 18:42 - 2017-06-03 12:28 - 000232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edputil.dll
        2017-08-10 18:42 - 2017-06-03 12:05 - 000295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hnetcfg.dll
        2017-08-10 18:42 - 2017-06-03 12:04 - 002006528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
        2017-08-10 18:42 - 2017-04-28 03:53 - 000616048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
        2017-08-10 18:42 - 2017-04-28 03:43 - 001557224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
        2017-08-10 18:42 - 2017-04-28 03:40 - 001202936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
        2017-08-10 18:42 - 2017-04-28 03:40 - 000352760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
        2017-08-10 18:42 - 2017-04-28 03:21 - 000073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
        2017-08-10 18:42 - 2017-04-28 03:21 - 000027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BthTelemetry.dll
        2017-08-10 18:42 - 2017-04-28 03:17 - 000095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
        2017-08-10 18:42 - 2017-04-28 03:15 - 000206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
        2017-08-10 18:42 - 2017-04-28 03:13 - 001755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
        2017-08-10 18:42 - 2017-04-28 03:12 - 000236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
        2017-08-10 18:42 - 2017-04-28 03:09 - 000352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
        2017-08-10 18:42 - 2017-04-28 03:07 - 003689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
        2017-08-10 18:42 - 2017-04-28 03:03 - 000318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
        2017-08-10 18:42 - 2017-04-28 02:58 - 000433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
        2017-08-10 18:42 - 2017-04-28 02:57 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CameraCaptureUI.dll
        2017-08-10 18:42 - 2017-04-28 02:56 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
        2017-08-10 18:42 - 2017-04-28 02:55 - 001993216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
        2017-08-10 18:42 - 2017-03-28 09:04 - 000136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
        2017-08-10 18:42 - 2017-03-28 08:58 - 001344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
        2017-08-10 18:42 - 2017-03-28 08:20 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
        2017-08-10 18:42 - 2017-03-28 08:19 - 000746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
        2017-08-10 18:42 - 2017-03-28 08:16 - 003198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
        2017-08-10 18:42 - 2017-03-28 08:11 - 001576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
        2017-08-10 18:42 - 2017-03-28 08:08 - 001564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
        2017-08-10 18:42 - 2017-03-16 07:38 - 000034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
        2017-08-10 18:42 - 2017-03-04 10:57 - 000484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
        2017-08-10 18:42 - 2017-03-04 10:09 - 002206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
        2017-08-10 18:42 - 2017-03-04 09:56 - 000248992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
        2017-08-10 18:42 - 2017-03-04 09:47 - 001123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
        2017-08-10 18:42 - 2017-03-04 09:47 - 000976184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
        2017-08-10 18:42 - 2017-03-04 09:47 - 000640976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
        2017-08-10 18:42 - 2017-03-04 09:47 - 000530480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
        2017-08-10 18:42 - 2017-03-04 09:46 - 000321792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
        2017-08-10 18:42 - 2017-03-04 09:45 - 000112120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
        2017-08-10 18:42 - 2017-03-04 09:27 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accountaccessor.dll
        2017-08-10 18:42 - 2017-03-04 09:26 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
        2017-08-10 18:42 - 2017-03-04 09:25 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCCSEngineShared.dll
        2017-08-10 18:42 - 2017-03-04 09:23 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DavSyncProvider.dll
        2017-08-10 18:42 - 2017-03-04 09:22 - 001299968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
        2017-08-10 18:42 - 2017-03-04 09:22 - 000332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
        2017-08-10 18:42 - 2017-03-04 09:22 - 000231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
        2017-08-10 18:42 - 2017-03-04 09:22 - 000230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
        2017-08-10 18:42 - 2017-03-04 09:21 - 000670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
        2017-08-10 18:42 - 2017-03-04 09:20 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
        2017-08-10 18:42 - 2017-03-04 09:19 - 000498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
        2017-08-10 18:42 - 2017-03-04 09:19 - 000226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
        2017-08-10 18:42 - 2017-03-04 09:18 - 000896512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
        2017-08-10 18:42 - 2017-03-04 09:18 - 000198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
        2017-08-10 18:42 - 2017-03-04 09:16 - 000526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
        2017-08-10 18:42 - 2017-03-04 09:16 - 000465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
        2017-08-10 18:42 - 2017-03-04 09:11 - 001357312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
        2017-08-10 18:42 - 2017-03-04 09:07 - 000545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
        2017-08-10 18:42 - 2017-03-04 09:06 - 005380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
        2017-08-10 18:42 - 2017-03-04 09:05 - 000134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
        2017-08-10 18:42 - 2017-03-04 09:03 - 002363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
        2017-08-10 18:42 - 2017-03-04 09:03 - 002109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
        2017-08-10 18:42 - 2017-03-04 09:02 - 002484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
        2017-08-10 18:42 - 2017-03-04 09:02 - 002138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
        2017-08-10 18:42 - 2017-03-04 09:02 - 001709056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
        2017-08-10 18:42 - 2017-03-04 09:02 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVP9DEC.dll
        2017-08-10 18:42 - 2017-03-04 08:59 - 000206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
        2017-08-10 18:42 - 2016-12-21 08:59 - 000218976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
        2017-08-10 18:42 - 2016-12-21 07:24 - 005061120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
        2017-08-10 18:42 - 2016-12-14 08:01 - 000382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
        2017-08-10 18:42 - 2016-12-14 08:01 - 000076984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
        2017-08-10 18:42 - 2016-12-14 07:40 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-08-10 18:42 - 2016-12-14 07:38 - 000213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll
        2017-08-10 18:42 - 2016-12-14 07:32 - 000806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
        2017-08-10 18:42 - 2016-12-09 13:01 - 002323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
        2017-08-10 18:42 - 2016-12-09 13:00 - 000106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
        2017-08-10 18:42 - 2016-12-09 12:51 - 000117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
        2017-08-10 18:42 - 2016-12-09 12:41 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
        2017-08-10 18:42 - 2016-12-09 12:34 - 000288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
        2017-08-10 18:42 - 2016-12-09 12:15 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
        2017-08-10 18:42 - 2016-12-09 12:15 - 000068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
        2017-08-10 18:42 - 2016-11-11 10:42 - 000091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
        2017-08-10 18:42 - 2016-11-11 10:27 - 000065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
        2017-08-10 18:42 - 2016-11-11 10:25 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
        2017-08-10 18:42 - 2016-11-11 10:25 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
        2017-08-10 18:42 - 2016-11-11 10:23 - 000140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
        2017-08-10 18:42 - 2016-11-11 10:21 - 000091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-08-10 18:42 - 2016-11-11 10:17 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
        2017-08-10 18:42 - 2016-11-11 10:15 - 000838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
        2017-08-10 18:42 - 2016-11-11 10:08 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
        2017-08-10 18:42 - 2016-11-11 10:04 - 000715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
        2017-08-10 18:42 - 2016-11-11 10:03 - 000760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
        2017-08-10 18:42 - 2016-11-02 14:08 - 000186424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
        2017-08-10 18:42 - 2016-11-02 13:48 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efsext.dll
        2017-08-10 18:42 - 2016-11-02 13:45 - 000182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
        2017-08-10 18:42 - 2016-11-02 13:43 - 000198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
        2017-08-10 18:42 - 2016-11-02 13:36 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetailsUpdate.dll
        2017-08-10 18:42 - 2016-11-02 13:29 - 000122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
        2017-08-10 18:42 - 2016-11-02 13:28 - 000109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chartv.dll
        2017-08-10 18:42 - 2016-11-02 13:23 - 000199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
        2017-08-10 18:42 - 2016-11-02 12:11 - 000788624 _____ C:\Windows\SysWOW64\locale.nls
        2017-08-10 18:42 - 2016-11-02 12:11 - 000788624 _____ C:\Windows\system32\locale.nls
        2017-08-10 18:42 - 2016-10-15 07:33 - 000455040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
        2017-08-10 18:42 - 2016-10-15 07:18 - 000749920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
        2017-08-10 18:42 - 2016-10-15 06:59 - 000187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
        2017-08-10 18:42 - 2016-10-15 06:57 - 000175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
        2017-08-10 18:42 - 2016-10-15 06:41 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
        2017-08-10 18:42 - 2016-10-15 06:35 - 002708992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
        2017-08-10 18:42 - 2016-10-05 12:26 - 000137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovs.dll
        2017-08-10 18:42 - 2016-10-05 12:15 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
        2017-08-10 18:42 - 2016-09-15 20:33 - 000083120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
        2017-08-10 18:42 - 2016-09-15 20:18 - 000856872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
        2017-08-10 18:42 - 2016-09-15 20:13 - 000113504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
        2017-08-10 18:42 - 2016-09-15 19:59 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovslegacy.dll
        2017-08-10 18:42 - 2016-09-15 19:56 - 000257536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DataExchange.dll
        2017-08-10 18:42 - 2016-09-15 19:55 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
        2017-08-10 18:42 - 2016-09-15 19:52 - 000445952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
        2017-08-10 18:42 - 2016-09-15 19:47 - 000134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
        2017-08-10 18:42 - 2016-09-07 08:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosTrace.dll
        2017-08-10 18:42 - 2016-09-07 08:00 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosHost.dll
        2017-08-10 18:42 - 2016-09-07 07:59 - 000409088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosResource.dll
        2017-08-10 18:42 - 2016-09-07 07:59 - 000110080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MapControls.dll
        2017-08-10 18:42 - 2016-09-07 07:59 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlStringsRes.dll
        2017-08-10 18:42 - 2016-09-07 07:58 - 000058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
        2017-08-10 18:42 - 2016-09-07 07:58 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
        2017-08-10 18:42 - 2016-09-07 07:54 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
        2017-08-10 18:42 - 2016-09-07 07:53 - 000091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
        2017-08-10 18:42 - 2016-09-07 07:52 - 000536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
        2017-08-10 18:42 - 2016-09-07 07:52 - 000289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NmaDirect.dll
        2017-08-10 18:42 - 2016-09-07 07:52 - 000243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
        2017-08-10 18:42 - 2016-09-07 07:50 - 000235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
        2017-08-10 18:42 - 2016-09-07 07:47 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
        2017-08-10 18:42 - 2016-09-07 07:46 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
        2017-08-10 18:42 - 2016-09-07 07:36 - 002423296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
        2017-08-10 18:42 - 2016-08-27 07:58 - 000121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
        2017-08-10 18:42 - 2016-08-27 07:43 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
        2017-08-10 18:42 - 2016-08-20 08:14 - 000225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
        2017-08-10 18:42 - 2016-08-20 08:14 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
        2017-08-10 18:42 - 2016-08-20 08:14 - 000012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
        2017-08-10 18:42 - 2016-08-06 07:03 - 000036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
        2017-08-10 18:42 - 2016-08-06 06:50 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
        2017-08-10 18:42 - 2016-08-06 06:48 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
        2017-08-10 18:42 - 2016-08-06 06:48 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
        2017-08-10 18:42 - 2016-08-06 06:48 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
        2017-08-10 18:42 - 2016-08-06 06:46 - 009260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
        2017-08-10 18:42 - 2016-08-06 06:45 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
        2017-08-10 18:42 - 2016-08-06 06:44 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
        2017-08-10 18:42 - 2016-08-06 06:28 - 000086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
        2017-08-10 18:42 - 2016-08-06 06:21 - 000102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
        2017-08-10 18:35 - 2017-08-01 21:53 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
        2017-08-10 18:35 - 2017-08-01 21:46 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
        2017-08-10 18:35 - 2017-08-01 21:33 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\windowslivelogin.dll
        2017-08-10 18:35 - 2017-08-01 21:32 - 003401216 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
        2017-08-10 18:35 - 2017-08-01 21:30 - 001643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
        2017-08-10 18:35 - 2017-08-01 21:27 - 002538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
        2017-08-10 18:35 - 2017-08-01 21:27 - 000903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
        2017-08-10 18:35 - 2017-07-12 09:17 - 000081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
        2017-08-10 18:35 - 2017-07-12 08:24 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmdisk0101.sys
        2017-08-10 18:35 - 2017-06-21 10:52 - 000088416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmbus.sys
        2017-08-10 18:35 - 2017-06-21 10:40 - 000328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
        2017-08-10 18:35 - 2017-06-21 10:00 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
        2017-08-10 18:35 - 2017-06-21 10:00 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-08-10 18:35 - 2017-06-21 10:00 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
        2017-08-10 18:35 - 2017-06-21 10:00 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
        2017-08-10 18:35 - 2017-06-21 09:59 - 000467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
        2017-08-10 18:35 - 2017-06-21 09:59 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
        2017-08-10 18:35 - 2017-06-21 09:59 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
        2017-08-10 18:35 - 2017-06-21 09:58 - 000547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
        2017-08-10 18:35 - 2017-06-21 09:56 - 001507840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
        2017-08-10 18:35 - 2017-06-21 09:55 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
        2017-08-10 18:35 - 2017-06-21 09:54 - 001159680 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
        2017-08-10 18:35 - 2017-06-21 09:51 - 000634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
        2017-08-10 18:35 - 2017-06-21 09:49 - 002104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
        2017-08-10 18:35 - 2017-06-21 09:41 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
        2017-08-10 18:35 - 2017-06-21 09:38 - 002424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
        2017-08-10 18:35 - 2017-03-04 10:07 - 000116064 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
        2017-08-10 18:35 - 2017-03-04 09:36 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
        2017-08-10 18:35 - 2017-03-04 09:33 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.UI.GameBar.dll
        2017-08-10 18:35 - 2017-03-04 09:33 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\XInputUap.dll
        2017-08-10 18:35 - 2017-03-04 09:30 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
        2017-08-10 18:35 - 2017-03-04 09:29 - 000730112 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
        2017-08-10 18:35 - 2017-03-04 09:29 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
        2017-08-10 18:35 - 2017-03-04 09:28 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
        2017-08-10 18:35 - 2017-03-04 09:27 - 000778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
        2017-08-10 18:35 - 2017-03-04 09:25 - 001060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
        2017-08-10 18:35 - 2017-03-04 09:25 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
        2017-08-10 18:35 - 2017-03-04 09:24 - 001025536 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
        2017-08-10 18:35 - 2017-03-04 09:22 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
        2017-08-10 18:35 - 2017-03-04 09:20 - 000893952 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
        2017-08-10 18:35 - 2017-03-04 09:14 - 000588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
        2017-08-10 18:35 - 2016-11-11 12:24 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
        2017-08-10 18:35 - 2016-11-11 12:05 - 004136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
        2017-08-10 18:35 - 2016-09-15 20:29 - 000074080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys
        2017-08-10 18:35 - 2016-09-15 19:46 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
        2017-08-10 18:35 - 2016-09-15 19:43 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
        2017-08-10 18:35 - 2016-09-15 19:35 - 001087488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
        2017-08-10 18:35 - 2016-08-06 06:44 - 000226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
        2017-08-10 18:35 - 2016-08-06 06:43 - 000200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
        2017-08-10 18:35 - 2016-08-05 11:29 - 000568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
        2017-08-10 18:34 - 2017-08-01 22:27 - 000118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
        2017-08-10 18:34 - 2017-08-01 22:22 - 001860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
        2017-08-10 18:34 - 2017-08-01 22:21 - 000857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
        2017-08-10 18:34 - 2017-08-01 22:18 - 008169536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
        2017-08-10 18:34 - 2017-08-01 22:17 - 022220856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
        2017-08-10 18:34 - 2017-08-01 22:13 - 002532192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
        2017-08-10 18:34 - 2017-08-01 21:58 - 000299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
        2017-08-10 18:34 - 2017-08-01 21:57 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
        2017-08-10 18:34 - 2017-08-01 21:54 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\tokenbinding.dll
        2017-08-10 18:34 - 2017-08-01 21:52 - 000237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
        2017-08-10 18:34 - 2017-08-01 21:48 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
        2017-08-10 18:34 - 2017-08-01 21:47 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
        2017-08-10 18:34 - 2017-08-01 21:47 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
        2017-08-10 18:34 - 2017-08-01 21:46 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
        2017-08-10 18:34 - 2017-08-01 21:46 - 000260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
        2017-08-10 18:34 - 2017-08-01 21:46 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
        2017-08-10 18:34 - 2017-08-01 21:46 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
        2017-08-10 18:34 - 2017-08-01 21:45 - 000561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
        2017-08-10 18:34 - 2017-08-01 21:44 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
        2017-08-10 18:34 - 2017-08-01 21:43 - 000966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
        2017-08-10 18:34 - 2017-08-01 21:43 - 000963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
        2017-08-10 18:34 - 2017-08-01 21:42 - 000775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
        2017-08-10 18:34 - 2017-08-01 21:40 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
        2017-08-10 18:34 - 2017-08-01 21:40 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
        2017-08-10 18:34 - 2017-08-01 21:39 - 009129984 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
        2017-08-10 18:34 - 2017-08-01 21:35 - 001908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
        2017-08-10 18:34 - 2017-08-01 21:32 - 004596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
        2017-08-10 18:34 - 2017-08-01 21:30 - 002916864 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
        2017-08-10 18:34 - 2017-08-01 21:30 - 000305152 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
        2017-08-10 18:34 - 2017-08-01 21:29 - 000874496 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
        2017-08-10 18:34 - 2017-08-01 21:27 - 008076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
        2017-08-10 18:34 - 2017-08-01 21:27 - 002695680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
        2017-08-10 18:34 - 2017-08-01 21:27 - 001984000 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
        2017-08-10 18:34 - 2017-08-01 21:27 - 000774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
        2017-08-10 18:34 - 2017-08-01 21:27 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
        2017-08-10 18:34 - 2017-08-01 21:26 - 001513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
        2017-08-10 18:34 - 2017-08-01 21:25 - 001726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
        2017-08-10 18:34 - 2017-08-01 21:24 - 003299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
        2017-08-10 18:34 - 2017-08-01 21:24 - 000998912 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
        2017-08-10 18:34 - 2017-08-01 21:23 - 003615744 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
        2017-08-10 18:34 - 2017-07-12 09:00 - 000223072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
        2017-08-10 18:34 - 2017-07-12 08:23 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
        2017-08-10 18:34 - 2017-07-12 08:23 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
        2017-08-10 18:34 - 2017-07-12 08:23 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
        2017-08-10 18:34 - 2017-07-12 08:17 - 000552960 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
        2017-08-10 18:34 - 2017-07-12 08:17 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
        2017-08-10 18:34 - 2017-07-12 08:12 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
        2017-08-10 18:34 - 2017-07-12 08:09 - 003291136 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
        2017-08-10 18:34 - 2017-07-12 08:08 - 002861056 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
        2017-08-10 18:34 - 2017-07-12 08:06 - 000549376 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
        2017-08-10 18:34 - 2017-07-12 08:02 - 000869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
        2017-08-10 18:34 - 2017-07-12 07:59 - 002318336 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
        2017-08-10 18:34 - 2017-07-12 07:58 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
        2017-08-10 18:34 - 2017-07-12 05:49 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml
        2017-08-10 18:34 - 2017-07-07 09:47 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
        2017-08-10 18:34 - 2017-07-07 09:46 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
        2017-08-10 18:34 - 2017-07-07 09:44 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
        2017-08-10 18:34 - 2017-07-07 09:39 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
        2017-08-10 18:34 - 2017-07-07 09:24 - 005388800 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
        2017-08-10 18:34 - 2017-06-21 10:38 - 001738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
        2017-08-10 18:34 - 2017-06-21 10:37 - 001157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
        2017-08-10 18:34 - 2017-06-21 10:33 - 000408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
        2017-08-10 18:34 - 2017-06-21 10:03 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
        2017-08-10 18:34 - 2017-06-21 10:02 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
        2017-08-10 18:34 - 2017-06-21 10:01 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
        2017-08-10 18:34 - 2017-06-21 10:01 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
        2017-08-10 18:34 - 2017-06-21 10:01 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
        2017-08-10 18:34 - 2017-06-21 10:00 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
        2017-08-10 18:34 - 2017-06-21 09:59 - 000196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
        2017-08-10 18:34 - 2017-06-21 09:59 - 000137216 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
        2017-08-10 18:34 - 2017-06-21 09:59 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
        2017-08-10 18:34 - 2017-06-21 09:59 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
        2017-08-10 18:34 - 2017-06-21 09:58 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
        2017-08-10 18:34 - 2017-06-21 09:57 - 000418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
        2017-08-10 18:34 - 2017-06-21 09:57 - 000360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
        2017-08-10 18:34 - 2017-06-21 09:57 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
        2017-08-10 18:34 - 2017-06-21 09:56 - 000267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
        2017-08-10 18:34 - 2017-06-21 09:56 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
        2017-08-10 18:34 - 2017-06-21 09:55 - 000310784 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
        2017-08-10 18:34 - 2017-06-21 09:54 - 000574976 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
        2017-08-10 18:34 - 2017-06-21 09:54 - 000245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
        2017-08-10 18:34 - 2017-06-21 09:53 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
        2017-08-10 18:34 - 2017-06-21 09:49 - 001913856 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
        2017-08-10 18:34 - 2017-06-21 09:49 - 001584128 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
        2017-08-10 18:34 - 2017-06-21 09:41 - 001359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
        2017-08-10 18:34 - 2017-06-21 09:39 - 000971264 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
        2017-08-10 18:34 - 2017-06-21 09:39 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
        2017-08-10 18:34 - 2017-06-21 09:39 - 000673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
        2017-08-10 18:34 - 2017-06-21 09:36 - 001424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
        2017-08-10 18:34 - 2017-06-21 09:35 - 001369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
        2017-08-10 18:34 - 2017-06-21 09:34 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
        2017-08-10 18:34 - 2017-06-21 09:33 - 000439296 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
        2017-08-10 18:34 - 2017-06-21 09:33 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
        2017-08-10 18:34 - 2017-06-03 13:11 - 000128864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
        2017-08-10 18:34 - 2017-06-03 12:49 - 000509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
        2017-08-10 18:34 - 2017-06-03 12:16 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
        2017-08-10 18:34 - 2017-06-03 12:10 - 000117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBrokerUI.dll
        2017-08-10 18:34 - 2017-04-28 03:56 - 001117024 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
        2017-08-10 18:34 - 2017-04-28 03:47 - 000699744 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
        2017-08-10 18:34 - 2017-04-28 03:46 - 000410464 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
        2017-08-10 18:34 - 2017-04-28 03:42 - 000526176 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
        2017-08-10 18:34 - 2017-04-28 03:40 - 000578400 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
        2017-08-10 18:34 - 2017-04-28 03:30 - 000322912 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
        2017-08-10 18:34 - 2017-04-28 03:03 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
        2017-08-10 18:34 - 2017-04-28 03:02 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
        2017-08-10 18:34 - 2017-04-28 03:01 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\virtdisk.dll
        2017-08-10 18:34 - 2017-04-28 02:51 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
        2017-08-10 18:34 - 2017-04-28 02:51 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
        2017-08-10 18:34 - 2017-04-28 02:47 - 000649216 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
        2017-08-10 18:34 - 2017-04-28 02:46 - 001443328 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
        2017-08-10 18:34 - 2017-04-28 02:45 - 000946688 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
        2017-08-10 18:34 - 2017-04-28 02:43 - 001184256 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
        2017-08-10 18:34 - 2017-04-28 02:43 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
        2017-08-10 18:34 - 2017-04-28 02:43 - 000320512 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
        2017-08-10 18:34 - 2017-04-28 02:42 - 002390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
        2017-08-10 18:34 - 2017-04-28 02:38 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
        2017-08-10 18:34 - 2017-04-28 02:37 - 003134976 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
        2017-08-10 18:34 - 2017-04-28 02:37 - 001266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
        2017-08-10 18:34 - 2017-04-28 02:34 - 000394240 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
        2017-08-10 18:34 - 2017-04-28 02:33 - 001817088 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
        2017-08-10 18:34 - 2017-03-28 09:32 - 000198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
        2017-08-10 18:34 - 2017-03-28 08:37 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManagerProxy.dll
        2017-08-10 18:34 - 2017-03-28 08:34 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthTokenBrokerExt.dll
        2017-08-10 18:34 - 2017-03-28 08:16 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
        2017-08-10 18:34 - 2017-03-28 08:09 - 001064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
        2017-08-10 18:34 - 2017-03-04 10:24 - 002186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
        2017-08-10 18:34 - 2017-03-04 10:24 - 000354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
        2017-08-10 18:34 - 2017-03-04 10:23 - 002512304 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
        2017-08-10 18:34 - 2017-03-04 10:19 - 002049480 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
        2017-08-10 18:34 - 2017-03-04 10:18 - 000219040 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
        2017-08-10 18:34 - 2017-03-04 10:17 - 000409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
        2017-08-10 18:34 - 2017-03-04 10:09 - 001293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
        2017-08-10 18:34 - 2017-03-04 10:09 - 000681312 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
        2017-08-10 18:34 - 2017-03-04 10:09 - 000527808 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
        2017-08-10 18:34 - 2017-03-04 10:08 - 000450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
        2017-08-10 18:34 - 2017-03-04 10:08 - 000342456 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
        2017-08-10 18:34 - 2017-03-04 10:08 - 000130912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
        2017-08-10 18:34 - 2017-03-04 10:03 - 001694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
        2017-08-10 18:34 - 2017-03-04 10:01 - 000201568 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
        2017-08-10 18:34 - 2017-03-04 10:01 - 000137936 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
        2017-08-10 18:34 - 2017-03-04 09:58 - 001416224 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
        2017-08-10 18:34 - 2017-03-04 09:37 - 000025088 _____ C:\Windows\system32\GamePanelExternalHook.dll
        2017-08-10 18:34 - 2017-03-04 09:36 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
        2017-08-10 18:34 - 2017-03-04 09:36 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\DuCsps.dll
        2017-08-10 18:34 - 2017-03-04 09:36 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
        2017-08-10 18:34 - 2017-03-04 09:36 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
        2017-08-10 18:34 - 2017-03-04 09:34 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
        2017-08-10 18:34 - 2017-03-04 09:33 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
        2017-08-10 18:34 - 2017-03-04 09:33 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
        2017-08-10 18:34 - 2017-03-04 09:32 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
        2017-08-10 18:34 - 2017-03-04 09:32 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
        2017-08-10 18:34 - 2017-03-04 09:32 - 000133632 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
        2017-08-10 18:34 - 2017-03-04 09:31 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
        2017-08-10 18:34 - 2017-03-04 09:30 - 000300544 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
        2017-08-10 18:34 - 2017-03-04 09:30 - 000205824 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
        2017-08-10 18:34 - 2017-03-04 09:30 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
        2017-08-10 18:34 - 2017-03-04 09:30 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
        2017-08-10 18:34 - 2017-03-04 09:29 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
        2017-08-10 18:34 - 2017-03-04 09:29 - 000235008 _____ (Microsoft Corporation) C:\Windows\system32\tapi32.dll
        2017-08-10 18:34 - 2017-03-04 09:29 - 000203264 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
        2017-08-10 18:34 - 2017-03-04 09:27 - 006574592 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
        2017-08-10 18:34 - 2017-03-04 09:26 - 000468992 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
        2017-08-10 18:34 - 2017-03-04 09:26 - 000464896 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
        2017-08-10 18:34 - 2017-03-04 09:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
        2017-08-10 18:34 - 2017-03-04 09:26 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
        2017-08-10 18:34 - 2017-03-04 09:25 - 001388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
        2017-08-10 18:34 - 2017-03-04 09:25 - 001016320 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
        2017-08-10 18:34 - 2017-03-04 09:25 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
        2017-08-10 18:34 - 2017-03-04 09:25 - 000526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
        2017-08-10 18:34 - 2017-03-04 09:25 - 000320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-08-10 18:34 - 2017-03-04 09:24 - 001293312 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
        2017-08-10 18:34 - 2017-03-04 09:24 - 000655872 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
        2017-08-10 18:34 - 2017-03-04 09:23 - 001145856 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
        2017-08-10 18:34 - 2017-03-04 09:23 - 000715776 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
        2017-08-10 18:34 - 2017-03-04 09:23 - 000541696 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
        2017-08-10 18:34 - 2017-03-04 09:21 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
        2017-08-10 18:34 - 2017-03-04 09:20 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
        2017-08-10 18:34 - 2017-03-04 09:19 - 000166912 _____ (Microsoft Corporation) C:\Windows\system32\Tabbtn.dll
        2017-08-10 18:34 - 2017-03-04 09:19 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
        2017-08-10 18:34 - 2017-03-04 09:17 - 001082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
        2017-08-10 18:34 - 2017-03-04 09:14 - 001562112 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
        2017-08-10 18:34 - 2017-03-04 09:13 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
        2017-08-10 18:34 - 2017-03-04 09:11 - 001656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
        2017-08-10 18:34 - 2017-03-04 09:11 - 001312768 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
        2017-08-10 18:34 - 2017-03-04 09:11 - 000818176 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
        2017-08-10 18:34 - 2017-03-04 09:10 - 001555456 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
        2017-08-10 18:34 - 2017-03-04 09:10 - 001536000 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
        2017-08-10 18:34 - 2017-03-04 09:10 - 001399296 _____ (Microsoft Corporation) C:\Windows\system32\Pimstore.dll
        2017-08-10 18:34 - 2017-03-04 09:10 - 001282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
        2017-08-10 18:34 - 2017-03-04 09:09 - 000771072 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
        2017-08-10 18:34 - 2017-03-04 09:09 - 000653824 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
        2017-08-10 18:34 - 2017-03-04 09:08 - 000540160 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
        2017-08-10 18:34 - 2017-03-04 09:07 - 002512384 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
        2017-08-10 18:34 - 2017-03-04 09:07 - 001512448 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
        2017-08-10 18:34 - 2017-03-04 09:07 - 001348608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
        2017-08-10 18:34 - 2017-03-04 09:07 - 000909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
        2017-08-10 18:34 - 2017-03-04 09:07 - 000389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
        2017-08-10 18:34 - 2017-03-04 09:06 - 004060672 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
        2017-08-10 18:34 - 2017-03-04 09:06 - 001013760 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
        2017-08-10 18:34 - 2017-03-04 09:06 - 000483328 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
        2017-08-10 18:34 - 2017-03-04 09:05 - 001328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
        2017-08-10 18:34 - 2017-03-04 09:04 - 000531456 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
        2017-08-10 18:34 - 2017-03-04 09:04 - 000340992 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
        2017-08-10 18:34 - 2016-12-21 10:09 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
        2017-08-10 18:34 - 2016-12-14 08:17 - 000319288 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
        2017-08-10 18:34 - 2016-12-14 07:46 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
        2017-08-10 18:34 - 2016-12-14 07:39 - 000837632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
        2017-08-10 18:34 - 2016-12-14 07:36 - 001002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
        2017-08-10 18:34 - 2016-12-14 07:25 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
        2017-08-10 18:34 - 2016-12-09 13:10 - 001461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
        2017-08-10 18:34 - 2016-11-11 13:15 - 000101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
        2017-08-10 18:34 - 2016-11-11 12:55 - 000882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
        2017-08-10 18:34 - 2016-11-11 12:26 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
        2017-08-10 18:34 - 2016-11-11 12:26 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
        2017-08-10 18:34 - 2016-11-11 12:24 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
        2017-08-10 18:34 - 2016-11-11 12:19 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
        2017-08-10 18:34 - 2016-11-11 12:16 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
        2017-08-10 18:34 - 2016-11-11 12:16 - 000161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
        2017-08-10 18:34 - 2016-11-11 12:15 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
        2017-08-10 18:34 - 2016-11-11 12:13 - 000396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
        2017-08-10 18:34 - 2016-11-11 12:11 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
        2017-08-10 18:34 - 2016-11-11 12:04 - 001709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
        2017-08-10 18:34 - 2016-11-11 12:04 - 000691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
        2017-08-10 18:34 - 2016-11-11 12:03 - 000283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
        2017-08-10 18:34 - 2016-11-02 14:13 - 000423776 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
        2017-08-10 18:34 - 2016-11-02 13:27 - 000545792 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
        2017-08-10 18:34 - 2016-11-02 13:26 - 000273920 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
        2017-08-10 18:34 - 2016-11-02 13:18 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
        2017-08-10 18:34 - 2016-11-02 13:13 - 003496960 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
        2017-08-10 18:34 - 2016-10-15 07:41 - 005622088 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
        2017-08-10 18:34 - 2016-10-15 07:26 - 000691080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
        2017-08-10 18:34 - 2016-10-15 07:21 - 000584032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
        2017-08-10 18:34 - 2016-10-15 07:00 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
        2017-08-10 18:34 - 2016-10-15 06:54 - 000717312 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
        2017-08-10 18:34 - 2016-10-15 06:54 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
        2017-08-10 18:34 - 2016-10-15 06:50 - 000438784 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
        2017-08-10 18:34 - 2016-10-05 12:31 - 000480768 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
        2017-08-10 18:34 - 2016-10-05 12:20 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
        2017-08-10 18:34 - 2016-09-15 20:29 - 000424640 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
        2017-08-10 18:34 - 2016-09-15 19:42 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
        2017-08-10 18:34 - 2016-09-15 19:37 - 000680448 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
        2017-08-10 18:34 - 2016-09-15 19:37 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
        2017-08-10 18:34 - 2016-09-15 19:36 - 000686592 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
        2017-08-10 18:34 - 2016-09-15 19:35 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
        2017-08-10 18:34 - 2016-09-15 19:34 - 000560640 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
        2017-08-10 18:34 - 2016-09-15 19:27 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
        2017-08-10 18:34 - 2016-09-15 19:16 - 000387072 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
        2017-08-10 18:34 - 2016-09-15 19:16 - 000221696 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
        2017-08-10 18:34 - 2016-09-07 08:03 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
        2017-08-10 18:34 - 2016-09-07 08:02 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
        2017-08-10 18:34 - 2016-09-07 08:02 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
        2017-08-10 18:34 - 2016-09-07 08:02 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
        2017-08-10 18:34 - 2016-09-07 08:02 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
        2017-08-10 18:34 - 2016-09-07 08:02 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
        2017-08-10 18:34 - 2016-09-07 08:01 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
        2017-08-10 18:34 - 2016-09-07 08:01 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
        2017-08-10 18:34 - 2016-09-07 08:01 - 000065024 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
        2017-08-10 18:34 - 2016-09-07 07:59 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
        2017-08-10 18:34 - 2016-09-07 07:59 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
        2017-08-10 18:34 - 2016-09-07 07:56 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
        2017-08-10 18:34 - 2016-09-07 07:55 - 000781824 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
        2017-08-10 18:34 - 2016-09-07 07:54 - 000678912 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
        2017-08-10 18:34 - 2016-09-07 07:45 - 000248320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
        2017-08-10 18:34 - 2016-09-07 07:35 - 000650240 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
        2017-08-10 18:34 - 2016-08-20 08:20 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
        2017-08-10 18:34 - 2016-08-20 08:08 - 000204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
        2017-08-10 18:34 - 2016-08-20 08:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
        2017-08-10 18:34 - 2016-08-20 08:04 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
        2017-08-10 18:34 - 2016-08-06 07:31 - 000041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
        2017-08-10 18:34 - 2016-08-06 07:16 - 000026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
        2017-08-10 18:34 - 2016-08-06 06:48 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
        2017-08-10 18:34 - 2016-08-06 06:48 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
        2017-08-10 18:34 - 2016-08-06 06:46 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
        2017-08-10 18:34 - 2016-08-06 06:45 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
        2017-08-10 18:34 - 2016-08-06 06:41 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
        2017-08-10 18:34 - 2016-08-06 06:40 - 000234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
        2017-08-10 18:34 - 2016-08-06 06:40 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
        2017-08-10 18:34 - 2016-08-06 06:35 - 000471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
        2017-08-10 18:34 - 2016-08-06 06:34 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
        2017-08-10 18:34 - 2016-08-06 06:23 - 000520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
        2017-08-10 18:34 - 2016-08-02 11:44 - 000114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
        2017-08-10 18:34 - 2016-07-16 05:29 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\CspCellularSettings.dll
        2017-08-10 18:34 - 2016-07-16 05:28 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAPNCsp.dll
        2017-08-10 18:34 - 2016-07-16 05:26 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\CfgSPCellular.dll
        2017-08-10 18:33 - 2017-08-01 22:32 - 000133984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
        2017-08-10 18:33 - 2017-08-01 22:31 - 007780192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
        2017-08-10 18:33 - 2017-08-01 22:25 - 000168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
        2017-08-10 18:33 - 2017-08-01 22:22 - 000360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
        2017-08-10 18:33 - 2017-08-01 22:21 - 002759712 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
        2017-08-10 18:33 - 2017-08-01 22:21 - 000624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
        2017-08-10 18:33 - 2017-08-01 22:20 - 002446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
        2017-08-10 18:33 - 2017-08-01 22:18 - 004260064 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
        2017-08-10 18:33 - 2017-08-01 22:18 - 001983408 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
        2017-08-10 18:33 - 2017-08-01 22:18 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
        2017-08-10 18:33 - 2017-08-01 22:18 - 000092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
        2017-08-10 18:33 - 2017-08-01 22:17 - 001600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
        2017-08-10 18:33 - 2017-08-01 22:17 - 001072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
        2017-08-10 18:33 - 2017-08-01 22:17 - 000244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
        2017-08-10 18:33 - 2017-08-01 22:13 - 000387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
        2017-08-10 18:33 - 2017-08-01 21:57 - 000372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
        2017-08-10 18:33 - 2017-08-01 21:52 - 022569472 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
        2017-08-10 18:33 - 2017-08-01 21:51 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-08-10 18:33 - 2017-08-01 21:48 - 000289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
        2017-08-10 18:33 - 2017-08-01 21:48 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
        2017-08-10 18:33 - 2017-08-01 21:47 - 000691200 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
        2017-08-10 18:33 - 2017-08-01 21:47 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
        2017-08-10 18:33 - 2017-08-01 21:46 - 000590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
        2017-08-10 18:33 - 2017-08-01 21:45 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
        2017-08-10 18:33 - 2017-08-01 21:45 - 000472064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
        2017-08-10 18:33 - 2017-08-01 21:45 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
        2017-08-10 18:33 - 2017-08-01 21:45 - 000425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
        2017-08-10 18:33 - 2017-08-01 21:42 - 006288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
        2017-08-10 18:33 - 2017-08-01 21:40 - 000945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
        2017-08-10 18:33 - 2017-08-01 21:39 - 000323072 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
        2017-08-10 18:33 - 2017-08-01 21:38 - 013441536 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
        2017-08-10 18:33 - 2017-08-01 21:37 - 013091328 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
        2017-08-10 18:33 - 2017-08-01 21:33 - 004749824 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
        2017-08-10 18:33 - 2017-08-01 21:32 - 008114688 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
        2017-08-10 18:33 - 2017-08-01 21:30 - 000913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
        2017-08-10 18:33 - 2017-08-01 21:29 - 004743680 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
        2017-08-10 18:33 - 2017-08-01 21:29 - 002852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
        2017-08-10 18:33 - 2017-08-01 21:28 - 001490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
        2017-08-10 18:33 - 2017-08-01 21:27 - 004149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
        2017-08-10 18:33 - 2017-08-01 21:26 - 001949696 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
        2017-08-10 18:33 - 2017-08-01 21:26 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
        2017-08-10 18:33 - 2017-08-01 21:24 - 001121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
        2017-08-10 18:33 - 2017-08-01 21:24 - 000924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
        2017-08-10 18:33 - 2017-07-12 09:15 - 002213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
        2017-08-10 18:33 - 2017-07-12 09:14 - 001886896 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
        2017-08-10 18:33 - 2017-07-12 09:13 - 002253664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
        2017-08-10 18:33 - 2017-07-12 09:09 - 001181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
        2017-08-10 18:33 - 2017-07-12 09:02 - 002186592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
        2017-08-10 18:33 - 2017-07-12 09:02 - 000402776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
        2017-08-10 18:33 - 2017-07-12 09:01 - 000156000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
        2017-08-10 18:33 - 2017-07-12 09:00 - 000160608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
        2017-08-10 18:33 - 2017-07-12 08:59 - 000857952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
        2017-08-10 18:33 - 2017-07-12 08:59 - 000148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
        2017-08-10 18:33 - 2017-07-12 08:24 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll
        2017-08-10 18:33 - 2017-07-12 08:21 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
        2017-08-10 18:33 - 2017-07-12 08:19 - 000488960 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
        2017-08-10 18:33 - 2017-07-12 08:16 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\profsvcext.dll
        2017-08-10 18:33 - 2017-07-12 08:13 - 001478656 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
        2017-08-10 18:33 - 2017-07-12 08:06 - 000937984 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
        2017-08-10 18:33 - 2017-07-12 08:03 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
        2017-08-10 18:33 - 2017-07-12 08:03 - 000779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
        2017-08-10 18:33 - 2017-07-12 08:01 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
        2017-08-10 18:33 - 2017-07-12 08:00 - 002370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
        2017-08-10 18:33 - 2017-07-12 07:59 - 006664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
        2017-08-10 18:33 - 2017-07-12 07:59 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
        2017-08-10 18:33 - 2017-07-12 07:58 - 001130496 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
        2017-08-10 18:33 - 2017-07-12 07:57 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
        2017-08-10 18:33 - 2017-07-12 07:56 - 001826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
        2017-08-10 18:33 - 2017-07-07 10:44 - 000108896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
        2017-08-10 18:33 - 2017-07-07 10:37 - 000468320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
        2017-08-10 18:33 - 2017-07-07 10:32 - 000404824 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
        2017-08-10 18:33 - 2017-07-07 09:49 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
        2017-08-10 18:33 - 2017-07-07 09:48 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
        2017-08-10 18:33 - 2017-07-07 09:48 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll
        2017-08-10 18:33 - 2017-07-07 09:46 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
        2017-08-10 18:33 - 2017-07-07 09:45 - 000276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
        2017-08-10 18:33 - 2017-07-07 09:44 - 000502784 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
        2017-08-10 18:33 - 2017-07-07 09:44 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
        2017-08-10 18:33 - 2017-07-07 09:44 - 000139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
        2017-08-10 18:33 - 2017-07-07 09:44 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
        2017-08-10 18:33 - 2017-07-07 09:43 - 000387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
        2017-08-10 18:33 - 2017-07-07 09:43 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
        2017-08-10 18:33 - 2017-07-07 09:42 - 000352256 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
        2017-08-10 18:33 - 2017-07-07 09:36 - 000369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
        2017-08-10 18:33 - 2017-07-07 09:35 - 001397760 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
        2017-08-10 18:33 - 2017-07-07 09:33 - 000576000 _____ (Microsoft® Windows® Operating System) C:\Windows\system32\wvc.dll
        2017-08-10 18:33 - 2017-07-07 09:29 - 000932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
        2017-08-10 18:33 - 2017-07-07 09:28 - 000759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
        2017-08-10 18:33 - 2017-07-07 09:28 - 000589312 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
        2017-08-10 18:33 - 2017-06-21 10:53 - 000794928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
        2017-08-10 18:33 - 2017-06-21 10:52 - 000774224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
        2017-08-10 18:33 - 2017-06-21 10:50 - 000126304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
        2017-08-10 18:33 - 2017-06-21 10:38 - 007220192 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
        2017-08-10 18:33 - 2017-06-21 10:02 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
        2017-08-10 18:33 - 2017-06-21 10:01 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
        2017-08-10 18:33 - 2017-06-21 10:00 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
        2017-08-10 18:33 - 2017-06-21 10:00 - 000233984 _____ (Microsoft Corporation) C:\Windows\system32\ProvisioningHandlers.dll
        2017-08-10 18:33 - 2017-06-21 10:00 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
        2017-08-10 18:33 - 2017-06-21 10:00 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
        2017-08-10 18:33 - 2017-06-21 09:59 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll
        2017-08-10 18:33 - 2017-06-21 09:58 - 000418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
        2017-08-10 18:33 - 2017-06-21 09:56 - 000852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
        2017-08-10 18:33 - 2017-06-21 09:56 - 000719872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
        2017-08-10 18:33 - 2017-06-21 09:55 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
        2017-08-10 18:33 - 2017-06-21 09:54 - 000671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
        2017-08-10 18:33 - 2017-06-21 09:54 - 000472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
        2017-08-10 18:33 - 2017-06-21 09:54 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
        2017-08-10 18:33 - 2017-06-21 09:53 - 000284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
        2017-08-10 18:33 - 2017-06-21 09:52 - 000352256 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
        2017-08-10 18:33 - 2017-06-21 09:52 - 000331264 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
        2017-08-10 18:33 - 2017-06-21 09:49 - 003778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
        2017-08-10 18:33 - 2017-06-21 09:49 - 001403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
        2017-08-10 18:33 - 2017-06-21 09:49 - 000458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
        2017-08-10 18:33 - 2017-06-21 09:49 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
        2017-08-10 18:33 - 2017-06-21 09:47 - 007655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
        2017-08-10 18:33 - 2017-06-21 09:47 - 001105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
        2017-08-10 18:33 - 2017-06-21 09:47 - 000442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
        2017-08-10 18:33 - 2017-06-21 09:46 - 000627200 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
        2017-08-10 18:33 - 2017-06-21 09:43 - 001217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
        2017-08-10 18:33 - 2017-06-21 09:43 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
        2017-08-10 18:33 - 2017-06-21 09:42 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
        2017-08-10 18:33 - 2017-06-21 09:42 - 000539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
        2017-08-10 18:33 - 2017-06-21 09:42 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
        2017-08-10 18:33 - 2017-06-21 09:41 - 000983040 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
        2017-08-10 18:33 - 2017-06-21 09:40 - 001891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
        2017-08-10 18:33 - 2017-06-21 09:40 - 000611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
        2017-08-10 18:33 - 2017-06-21 09:39 - 002208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
        2017-08-10 18:33 - 2017-06-21 09:38 - 000846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
        2017-08-10 18:33 - 2017-06-21 09:36 - 000881152 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
        2017-08-10 18:33 - 2017-06-21 09:34 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
        2017-08-10 18:33 - 2017-06-03 13:14 - 000136024 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
        2017-08-10 18:33 - 2017-06-03 12:11 - 000353792 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
        2017-08-10 18:33 - 2017-06-03 12:09 - 000441344 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
        2017-08-10 18:33 - 2017-06-03 12:09 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
        2017-08-10 18:33 - 2017-06-03 11:52 - 002510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
        2017-08-10 18:33 - 2017-06-03 11:48 - 000834048 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
        2017-08-10 18:33 - 2017-05-25 08:56 - 000038752 _____ (Microsoft Corporation) C:\Windows\system32\OOBEUpdater.exe
        2017-08-10 18:33 - 2017-04-28 03:49 - 000700936 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
        2017-08-10 18:33 - 2017-04-28 03:47 - 000501088 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
        2017-08-10 18:33 - 2017-04-28 03:38 - 000431968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
        2017-08-10 18:33 - 2017-04-28 03:35 - 001302136 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
        2017-08-10 18:33 - 2017-04-28 03:35 - 000596040 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
        2017-08-10 18:33 - 2017-04-28 03:34 - 000443232 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
        2017-08-10 18:33 - 2017-04-28 03:28 - 000453536 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
        2017-08-10 18:33 - 2017-04-28 03:03 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
        2017-08-10 18:33 - 2017-04-28 03:03 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys
        2017-08-10 18:33 - 2017-04-28 03:01 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
        2017-08-10 18:33 - 2017-04-28 03:00 - 000165376 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
        2017-08-10 18:33 - 2017-04-28 02:59 - 000375296 _____ (Microsoft Corporation) C:\Windows\system32\rastlsext.dll
        2017-08-10 18:33 - 2017-04-28 02:57 - 000132096 _____ (Microsoft Corporation) C:\Windows\system32\PrintWSDAHost.dll
        2017-08-10 18:33 - 2017-04-28 02:56 - 000947712 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
        2017-08-10 18:33 - 2017-04-28 02:55 - 000657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
        2017-08-10 18:33 - 2017-04-28 02:53 - 003059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
        2017-08-10 18:33 - 2017-04-28 02:53 - 000579584 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
        2017-08-10 18:33 - 2017-04-28 02:50 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
        2017-08-10 18:33 - 2017-04-28 02:50 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
        2017-08-10 18:33 - 2017-04-28 02:48 - 000798720 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
        2017-08-10 18:33 - 2017-04-28 02:47 - 000796672 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
        2017-08-10 18:33 - 2017-04-28 02:46 - 000501248 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
        2017-08-10 18:33 - 2017-04-28 02:45 - 000411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
        2017-08-10 18:33 - 2017-04-28 02:45 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
        2017-08-10 18:33 - 2017-04-28 02:44 - 001366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
        2017-08-10 18:33 - 2017-04-28 02:43 - 000526336 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
        2017-08-10 18:33 - 2017-04-28 02:41 - 000860160 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
        2017-08-10 18:33 - 2017-04-28 02:41 - 000650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
        2017-08-10 18:33 - 2017-04-28 02:40 - 001040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
        2017-08-10 18:33 - 2017-04-28 02:37 - 001637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
        2017-08-10 18:33 - 2017-03-28 09:26 - 000218520 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
        2017-08-10 18:33 - 2017-03-28 09:09 - 000097128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
        2017-08-10 18:33 - 2017-03-28 09:05 - 001848584 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
        2017-08-10 18:33 - 2017-03-28 08:29 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
        2017-08-10 18:33 - 2017-03-28 08:27 - 000645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
        2017-08-10 18:33 - 2017-03-28 08:27 - 000441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
        2017-08-10 18:33 - 2017-03-28 08:24 - 001220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
        2017-08-10 18:33 - 2017-03-28 08:20 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
        2017-08-10 18:33 - 2017-03-28 08:14 - 000947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
        2017-08-10 18:33 - 2017-03-28 08:14 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
        2017-08-10 18:33 - 2017-03-28 08:04 - 000119808 ____R (Microsoft Corporation) C:\Windows\system32\SecureAssessmentHandlers.dll
        2017-08-10 18:33 - 2017-03-04 10:24 - 002482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
        2017-08-10 18:33 - 2017-03-04 10:20 - 000128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
        2017-08-10 18:33 - 2017-03-04 10:15 - 001000280 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
        2017-08-10 18:33 - 2017-03-04 10:09 - 000658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
        2017-08-10 18:33 - 2017-03-04 10:09 - 000396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
        2017-08-10 18:33 - 2017-03-04 10:04 - 001063472 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 001723560 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
        2017-08-10 18:33 - 2017-03-04 10:03 - 001473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 001454512 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 001062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 000811416 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 000424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
        2017-08-10 18:33 - 2017-03-04 10:03 - 000382272 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
        2017-08-10 18:33 - 2017-03-04 09:36 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
        2017-08-10 18:33 - 2017-03-04 09:34 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
        2017-08-10 18:33 - 2017-03-04 09:33 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothDesktopHandlers.dll
        2017-08-10 18:33 - 2017-03-04 09:32 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\MCCSEngineShared.dll
        2017-08-10 18:33 - 2017-03-04 09:31 - 000322048 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
        2017-08-10 18:33 - 2017-03-04 09:31 - 000280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
        2017-08-10 18:33 - 2017-03-04 09:31 - 000247808 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
        2017-08-10 18:33 - 2017-03-04 09:30 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
        2017-08-10 18:33 - 2017-03-04 09:30 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
        2017-08-10 18:33 - 2017-03-04 09:30 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
        2017-08-10 18:33 - 2017-03-04 09:30 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
        2017-08-10 18:33 - 2017-03-04 09:29 - 001291264 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
        2017-08-10 18:33 - 2017-03-04 09:29 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
        2017-08-10 18:33 - 2017-03-04 09:29 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
        2017-08-10 18:33 - 2017-03-04 09:28 - 000741888 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
        2017-08-10 18:33 - 2017-03-04 09:28 - 000587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
        2017-08-10 18:33 - 2017-03-04 09:28 - 000556544 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
        2017-08-10 18:33 - 2017-03-04 09:28 - 000462848 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
        2017-08-10 18:33 - 2017-03-04 09:28 - 000394752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
        2017-08-10 18:33 - 2017-03-04 09:28 - 000264192 _____ (Microsoft Corporation) C:\Windows\system32\ppcsnap.dll
        2017-08-10 18:33 - 2017-03-04 09:27 - 000446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
        2017-08-10 18:33 - 2017-03-04 09:27 - 000391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
        2017-08-10 18:33 - 2017-03-04 09:27 - 000200192 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
        2017-08-10 18:33 - 2017-03-04 09:26 - 000643072 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
        2017-08-10 18:33 - 2017-03-04 09:26 - 000631296 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
        2017-08-10 18:33 - 2017-03-04 09:26 - 000383488 _____ (Microsoft Corporation) C:\Windows\system32\DavSyncProvider.dll
        2017-08-10 18:33 - 2017-03-04 09:26 - 000366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
        2017-08-10 18:33 - 2017-03-04 09:26 - 000307200 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
        2017-08-10 18:33 - 2017-03-04 09:26 - 000261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
        2017-08-10 18:33 - 2017-03-04 09:24 - 001092096 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationFrame.dll
        2017-08-10 18:33 - 2017-03-04 09:24 - 000495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
        2017-08-10 18:33 - 2017-03-04 09:23 - 000945152 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
        2017-08-10 18:33 - 2017-03-04 09:23 - 000820224 _____ (Microsoft Corporation) C:\Windows\system32\PrintRenderAPIHost.DLL
        2017-08-10 18:33 - 2017-03-04 09:23 - 000583680 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
        2017-08-10 18:33 - 2017-03-04 09:23 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
        2017-08-10 18:33 - 2017-03-04 09:21 - 001937920 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
        2017-08-10 18:33 - 2017-03-04 09:21 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Search.dll
        2017-08-10 18:33 - 2017-03-04 09:21 - 000347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
        2017-08-10 18:33 - 2017-03-04 09:19 - 000552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
        2017-08-10 18:33 - 2017-03-04 09:18 - 001762816 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
        2017-08-10 18:33 - 2017-03-04 09:18 - 001189376 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
        2017-08-10 18:33 - 2017-03-04 09:18 - 000320512 _____ (Microsoft Corporation) C:\Windows\regedit.exe
        2017-08-10 18:33 - 2017-03-04 09:18 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
        2017-08-10 18:33 - 2017-03-04 09:17 - 007812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
        2017-08-10 18:33 - 2017-03-04 09:17 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
        2017-08-10 18:33 - 2017-03-04 09:16 - 000870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
        2017-08-10 18:33 - 2017-03-04 09:16 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
        2017-08-10 18:33 - 2017-03-04 09:15 - 001078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
        2017-08-10 18:33 - 2017-03-04 09:14 - 000279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
        2017-08-10 18:33 - 2017-03-04 09:13 - 000982528 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
        2017-08-10 18:33 - 2017-03-04 09:13 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
        2017-08-10 18:33 - 2017-03-04 09:12 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
        2017-08-10 18:33 - 2017-03-04 09:11 - 003441664 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
        2017-08-10 18:33 - 2017-03-04 09:11 - 002953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
        2017-08-10 18:33 - 2017-03-04 09:11 - 000572416 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
        2017-08-10 18:33 - 2017-03-04 09:10 - 001917440 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
        2017-08-10 18:33 - 2017-03-04 09:10 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
        2017-08-10 18:33 - 2017-03-04 09:10 - 000960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
        2017-08-10 18:33 - 2017-03-04 09:10 - 000806400 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
        2017-08-10 18:33 - 2017-03-04 09:10 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
        2017-08-10 18:33 - 2017-03-04 09:08 - 002800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
        2017-08-10 18:33 - 2017-03-04 09:08 - 000792576 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
        2017-08-10 18:33 - 2017-03-04 09:07 - 001792512 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
        2017-08-10 18:33 - 2017-03-04 09:06 - 003202048 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
        2017-08-10 18:33 - 2017-03-04 09:06 - 002820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
        2017-08-10 18:33 - 2017-03-04 09:06 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
        2017-08-10 18:33 - 2017-03-04 09:04 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
        2017-08-10 18:33 - 2017-03-04 09:02 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.SecureAssessment.dll
        2017-08-10 18:33 - 2016-12-21 10:13 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
        2017-08-10 18:33 - 2016-12-21 10:12 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
        2017-08-10 18:33 - 2016-12-21 10:10 - 000234496 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
        2017-08-10 18:33 - 2016-12-21 10:09 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
        2017-08-10 18:33 - 2016-12-21 10:08 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
        2017-08-10 18:33 - 2016-12-14 07:42 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
        2017-08-10 18:33 - 2016-12-09 13:27 - 000172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
        2017-08-10 18:33 - 2016-12-09 12:45 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
        2017-08-10 18:33 - 2016-12-09 12:42 - 000227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
        2017-08-10 18:33 - 2016-12-09 12:20 - 000730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
        2017-08-10 18:33 - 2016-12-09 12:20 - 000187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
        2017-08-10 18:33 - 2016-12-09 12:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
        2017-08-10 18:33 - 2016-12-09 12:19 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
        2017-08-10 18:33 - 2016-12-09 12:19 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
        2017-08-10 18:33 - 2016-11-11 13:08 - 000142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
        2017-08-10 18:33 - 2016-11-11 12:56 - 000163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
        2017-08-10 18:33 - 2016-11-11 12:56 - 000126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
        2017-08-10 18:33 - 2016-11-11 12:55 - 000743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
        2017-08-10 18:33 - 2016-11-11 12:27 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
        2017-08-10 18:33 - 2016-11-11 12:27 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
        2017-08-10 18:33 - 2016-11-11 12:25 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
        2017-08-10 18:33 - 2016-11-11 12:25 - 000089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
        2017-08-10 18:33 - 2016-11-11 12:24 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-08-10 18:33 - 2016-11-11 12:23 - 000409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
        2017-08-10 18:33 - 2016-11-11 12:21 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
        2017-08-10 18:33 - 2016-11-11 12:20 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
        2017-08-10 18:33 - 2016-11-11 12:20 - 000574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
        2017-08-10 18:33 - 2016-11-11 12:20 - 000381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
        2017-08-10 18:33 - 2016-11-11 12:20 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
        2017-08-10 18:33 - 2016-11-11 12:18 - 000278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
        2017-08-10 18:33 - 2016-11-11 12:17 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
        2017-08-10 18:33 - 2016-11-11 12:16 - 001477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
        2017-08-10 18:33 - 2016-11-11 12:16 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
        2017-08-10 18:33 - 2016-11-11 12:15 - 000159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
        2017-08-10 18:33 - 2016-11-11 12:14 - 000615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
        2017-08-10 18:33 - 2016-11-11 12:14 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
        2017-08-10 18:33 - 2016-11-11 12:07 - 001060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
        2017-08-10 18:33 - 2016-11-11 12:06 - 003400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
        2017-08-10 18:33 - 2016-11-11 12:03 - 000905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
        2017-08-10 18:33 - 2016-11-11 12:02 - 000936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
        2017-08-10 18:33 - 2016-11-02 13:55 - 000048992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
        2017-08-10 18:33 - 2016-11-02 13:34 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
        2017-08-10 18:33 - 2016-11-02 13:31 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
        2017-08-10 18:33 - 2016-11-02 13:30 - 000321536 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
        2017-08-10 18:33 - 2016-11-02 13:29 - 000314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
        2017-08-10 18:33 - 2016-11-02 13:29 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
        2017-08-10 18:33 - 2016-11-02 13:28 - 000321024 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
        2017-08-10 18:33 - 2016-11-02 13:28 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
        2017-08-10 18:33 - 2016-11-02 13:19 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
        2017-08-10 18:33 - 2016-10-15 07:21 - 000292872 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
        2017-08-10 18:33 - 2016-10-15 06:59 - 000130560 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
        2017-08-10 18:33 - 2016-10-15 06:59 - 000018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
        2017-08-10 18:33 - 2016-10-15 06:57 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
        2017-08-10 18:33 - 2016-10-15 06:56 - 000065024 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
        2017-08-10 18:33 - 2016-10-15 06:55 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
        2017-08-10 18:33 - 2016-10-15 06:50 - 000509440 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
        2017-08-10 18:33 - 2016-10-15 06:49 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
        2017-08-10 18:33 - 2016-10-15 06:47 - 000720896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
        2017-08-10 18:33 - 2016-10-15 06:46 - 000718848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-08-10 18:33 - 2016-10-15 06:45 - 000702464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
        2017-08-10 18:33 - 2016-10-15 06:44 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
        2017-08-10 18:33 - 2016-10-15 06:36 - 000983040 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
        2017-08-10 18:33 - 2016-10-05 13:17 - 001322848 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
        2017-08-10 18:33 - 2016-10-05 12:32 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
        2017-08-10 18:33 - 2016-10-05 12:30 - 000396800 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
        2017-08-10 18:33 - 2016-10-05 12:29 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
        2017-08-10 18:33 - 2016-10-05 12:22 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
        2017-08-10 18:33 - 2016-09-15 20:29 - 000512416 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
        2017-08-10 18:33 - 2016-09-15 20:25 - 000280472 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
        2017-08-10 18:33 - 2016-09-15 20:15 - 000649568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
        2017-08-10 18:33 - 2016-09-15 20:11 - 000862064 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
        2017-08-10 18:33 - 2016-09-15 20:11 - 000725664 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
        2017-08-10 18:33 - 2016-09-15 19:41 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
        2017-08-10 18:33 - 2016-09-15 19:40 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
        2017-08-10 18:33 - 2016-09-15 19:39 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
        2017-08-10 18:33 - 2016-09-15 19:38 - 000671232 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
        2017-08-10 18:33 - 2016-09-15 19:38 - 000573952 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
        2017-08-10 18:33 - 2016-09-15 19:38 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
        2017-08-10 18:33 - 2016-09-15 19:36 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
        2017-08-10 18:33 - 2016-09-15 19:36 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
        2017-08-10 18:33 - 2016-09-15 19:35 - 000538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
        2017-08-10 18:33 - 2016-09-15 19:35 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
        2017-08-10 18:33 - 2016-09-15 19:35 - 000358400 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
        2017-08-10 18:33 - 2016-09-15 19:33 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
        2017-08-10 18:33 - 2016-09-15 19:32 - 001037312 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
        2017-08-10 18:33 - 2016-09-15 19:32 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
        2017-08-10 18:33 - 2016-09-15 19:31 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
        2017-08-10 18:33 - 2016-09-15 19:30 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
        2017-08-10 18:33 - 2016-09-15 19:28 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
        2017-08-10 18:33 - 2016-09-15 19:27 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
        2017-08-10 18:33 - 2016-09-15 19:27 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
        2017-08-10 18:33 - 2016-09-15 19:27 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
        2017-08-10 18:33 - 2016-09-15 19:27 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
        2017-08-10 18:33 - 2016-09-15 19:26 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
        2017-08-10 18:33 - 2016-09-15 19:26 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
        2017-08-10 18:33 - 2016-09-15 19:26 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
        2017-08-10 18:33 - 2016-09-15 19:25 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
        2017-08-10 18:33 - 2016-09-07 08:33 - 000681304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
        2017-08-10 18:33 - 2016-09-07 08:24 - 000057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
        2017-08-10 18:33 - 2016-09-07 08:04 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
        2017-08-10 18:33 - 2016-09-07 08:03 - 000409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
        2017-08-10 18:33 - 2016-09-07 08:03 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
        2017-08-10 18:33 - 2016-09-07 08:03 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
        2017-08-10 18:33 - 2016-09-07 08:03 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
        2017-08-10 18:33 - 2016-09-07 08:02 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
        2017-08-10 18:33 - 2016-09-07 08:02 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
        2017-08-10 18:33 - 2016-09-07 08:02 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
        2017-08-10 18:33 - 2016-09-07 08:02 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
        2017-08-10 18:33 - 2016-09-07 08:02 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
        2017-08-10 18:33 - 2016-09-07 08:00 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
        2017-08-10 18:33 - 2016-09-07 07:59 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
        2017-08-10 18:33 - 2016-09-07 07:55 - 000820736 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
        2017-08-10 18:33 - 2016-09-07 07:54 - 000366592 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
        2017-08-10 18:33 - 2016-08-20 08:22 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
        2017-08-10 18:33 - 2016-08-20 08:21 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
        2017-08-10 18:33 - 2016-08-20 08:20 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
        2017-08-10 18:33 - 2016-08-20 08:19 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
        2017-08-10 18:33 - 2016-08-20 08:18 - 000200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
        2017-08-10 18:33 - 2016-08-20 08:18 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
        2017-08-10 18:33 - 2016-08-20 08:17 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
        2017-08-10 18:33 - 2016-08-20 08:15 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
        2017-08-10 18:33 - 2016-08-20 08:14 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
        2017-08-10 18:33 - 2016-08-06 07:29 - 000199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
        2017-08-10 18:33 - 2016-08-06 07:26 - 001176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
        2017-08-10 18:33 - 2016-08-06 07:13 - 000044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
        2017-08-10 18:33 - 2016-08-06 06:48 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
        2017-08-10 18:33 - 2016-08-06 06:48 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
        2017-08-10 18:33 - 2016-08-06 06:48 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
        2017-08-10 18:33 - 2016-08-06 06:47 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
        2017-08-10 18:33 - 2016-08-06 06:47 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
        2017-08-10 18:33 - 2016-08-06 06:47 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
        2017-08-10 18:33 - 2016-08-06 06:47 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
        2017-08-10 18:33 - 2016-08-06 06:46 - 009260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
        2017-08-10 18:33 - 2016-08-06 06:46 - 000094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
        2017-08-10 18:33 - 2016-08-06 06:45 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
        2017-08-10 18:33 - 2016-08-06 06:44 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
        2017-08-10 18:33 - 2016-08-06 06:43 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
        2017-08-10 18:33 - 2016-08-06 06:41 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
        2017-08-10 18:33 - 2016-08-06 06:39 - 000298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
        2017-08-10 18:33 - 2016-08-06 06:36 - 000447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
        2017-08-10 18:33 - 2016-08-06 06:19 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
        2017-08-10 18:33 - 2016-08-05 12:14 - 001066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
        2017-08-10 18:33 - 2016-08-05 12:05 - 000665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
        2017-08-10 18:33 - 2016-08-05 11:28 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
        2017-08-10 18:33 - 2016-08-05 11:22 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
        2017-08-10 18:33 - 2016-08-05 11:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
        2017-08-10 18:33 - 2016-08-02 11:21 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
        2017-08-10 18:33 - 2016-08-02 11:13 - 001081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
        2017-08-10 18:32 - 2017-08-01 22:29 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
        2017-08-10 18:32 - 2017-08-01 22:21 - 000295264 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
        2017-08-10 18:32 - 2017-08-01 22:21 - 000124072 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
        2017-08-10 18:32 - 2017-08-01 22:21 - 000026976 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
        2017-08-10 18:32 - 2017-08-01 22:20 - 000684344 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
        2017-08-10 18:32 - 2017-08-01 22:20 - 000383776 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
        2017-08-10 18:32 - 2017-08-01 22:20 - 000144736 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
        2017-08-10 18:32 - 2017-08-01 22:17 - 000241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
        2017-08-10 18:32 - 2017-08-01 22:13 - 001102176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
        2017-08-10 18:32 - 2017-08-01 22:01 - 007218176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
        2017-08-10 18:32 - 2017-08-01 21:50 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
        2017-08-10 18:32 - 2017-08-01 21:46 - 000094720 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
        2017-08-10 18:32 - 2017-08-01 21:45 - 000451072 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
        2017-08-10 18:32 - 2017-08-01 21:45 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
        2017-08-10 18:32 - 2017-08-01 21:44 - 001010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
        2017-08-10 18:32 - 2017-08-01 21:43 - 000945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
        2017-08-10 18:32 - 2017-08-01 21:43 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
        2017-08-10 18:32 - 2017-08-01 21:41 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
        2017-08-10 18:32 - 2017-08-01 21:39 - 001281536 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
        2017-08-10 18:32 - 2017-08-01 21:39 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
        2017-08-10 18:32 - 2017-08-01 21:38 - 001589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
        2017-08-10 18:32 - 2017-08-01 21:36 - 023677440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
        2017-08-10 18:32 - 2017-08-01 21:34 - 001837056 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
        2017-08-10 18:32 - 2017-08-01 21:32 - 000821248 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll
        2017-08-10 18:32 - 2017-08-01 21:28 - 002895360 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
        2017-08-10 18:32 - 2017-08-01 21:23 - 000886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
        2017-08-10 18:32 - 2017-07-12 09:16 - 000646688 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
        2017-08-10 18:32 - 2017-07-12 08:55 - 004674872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
        2017-08-10 18:32 - 2017-07-12 08:25 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcnfs.sys
        2017-08-10 18:32 - 2017-07-12 08:24 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\dabapi.dll
        2017-08-10 18:32 - 2017-07-12 08:23 - 000328192 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
        2017-08-10 18:32 - 2017-07-12 08:23 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\frprov.dll
        2017-08-10 18:32 - 2017-07-12 08:22 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
        2017-08-10 18:32 - 2017-07-12 08:21 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
        2017-08-10 18:32 - 2017-07-12 08:21 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
        2017-08-10 18:32 - 2017-07-12 08:20 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
        2017-08-10 18:32 - 2017-07-12 08:19 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
        2017-08-10 18:32 - 2017-07-12 08:16 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
        2017-08-10 18:32 - 2017-07-12 08:15 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
        2017-08-10 18:32 - 2017-07-12 08:12 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
        2017-08-10 18:32 - 2017-07-12 08:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
        2017-08-10 18:32 - 2017-07-12 08:10 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
        2017-08-10 18:32 - 2017-07-12 08:07 - 000954880 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
        2017-08-10 18:32 - 2017-07-12 08:07 - 000629248 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
        2017-08-10 18:32 - 2017-07-12 07:58 - 001231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
        2017-08-10 18:32 - 2017-07-07 09:28 - 002096640 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
        2017-08-10 18:32 - 2017-07-07 09:25 - 004708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
        2017-08-10 18:32 - 2017-07-07 09:24 - 002217472 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
        2017-08-10 18:32 - 2017-07-07 09:24 - 001783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
        2017-08-10 18:32 - 2017-06-21 10:54 - 000603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
        2017-08-10 18:32 - 2017-06-21 10:51 - 000434528 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
        2017-08-10 18:32 - 2017-06-21 10:48 - 002681200 _____ C:\Windows\system32\CoreUIComponents.dll
        2017-08-10 18:32 - 2017-06-21 10:40 - 001069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
        2017-08-10 18:32 - 2017-06-21 10:40 - 000224096 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
        2017-08-10 18:32 - 2017-06-21 10:37 - 001369240 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
        2017-08-10 18:32 - 2017-06-21 10:35 - 002915704 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
        2017-08-10 18:32 - 2017-06-21 10:35 - 001267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
        2017-08-10 18:32 - 2017-06-21 10:31 - 001277824 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
        2017-08-10 18:32 - 2017-06-21 10:31 - 000160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
        2017-08-10 18:32 - 2017-06-21 10:04 - 001631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
        2017-08-10 18:32 - 2017-06-21 10:03 - 000167936 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
        2017-08-10 18:32 - 2017-06-21 10:01 - 000185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
        2017-08-10 18:32 - 2017-06-21 10:00 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
        2017-08-10 18:32 - 2017-06-21 09:59 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
        2017-08-10 18:32 - 2017-06-21 09:58 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
        2017-08-10 18:32 - 2017-06-21 09:58 - 000186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
        2017-08-10 18:32 - 2017-06-21 09:58 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
        2017-08-10 18:32 - 2017-06-21 09:57 - 000505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
        2017-08-10 18:32 - 2017-06-21 09:57 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
        2017-08-10 18:32 - 2017-06-21 09:57 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
        2017-08-10 18:32 - 2017-06-21 09:57 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
        2017-08-10 18:32 - 2017-06-21 09:56 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
        2017-08-10 18:32 - 2017-06-21 09:56 - 000568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
        2017-08-10 18:32 - 2017-06-21 09:55 - 000407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
        2017-08-10 18:32 - 2017-06-21 09:54 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
        2017-08-10 18:32 - 2017-06-21 09:54 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
        2017-08-10 18:32 - 2017-06-21 09:54 - 000247808 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
        2017-08-10 18:32 - 2017-06-21 09:53 - 000437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
        2017-08-10 18:32 - 2017-06-21 09:52 - 017198592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
        2017-08-10 18:32 - 2017-06-21 09:52 - 000410112 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
        2017-08-10 18:32 - 2017-06-21 09:50 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
        2017-08-10 18:32 - 2017-06-21 09:49 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
        2017-08-10 18:32 - 2017-06-21 09:48 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
        2017-08-10 18:32 - 2017-06-21 09:47 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
        2017-08-10 18:32 - 2017-06-21 09:46 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\uReFSv1.dll
        2017-08-10 18:32 - 2017-06-21 09:46 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
        2017-08-10 18:32 - 2017-06-21 09:43 - 000961536 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
        2017-08-10 18:32 - 2017-06-21 09:42 - 000467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
        2017-08-10 18:32 - 2017-06-21 09:42 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
        2017-08-10 18:32 - 2017-06-21 09:41 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
        2017-08-10 18:32 - 2017-06-21 09:40 - 004474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
        2017-08-10 18:32 - 2017-06-21 09:40 - 001586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
        2017-08-10 18:32 - 2017-06-21 09:40 - 001421824 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
        2017-08-10 18:32 - 2017-06-21 09:40 - 000376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
        2017-08-10 18:32 - 2017-06-21 09:38 - 005611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
        2017-08-10 18:32 - 2017-06-21 09:38 - 001275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
        2017-08-10 18:32 - 2017-06-21 09:36 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
        2017-08-10 18:32 - 2017-06-03 13:14 - 000379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
        2017-08-10 18:32 - 2017-06-03 12:48 - 001112416 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
        2017-08-10 18:32 - 2017-06-03 12:40 - 001566552 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
        2017-08-10 18:32 - 2017-06-03 12:40 - 000628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
        2017-08-10 18:32 - 2017-06-03 12:16 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
        2017-08-10 18:32 - 2017-06-03 12:14 - 000045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
        2017-08-10 18:32 - 2017-06-03 12:10 - 000252928 _____ (Microsoft Corporation) C:\Windows\system32\edputil.dll
        2017-08-10 18:32 - 2017-06-03 12:07 - 000255488 _____ (Microsoft Corporation) C:\Windows\system32\HNetCfgClient.dll
        2017-08-10 18:32 - 2017-06-03 12:06 - 000198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
        2017-08-10 18:32 - 2017-06-03 12:01 - 000856064 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
        2017-08-10 18:32 - 2017-06-03 11:52 - 000975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
        2017-08-10 18:32 - 2017-06-03 11:49 - 002475520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
        2017-08-10 18:32 - 2017-06-03 11:49 - 001845248 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
        2017-08-10 18:32 - 2017-06-03 11:49 - 000351744 _____ (Microsoft Corporation) C:\Windows\system32\hnetcfg.dll
        2017-08-10 18:32 - 2017-06-03 09:08 - 000080078 _____ C:\Windows\system32\normidna.nls
        2017-08-10 18:32 - 2017-04-28 03:44 - 000062816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fsdepends.sys
        2017-08-10 18:32 - 2017-04-28 03:38 - 001852200 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
        2017-08-10 18:32 - 2017-04-28 03:03 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\BthTelemetry.dll
        2017-08-10 18:32 - 2017-04-28 03:01 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
        2017-08-10 18:32 - 2017-04-28 02:59 - 000635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
        2017-08-10 18:32 - 2017-04-28 02:59 - 000567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
        2017-08-10 18:32 - 2017-04-28 02:58 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\ConsentUX.dll
        2017-08-10 18:32 - 2017-04-28 02:57 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
        2017-08-10 18:32 - 2017-04-28 02:56 - 000692224 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
        2017-08-10 18:32 - 2017-04-28 02:55 - 002084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
        2017-08-10 18:32 - 2017-04-28 02:55 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
        2017-08-10 18:32 - 2017-04-28 02:54 - 000339456 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
        2017-08-10 18:32 - 2017-04-28 02:53 - 000458752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
        2017-08-10 18:32 - 2017-04-28 02:46 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
        2017-08-10 18:32 - 2017-04-28 02:46 - 000374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
        2017-08-10 18:32 - 2017-04-28 02:46 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll
        2017-08-10 18:32 - 2017-04-28 02:45 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\CameraCaptureUI.dll
        2017-08-10 18:32 - 2017-04-28 02:43 - 000600576 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
        2017-08-10 18:32 - 2017-04-28 02:41 - 000890368 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
        2017-08-10 18:32 - 2017-04-28 02:40 - 000770560 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
        2017-08-10 18:32 - 2017-04-28 02:37 - 002286592 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
        2017-08-10 18:32 - 2017-03-28 08:37 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\DdcWnsListener.dll
        2017-08-10 18:32 - 2017-03-28 08:34 - 000162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
        2017-08-10 18:32 - 2017-03-28 08:31 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
        2017-08-10 18:32 - 2017-03-28 08:30 - 000239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
        2017-08-10 18:32 - 2017-03-28 08:21 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
        2017-08-10 18:32 - 2017-03-28 08:19 - 000235520 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
        2017-08-10 18:32 - 2017-03-28 08:17 - 005114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
        2017-08-10 18:32 - 2017-03-28 08:07 - 000122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
        2017-08-10 18:32 - 2017-03-28 08:05 - 001633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
        2017-08-10 18:32 - 2017-03-16 07:47 - 000038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
        2017-08-10 18:32 - 2017-03-04 10:24 - 001051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
        2017-08-10 18:32 - 2017-03-04 10:24 - 000894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
        2017-08-10 18:32 - 2017-03-04 10:22 - 001354312 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
        2017-08-10 18:32 - 2017-03-04 10:22 - 001172984 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
        2017-08-10 18:32 - 2017-03-04 10:20 - 000379744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
        2017-08-10 18:32 - 2017-03-04 10:15 - 000063328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
        2017-08-10 18:32 - 2017-03-04 10:13 - 000635456 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
        2017-08-10 18:32 - 2017-03-04 10:11 - 000266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
        2017-08-10 18:32 - 2017-03-04 10:10 - 002828384 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
        2017-08-10 18:32 - 2017-03-04 10:09 - 000635864 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
        2017-08-10 18:32 - 2017-03-04 10:03 - 000755648 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
        2017-08-10 18:32 - 2017-03-04 10:03 - 000523712 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
        2017-08-10 18:32 - 2017-03-04 10:01 - 000128648 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
        2017-08-10 18:32 - 2017-03-04 09:35 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
        2017-08-10 18:32 - 2017-03-04 09:34 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\dggpext.dll
        2017-08-10 18:32 - 2017-03-04 09:31 - 000266240 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
        2017-08-10 18:32 - 2017-03-04 09:30 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
        2017-08-10 18:32 - 2017-03-04 09:29 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
        2017-08-10 18:32 - 2017-03-04 09:28 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
        2017-08-10 18:32 - 2017-03-04 09:28 - 000279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
        2017-08-10 18:32 - 2017-03-04 09:27 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
        2017-08-10 18:32 - 2017-03-04 09:27 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
        2017-08-10 18:32 - 2017-03-04 09:26 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
        2017-08-10 18:32 - 2017-03-04 09:26 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
        2017-08-10 18:32 - 2017-03-04 09:24 - 000478208 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
        2017-08-10 18:32 - 2017-03-04 09:23 - 003753984 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
        2017-08-10 18:32 - 2017-03-04 09:19 - 001639424 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
        2017-08-10 18:32 - 2017-03-04 09:18 - 001227264 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
        2017-08-10 18:32 - 2017-03-04 09:17 - 000730624 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
        2017-08-10 18:32 - 2017-03-04 09:17 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
        2017-08-10 18:32 - 2017-03-04 09:16 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
        2017-08-10 18:32 - 2017-03-04 09:16 - 000583168 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
        2017-08-10 18:32 - 2017-03-04 09:16 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
        2017-08-10 18:32 - 2017-03-04 09:15 - 001345024 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
        2017-08-10 18:32 - 2017-03-04 09:13 - 000222720 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
        2017-08-10 18:32 - 2017-03-04 09:13 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
        2017-08-10 18:32 - 2017-03-04 09:11 - 002611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
        2017-08-10 18:32 - 2017-03-04 09:11 - 000821248 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
        2017-08-10 18:32 - 2017-03-04 09:11 - 000774656 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
        2017-08-10 18:32 - 2017-03-04 09:10 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
        2017-08-10 18:32 - 2017-03-04 09:08 - 001714688 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
        2017-08-10 18:32 - 2017-03-04 09:08 - 000629248 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
        2017-08-10 18:32 - 2016-12-21 11:08 - 000245600 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
        2017-08-10 18:32 - 2016-12-21 09:59 - 000883712 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
        2017-08-10 18:32 - 2016-12-21 09:57 - 000462336 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll
        2017-08-10 18:32 - 2016-12-14 07:42 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-08-10 18:32 - 2016-12-14 07:40 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
        2017-08-10 18:32 - 2016-12-14 07:39 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
        2017-08-10 18:32 - 2016-12-14 07:24 - 001005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
        2017-08-10 18:32 - 2016-12-09 13:20 - 002677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
        2017-08-10 18:32 - 2016-12-09 13:19 - 000168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
        2017-08-10 18:32 - 2016-12-09 12:41 - 000380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
        2017-08-10 18:32 - 2016-12-09 12:20 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
        2017-08-10 18:32 - 2016-11-11 13:13 - 000352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
        2017-08-10 18:32 - 2016-11-11 12:56 - 000187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
        2017-08-10 18:32 - 2016-11-11 12:28 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
        2017-08-10 18:32 - 2016-11-11 12:26 - 000109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
        2017-08-10 18:32 - 2016-11-11 12:25 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
        2017-08-10 18:32 - 2016-11-11 12:23 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
        2017-08-10 18:32 - 2016-11-11 12:20 - 000339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
        2017-08-10 18:32 - 2016-11-11 12:20 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
        2017-08-10 18:32 - 2016-11-11 12:19 - 000411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
        2017-08-10 18:32 - 2016-11-11 12:19 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
        2017-08-10 18:32 - 2016-11-11 12:13 - 000306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
        2017-08-10 18:32 - 2016-11-11 12:12 - 000870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
        2017-08-10 18:32 - 2016-11-11 12:09 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
        2017-08-10 18:32 - 2016-11-11 12:07 - 000991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
        2017-08-10 18:32 - 2016-11-11 12:04 - 000455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
        2017-08-10 18:32 - 2016-11-02 14:02 - 000238056 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
        2017-08-10 18:32 - 2016-11-02 13:56 - 001609920 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
        2017-08-10 18:32 - 2016-11-02 13:32 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
        2017-08-10 18:32 - 2016-11-02 13:31 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
        2017-08-10 18:32 - 2016-11-02 13:31 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
        2017-08-10 18:32 - 2016-11-02 13:28 - 000566784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
        2017-08-10 18:32 - 2016-11-02 13:28 - 000411136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
        2017-08-10 18:32 - 2016-11-02 13:28 - 000274432 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
        2017-08-10 18:32 - 2016-11-02 13:24 - 000940032 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
        2017-08-10 18:32 - 2016-11-02 13:23 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
        2017-08-10 18:32 - 2016-11-02 13:19 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
        2017-08-10 18:32 - 2016-11-02 13:18 - 000836608 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
        2017-08-10 18:32 - 2016-11-02 13:16 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
        2017-08-10 18:32 - 2016-11-02 13:13 - 000322048 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
        2017-08-10 18:32 - 2016-10-15 07:48 - 000498952 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
        2017-08-10 18:32 - 2016-10-15 07:29 - 000908640 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
        2017-08-10 18:32 - 2016-10-15 07:29 - 000079200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
        2017-08-10 18:32 - 2016-10-15 06:59 - 000272384 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
        2017-08-10 18:32 - 2016-10-15 06:56 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
        2017-08-10 18:32 - 2016-10-15 06:56 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
        2017-08-10 18:32 - 2016-10-15 06:54 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
        2017-08-10 18:32 - 2016-10-15 06:52 - 000163328 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
        2017-08-10 18:32 - 2016-10-15 06:45 - 001790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
        2017-08-10 18:32 - 2016-10-15 06:43 - 000574976 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
        2017-08-10 18:32 - 2016-10-15 06:43 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
        2017-08-10 18:32 - 2016-10-15 06:37 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
        2017-08-10 18:32 - 2016-10-15 06:36 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
        2017-08-10 18:32 - 2016-10-15 06:36 - 000338944 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
        2017-08-10 18:32 - 2016-10-15 06:35 - 003054080 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
        2017-08-10 18:32 - 2016-10-05 12:33 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
        2017-08-10 18:32 - 2016-10-05 12:31 - 000425472 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
        2017-08-10 18:32 - 2016-09-15 20:29 - 000023392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
        2017-08-10 18:32 - 2016-09-15 20:26 - 000090400 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
        2017-08-10 18:32 - 2016-09-15 20:16 - 000206096 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
        2017-08-10 18:32 - 2016-09-15 20:14 - 000119648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
        2017-08-10 18:32 - 2016-09-15 20:07 - 000128864 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
        2017-08-10 18:32 - 2016-09-15 19:37 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
        2017-08-10 18:32 - 2016-09-15 19:36 - 000166912 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
        2017-08-10 18:32 - 2016-09-15 19:35 - 000280064 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
        2017-08-10 18:32 - 2016-09-15 19:27 - 000250368 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
        2017-08-10 18:32 - 2016-09-15 19:22 - 001709056 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
        2017-08-10 18:32 - 2016-09-07 08:00 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
        2017-08-10 18:32 - 2016-09-07 07:59 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
        2017-08-10 18:32 - 2016-09-07 07:56 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
        2017-08-10 18:32 - 2016-09-07 07:56 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
        2017-08-10 18:32 - 2016-09-07 07:55 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
        2017-08-10 18:32 - 2016-09-07 07:53 - 000302592 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
        2017-08-10 18:32 - 2016-09-07 07:43 - 000484352 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
        2017-08-10 18:32 - 2016-09-07 07:33 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
        2017-08-10 18:32 - 2016-08-27 07:44 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
        2017-08-10 18:32 - 2016-08-20 08:21 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
        2017-08-10 18:32 - 2016-08-20 08:21 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
        2017-08-10 18:32 - 2016-08-20 08:20 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
        2017-08-10 18:32 - 2016-08-19 04:33 - 000162850 _____ C:\Windows\system32\C_932.NLS
        2017-08-10 18:32 - 2016-08-06 06:29 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
        2017-08-10 18:32 - 2016-07-22 04:25 - 000389000 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
        2017-08-10 18:31 - 2017-08-01 22:21 - 000146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
        2017-08-10 18:31 - 2017-08-01 22:20 - 000557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
        2017-08-10 18:31 - 2017-08-01 22:20 - 000079712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
        2017-08-10 18:31 - 2017-08-01 21:52 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmclr.sys
        2017-08-10 18:31 - 2017-08-01 21:47 - 000651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
        2017-08-10 18:31 - 2017-08-01 21:47 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
        2017-08-10 18:31 - 2017-08-01 21:46 - 000379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
        2017-08-10 18:31 - 2017-08-01 21:46 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
        2017-08-10 18:31 - 2017-08-01 21:36 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
        2017-08-10 18:31 - 2017-08-01 21:33 - 000167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
        2017-08-10 18:31 - 2017-08-01 21:27 - 000716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
        2017-08-10 18:31 - 2017-07-12 09:15 - 000101216 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
        2017-08-10 18:31 - 2017-07-12 09:01 - 000715104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
        2017-08-10 18:31 - 2017-07-12 09:00 - 000095584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
        2017-08-10 18:31 - 2017-07-12 08:59 - 001100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
        2017-08-10 18:31 - 2017-07-12 08:59 - 000989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
        2017-08-10 18:31 - 2017-07-12 08:59 - 000947040 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
        2017-08-10 18:31 - 2017-07-12 08:56 - 000277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
        2017-08-10 18:31 - 2017-07-12 08:21 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
        2017-08-10 18:31 - 2017-07-12 08:19 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
        2017-08-10 18:31 - 2017-07-12 08:12 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
        2017-08-10 18:31 - 2017-07-12 08:06 - 000956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
        2017-08-10 18:31 - 2017-07-12 08:03 - 001692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
        2017-08-10 18:31 - 2017-07-12 08:01 - 002279424 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
        2017-08-10 18:31 - 2017-07-07 09:47 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
        2017-08-10 18:31 - 2017-07-07 09:28 - 000927744 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
        2017-08-10 18:31 - 2017-06-21 10:56 - 001405280 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
        2017-08-10 18:31 - 2017-06-21 10:55 - 002170720 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 001669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
        2017-08-10 18:31 - 2017-06-21 10:54 - 000813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000758624 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000565088 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
        2017-08-10 18:31 - 2017-06-21 10:54 - 000406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
        2017-08-10 18:31 - 2017-06-21 10:47 - 000764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
        2017-08-10 18:31 - 2017-06-21 10:36 - 000129888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
        2017-08-10 18:31 - 2017-06-21 09:57 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\XamlTileRender.dll
        2017-08-10 18:31 - 2017-06-21 09:56 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
        2017-08-10 18:31 - 2017-06-21 09:53 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
        2017-08-10 18:31 - 2017-06-21 09:52 - 000896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
        2017-08-10 18:31 - 2017-06-21 09:52 - 000560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
        2017-08-10 18:31 - 2017-06-21 09:51 - 000410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
        2017-08-10 18:31 - 2017-06-21 09:47 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
        2017-08-10 18:31 - 2017-06-21 09:41 - 001021440 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
        2017-08-10 18:31 - 2017-06-03 13:16 - 000279904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
        2017-08-10 18:31 - 2017-06-03 12:54 - 000187232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
        2017-08-10 18:31 - 2017-06-03 12:50 - 000381792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
        2017-08-10 18:31 - 2017-06-03 12:39 - 000455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
        2017-08-10 18:31 - 2017-06-03 12:15 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
        2017-08-10 18:31 - 2017-04-28 03:02 - 000019456 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
        2017-08-10 18:31 - 2017-04-28 03:00 - 000120832 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
        2017-08-10 18:31 - 2017-04-28 02:59 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
        2017-08-10 18:31 - 2017-04-28 02:58 - 000150016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
        2017-08-10 18:31 - 2017-04-28 02:57 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
        2017-08-10 18:31 - 2017-04-28 02:54 - 000967680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
        2017-08-10 18:31 - 2017-04-28 02:50 - 000338944 _____ (Microsoft Corporation) C:\Windows\system32\adsnt.dll
        2017-08-10 18:31 - 2017-04-28 02:48 - 000337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
        2017-08-10 18:31 - 2017-04-28 02:47 - 000942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
        2017-08-10 18:31 - 2017-04-28 02:41 - 000828416 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
        2017-08-10 18:31 - 2017-04-28 02:37 - 000881664 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
        2017-08-10 18:31 - 2017-03-28 09:10 - 000178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
        2017-08-10 18:31 - 2017-03-28 08:36 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicDisplay.sys
        2017-08-10 18:31 - 2017-03-28 08:08 - 003542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
        2017-08-10 18:31 - 2017-03-04 10:35 - 000590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
        2017-08-10 18:31 - 2017-03-04 10:24 - 000090976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
        2017-08-10 18:31 - 2017-03-04 10:07 - 000811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
        2017-08-10 18:31 - 2017-03-04 10:07 - 000110944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvsocket.sys
        2017-08-10 18:31 - 2017-03-04 09:57 - 000372432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
        2017-08-10 18:31 - 2017-03-04 09:34 - 000258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
        2017-08-10 18:31 - 2017-03-04 09:33 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
        2017-08-10 18:31 - 2017-03-04 09:28 - 000349696 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
        2017-08-10 18:31 - 2017-03-04 09:20 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
        2017-08-10 18:31 - 2016-12-21 09:54 - 005511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
        2017-08-10 18:31 - 2016-12-14 08:33 - 001356864 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
        2017-08-10 18:31 - 2016-12-14 08:33 - 001054048 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
        2017-08-10 18:31 - 2016-12-14 08:33 - 000992096 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
        2017-08-10 18:31 - 2016-12-14 08:33 - 000779616 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
        2017-08-10 18:31 - 2016-12-14 08:33 - 000513376 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
        2017-08-10 18:31 - 2016-12-14 08:33 - 000241504 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
        2017-08-10 18:31 - 2016-12-14 08:33 - 000190816 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
        2017-08-10 18:31 - 2016-12-14 08:18 - 000335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
        2017-08-10 18:31 - 2016-12-14 08:14 - 000418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
        2017-08-10 18:31 - 2016-12-14 08:14 - 000089416 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
        2017-08-10 18:31 - 2016-12-09 12:37 - 000411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
        2017-08-10 18:31 - 2016-11-11 13:00 - 000219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
        2017-08-10 18:31 - 2016-11-11 12:26 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
        2017-08-10 18:31 - 2016-11-11 12:25 - 000198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
        2017-08-10 18:31 - 2016-11-11 12:24 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
        2017-08-10 18:31 - 2016-11-11 12:24 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
        2017-08-10 18:31 - 2016-11-11 12:22 - 000143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
        2017-08-10 18:31 - 2016-11-11 12:19 - 000620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
        2017-08-10 18:31 - 2016-11-11 12:19 - 000389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
        2017-08-10 18:31 - 2016-11-11 12:07 - 001691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
        2017-08-10 18:31 - 2016-11-02 14:00 - 000534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
        2017-08-10 18:31 - 2016-11-02 13:23 - 000072704 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
        2017-08-10 18:31 - 2016-10-15 07:38 - 000500064 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
        2017-08-10 18:31 - 2016-10-15 06:56 - 000219648 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
        2017-08-10 18:31 - 2016-10-15 06:55 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
        2017-08-10 18:31 - 2016-10-15 06:51 - 000429568 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
        2017-08-10 18:31 - 2016-10-15 06:39 - 000631296 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
        2017-08-10 18:31 - 2016-10-15 06:31 - 000227328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
        2017-08-10 18:31 - 2016-10-05 13:09 - 000064352 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
        2017-08-10 18:31 - 2016-10-05 12:24 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
        2017-08-10 18:31 - 2016-09-15 20:29 - 000169056 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
        2017-08-10 18:31 - 2016-09-15 20:29 - 000127328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
        2017-08-10 18:31 - 2016-09-15 19:43 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
        2017-08-10 18:31 - 2016-09-15 19:42 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
        2017-08-10 18:31 - 2016-09-15 19:38 - 000427008 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
        2017-08-10 18:31 - 2016-09-15 19:35 - 000305152 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
        2017-08-10 18:31 - 2016-09-15 19:35 - 000128000 _____ (Microsoft Corporation) C:\Windows\system32\rshx32.dll
        2017-08-10 18:31 - 2016-09-07 08:29 - 000118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
        2017-08-10 18:31 - 2016-09-07 07:39 - 003116544 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
        2017-08-10 18:31 - 2016-08-20 08:20 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
        2017-08-10 18:31 - 2016-08-20 08:18 - 000114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
        2017-08-10 18:31 - 2016-08-20 08:15 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
        2017-08-10 18:31 - 2016-08-06 07:16 - 000073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
        2017-08-10 18:31 - 2016-08-06 07:16 - 000020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
        2017-08-10 18:31 - 2016-08-06 06:47 - 000038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
        2017-08-10 18:31 - 2016-08-06 06:46 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
        2017-08-10 18:30 - 2016-09-10 16:21 - 000118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
        2017-08-10 17:44 - 2016-12-21 10:08 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
        2017-08-10 17:44 - 2016-12-21 07:44 - 000120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
        2017-08-10 17:43 - 2017-06-03 13:50 - 000192856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 001564512 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 001214816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000629088 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000544096 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000335712 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000334176 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000233824 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
        2017-08-10 17:43 - 2017-06-03 13:14 - 000096608 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
        2017-08-10 17:43 - 2017-06-03 13:14 - 000034648 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
        2017-08-10 17:00 - 2017-06-03 12:15 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
        2017-08-10 17:00 - 2017-04-28 02:56 - 000293888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
        2017-08-10 17:00 - 2017-03-28 08:42 - 000051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
        2017-08-10 17:00 - 2017-03-04 09:36 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
        2017-08-10 17:00 - 2016-12-14 07:40 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
        2017-08-04 02:20 - 2017-08-04 02:18 - 000565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
        2017-08-03 03:29 - 2017-08-03 03:29 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Macromedia
        2017-08-03 03:28 - 2017-08-30 17:38 - 000000000 ____D C:\KMPlayer
        2017-08-03 03:28 - 2017-08-03 03:28 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
        2017-08-03 03:06 - 2017-08-03 03:06 - 000004608 _____ C:\Windows\SECOH-QAD.exe
        2017-08-03 03:06 - 2017-08-03 03:06 - 000003584 _____ C:\Windows\SECOH-QAD.dll
        2017-08-03 03:04 - 2017-08-03 03:04 - 000000712 _____ C:\Users\CrossX\Desktop\Download.lnk
        2017-08-03 03:03 - 2017-08-03 03:03 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\WinRAR
        2017-08-03 03:03 - 2017-08-03 03:03 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-08-03 03:03 - 2017-08-03 03:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-08-03 03:03 - 2017-08-03 03:03 - 000000000 ____D C:\Program Files\WinRAR
        2017-08-03 02:59 - 2017-08-31 03:00 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\BitTorrent
        2017-08-03 02:59 - 2017-08-03 02:59 - 000000897 _____ C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
        2017-08-03 02:55 - 2017-01-20 04:15 - 006625792 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtwlane.sys
        2017-08-03 02:55 - 2017-01-20 04:15 - 001156096 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
        2017-08-03 02:55 - 2017-01-20 00:12 - 000022454 _____ C:\Windows\system32\Drivers\rtldata.txt
        2017-08-03 02:49 - 2017-08-03 02:49 - 000003160 _____ C:\Windows\System32\Tasks\StartCN
        2017-08-03 02:49 - 2017-08-03 02:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
        2017-08-03 02:49 - 2017-08-03 02:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
        2017-08-03 02:48 - 2017-08-03 02:48 - 000000000 ____D C:\Program Files (x86)\AMD
        2017-08-03 02:44 - 2017-08-03 02:44 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\ATI
        2017-08-03 02:44 - 2017-08-03 02:44 - 000000000 ____D C:\Users\CrossX\AppData\Local\ATI
        2017-08-03 02:44 - 2017-08-03 02:44 - 000000000 ____D C:\ProgramData\ATI
        2017-08-03 02:44 - 2017-08-03 02:44 - 000000000 ____D C:\Program Files (x86)\VulkanRT
        2017-08-03 02:44 - 2017-06-15 22:32 - 000541984 _____ C:\Windows\system32\vulkan-1.dll
        2017-08-03 02:44 - 2017-06-15 22:32 - 000525088 _____ C:\Windows\SysWOW64\vulkan-1.dll
        2017-08-03 02:44 - 2017-06-15 22:32 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe
        2017-08-03 02:44 - 2017-06-15 22:32 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
        2017-08-03 02:43 - 2017-07-27 02:06 - 000555432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000540072 _____ C:\Windows\system32\GameManager64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000486824 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000374184 _____ C:\Windows\SysWOW64\GameManager32.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000285096 _____ C:\Windows\system32\hsa-thunk64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000250792 _____ C:\Windows\SysWOW64\hsa-thunk.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000200104 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000178600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000159656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000144296 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000053664 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
        2017-08-03 02:43 - 2017-07-27 02:06 - 000051112 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000933288 _____ (AMD) C:\Windows\system32\coinst_17.30.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000789928 _____ (AMD) C:\Windows\system32\atieclxx.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000561064 _____ C:\Windows\system32\dgtrayicon.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000560552 _____ (AMD) C:\Windows\system32\atiesrxx.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000492456 _____ C:\Windows\system32\atieah64.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000378280 _____ C:\Windows\system32\clinfo.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000342952 _____ C:\Windows\SysWOW64\atieah32.exe
        2017-08-03 02:43 - 2017-07-27 02:05 - 000253864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000212392 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000176552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000142248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000133032 _____ (AMD) C:\Windows\system32\atimuixx.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000123816 _____ C:\Windows\system32\atidxx64.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000037800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
        2017-08-03 02:43 - 2017-07-27 02:05 - 000037800 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 012502952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdvlk64.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 010283432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdvlk32.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 002920360 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 002535336 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 001061792 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 001061792 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000674728 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
        2017-08-03 02:43 - 2017-07-27 02:04 - 000476072 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000165440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000157176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000144800 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000123304 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000121256 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000110504 _____ C:\Windows\SysWOW64\atidxx32.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000107944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
        2017-08-03 02:43 - 2017-07-27 02:04 - 000077736 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000872872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000704424 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000141344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000112224 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000100264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll
        2017-08-03 02:43 - 2017-07-27 02:03 - 000083880 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000587648 _____ C:\Windows\system32\amdmiracast.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000523176 _____ C:\Windows\system32\amdgfxinfo64.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000369064 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000206784 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000174688 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000149216 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000141344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000125920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
        2017-08-03 02:43 - 2017-07-27 02:02 - 000112216 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
        2017-08-03 02:43 - 2017-07-26 22:35 - 003471376 _____ C:\Windows\SysWOW64\atiumdva.cap
        2017-08-03 02:43 - 2017-07-26 22:35 - 003437632 _____ C:\Windows\system32\atiumd6a.cap
        2017-08-03 02:43 - 2017-07-26 22:35 - 000814864 _____ C:\Windows\SysWOW64\atiapfxx.blb
        2017-08-03 02:43 - 2017-07-26 22:35 - 000814864 _____ C:\Windows\system32\atiapfxx.blb
        2017-08-03 02:43 - 2017-07-26 22:35 - 000154384 _____ C:\Windows\system32\samu_krnl_ci.sbin
        2017-08-03 02:43 - 2017-07-26 22:35 - 000120880 _____ C:\Windows\system32\kapp_ci.sbin
        2017-08-03 02:43 - 2017-07-26 22:35 - 000114704 _____ C:\Windows\system32\kapp_si.sbin
        2017-08-03 02:43 - 2017-07-26 22:35 - 000031039 _____ C:\Windows\system32\AMDKernelEvents.man
        2017-08-03 02:43 - 2017-07-26 22:35 - 000000145 _____ C:\Windows\SysWOW64\amd-vulkan32.json
        2017-08-03 02:43 - 2017-07-26 22:35 - 000000145 _____ C:\Windows\system32\amd-vulkan64.json
        2017-08-03 02:32 - 2017-08-03 02:56 - 000000000 ____D C:\Users\CrossX\AppData\Local\AMD
        2017-08-03 02:17 - 2017-08-03 02:44 - 000000000 ____D C:\ProgramData\Package Cache
        2017-08-03 02:16 - 2017-08-03 02:16 - 000000000 ____D C:\AMD
        2017-08-03 02:13 - 2017-08-03 02:49 - 000000000 ____D C:\Program Files\AMD
        2017-08-03 02:13 - 2017-08-03 02:13 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
        2017-08-03 02:05 - 2017-08-03 02:05 - 000000000 ____D C:\Windows\SysWOW64\sda
        2017-08-03 02:00 - 2017-08-03 02:00 - 000000000 ____D C:\Users\CrossX\AppData\Local\Comms
        2017-08-03 01:53 - 2017-08-29 10:27 - 000000000 __SHD C:\Users\CrossX\IntelGraphicsProfiles
        2017-08-03 01:52 - 2017-08-29 10:26 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
        2017-08-03 01:52 - 2017-08-03 01:59 - 000000000 ____D C:\Intel
        2017-08-03 01:52 - 2017-08-03 01:52 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
        2017-08-03 01:52 - 2017-08-03 01:52 - 000000000 ____D C:\Program Files\Intel
        2017-08-03 01:52 - 2017-08-03 01:52 - 000000000 ____D C:\Program Files (x86)\Intel
        2017-08-03 01:52 - 2017-08-03 01:52 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
        2017-08-03 01:47 - 2017-08-03 00:54 - 000000000 ____D C:\Windows\Panther
        2017-08-03 01:18 - 2017-08-03 01:18 - 000000000 ____D C:\Program Files (x86)\Lenovo
        2017-08-03 01:16 - 2017-08-03 01:16 - 000000000 ____H C:\ProgramData\DP45977C.lfl
        2017-08-03 01:16 - 2017-08-03 01:16 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
        2017-08-03 01:16 - 2017-08-03 01:16 - 000000000 ____D C:\Windows\system32\DAX2
        2017-08-03 01:16 - 2017-08-03 01:16 - 000000000 ____D C:\Program Files\Realtek
        2017-08-03 01:12 - 2017-08-03 01:12 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
        2017-08-03 01:12 - 2017-08-03 01:12 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
        2017-08-03 01:12 - 2015-08-13 20:25 - 000044216 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
        2017-08-03 01:11 - 2017-08-29 03:55 - 000000000 ____D C:\ProgramData\Synaptics
        2017-08-03 01:11 - 2017-08-03 01:12 - 000000000 ____D C:\Program Files\Synaptics
        2017-08-03 01:11 - 2017-08-03 01:11 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf
        2017-08-03 01:10 - 2017-08-03 01:10 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
        2017-08-03 01:09 - 2017-08-03 01:09 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Google
        2017-08-03 01:07 - 2017-08-29 03:13 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-08-03 01:06 - 2017-08-03 01:07 - 000000000 ____D C:\Program Files (x86)\Google
        2017-08-03 01:06 - 2017-08-03 01:06 - 000003516 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-08-03 01:06 - 2017-08-03 01:06 - 000003392 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-08-03 01:05 - 2017-08-03 01:21 - 000000000 ____D C:\Users\CrossX\AppData\Local\Google
        2017-08-03 01:03 - 2017-08-03 01:04 - 000000000 ____D C:\Users\CrossX\AppData\Local\MicrosoftEdge
        2017-08-03 01:02 - 2017-08-29 04:00 - 000994792 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-08-03 01:02 - 2017-08-03 01:02 - 000002394 _____ C:\Users\CrossX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-08-03 01:02 - 2017-08-03 01:02 - 000000000 ___RD C:\Users\CrossX\OneDrive
        2017-08-03 01:02 - 2017-08-03 01:02 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
        2017-08-03 00:59 - 2017-08-27 22:28 - 000000000 ____D C:\Users\CrossX\AppData\Local\Packages
        2017-08-03 00:59 - 2017-08-11 16:38 - 000000000 __RHD C:\Users\Public\AccountPictures
        2017-08-03 00:59 - 2017-08-03 02:25 - 000000000 ____D C:\Users\CrossX\AppData\Local\ConnectedDevicesPlatform
        2017-08-03 00:59 - 2017-08-03 00:59 - 000000000 ____D C:\Windows\CSC
        2017-08-03 00:59 - 2017-08-03 00:59 - 000000000 ____D C:\Users\CrossX\AppData\Roaming\Adobe
        2017-08-03 00:59 - 2017-08-03 00:59 - 000000000 ____D C:\Users\CrossX\AppData\Local\VirtualStore
        2017-08-03 00:59 - 2017-08-03 00:59 - 000000000 ____D C:\Users\CrossX\AppData\Local\TileDataLayer
        2017-08-03 00:59 - 2017-08-03 00:59 - 000000000 ____D C:\Users\CrossX\AppData\Local\Publishers
        2017-08-03 00:59 - 2017-04-28 04:01 - 002717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
        2017-08-03 00:58 - 2017-08-29 04:01 - 000000000 ____D C:\Users\CrossX
        2017-08-03 00:58 - 2017-08-03 00:58 - 000000020 ___SH C:\Users\CrossX\ntuser.ini
        2017-08-03 00:58 - 2017-08-03 00:58 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
        2017-08-03 00:58 - 2017-08-03 00:58 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
        2017-08-03 00:58 - 2017-08-03 00:58 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
        2017-08-03 00:58 - 2017-08-03 00:58 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
        2017-08-03 00:57 - 2017-08-03 00:57 - 000000020 ___SH C:\Users\defaultuser0\ntuser.ini
        2017-08-03 00:56 - 2017-08-03 00:57 - 000000000 ____D C:\Users\defaultuser0
        2017-08-03 00:50 - 2017-08-03 00:50 - 000000000 ____D C:\ProgramData\USOShared
        2017-08-03 00:49 - 2017-08-29 03:55 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-08-03 00:48 - 2017-08-31 02:34 - 000000000 ____D C:\Windows\system32\SleepStudy
        2017-08-03 00:48 - 2017-08-11 16:32 - 000194192 _____ C:\Windows\system32\FNTCACHE.DAT
        2017-08-03 00:48 - 2017-08-03 00:48 - 000000000 ____D C:\Windows\ServiceProfiles
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-08-27 22:28 - 2016-07-16 14:47 - 000000000 ___HD C:\Program Files\WindowsApps
        2017-08-27 22:28 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\AppReadiness
        2017-08-27 13:27 - 2016-07-16 09:04 - 000262144 _____ C:\Windows\system32\config\BBI
        2017-08-27 13:24 - 2016-07-16 14:45 - 000000000 ____D C:\Windows\INF
        2017-08-13 23:52 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
        2017-08-12 18:05 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\rescache
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___SD C:\Windows\SysWOW64\F12
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___SD C:\Windows\system32\F12
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___SD C:\Windows\system32\dsc
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___SD C:\Windows\system32\DiagSvcs
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___RD C:\Windows\PrintDialog
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\SysWOW64\setup
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\SysWOW64\oobe
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\setup
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\oobe
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\migwiz
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\lv-LV
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\lt-LT
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\et-EE
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\es-MX
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\en-GB
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\appraiser
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\ShellExperiences
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\Provisioning
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\PolicyDefinitions
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\bcastdvr
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-08-11 16:27 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender
        2017-08-11 16:27 - 2016-07-16 09:04 - 000000000 ____D C:\Windows\SysWOW64\Dism
        2017-08-11 16:27 - 2016-07-16 09:04 - 000000000 ____D C:\Windows\system32\Sysprep
        2017-08-11 16:27 - 2016-07-16 09:04 - 000000000 ____D C:\Windows\system32\Dism
        2017-08-11 16:27 - 2016-07-16 09:04 - 000000000 ____D C:\Windows\servicing
        2017-08-11 16:26 - 2016-07-17 01:34 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
        2017-08-11 16:26 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
        2017-08-11 16:26 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files\Windows Defender
        2017-08-11 16:26 - 2016-07-16 14:47 - 000000000 ____D C:\Program Files\Common Files\System
        2017-08-11 16:23 - 2016-07-16 14:47 - 000015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
        2017-08-10 19:11 - 2016-07-16 14:36 - 000000000 ____D C:\Windows\CbsTemp
        2017-08-03 16:52 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\appcompat
        2017-08-03 02:15 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\WinBioDatabase
        2017-08-03 01:47 - 2016-07-16 14:47 - 000028672 _____ C:\Windows\system32\config\BCD-Template
        2017-08-03 01:46 - 2016-07-17 01:20 - 000000000 ____D C:\Windows\SysWOW64\WCN
        2017-08-03 01:46 - 2016-07-17 01:20 - 000000000 ____D C:\Windows\system32\WCN
        2017-08-03 01:46 - 2016-07-16 14:47 - 000000000 ___RD C:\Windows\MiracastView
        2017-08-03 00:59 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\spool
        2017-08-03 00:59 - 2016-07-16 14:47 - 000000000 ____D C:\Windows\system32\FxsTmp
        2017-08-03 00:50 - 2016-07-16 14:47 - 000000000 ____D C:\ProgramData\USOPrivate
        2017-08-03 00:50 - 2016-07-16 14:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-08-03 00:49 - 2016-07-16 09:04 - 000032768 _____ C:\Windows\system32\config\ELAM
        ==================== Files in the root of some directories =======
        2017-08-11 19:51 - 2017-08-31 02:37 - 000007593 _____ () C:\Users\CrossX\AppData\Local\Resmon.ResmonCfg
        2017-08-03 01:16 - 2017-08-03 01:16 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-08-28 17:08
        ==================== End of FRST.txt ============================


        Addition.txt
      • от piston79
        Здравейте!
        От известно време насам имам проблем при браузване в интернет, постоянно изкачат прозорки с реклама на ефбет, а вчера даже нещо като видео от каунтър страйк ((макар и за секунди)
        Използвам аваст и малуеърбайтс, отделно adon за  мозила -Адблок +,
        При сканиране и от двете не излиза нищо особени като инфекция (само някакъв .длл от една стара игра).
         
        П.С. Обикновено съм на компютъра късно вечер и то не всеки ден, така че може би няма да мога да изпълнявам бързо съветите Ви....
         
         
         
        Addition.txt
      • от Девнелийска
        Здравейте всички, днес офисния компютър се зарази и всички файлове на него се криптираха с разширение ".lukitus".
        Моля за помощ! Има ли начин да бъдат възстановени?
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение

    ×

    Информация

    Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.