Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Am I paranoid or did some infection/rootkit follow me after reinstalling?


  • This topic is locked This topic is locked
6 replies to this topic

#1 AMINAL

AMINAL

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 05 March 2018 - 12:22 PM

Before my reinstall my system was behaving oddly with tons of cpu usage and network activity in certain processes, so I went to safe mode with networking and downloaded a suite of rootkit detectors - most of them shut down halfway through, and I also noticed a lot of services that shouldn't start in safe mode had.

 

I just reinstalled windows and I've got a nagging feeling something followed after me. Before the reinstall i completely wiped all my 3 drives.

 

Here is my FRST.txt log

 

Here is my addition.log

 

I would really appreciate any help, hopefully its nothing - I sadly don't know much more than to reformat and reinstall windows when it comes to dealing with persistent threats.

 

Thanks!

 

edit: I currently use OSHardener and VoodooShield trial for some sense of control/lessening of anxiety by the way.


Edited by AMINAL, 05 March 2018 - 12:29 PM.


BC AdBot (Login to Remove)

 


#2 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,952 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:05:05 PM

Posted 06 March 2018 - 05:32 PM

Greetings AMINAL and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that.

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Please copy and paste the contents of the 2 reports in your reply. Use multiple posts if necessary.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#3 AMINAL

AMINAL
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 06 March 2018 - 06:25 PM

Hello! Thank you so much for offering to help, I'll gladly accept it.
 
The install got locked into safe mode somehow, and I haven't been able to boot normally - so I used the Windows Media Creation Tool to download the ISO, then I used Rufus to make it EFI bootable.
 
When I booted from the drive it couldn't restore anything because it said I had the "wrong account password", which was a complete lie.
 
So I reinstalled windows again and here I am.
 
To the logs
 
I have run FRST as admin and I'm pasting the logs directly here from the files that pop up once it finished.
 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04.03.2018
Ran by User (07-03-2018 00:11:35)
Running from C:\Users\User\Downloads
Windows 10 Pro Version 1709 16299.251 (X64) (2018-03-06 23:02:36)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2636108186-4124531811-1247225039-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2636108186-4124531811-1247225039-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2636108186-4124531811-1247225039-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-2636108186-4124531811-1247225039-501 - Limited - Disabled)
User (S-1-5-21-2636108186-4124531811-1247225039-1001 - Administrator - Enabled) => C:\Users\User
WDAGUtilityAccount (S-1-5-21-2636108186-4124531811-1247225039-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 65.0.3325.146 - Google Inc.)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4463 - Intel Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2636108186-4124531811-1247225039-1001\...\OneDriveSetup.exe) (Version: 17.005.0107.0008 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-06-03] (Intel Corporation)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {21A7F22E-BB77-4F29-969E-7612706993CC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
Task: {CE609623-491A-41D3-8218-6B0C3D2B26CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
==================== Loaded Modules (Whitelisted) ==============
 
2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 ____N () C:\WINDOWS\SYSTEM32\inputhost.dll
2016-06-03 04:31 - 2016-06-03 04:31 - 000393208 _____ () C:\WINDOWS\system32\igfxTray.exe
2018-03-06 06:29 - 2018-02-22 01:26 - 011044864 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-03-06 06:29 - 2018-02-22 01:21 - 001804288 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-03-07 00:09 - 2018-03-06 09:12 - 004435288 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.146\libglesv2.dll
2018-03-07 00:09 - 2018-03-06 09:12 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.146\libegl.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2017-12-07 23:03 - 2017-12-07 23:02 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2636108186-4124531811-1247225039-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{1FA91C83-AAC4-49C5-84CF-8098ECDBFCC6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Restore Points =========================
 
ATTENTION: System Restore is disabled
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:05:32 AM) (Source: ESENT) (EventID: 522) (User: )
Description: ShellExperienceHost (3776,P,0) TILEREPOSITORYS-1-5-21-2636108186-4124531811-1247225039-1001: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
 
Error: (03/07/2018 12:04:33 AM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON.
 
Error: (03/07/2018 12:04:33 AM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON.
 
 
System errors:
=============
Error: (03/07/2018 12:09:26 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-FKROKIU)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user DESKTOP-FKROKIU\User SID (S-1-5-21-2636108186-4124531811-1247225039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (03/07/2018 12:05:28 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (03/07/2018 12:05:28 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (03/07/2018 12:02:55 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (03/07/2018 12:02:40 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The Printer Extensions and Notifications service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
 
Error: (03/07/2018 12:02:36 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (03/07/2018 12:02:36 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (02/22/2018 01:18:42 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The IP Helper service terminated with the following error: 
The device is not ready.
 
 
CodeIntegrity:
===================================
 
Date: 2018-02-22 01:19:30.370
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.
 
Date: 2018-02-22 01:19:30.368
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume10\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-6600K CPU @ 3.50GHz
Percentage of memory in use: 16%
Total physical RAM: 16255.31 MB
Available physical RAM: 13593.48 MB
Total Virtual: 19199.31 MB
Available Virtual: 16664.25 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:441.87 GB) (Free:406.37 GB) NTFS
Drive d: (DATA) (Fixed) (Total:2794.5 GB) (Free:2503.22 GB) NTFS
Drive e: (120) (Fixed) (Total:111.77 GB) (Free:111.62 GB) NTFS
Drive f: (ESD-ISO) (Removable) (Total:14.52 GB) (Free:10.52 GB) NTFS
 
\\?\Volume{26980ff9-bbf8-4f21-8057-1fce982027c3}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.14 GB) NTFS
\\?\Volume{411c3f74-da72-4d70-80a8-c19d01886cf2}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Protective MBR) (Size: 2794.5 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
========================================================
Disk: 1 (Size: 111.8 GB) (Disk ID: 0004834A)
 
Partition: GPT.
 
========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 690EA7C5)
 
Partition: GPT.
 
========================================================
Disk: 3 (Protective MBR) (Size: 14.5 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04.03.2018
Ran by User (administrator) on DESKTOP-FKROKIU (07-03-2018 00:11:11)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: defaultuser0 & User)
Platform: Windows 10 Pro Version 1709 16299.251 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Windows ® Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\CloudExperienceHostBroker.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d7255271-cc70-4e7d-bc16-3bb7a6e463f1}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
 
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-07] (Google Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2018-03-07]
CHR Extension: (Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-07]
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-07]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-07]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-07]
CHR Extension: (Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-07]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-07]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-03-07]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-07]
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AtherosSvc; C:\WINDOWS\system32\DRIVERS\AdminService.exe [414728 2017-11-08] (Windows ® Win 7 DDK provider)
S2 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [439800 2016-06-03] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [365048 2016-06-03] (Intel Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-11-26] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [70544 2017-11-08] (Qualcomm)
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [151552 2017-09-29] (Microsoft Corporation)
S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [43824 2017-12-15] ()
S3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46896 2017-12-15] ()
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [47944 2018-01-10] (SteelSeries ApS)
S3 STTub30; C:\WINDOWS\System32\Drivers\STTub30.sys [54104 2017-12-15] (STMicroelectronics)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-03-07 00:11 - 2018-03-07 00:11 - 000007130 _____ C:\Users\User\Downloads\FRST.txt
2018-03-07 00:11 - 2018-03-07 00:11 - 000000000 ____D C:\FRST
2018-03-07 00:10 - 2018-03-07 00:10 - 002403328 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2018-03-07 00:09 - 2018-03-07 00:09 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-03-07 00:09 - 2018-03-07 00:09 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-03-07 00:09 - 2018-03-07 00:09 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-07 00:09 - 2018-03-07 00:09 - 000002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-03-07 00:09 - 2018-03-07 00:09 - 000000000 ____D C:\Users\User\AppData\Local\Google
2018-03-07 00:09 - 2018-03-07 00:09 - 000000000 ____D C:\Program Files (x86)\Google
2018-03-07 00:07 - 2018-03-07 00:07 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2636108186-4124531811-1247225039-1001
2018-03-07 00:07 - 2018-03-07 00:07 - 000002364 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-03-07 00:07 - 2018-03-07 00:07 - 000000000 ___RD C:\Users\User\OneDrive
2018-03-07 00:06 - 2018-03-07 00:06 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-03-07 00:05 - 2018-03-07 00:10 - 000000000 ____D C:\Users\User\AppData\Local\Packages
2018-03-07 00:05 - 2018-03-07 00:06 - 000903780 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-03-07 00:05 - 2018-03-07 00:05 - 000000020 ___SH C:\Users\User\ntuser.ini
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 __SHD C:\Users\User\IntelGraphicsProfiles
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ___RD C:\Users\User\3D Objects
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ___HD C:\Users\User\MicrosoftEdgeBackups
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ____D C:\Users\User\AppData\Roaming\Adobe
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ____D C:\Users\User\AppData\Local\VirtualStore
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ____D C:\Users\User\AppData\Local\Publishers
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ____D C:\Users\User\AppData\Local\MicrosoftEdge
2018-03-07 00:05 - 2018-03-07 00:05 - 000000000 ____D C:\Users\User\AppData\Local\ConnectedDevicesPlatform
2018-03-07 00:04 - 2018-03-07 00:05 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-03-07 00:04 - 2018-03-07 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 __SHD C:\Users\defaultuser0\IntelGraphicsProfiles
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 ____D C:\WINDOWS\LastGood
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 ____D C:\Program Files\Intel
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 ____D C:\Program Files (x86)\Intel
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 ____D C:\Intel
2018-03-07 00:04 - 2018-03-07 00:04 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2018-03-07 00:04 - 2016-06-03 04:31 - 000091136 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-03-07 00:02 - 2018-03-07 00:04 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2018-03-07 00:02 - 2018-03-07 00:04 - 000000000 ____D C:\Users\defaultuser0
2018-03-07 00:02 - 2018-03-07 00:02 - 000000020 ___SH C:\Users\defaultuser0\ntuser.ini
2018-03-07 00:02 - 2018-03-07 00:02 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2018-03-07 00:02 - 2018-03-07 00:02 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2018-03-07 00:02 - 2018-03-07 00:02 - 000000000 ____D C:\ProgramData\USOShared
2018-03-07 00:02 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-03-06 07:43 - 2017-09-28 15:50 - 001166520 ____N (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-03-06 07:43 - 2017-09-28 15:50 - 000124624 ____N (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-03-06 07:43 - 2017-09-28 15:50 - 000035456 ____N (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-03-06 07:43 - 2017-09-22 18:19 - 000778936 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-03-06 07:43 - 2017-09-22 18:19 - 000103120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-03-06 07:43 - 2017-09-22 18:19 - 000035456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-03-06 06:29 - 2018-02-22 03:23 - 001092016 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-03-06 06:29 - 2018-02-22 03:23 - 000924648 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-03-06 06:29 - 2018-02-22 03:14 - 000270752 ____N (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-03-06 06:29 - 2018-02-22 03:13 - 000279456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2018-03-06 06:29 - 2018-02-22 03:13 - 000077216 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-03-06 06:29 - 2018-02-22 03:12 - 000613280 ____N (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-03-06 06:29 - 2018-02-22 03:11 - 000138136 ____N (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-03-06 06:29 - 2018-02-22 03:11 - 000109984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2018-03-06 06:29 - 2018-02-22 03:10 - 001577880 ____N (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-03-06 06:29 - 2018-02-22 03:10 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2018-03-06 06:29 - 2018-02-22 03:09 - 000070040 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-03-06 06:29 - 2018-02-22 03:08 - 001206688 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-03-06 06:29 - 2018-02-22 03:08 - 001055648 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-03-06 06:29 - 2018-02-22 03:08 - 000758168 ____N (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-03-06 06:29 - 2018-02-22 03:08 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-03-06 06:29 - 2018-02-22 03:08 - 000387488 ____N (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-03-06 06:29 - 2018-02-22 03:07 - 008603040 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-03-06 06:29 - 2018-02-22 03:07 - 001415296 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-03-06 06:29 - 2018-02-22 03:07 - 001209248 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-03-06 06:29 - 2018-02-22 03:07 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2018-03-06 06:29 - 2018-02-22 03:07 - 000035232 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2018-03-06 06:29 - 2018-02-22 03:06 - 002003352 ____N (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-03-06 06:29 - 2018-02-22 03:06 - 000662936 ____N (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-03-06 06:29 - 2018-02-22 03:06 - 000460704 ____N (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-03-06 06:29 - 2018-02-22 03:06 - 000272792 ____N (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-03-06 06:29 - 2018-02-22 03:03 - 000733600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2018-03-06 06:29 - 2018-02-22 03:03 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-03-06 06:29 - 2018-02-22 03:03 - 000082848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-03-06 06:29 - 2018-02-22 03:02 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2018-03-06 06:29 - 2018-02-22 03:00 - 000494488 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-03-06 06:29 - 2018-02-22 03:00 - 000187296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2018-03-06 06:29 - 2018-02-22 02:59 - 021351624 ____N (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-03-06 06:29 - 2018-02-22 02:54 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2018-03-06 06:29 - 2018-02-22 02:52 - 000103328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-03-06 06:29 - 2018-02-22 02:51 - 000555424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-03-06 06:29 - 2018-02-22 02:51 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2018-03-06 06:29 - 2018-02-22 02:51 - 000045472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-03-06 06:29 - 2018-02-22 02:50 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-03-06 06:29 - 2018-02-22 02:50 - 000229272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2018-03-06 06:29 - 2018-02-22 01:53 - 000211872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-03-06 06:29 - 2018-02-22 01:50 - 025253376 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-03-06 06:29 - 2018-02-22 01:41 - 020286120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-03-06 06:29 - 2018-02-22 01:31 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2018-03-06 06:29 - 2018-02-22 01:31 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2018-03-06 06:29 - 2018-02-22 01:30 - 000201728 ____N (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-03-06 06:29 - 2018-02-22 01:30 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2018-03-06 06:29 - 2018-02-22 01:30 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-03-06 06:29 - 2018-02-22 01:30 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys
2018-03-06 06:29 - 2018-02-22 01:28 - 000675328 ____N (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-03-06 06:29 - 2018-02-22 01:27 - 001282048 ____N (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-03-06 06:29 - 2018-02-22 01:26 - 023671808 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-03-06 06:29 - 2018-02-22 01:26 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-03-06 06:29 - 2018-02-22 01:26 - 000441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2018-03-06 06:29 - 2018-02-22 01:25 - 000086528 ____N (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2018-03-06 06:29 - 2018-02-22 01:22 - 008110080 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-03-06 06:29 - 2018-02-22 01:20 - 000162304 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2018-03-06 06:29 - 2018-02-22 01:18 - 019352576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-03-06 06:29 - 2018-02-22 01:18 - 018923008 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-03-06 06:29 - 2018-02-22 01:18 - 000155648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-03-06 06:29 - 2018-02-22 01:16 - 001286144 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-03-06 06:29 - 2018-02-22 01:16 - 000459776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-03-06 06:29 - 2018-02-22 01:16 - 000050176 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2018-03-06 06:29 - 2018-02-22 01:12 - 006031360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-03-06 06:29 - 2018-02-22 01:12 - 000076288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2018-03-05 11:51 - 2018-02-10 07:21 - 000479912 ____N (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-03-05 11:51 - 2018-02-10 07:20 - 000599448 ____N (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-03-05 11:51 - 2018-02-10 07:19 - 001133888 ____N (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-03-05 11:51 - 2018-02-10 07:18 - 001193192 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-03-05 11:51 - 2018-02-10 07:18 - 000319864 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-03-05 11:51 - 2018-02-10 07:18 - 000098272 ____N (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2018-03-05 11:51 - 2018-02-10 07:18 - 000022400 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2018-03-05 11:51 - 2018-02-10 07:16 - 002406456 ____N (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-03-05 11:51 - 2018-02-10 07:16 - 000739696 ____N (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-03-05 11:51 - 2018-02-10 07:15 - 002514944 ____N (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-03-05 11:51 - 2018-02-10 07:15 - 001954048 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-03-05 11:51 - 2018-02-10 07:15 - 000471968 ____N (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-03-05 11:51 - 2018-02-10 07:14 - 004504464 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-03-05 11:51 - 2018-02-10 07:14 - 002395032 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-03-05 11:51 - 2018-02-10 07:14 - 001002592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-03-05 11:51 - 2018-02-10 07:13 - 001416392 ____N (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-03-05 11:51 - 2018-02-10 07:13 - 000535960 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2018-03-05 11:51 - 2018-02-10 07:13 - 000408984 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-03-05 11:51 - 2018-02-10 07:13 - 000373656 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-03-05 11:51 - 2018-02-10 07:12 - 004537040 ____N (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2018-03-05 11:51 - 2018-02-10 07:12 - 001313016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2018-03-05 11:51 - 2018-02-10 07:12 - 001277848 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-03-05 11:51 - 2018-02-10 07:11 - 001029528 ____N (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2018-03-05 11:51 - 2018-02-10 07:11 - 000711432 ____N (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-03-05 11:51 - 2018-02-10 07:11 - 000677784 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-03-05 11:51 - 2018-02-10 07:10 - 002447768 ____N (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-03-05 11:51 - 2018-02-10 07:10 - 000749976 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-03-05 11:51 - 2018-02-10 07:10 - 000614160 ____N (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-03-05 11:51 - 2018-02-10 07:10 - 000246168 ____N (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-03-05 11:51 - 2018-02-10 07:10 - 000154520 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2018-03-05 11:51 - 2018-02-10 07:09 - 003904296 ____N (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-03-05 11:51 - 2018-02-10 07:09 - 000755712 ____N (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-03-05 11:51 - 2018-02-10 07:09 - 000525208 ____N (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-03-05 11:51 - 2018-02-10 07:09 - 000491264 ____N (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-03-05 11:51 - 2018-02-10 07:09 - 000075160 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-03-05 11:51 - 2018-02-10 07:08 - 007675784 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-03-05 11:51 - 2018-02-10 07:08 - 003010248 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-03-05 11:51 - 2018-02-10 07:08 - 002574232 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-03-05 11:51 - 2018-02-10 07:08 - 000687552 ____N (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2018-03-05 11:51 - 2018-02-10 07:08 - 000398824 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-03-05 11:51 - 2018-02-10 07:08 - 000096200 ____N (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2018-03-05 11:51 - 2018-02-10 07:08 - 000048112 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2018-03-05 11:51 - 2018-02-10 07:07 - 004506576 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-03-05 11:51 - 2018-02-10 07:07 - 002710728 ____N (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-03-05 11:51 - 2018-02-10 07:07 - 000705944 ____N (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-03-05 11:51 - 2018-02-10 07:07 - 000436632 ____N (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 004486904 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000824896 ____N (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000819096 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2018-03-05 11:51 - 2018-02-10 07:06 - 000727448 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-03-05 11:51 - 2018-02-10 07:06 - 000594048 ____N (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000519144 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-03-05 11:51 - 2018-02-10 07:06 - 000494488 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-03-05 11:51 - 2018-02-10 07:06 - 000356952 ____N (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000189336 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000100248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2018-03-05 11:51 - 2018-02-10 07:06 - 000087384 ____N (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-03-05 11:51 - 2018-02-10 07:05 - 000688064 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-03-05 11:51 - 2018-02-10 07:05 - 000413888 ____N (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-03-05 11:51 - 2018-02-10 07:05 - 000070856 ____N (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 007384576 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 006791984 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 001778584 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 001628056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 001430760 ____N (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2018-03-05 11:51 - 2018-02-10 07:04 - 001426672 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 001254144 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 001170008 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 000614296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2018-03-05 11:51 - 2018-02-10 07:04 - 000603920 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-03-05 11:51 - 2018-02-10 07:04 - 000374032 ____N (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-03-05 11:51 - 2018-02-10 07:04 - 000339872 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 000260896 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 000212880 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-03-05 11:51 - 2018-02-10 07:04 - 000093592 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 001619808 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 000849304 ____N (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 000722616 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 000706600 ____N (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 000404888 ____N (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2018-03-05 11:51 - 2018-02-10 07:03 - 000098712 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 002773400 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-03-05 11:51 - 2018-02-10 07:02 - 002220952 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 001420696 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 001103768 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-03-05 11:51 - 2018-02-10 07:02 - 000831384 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000813976 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000744856 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000670104 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000645528 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000628632 ____N (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000617304 ____N (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000495000 ____N (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000397720 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2018-03-05 11:51 - 2018-02-10 07:02 - 000231320 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2018-03-05 11:51 - 2018-02-10 07:02 - 000040352 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2018-03-05 11:51 - 2018-02-10 06:22 - 001930224 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-03-05 11:51 - 2018-02-10 06:21 - 001615712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-03-05 11:51 - 2018-02-10 06:18 - 001384288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-03-05 11:51 - 2018-02-10 06:18 - 000022424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll
2018-03-05 11:51 - 2018-02-10 06:17 - 002255112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-03-05 11:51 - 2018-02-10 06:17 - 000597160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-03-05 11:51 - 2018-02-10 06:17 - 000542856 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-03-05 11:51 - 2018-02-10 06:15 - 001145624 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-03-05 11:51 - 2018-02-10 06:12 - 004382032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2018-03-05 11:51 - 2018-02-10 06:11 - 001250528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2018-03-05 11:51 - 2018-02-10 06:10 - 000422592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-03-05 11:51 - 2018-02-10 06:09 - 006092152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-03-05 11:51 - 2018-02-10 06:09 - 003485392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-03-05 11:51 - 2018-02-10 06:09 - 002338776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-03-05 11:51 - 2018-02-10 06:09 - 001123456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-03-05 11:51 - 2018-02-10 06:09 - 000559976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2018-03-05 11:51 - 2018-02-10 06:09 - 000354200 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2018-03-05 11:51 - 2018-02-10 06:08 - 003980720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-03-05 11:51 - 2018-02-10 06:08 - 002193168 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-03-05 11:51 - 2018-02-10 06:08 - 000592792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000543920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000527864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000284112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000123808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000089504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000083216 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
2018-03-05 11:51 - 2018-02-10 06:07 - 000061024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2018-03-05 11:51 - 2018-02-10 06:06 - 006481640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-03-05 11:51 - 2018-02-10 06:06 - 006014688 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-03-05 11:51 - 2018-02-10 06:06 - 004670728 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-03-05 11:51 - 2018-02-10 06:06 - 000982528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 001246432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 001149272 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000718232 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000662208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000654456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000551672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000386424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000193248 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000129184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000079256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2018-03-05 11:51 - 2018-02-10 06:05 - 000077552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2018-03-05 11:51 - 2018-02-10 06:05 - 000074992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2018-03-05 11:51 - 2018-02-10 06:04 - 001491352 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-03-05 11:51 - 2018-02-10 06:04 - 000027032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVClientPS.dll
2018-03-05 11:51 - 2018-02-10 06:03 - 000505160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2018-03-05 11:51 - 2018-02-10 05:50 - 003665408 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-03-05 11:51 - 2018-02-10 05:50 - 001313792 ____N (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-03-05 11:51 - 2018-02-10 05:50 - 001294848 ____N (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-03-05 11:51 - 2018-02-10 05:50 - 000849920 ____N (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-03-05 11:51 - 2018-02-10 05:50 - 000496128 ____N (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-03-05 11:51 - 2018-02-10 05:49 - 001664512 ____N (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-03-05 11:51 - 2018-02-10 05:49 - 000848896 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-03-05 11:51 - 2018-02-10 05:49 - 000536576 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-03-05 11:51 - 2018-02-10 05:49 - 000385536 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2018-03-05 11:51 - 2018-02-10 05:49 - 000329728 ____N (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-03-05 11:51 - 2018-02-10 05:49 - 000326656 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-03-05 11:51 - 2018-02-10 05:49 - 000232960 ____N (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
2018-03-05 11:51 - 2018-02-10 05:49 - 000211456 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-03-05 11:51 - 2018-02-10 05:49 - 000107520 ____N (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2018-03-05 11:51 - 2018-02-10 05:48 - 002890240 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-03-05 11:51 - 2018-02-10 05:48 - 000033280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-03-05 11:51 - 2018-02-10 05:48 - 000025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 017160704 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 013704192 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000331264 ____N (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-03-05 11:51 - 2018-02-10 05:47 - 000201216 ____N (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000143872 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000055808 ____N (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000033792 ____N (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2018-03-05 11:51 - 2018-02-10 05:47 - 000002560 ____N (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 002902528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-03-05 11:51 - 2018-02-10 05:46 - 002393600 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 001470976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 001008640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000344576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000225792 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-03-05 11:51 - 2018-02-10 05:46 - 000199168 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000173568 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000169472 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000135680 ____N (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000082432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000026112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2018-03-05 11:51 - 2018-02-10 05:46 - 000018432 ____N (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:46 - 000004608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2018-03-05 11:51 - 2018-02-10 05:45 - 007545344 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000306688 ____N (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000288768 ____N (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000288256 ____N (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000115200 ____N (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000093696 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000079872 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000066048 ____N (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000043008 ____N (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2018-03-05 11:51 - 2018-02-10 05:45 - 000016384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EnterpriseAppMgmtClient.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 001498112 ____N (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000800768 ____N (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2018-03-05 11:51 - 2018-02-10 05:44 - 000579072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000539136 ____N (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000503296 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_User.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000431616 ____N (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000427008 ____N (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000388608 ____N (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000336896 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000302592 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000276992 ____N (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000276480 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000208384 ____N (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000059392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000048640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2018-03-05 11:51 - 2018-02-10 05:44 - 000002560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 008020480 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 006466560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 003756032 ____N (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000580608 ____N (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000570368 ____N (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000566272 ____N (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000456704 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000394752 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-03-05 11:51 - 2018-02-10 05:43 - 000391168 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000311808 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000268288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000247296 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000181248 ____N (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000150528 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppManagementConfiguration.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000147456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000110080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000084480 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2018-03-05 11:51 - 2018-02-10 05:43 - 000013312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 001425408 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 001216000 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 001113600 ____N (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2018-03-05 11:51 - 2018-02-10 05:42 - 000975872 ____N (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000950784 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000837632 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000813568 ____N (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000792064 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000731136 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2018-03-05 11:51 - 2018-02-10 05:42 - 000708096 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000634880 ____N (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000403968 ____N (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000397824 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000286720 ____N (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000270336 ____N (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000236032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000234496 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000233984 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000228352 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-03-05 11:51 - 2018-02-10 05:42 - 000225280 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2018-03-05 11:51 - 2018-02-10 05:42 - 000184832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000160768 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000160256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000130048 ____N (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000112640 ____N (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000098304 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000078336 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000035328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2018-03-05 11:51 - 2018-02-10 05:42 - 000024064 ____N (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe
2018-03-05 11:51 - 2018-02-10 05:41 - 001495552 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000859648 ____N (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2018-03-05 11:51 - 2018-02-10 05:41 - 000820224 ____N (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000815616 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000721408 ____N (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000504832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000466432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000451072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000405504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000401408 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000377856 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-03-05 11:51 - 2018-02-10 05:41 - 000369152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000365568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000288768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000255488 ____N (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000221184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000133120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppManagementConfiguration.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000124928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2018-03-05 11:51 - 2018-02-10 05:41 - 000063488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 012831744 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 004498432 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-03-05 11:51 - 2018-02-10 05:40 - 004113408 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 003405824 ____N (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 003367936 ____N (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 002873344 ____N (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 001234432 ____N (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 001002496 ____N (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000940544 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000939520 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000930816 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000886784 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2018-03-05 11:51 - 2018-02-10 05:40 - 000856576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000800256 ____N (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000756736 ____N (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000691200 ____N (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000601088 ____N (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000559104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000526336 ____N (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000508416 ____N (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2018-03-05 11:51 - 2018-02-10 05:40 - 000499200 ____N (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000463360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2018-03-05 11:51 - 2018-02-10 05:40 - 000421376 ____N (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000386560 ____N (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000366080 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000343040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000298496 ____N (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000232960 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000195072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:40 - 000177152 ____N (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 011925504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 005500928 ____N (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 004748288 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 004592640 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 002976256 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 002741248 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 002677760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 002490880 ____N (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 002209280 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 001669120 ____N (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000908800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000721920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000680960 ____N (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000658432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000648704 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000621056 ____N (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000462848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000447488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000346112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000315904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2018-03-05 11:51 - 2018-02-10 05:39 - 000157696 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000096256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2018-03-05 11:51 - 2018-02-10 05:39 - 000020992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2018-03-05 11:51 - 2018-02-10 05:38 - 006722560 ____N (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2018-03-05 11:51 - 2018-02-10 05:38 - 006567936 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 005833216 ____N (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 004815360 ____N (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 003334144 ____N (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 003169280 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 003125760 ____N (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 002857984 ____N (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 002184192 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 002086400 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-03-05 11:51 - 2018-02-10 05:38 - 002082304 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-03-05 11:51 - 2018-02-10 05:38 - 001968640 ____N (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001597952 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001547776 ____N (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001353728 ____N (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001228800 ____N (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001167360 ____N (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001166336 ____N (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 001057792 ____N (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000982016 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-03-05 11:51 - 2018-02-10 05:38 - 000939520 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000885248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000863744 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000755712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2018-03-05 11:51 - 2018-02-10 05:38 - 000699904 ____N (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000668160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000653312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000598528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000556544 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000524800 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000509440 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000506880 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000462336 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000401920 ____N (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-03-05 11:51 - 2018-02-10 05:38 - 000324608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-03-05 11:51 - 2018-02-10 05:38 - 000174592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 004839424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 004772352 ____N (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 003678720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 003578368 ____N (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 003419136 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-03-05 11:51 - 2018-02-10 05:37 - 003287040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 002784256 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 002523648 ____N (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 001822208 ____N (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 001488384 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000965632 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000862208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000456704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000417792 ____N (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000365568 ____N (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000308224 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2018-03-05 11:51 - 2018-02-10 05:37 - 000199680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2018-03-05 11:51 - 2018-02-10 05:37 - 000198656 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 002869760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 002859520 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 002464768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 002462208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 002035712 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 001759744 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 001739264 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 001559552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 001342464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 001230848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000915968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000695296 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000685056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000666624 ____N (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000599552 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000576512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000559104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000403968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000383488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2018-03-05 11:51 - 2018-02-10 05:36 - 000141824 ____N (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 005388800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 004384768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 002814976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 002413568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 002349568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 002013184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-03-05 11:51 - 2018-02-10 05:35 - 001474560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000963584 ____N (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000943104 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000941568 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000918528 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000862208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000842240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000826880 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-03-05 11:51 - 2018-02-10 05:35 - 000796160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000667136 ____N (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000455680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000433664 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000402944 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000332288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
2018-03-05 11:51 - 2018-02-10 05:35 - 000329728 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2018-03-05 11:51 - 2018-02-10 05:34 - 006532096 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2018-03-05 11:51 - 2018-02-10 05:34 - 004249600 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-03-05 11:51 - 2018-02-10 05:34 - 002983936 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2018-03-05 11:51 - 2018-02-10 05:34 - 000624640 ____N (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2018-03-05 11:51 - 2018-02-10 05:34 - 000464384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2018-03-05 11:51 - 2018-02-10 05:34 - 000433152 ____N (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2018-03-05 11:51 - 2018-02-10 05:34 - 000111104 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 001936384 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2018-03-05 11:51 - 2018-02-10 05:33 - 001661440 ____N (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 001570816 ____N (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2018-03-05 11:51 - 2018-02-10 05:33 - 001557504 ____N (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2018-03-05 11:51 - 2018-02-10 05:33 - 001509888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000621568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000620544 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000604672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000482816 ____N (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000341504 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000266752 ____N (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2018-03-05 11:51 - 2018-02-10 05:33 - 000217088 ____N (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000125952 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2018-03-05 11:51 - 2018-02-10 05:33 - 000093696 ____N (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2018-03-05 11:51 - 2018-02-10 05:32 - 002427904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2018-03-05 11:51 - 2018-02-10 05:32 - 000681472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2018-03-05 11:51 - 2018-02-10 05:32 - 000392704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2018-03-05 11:51 - 2018-02-10 05:32 - 000073216 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2018-03-05 11:51 - 2018-02-10 05:32 - 000056832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll
2018-03-05 11:51 - 2018-02-10 05:31 - 001488896 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2018-03-05 11:51 - 2018-02-10 05:31 - 001159680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2018-03-05 11:51 - 2018-02-10 05:31 - 000301056 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll
2018-03-05 11:51 - 2018-02-10 05:31 - 000190464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2018-03-05 11:51 - 2018-02-10 05:31 - 000078848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2018-03-05 11:51 - 2018-02-10 03:59 - 000804240 ____N C:\WINDOWS\SysWOW64\locale.nls
2018-03-05 11:51 - 2018-02-10 03:59 - 000804240 ____N C:\WINDOWS\system32\locale.nls
2018-03-05 11:51 - 2018-02-09 04:35 - 004959688 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2018-03-05 11:51 - 2018-02-09 04:35 - 001234888 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2018-03-05 11:51 - 2018-02-09 04:35 - 001002952 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2018-03-05 11:51 - 2018-02-09 04:35 - 000892872 ____N (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2018-03-05 11:51 - 2018-02-09 04:35 - 000065992 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2018-03-05 11:51 - 2018-02-02 04:36 - 003903944 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2018-03-05 11:51 - 2018-02-02 04:36 - 000921032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2018-03-05 11:51 - 2018-02-02 04:36 - 000854976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2018-03-05 11:51 - 2018-02-02 04:36 - 000649672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2018-03-05 11:51 - 2018-02-02 04:36 - 000054720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2018-03-05 11:51 - 2018-01-01 18:15 - 000956416 ____N (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-03-05 11:51 - 2018-01-01 13:52 - 000066712 ____N (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2018-03-05 11:51 - 2018-01-01 13:51 - 000191816 ____N (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-03-05 11:51 - 2018-01-01 13:51 - 000059800 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2018-03-05 11:51 - 2018-01-01 13:50 - 005905752 ____N (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-03-05 11:51 - 2018-01-01 13:50 - 000780464 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-03-05 11:51 - 2018-01-01 13:49 - 000292376 ____N (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2018-03-05 11:51 - 2018-01-01 13:48 - 007831760 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-03-05 11:51 - 2018-01-01 13:48 - 000382360 ____N (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-03-05 11:51 - 2018-01-01 13:47 - 000649304 ____N (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2018-03-05 11:51 - 2018-01-01 13:46 - 000898216 ____N (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-03-05 11:51 - 2018-01-01 13:45 - 000398744 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2018-03-05 11:51 - 2018-01-01 13:43 - 001173576 ____N (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-03-05 11:51 - 2018-01-01 13:43 - 000367336 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-03-05 11:51 - 2018-01-01 13:43 - 000062872 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys
2018-03-05 11:51 - 2018-01-01 13:42 - 000184984 ____N (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-03-05 11:51 - 2018-01-01 13:41 - 000559512 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-03-05 11:51 - 2018-01-01 13:41 - 000549552 ____N (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2018-03-05 11:51 - 2018-01-01 13:39 - 000902416 ____N (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-03-05 11:51 - 2018-01-01 13:39 - 000508264 ____N (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-03-05 11:51 - 2018-01-01 13:39 - 000129432 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-03-05 11:51 - 2018-01-01 13:38 - 000038808 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2018-03-05 11:51 - 2018-01-01 13:37 - 000461720 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2018-03-05 11:51 - 2018-01-01 13:36 - 000166296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2018-03-05 11:51 - 2018-01-01 13:36 - 000113560 ____N (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2018-03-05 11:51 - 2018-01-01 13:36 - 000057752 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys
2018-03-05 11:51 - 2018-01-01 13:34 - 001336344 ____N (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-03-05 11:51 - 2018-01-01 13:27 - 000163736 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-03-05 11:51 - 2018-01-01 13:26 - 000428952 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-03-05 11:51 - 2018-01-01 13:26 - 000081304 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2018-03-05 11:51 - 2018-01-01 13:25 - 000615768 ____N (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-03-05 11:51 - 2018-01-01 13:25 - 000147864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2018-03-05 11:51 - 2018-01-01 13:06 - 000311192 ____N (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2018-03-05 11:51 - 2018-01-01 13:03 - 000777904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-03-05 11:51 - 2018-01-01 13:03 - 000650328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-03-05 11:51 - 2018-01-01 13:03 - 000566664 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-03-05 11:51 - 2018-01-01 13:03 - 000123512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-03-05 11:51 - 2018-01-01 12:49 - 000481464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2018-03-05 11:51 - 2018-01-01 12:49 - 000258808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2018-03-05 11:51 - 2018-01-01 12:46 - 000289816 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2018-03-05 11:51 - 2018-01-01 12:45 - 005615968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-03-05 11:51 - 2018-01-01 12:45 - 000450928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2018-03-05 11:51 - 2018-01-01 12:42 - 001003152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-03-05 11:51 - 2018-01-01 12:34 - 000703568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-03-05 11:51 - 2018-01-01 12:25 - 000475648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2018-03-05 11:51 - 2018-01-01 12:25 - 000097792 ____N C:\WINDOWS\system32\runexehelper.exe
2018-03-05 11:51 - 2018-01-01 12:24 - 000240640 ____N (Microsoft Corporation) C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-03-05 11:51 - 2018-01-01 12:24 - 000202240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-03-05 11:51 - 2018-01-01 12:24 - 000096256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2018-03-05 11:51 - 2018-01-01 12:24 - 000038912 ____N (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2018-03-05 11:51 - 2018-01-01 12:23 - 000561152 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2018-03-05 11:51 - 2018-01-01 12:23 - 000250368 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-03-05 11:51 - 2018-01-01 12:23 - 000121344 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-03-05 11:51 - 2018-01-01 12:23 - 000080384 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2018-03-05 11:51 - 2018-01-01 12:23 - 000047104 ____N (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2018-03-05 11:51 - 2018-01-01 12:22 - 000032768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll
2018-03-05 11:51 - 2018-01-01 12:22 - 000031744 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2018-03-05 11:51 - 2018-01-01 12:22 - 000025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2018-03-05 11:51 - 2018-01-01 12:22 - 000017408 ____N (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2018-03-05 11:51 - 2018-01-01 12:21 - 000133632 ____N (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2018-03-05 11:51 - 2018-01-01 12:21 - 000097280 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2018-03-05 11:51 - 2018-01-01 12:21 - 000097280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys
2018-03-05 11:51 - 2018-01-01 12:21 - 000080896 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2018-03-05 11:51 - 2018-01-01 12:21 - 000062976 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2018-03-05 11:51 - 2018-01-01 12:21 - 000040448 ____N (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000524288 ____N (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000215552 ____N (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000212992 ____N (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000204288 ____N (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000186368 ____N (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000175616 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000134656 ____N (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000133632 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000104960 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2018-03-05 11:51 - 2018-01-01 12:20 - 000082432 ____N (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000795136 ____N (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000461312 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000430080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000416768 ____N (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2018-03-05 11:51 - 2018-01-01 12:19 - 000366080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000340480 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2018-03-05 11:51 - 2018-01-01 12:19 - 000334848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000316928 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2018-03-05 11:51 - 2018-01-01 12:19 - 000188416 ____N (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000174592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000149504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000142848 ____N (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000097792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll
2018-03-05 11:51 - 2018-01-01 12:19 - 000073216 ____N (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2018-03-05 11:51 - 2018-01-01 12:18 - 000748032 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000699904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000588800 ____N (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000465920 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000436224 ____N (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000432640 ____N (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000427008 ____N (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000425984 ____N (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000380928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000374784 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000369664 ____N (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000261632 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000259072 ____N (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000210944 ____N (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000144896 ____N (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2018-03-05 11:51 - 2018-01-01 12:18 - 000082944 ____N (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 001485312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000791552 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000616960 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000555520 ____N (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000542208 ____N (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000423936 ____N (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000341504 ____N (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2018-03-05 11:51 - 2018-01-01 12:17 - 000112640 ____N (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000966656 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000956928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000664576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000624128 ____N (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000594944 ____N (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000463360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-03-05 11:51 - 2018-01-01 12:16 - 000235008 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 012687872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 001657856 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 001245184 ____N (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 000970240 ____N (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 000951808 ____N (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 000588800 ____N (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 000434176 ____N (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2018-03-05 11:51 - 2018-01-01 12:15 - 000258560 ____N (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2018-03-05 11:51 - 2018-01-01 12:14 - 001097728 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-03-05 11:51 - 2018-01-01 12:14 - 000985600 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2018-03-05 11:51 - 2018-01-01 12:14 - 000870912 ____N (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-03-05 11:51 - 2018-01-01 12:13 - 013657600 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-03-05 11:51 - 2018-01-01 12:13 - 003121664 ____N (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-03-05 11:51 - 2018-01-01 12:13 - 000897024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2018-03-05 11:51 - 2018-01-01 12:12 - 002633216 ____N (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-03-05 11:51 - 2018-01-01 12:12 - 001573376 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2018-03-05 11:51 - 2018-01-01 12:12 - 001424896 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-03-05 11:51 - 2018-01-01 12:12 - 000760320 ____N (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2018-03-05 11:51 - 2018-01-01 12:11 - 001955328 ____N (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2018-03-05 11:51 - 2018-01-01 12:11 - 001816576 ____N (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-03-05 11:51 - 2018-01-01 12:11 - 001343488 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2018-03-05 11:51 - 2018-01-01 12:11 - 000880640 ____N (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-03-05 11:51 - 2018-01-01 12:11 - 000812032 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-03-05 11:51 - 2018-01-01 12:11 - 000715776 ____N (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-03-05 11:51 - 2018-01-01 12:10 - 002528256 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-03-05 11:51 - 2018-01-01 12:10 - 000012800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll
2018-03-05 11:51 - 2018-01-01 12:09 - 000925184 ____N (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-03-05 11:51 - 2018-01-01 12:08 - 000726016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2018-03-05 11:51 - 2018-01-01 12:08 - 000505344 ____N (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2018-03-05 11:51 - 2018-01-01 12:06 - 000018944 ____N (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2018-03-05 11:51 - 2018-01-01 12:05 - 002510848 ____N (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-03-05 11:51 - 2018-01-01 12:05 - 001160704 ____N (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-03-05 11:43 - 2017-12-08 07:52 - 000666112 ____N (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-03-05 11:43 - 2017-12-08 00:34 - 001925296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-03-05 11:43 - 2017-12-08 00:34 - 001634288 ____N (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-03-05 11:43 - 2017-12-08 00:28 - 000630752 ____N (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2018-03-05 11:43 - 2017-12-08 00:22 - 000979352 ____N (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2018-03-05 11:43 - 2017-12-08 00:22 - 000137544 ____N (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-03-05 11:43 - 2017-12-08 00:16 - 001776272 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-03-05 11:43 - 2017-12-08 00:12 - 000401304 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2018-03-05 11:43 - 2017-12-07 23:56 - 001528904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-03-05 11:43 - 2017-12-07 23:55 - 001490328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-03-05 11:43 - 2017-12-07 23:55 - 000097144 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-03-05 11:43 - 2017-12-07 23:36 - 000769096 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2018-03-05 11:43 - 2017-12-07 23:33 - 000747416 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2018-03-05 11:43 - 2017-12-07 23:31 - 001522176 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-03-05 11:43 - 2017-12-07 23:29 - 000047000 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterShim.dll
2018-03-05 11:43 - 2017-12-07 23:12 - 000101376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2018-03-05 11:43 - 2017-12-07 23:10 - 000150528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-03-05 11:43 - 2017-12-07 23:09 - 001663488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2018-03-05 11:43 - 2017-12-07 23:09 - 000147456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2018-03-05 11:43 - 2017-12-07 23:09 - 000143360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2018-03-05 11:43 - 2017-12-07 23:09 - 000136704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2018-03-05 11:43 - 2017-12-07 23:08 - 000514560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2018-03-05 11:43 - 2017-12-07 23:08 - 000206336 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2018-03-05 11:43 - 2017-12-07 23:07 - 000254976 ____N (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2018-03-05 11:43 - 2017-12-07 23:07 - 000246272 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2018-03-05 11:43 - 2017-12-07 23:07 - 000172544 ____N (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-03-05 11:43 - 2017-12-07 23:07 - 000164864 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-03-05 11:43 - 2017-12-07 23:06 - 000676352 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-03-05 11:43 - 2017-12-07 23:06 - 000174080 ____N (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2018-03-05 11:43 - 2017-12-07 23:06 - 000164864 ____N (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2018-03-05 11:43 - 2017-12-07 23:05 - 001670656 ____N (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2018-03-05 11:43 - 2017-12-07 23:05 - 000559616 ____N (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2018-03-05 11:43 - 2017-12-07 23:05 - 000481792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2018-03-05 11:43 - 2017-12-07 23:05 - 000363008 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-03-05 11:43 - 2017-12-07 23:05 - 000222208 ____N (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2018-03-05 11:43 - 2017-12-07 23:05 - 000164864 ____N (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2018-03-05 11:43 - 2017-12-07 23:05 - 000019456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2018-03-05 11:43 - 2017-12-07 23:04 - 001321472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-03-05 11:43 - 2017-12-07 23:03 - 000708096 ____N (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-03-05 11:43 - 2017-12-07 23:03 - 000308736 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2018-03-05 11:43 - 2017-12-07 23:03 - 000085504 ____N (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2018-03-05 11:43 - 2017-12-07 23:02 - 002864640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2018-03-05 11:43 - 2017-12-07 23:02 - 002117632 ____N (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2018-03-05 11:43 - 2017-12-07 23:02 - 000496640 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-03-05 11:43 - 2017-12-07 23:01 - 001980928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2018-03-05 11:43 - 2017-12-07 23:01 - 000021504 ____N (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2018-03-05 11:43 - 2017-12-07 22:59 - 001666048 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-03-05 11:43 - 2017-12-07 22:58 - 003478016 ____N (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2018-03-05 11:43 - 2017-12-07 22:58 - 003211776 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-03-05 11:43 - 2017-12-07 22:56 - 002666496 ____N (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2018-03-05 11:43 - 2017-11-26 21:35 - 017084416 ____N (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-03-05 11:43 - 2017-11-26 21:32 - 021754368 ____N (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-03-05 11:43 - 2017-11-26 21:15 - 000882688 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-03-05 11:43 - 2017-11-26 17:43 - 000618496 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-03-05 11:43 - 2017-11-26 14:45 - 001642520 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-03-05 11:43 - 2017-11-26 14:45 - 000264040 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-03-05 11:43 - 2017-11-26 14:38 - 001636376 ____N (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-03-05 11:43 - 2017-11-26 14:30 - 001488792 ____N (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-03-05 11:43 - 2017-11-26 14:29 - 000891800 ____N (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-03-05 11:43 - 2017-11-26 14:29 - 000840440 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2018-03-05 11:43 - 2017-11-26 14:29 - 000703536 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-03-05 11:43 - 2017-11-26 14:28 - 001012120 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2018-03-05 11:43 - 2017-11-26 14:27 - 002412168 ____N (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-03-05 11:43 - 2017-11-26 14:27 - 000464408 ____N (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2018-03-05 11:43 - 2017-11-26 14:27 - 000230296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2018-03-05 11:43 - 2017-11-26 14:23 - 001694224 ____N (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-03-05 11:43 - 2017-11-26 14:23 - 001054280 ____N (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-03-05 11:43 - 2017-11-26 13:55 - 000301056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-03-05 11:43 - 2017-11-26 13:55 - 000175104 ____N (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2018-03-05 11:43 - 2017-11-26 13:55 - 000084992 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2018-03-05 11:43 - 2017-11-26 13:54 - 000092160 ____N (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-03-05 11:43 - 2017-11-26 13:43 - 000239104 ____N (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-03-05 11:43 - 2017-11-26 13:36 - 000168448 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2018-03-05 11:43 - 2017-11-26 13:36 - 000041472 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2018-03-05 11:43 - 2017-11-26 13:35 - 000170496 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2018-03-05 11:43 - 2017-11-26 13:35 - 000057856 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2018-03-05 11:43 - 2017-11-26 13:34 - 000126464 ____N (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2018-03-05 11:43 - 2017-11-26 13:33 - 000361984 ____N (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2018-03-05 11:43 - 2017-11-26 13:31 - 000529408 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2018-03-05 11:43 - 2017-11-26 13:29 - 000474112 ____N (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2018-03-05 11:43 - 2017-11-26 13:29 - 000238080 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-03-05 11:43 - 2017-11-26 13:26 - 000830464 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2018-03-05 11:43 - 2017-11-26 13:26 - 000770048 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-03-05 11:43 - 2017-11-26 13:26 - 000432640 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2018-03-05 11:43 - 2017-11-26 13:25 - 000516096 ____N (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-03-05 11:43 - 2017-11-26 13:25 - 000354304 ____N (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2018-03-05 11:43 - 2017-11-26 13:25 - 000292864 ____N (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-03-05 11:43 - 2017-11-26 13:25 - 000266752 ____N (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-03-05 11:43 - 2017-11-26 13:19 - 000887296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-03-05 11:43 - 2017-11-26 13:19 - 000059392 ____N (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2018-03-05 11:43 - 2017-11-26 13:18 - 003186688 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-03-05 11:43 - 2017-11-26 13:17 - 001054720 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-03-05 11:43 - 2017-11-26 13:04 - 002596352 ____N (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-03-05 11:43 - 2017-11-26 13:00 - 000899584 ____N (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2018-03-05 11:43 - 2017-11-26 12:59 - 000259072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-03-05 11:43 - 2017-11-26 12:58 - 000151040 ____N (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2018-03-05 11:43 - 2017-11-26 12:48 - 000534528 ____N (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2018-03-05 11:43 - 2017-11-26 12:48 - 000079360 ____N (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2018-03-05 11:43 - 2017-11-26 12:21 - 001474680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-03-05 11:43 - 2017-11-26 12:21 - 001432816 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-03-05 11:43 - 2017-11-26 12:02 - 001124760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-03-05 11:43 - 2017-11-26 12:01 - 000791960 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-03-05 11:43 - 2017-11-26 12:01 - 000746904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2018-03-05 11:43 - 2017-11-26 12:01 - 000590944 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-03-05 11:43 - 2017-11-26 12:01 - 000506256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2018-03-05 11:43 - 2017-11-26 12:00 - 001990160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-03-05 11:43 - 2017-11-26 12:00 - 000353848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-03-05 11:43 - 2017-11-26 11:58 - 001057824 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-03-05 11:43 - 2017-11-26 11:51 - 001558856 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2018-03-05 11:43 - 2017-11-26 11:41 - 000372224 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-03-05 11:43 - 2017-11-26 11:41 - 000133632 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2018-03-05 11:43 - 2017-11-26 11:41 - 000065536 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2018-03-05 11:43 - 2017-11-26 11:40 - 000160256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-03-05 11:43 - 2017-11-26 11:38 - 000271872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2018-03-05 11:43 - 2017-11-26 11:36 - 000444928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-03-05 11:43 - 2017-11-26 11:36 - 000351232 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2018-03-05 11:43 - 2017-11-26 11:36 - 000315392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2018-03-05 11:43 - 2017-11-26 11:35 - 000557056 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2018-03-05 11:43 - 2017-11-26 11:35 - 000293888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2018-03-05 11:43 - 2017-11-26 11:35 - 000242176 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-03-05 11:43 - 2017-11-26 11:31 - 000660480 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-03-05 11:43 - 2017-11-26 11:29 - 000823808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-03-05 11:43 - 2017-11-26 11:24 - 000614912 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2018-03-05 11:43 - 2017-11-26 11:24 - 000068096 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2018-03-05 11:43 - 2017-11-19 08:35 - 003331520 ____N C:\WINDOWS\system32\Windows.Mirage.dll
2018-03-05 11:43 - 2017-11-19 03:20 - 002491112 ____N C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-03-05 11:43 - 2017-10-25 10:11 - 000336896 ____N (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2018-03-05 11:43 - 2017-10-25 05:41 - 000362176 ____N (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2018-03-05 11:43 - 2017-10-25 05:40 - 000269696 ____N C:\WINDOWS\system32\FaceProcessorCore.dll
2018-03-05 11:43 - 2017-10-25 05:39 - 000479912 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2018-03-05 11:43 - 2017-10-25 05:29 - 002269080 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-03-05 11:43 - 2017-10-25 05:29 - 001507736 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-03-05 11:43 - 2017-10-25 05:27 - 001970520 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-03-05 11:43 - 2017-10-25 05:20 - 002717392 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-03-05 11:43 - 2017-10-25 04:27 - 001454568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-03-05 11:43 - 2017-10-25 04:27 - 001377080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-03-05 11:43 - 2017-10-25 04:27 - 001015008 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-03-05 11:43 - 2017-10-25 04:22 - 002465848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-03-05 11:43 - 2017-10-25 04:18 - 000975872 ____N C:\WINDOWS\system32\FaceProcessor.dll
2018-03-05 11:43 - 2017-10-25 04:18 - 000135168 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2018-03-05 11:43 - 2017-10-25 04:18 - 000095744 ____N (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-03-05 11:43 - 2017-10-25 04:18 - 000056320 ____N (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2018-03-05 11:43 - 2017-10-25 04:16 - 000227328 ____N (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-03-05 11:43 - 2017-10-25 04:16 - 000114688 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2018-03-05 11:43 - 2017-10-25 04:14 - 000046080 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2018-03-05 11:43 - 2017-10-25 04:11 - 000768512 ____N (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2018-03-05 11:43 - 2017-10-25 04:09 - 001806336 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2018-03-05 11:43 - 2017-10-25 04:08 - 000654848 ____N (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2018-03-05 11:43 - 2017-10-25 04:08 - 000487424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2018-03-05 11:43 - 2017-10-25 04:07 - 000064512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2018-03-05 11:43 - 2017-10-25 04:05 - 000022528 ____N (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2018-03-05 11:43 - 2017-10-25 04:04 - 000124928 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2018-03-05 11:43 - 2017-10-25 04:04 - 000041984 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2018-03-05 11:43 - 2017-10-25 04:02 - 000591872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2018-03-05 11:43 - 2017-10-25 03:58 - 001280000 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2018-03-05 11:43 - 2017-10-25 03:54 - 000022528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2018-03-05 11:43 - 2017-10-20 06:08 - 000339968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-03-05 11:43 - 2017-10-10 07:54 - 001463856 ____N (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-03-05 11:43 - 2017-10-10 07:49 - 001554216 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-03-05 11:43 - 2017-10-10 07:49 - 000060824 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2018-03-05 11:43 - 2017-10-10 07:43 - 000418712 ____N (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2018-03-05 11:43 - 2017-10-10 07:31 - 001323840 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-03-05 11:43 - 2017-10-10 07:07 - 001261864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-03-05 11:43 - 2017-10-10 07:06 - 000353688 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2018-03-05 11:43 - 2017-10-10 06:43 - 000566272 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2018-03-05 11:43 - 2017-10-10 06:43 - 000070656 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2018-03-05 11:43 - 2017-10-10 06:42 - 000326144 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2018-03-05 11:43 - 2017-10-10 06:33 - 000086016 ____N (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2018-03-05 11:43 - 2017-10-10 06:33 - 000058880 ____N (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2018-03-05 11:43 - 2017-10-10 06:31 - 000665088 ____N (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2018-03-05 11:43 - 2017-10-10 06:31 - 000478208 ____N (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2018-03-05 11:43 - 2017-10-10 06:30 - 000442880 ____N (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2018-03-05 11:43 - 2017-10-10 06:24 - 000285696 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2018-03-05 11:43 - 2017-10-03 23:42 - 000640512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2018-03-05 11:43 - 2017-10-03 23:42 - 000008704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2018-03-05 11:29 - 2017-09-29 04:05 - 006346752 ____N (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons001d.dll
2018-03-05 11:29 - 2017-09-29 04:03 - 000164352 ____N (Microsoft Corporation) C:\WINDOWS\system32\NlsData001d.dll
2018-03-05 11:29 - 2017-09-29 04:00 - 004434432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MLS6.dll
2018-03-05 11:29 - 2017-09-29 03:44 - 006346752 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons001d.dll
2018-03-05 11:29 - 2017-09-29 03:43 - 000128000 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001d.dll
2018-03-05 11:29 - 2017-09-29 03:42 - 004382720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS6.dll
2018-02-22 01:19 - 2018-02-22 01:19 - 000000000 _SHDL C:\Users\Default User
2018-02-22 01:19 - 2018-02-22 01:19 - 000000000 _SHDL C:\Users\All Users
2018-02-22 01:19 - 2018-02-22 01:19 - 000000000 _SHDL C:\Documents and Settings
2018-02-22 01:18 - 2018-02-22 01:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-02-22 01:18 - 2018-02-22 01:18 - 000222832 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-02-22 01:18 - 2018-02-22 01:18 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2018-02-22 01:18 - 2018-02-22 01:18 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-02-22 01:18 - 2018-02-22 01:18 - 000000000 ____D C:\WINDOWS\ServiceProfiles
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-03-07 00:10 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-03-07 00:05 - 2017-12-07 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2018-03-07 00:05 - 2017-12-07 23:02 - 000000000 ____D C:\WINDOWS\INF
2018-03-07 00:04 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-03-07 00:03 - 2017-12-07 23:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-03-07 00:02 - 2017-12-07 23:06 - 000000000 ____D C:\WINDOWS\Panther
2018-03-07 00:02 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\system32\spool
2018-03-07 00:02 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2018-03-07 00:02 - 2017-12-07 23:03 - 000000000 ____D C:\ProgramData\USOPrivate
2018-03-06 06:29 - 2017-09-29 14:40 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
2018-02-22 01:19 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-02-22 01:19 - 2017-12-07 23:03 - 000000000 ____D C:\WINDOWS\CSC
2018-02-22 01:19 - 2017-12-07 23:00 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2018-02-22 01:18 - 2017-12-07 23:03 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-02-22 01:18 - 2017-12-07 23:03 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-02-22 01:18 - 2017-12-07 23:00 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-02-06 03:49 - 2017-12-07 23:04 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-02-06 03:49 - 2017-12-07 23:04 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
C:\WINDOWS\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION
 
LastRegBack: 2018-02-22 01:18
 
==================== End of FRST.txt ============================
[/quote]

Edited by Oh My!, 06 March 2018 - 09:40 PM.


#4 AMINAL

AMINAL
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 06 March 2018 - 06:40 PM

By the way, I created the boot USB-drive on my previous install - I don't have any other computers that I can use (been home sick with the flu).

 

I am however able to use my android phone to flash ISOs to USB-drives with ISO 2 USB, currently flashing Elementary OS onto a drive for recovery reasons.

 

I've got email notifications turned on and eagerly await your next advice, thank you. :)



#5 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,952 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:05:05 PM

Posted 07 March 2018 - 10:45 AM

Greetings.

Your computer is clean. However I would like to address another potential issue. I may end up referring you to the Windows 10 Forum but let's do this. Do you have another computer with Windows 10 Pro installed?

===================================================

Farbar's Recovery Scan Tool - Run Fix in Normal or Safe Mode

--------------------
  • Right click on the FRST icon and select Run as administrator
  • Highlight the below information then hit the Ctrl + C keys at the same time
Start::
CloseProcesses:
cmd: sfc /scannow
End::
  • Click Fix
  • When completed he tool will create a log on the desktop called Fixlog.txt. Please copy and paste the contents of the file in your reply.
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Another Windows 10 Pro computer?
  • Fixlog

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#6 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,952 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:05:05 PM

Posted 10 March 2018 - 03:59 PM

Greetings,

===================================================

Do You Still Need Help?

It has been 3 days since my last post.
  • Do you still need help with this?
  • If you have not replied within 48 hours I will assume you have abandoned the Topic and it will be closed.

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#7 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,952 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:05:05 PM

Posted 12 March 2018 - 08:20 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users