Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ProxyGate version 3.0.0.1180 - Keeps switching to Yahoo


  • This topic is locked This topic is locked
3 replies to this topic

#1 Kraeger

Kraeger

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:22 AM

Posted 09 March 2018 - 06:58 AM

Malware I guess, it may be doing more than switching search engine. Removing app in win 10 wont find it maybe due to searching in the wrong folder due to different languages.




Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04.03.2018
Ran by Asus (administrator) on DESKTOP-BSU9JD8 (09-03-2018 12:19:08)
Running from C:\Nerladdat
Loaded Profiles: Asus (Available Profiles: Asus)
Platform: Windows 10 Pro Version 1709 16299.248 (X64) Language: Svenska (Sverige)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\MsMpEng.exe
(Gold Click Ltd) C:\Program Files (x86)\ProxyGate\PGChk.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Gold Click Ltd) C:\Program Files (x86)\ProxyGate\Cloud.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\NisSrv.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 83.233.79.36 83.233.79.37
Tcpip\..\Interfaces\{a25831c2-bcb3-4549-900a-599b7cbb1201}: [DhcpNameServer] 83.233.79.36 83.233.79.37

Internet Explorer:
==================
HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://se.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180303__yaie
SearchScopes: HKU\S-1-5-21-3272428971-2236212934-3590213723-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://se.search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10440__180303__yaie&p={searchTerms}

FireFox:
========
FF DefaultProfile: 2cmaod45.default
FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default [2018-03-09]
FF Homepage: Mozilla\Firefox\Profiles\2cmaod45.default -> about:home
FF NewTab: Mozilla\Firefox\Profiles\2cmaod45.default -> hxxps://se.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180303__yaff
FF Session Restore: Mozilla\Firefox\Profiles\2cmaod45.default -> is enabled.
FF Extension: (United States English Spellchecker) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default\Extensions\en-US@dictionaries.addons.mozilla.org [2018-03-03] [Legacy]
FF Extension: (English (US) Language Pack) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2018-03-03]
FF Extension: (Avast Online Security) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default\Extensions\wrc@avast.com.xpi [2018-03-03]
FF Extension: (Adblock Plus) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-03-03]
FF SearchPlugin: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2cmaod45.default\searchplugins\yahoo-lavasoft.xml [2018-03-03]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\dsengine.js [2018-03-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\dsengine.cfg [2018-03-03] <==== ATTENTION

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 pgt_svc; C:\Program Files (x86)\ProxyGate\MainService.exe [2285664 2017-02-22] (Gold Click Ltd) <==== ATTENTION
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-11-26] (Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe [356152 2018-03-01] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe [106280 2018-03-01] (Microsoft Corporation)
S3 aswbIDSAgent; "C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196648 2018-03-03] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-03-03] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-03-03] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-03-03] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-03-03] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [215320 2018-03-03] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-03-03] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84368 2018-03-03] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-03-03] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380528 2018-03-03] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110096 2016-04-18] (Advanced Micro Devices)
R1 MpKsl8215c2b1; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7383DF04-7696-463F-A745-D107F382DD77}\MpKsl8215c2b1.sys [58120 2018-03-09] (Microsoft Corporation)
R3 MTsensor; C:\WINDOWS\System32\drivers\ASACPI.sys [17280 2013-05-17] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [151552 2018-02-24] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-03-01] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288296 2018-03-01] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129568 2018-03-01] (Microsoft Corporation)
R3 yukonw8; C:\WINDOWS\System32\drivers\yk63x64.sys [288768 2017-09-29] (Marvell)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-09 12:19 - 2018-03-09 12:19 - 000000000 ____D C:\FRST
2018-03-07 03:25 - 2018-03-09 12:03 - 000000000 ____D C:\Users\Asus\AppData\Local\PlaceholderTileLogoFolder
2018-03-05 02:11 - 2018-03-05 02:11 - 000000103 _____ C:\WINDOWS\SysWOW64\del.bat
2018-03-05 02:08 - 2018-03-05 02:09 - 000000000 ____D C:\Program Files (x86)\ProxyGate
2018-03-05 02:08 - 2018-03-05 02:08 - 000000000 _____ C:\Users\Asus\AppData\Roaming\FC29FA0894FE.ini
2018-03-04 02:07 - 2018-03-05 02:07 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Dying.Light.The.Following.Enhanced.Edition.v1.13
2018-03-04 00:15 - 2018-03-04 00:15 - 000000000 ____D C:\Users\Asus\Documents\DyingLight
2018-03-03 21:52 - 2018-03-05 05:29 - 000000000 ____D C:\Dying Light
2018-03-03 21:00 - 2018-03-04 02:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dying Light
2018-03-03 21:00 - 2018-03-03 21:00 - 000000694 _____ C:\Users\Public\Desktop\Dying Light Ultimate Edition.lnk
2018-03-03 19:49 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2018-03-03 19:49 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2018-03-03 19:49 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2018-03-03 19:49 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2018-03-03 19:48 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2018-03-03 19:48 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2018-03-03 18:33 - 2018-03-03 18:33 - 000000000 ____D C:\ProgramData\SecuritySuite
2018-03-03 18:31 - 2018-03-03 18:31 - 011102808 _____ C:\Users\Asus\Downloads\TotalAV.exe
2018-03-03 17:55 - 2018-03-03 17:55 - 000000000 _____ C:\autoexec.bat
2018-03-03 17:53 - 2018-03-03 17:53 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Asus\Downloads\SpyHunter-Installer.exe
2018-03-03 17:39 - 2018-03-03 17:39 - 000000000 _____ C:\WINDOWS\SysWOW64\config.nt
2018-03-03 17:37 - 2018-03-03 17:37 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-03-03 17:26 - 2018-03-03 17:26 - 000326144 _____ (AVAST Software) C:\Users\Asus\Downloads\aswclear.exe
2018-03-03 16:47 - 2018-03-03 16:47 - 000000000 ____D C:\Users\Asus\AppData\Roaming\AVAST Software
2018-03-03 16:44 - 2018-03-03 16:44 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2018-03-03 16:43 - 2018-03-03 16:43 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2018-03-03 16:43 - 2018-03-03 16:43 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-03-03 16:43 - 2018-03-03 16:42 - 000380528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-03-03 16:43 - 2018-03-03 16:42 - 000205976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-03-03 16:43 - 2018-03-03 16:42 - 000196648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-03-03 16:43 - 2018-03-03 16:42 - 000084368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-03-03 16:43 - 2018-03-03 16:42 - 000046968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-03-03 16:43 - 2018-03-03 16:41 - 000343752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-03-03 16:43 - 2018-03-03 16:41 - 000227504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-03-03 16:43 - 2018-03-03 16:41 - 000215320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-03-03 16:43 - 2018-03-03 16:41 - 000199440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-03-03 16:43 - 2018-03-03 16:41 - 000057680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2018-03-03 16:42 - 2018-03-03 16:42 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2018-03-03 16:39 - 2018-03-04 11:38 - 000000000 ____D C:\Users\Asus\AppData\Roaming\uTorrent
2018-03-03 16:39 - 2018-03-03 17:41 - 000000000 ____D C:\ProgramData\AVAST Software
2018-03-03 16:38 - 2018-03-03 16:38 - 003114288 _____ (BitTorrent Inc.) C:\Users\Asus\Downloads\uTorrent.exe
2018-03-03 16:14 - 2018-03-03 16:14 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2018-03-03 10:43 - 2018-03-03 21:01 - 000000000 ____D C:\ProgramData\Steam
2018-03-03 09:59 - 2018-03-03 09:59 - 000003548 _____ C:\WINDOWS\System32\Tasks\Asus
2018-03-03 09:55 - 2018-03-03 09:55 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part05.rar
2018-03-03 09:24 - 2018-03-03 09:25 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part10.rar
2018-03-03 09:24 - 2018-03-03 09:25 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part09.rar
2018-03-03 09:21 - 2018-03-03 09:21 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part11.rar
2018-03-03 09:20 - 2018-03-03 09:21 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part12.rar
2018-03-03 09:19 - 2018-03-03 09:19 - 329682821 _____ C:\Users\Asus\Downloads\dyinglight.part13.rar
2018-03-03 02:58 - 2018-03-03 02:58 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part07.rar
2018-03-03 02:58 - 2018-03-03 02:58 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part06.rar
2018-03-03 02:57 - 2018-03-03 02:57 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part08.rar
2018-03-03 02:53 - 2018-03-03 02:53 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part04.rar
2018-03-03 02:52 - 2018-03-03 02:52 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part03.rar
2018-03-03 02:51 - 2018-03-03 02:51 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part02.rar
2018-03-03 02:49 - 2018-03-03 02:50 - 734003200 _____ C:\Users\Asus\Downloads\dyinglight.part01.rar
2018-03-01 15:42 - 2018-03-01 15:42 - 000000000 ____D C:\Users\Asus\AppData\Local\AMD
2018-03-01 12:37 - 2018-03-01 12:37 - 000020971 _____ C:\Users\Asus\Downloads\dying.light.save.game.rar
2018-03-01 11:58 - 2018-03-01 11:59 - 000000000 ____D C:\Users\Asus\AppData\Local\Steam
2018-03-01 11:54 - 2018-03-01 11:54 - 001446792 _____ C:\Users\Asus\Downloads\SteamSetup.exe
2018-03-01 11:42 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2018-03-01 11:42 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2018-03-01 11:42 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2018-03-01 11:42 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2018-03-01 11:42 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2018-03-01 11:42 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2018-03-01 11:42 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2018-03-01 11:42 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2018-03-01 11:42 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2018-03-01 11:42 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2018-03-01 11:42 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2018-03-01 11:42 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2018-03-01 11:42 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2018-03-01 11:42 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2018-03-01 11:42 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2018-03-01 11:42 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2018-03-01 11:42 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2018-03-01 11:42 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2018-03-01 11:42 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2018-03-01 11:42 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2018-03-01 11:42 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2018-03-01 11:42 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2018-03-01 11:42 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2018-03-01 11:42 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2018-03-01 11:42 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2018-03-01 11:42 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2018-03-01 11:42 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2018-03-01 11:42 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2018-03-01 11:42 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2018-03-01 11:42 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2018-03-01 11:42 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2018-03-01 11:42 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2018-03-01 11:42 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2018-03-01 11:42 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2018-03-01 11:42 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2018-03-01 11:42 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2018-03-01 11:42 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2018-03-01 11:42 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2018-03-01 11:42 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2018-03-01 11:42 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2018-03-01 11:42 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2018-03-01 11:42 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2018-03-01 11:42 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2018-03-01 11:42 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2018-03-01 11:42 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2018-03-01 11:42 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2018-03-01 11:42 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2018-03-01 11:42 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2018-03-01 11:42 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2018-03-01 11:42 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2018-03-01 11:42 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2018-03-01 11:42 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2018-03-01 11:42 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2018-03-01 11:42 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2018-03-01 11:42 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2018-03-01 11:42 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2018-03-01 11:42 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2018-03-01 11:42 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2018-03-01 11:42 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2018-03-01 11:41 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2018-03-01 11:41 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2018-03-01 11:41 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2018-03-01 11:41 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2018-03-01 11:41 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2018-03-01 11:41 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2018-03-01 11:41 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2018-03-01 11:41 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2018-03-01 11:41 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2018-03-01 11:41 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2018-03-01 11:41 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2018-03-01 11:41 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2018-03-01 11:41 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2018-03-01 11:41 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2018-03-01 11:41 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2018-03-01 11:41 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2018-03-01 11:41 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2018-03-01 11:41 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2018-03-01 11:41 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2018-03-01 11:41 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2018-03-01 11:41 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2018-03-01 11:41 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2018-03-01 11:41 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2018-03-01 11:41 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2018-03-01 11:41 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2018-03-01 11:41 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2018-03-01 11:41 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2018-03-01 11:41 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2018-03-01 11:41 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2018-03-01 11:41 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2018-03-01 11:41 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2018-03-01 11:41 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2018-03-01 11:41 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2018-03-01 11:41 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2018-03-01 11:41 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2018-03-01 11:41 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2018-03-01 11:41 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2018-03-01 11:41 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2018-03-01 11:41 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2018-03-01 11:41 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2018-03-01 11:41 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2018-03-01 11:41 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2018-03-01 11:41 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2018-03-01 11:41 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2018-03-01 11:41 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2018-03-01 11:41 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2018-03-01 11:41 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2018-03-01 11:41 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2018-03-01 11:41 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2018-03-01 11:41 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2018-03-01 11:39 - 2018-03-01 11:42 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2018-03-01 11:39 - 2018-03-01 11:41 - 000000000 ___HD C:\WINDOWS\msdownld.tmp
2018-03-01 11:39 - 2018-03-01 11:39 - 000292184 _____ (Microsoft Corporation) C:\Users\Asus\Downloads\dxwebsetup.exe
2018-03-01 10:35 - 2018-03-01 10:35 - 024290768 _____ C:\Users\Asus\Downloads\BankID_installation_7_5_0.exe
2018-03-01 10:33 - 2018-03-01 10:39 - 000000000 ____D C:\Users\Asus\AppData\Roaming\BankID
2018-03-01 10:33 - 2018-03-01 10:33 - 000001926 _____ C:\Users\Public\Desktop\BankID säkerhetsprogram.lnk
2018-03-01 10:33 - 2018-03-01 10:33 - 000000000 ____D C:\Program Files (x86)\BankID
2018-02-27 18:06 - 2018-02-27 18:06 - 006235526 _____ C:\Users\Asus\Downloads\HoMM3_Map_Pack_by_HoMMdb.com.zip
2018-02-27 17:06 - 2018-02-27 17:06 - 000000000 ____D C:\Users\Asus\AppData\Roaming\WinRAR
2018-02-27 17:05 - 2018-02-27 17:05 - 001987408 _____ C:\Users\Asus\Downloads\wrar550.exe
2018-02-27 17:05 - 2018-02-27 17:05 - 000000000 ____D C:\Program Files (x86)\WinRAR
2018-02-27 16:52 - 2018-02-27 16:52 - 000525761 _____ C:\Users\Asus\Downloads\32BitPatch.rar
2018-02-27 16:39 - 2018-03-04 21:11 - 000000000 ____D C:\Spelinstallationer
2018-02-26 12:58 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2018-02-26 12:58 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2018-02-26 12:58 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2018-02-26 12:58 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2018-02-26 12:58 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2018-02-26 12:55 - 2018-02-26 12:55 - 078013600 _____ (Riot Games, Inc) C:\Users\Asus\Downloads\League of Legends installer EUW.exe
2018-02-26 12:46 - 2018-02-26 12:46 - 000000000 ____D C:\Users\Asus\AppData\Local\CEF
2018-02-26 12:46 - 2018-02-26 12:46 - 000000000 ____D C:\ProgramData\Riot Games
2018-02-25 22:41 - 2018-02-25 22:41 - 000000281 _____ C:\WINDOWS\SysWOW64\Drivers\vwifikerneldrv.sys
2018-02-25 22:41 - 2018-02-25 22:41 - 000000281 _____ C:\WINDOWS\SysWOW64\d3dx9_11.dll.tmp
2018-02-25 22:41 - 2018-02-25 22:41 - 000000281 _____ C:\ProgramData\fontcacheev1.dat
2018-02-25 22:41 - 2017-03-27 07:01 - 000081000 _____ () C:\WINDOWS\system32\Drivers\adgnetworkwfpdrv.sys
2018-02-25 22:40 - 2018-02-25 22:40 - 000173328 _____ C:\Users\Asus\Downloads\adguardInstaller.exe
2018-02-25 18:10 - 2018-02-25 18:10 - 000000000 ____D C:\Users\Asus\AppData\Local\PeerDistRepub
2018-02-25 11:47 - 2018-02-25 11:44 - 000548000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-02-25 11:46 - 2018-02-25 11:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-02-25 11:45 - 2018-02-25 11:45 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-02-25 11:44 - 2018-03-01 12:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-02-25 11:44 - 2018-02-25 11:44 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-02-25 01:25 - 2018-03-03 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-02-25 01:25 - 2018-02-25 01:30 - 000000000 ____D C:\Users\Asus\AppData\Local\Mozilla
2018-02-25 01:25 - 2018-02-25 01:25 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-25 01:25 - 2018-02-25 01:25 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-02-25 01:25 - 2018-02-25 01:25 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Mozilla
2018-02-25 01:25 - 2018-02-25 01:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-24 11:45 - 2018-02-24 11:45 - 000000000 ____D C:\Users\Asus\AppData\Local\PackageStaging
2018-02-24 11:45 - 2018-02-24 11:45 - 000000000 ____D C:\Users\Asus\AppData\Local\DBG
2018-02-24 11:32 - 2018-02-24 11:32 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3272428971-2236212934-3590213723-1001
2018-02-24 11:32 - 2018-02-24 11:32 - 000002364 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-02-24 11:30 - 2018-02-24 11:30 - 000000000 ____D C:\Users\Asus\AppData\Roaming\ATI
2018-02-24 11:30 - 2018-02-24 11:30 - 000000000 ____D C:\Users\Asus\AppData\Local\Comms
2018-02-24 11:30 - 2018-02-24 11:30 - 000000000 ____D C:\Users\Asus\AppData\Local\ATI
2018-02-24 11:30 - 2018-02-24 11:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-02-24 11:30 - 2018-02-24 11:30 - 000000000 ____D C:\ProgramData\ATI
2018-02-24 11:28 - 2018-02-24 11:28 - 000000000 ____D C:\Users\Asus\AppData\Local\Publishers
2018-02-24 11:28 - 2018-02-24 11:28 - 000000000 ____D C:\Users\Asus\AppData\Local\MicrosoftEdge
2018-02-24 11:27 - 2018-03-09 12:13 - 000000000 ____D C:\Users\Asus\AppData\Local\Packages
2018-02-24 11:27 - 2018-02-24 11:29 - 000000000 ____D C:\Users\Asus\AppData\Local\ConnectedDevicesPlatform
2018-02-24 11:27 - 2018-02-24 11:27 - 000000020 ___SH C:\Users\Asus\ntuser.ini
2018-02-24 11:27 - 2018-02-24 11:27 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Adobe
2018-02-24 11:27 - 2018-02-24 11:27 - 000000000 ____D C:\Users\Asus\AppData\Local\VirtualStore
2018-02-24 11:26 - 2018-03-06 20:49 - 001885828 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\Default\AppData\Local\Tidigare
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\Default\AppData\Local\Programdata
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Tidigare
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Programdata
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\Default User
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Users\All Users
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\ProgramData\Start-meny
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\ProgramData\Skrivbord
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\ProgramData\Programdata
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\ProgramData\Mallar
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\ProgramData\Dokument
2018-02-24 11:26 - 2018-02-24 11:26 - 000000000 _SHDL C:\Program Files\Delade filer
2018-02-24 11:25 - 2018-03-06 20:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-02-24 11:24 - 2018-02-24 11:24 - 000014382 _____ C:\Users\Asus\Desktop\Borttagna appar.html
2018-02-24 11:19 - 2018-03-07 03:26 - 000000000 ____D C:\Users\Asus
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Start-meny
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Skrivare
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Programdata
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Nätverket
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Mina dokument
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Mallar
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Lokala inställningar
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Documents\Mina videoklipp
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Documents\Mina bilder
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\Documents\Min musik
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\AppData\Local\Tidigare
2018-02-24 11:19 - 2018-02-24 11:19 - 000000000 _SHDL C:\Users\Asus\AppData\Local\Programdata
2018-02-24 11:18 - 2018-02-24 11:18 - 000000000 ____D C:\ProgramData\USOShared
2018-02-24 11:12 - 2018-02-24 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2018-02-24 11:12 - 2018-02-24 11:12 - 000000000 ____D C:\Program Files\ATI Technologies
2018-02-24 11:12 - 2018-02-24 11:12 - 000000000 ____D C:\Program Files (x86)\ATI Technologies
2018-02-24 11:11 - 2018-03-03 17:47 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-24 11:11 - 2018-02-24 11:11 - 000000000 _____ C:\WINDOWS\ativpsrm.bin
2018-02-24 11:11 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-02-24 11:10 - 2018-02-24 11:10 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2018-02-24 11:10 - 2018-02-24 11:10 - 000000000 ____D C:\Program Files\AMD
2018-02-24 11:06 - 2018-03-09 05:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-02-24 11:06 - 2018-02-24 11:21 - 000222688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-02-24 11:04 - 2018-02-24 11:26 - 000000000 ____D C:\WINDOWS\Panther
2018-02-24 11:04 - 2018-02-24 11:04 - 000000000 ____D C:\WINDOWS\InfusedApps
2018-02-24 11:03 - 2018-03-01 00:30 - 000000000 ____D C:\Windows.old
2018-02-24 11:02 - 2018-02-24 11:06 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-02-24 11:02 - 2018-02-24 11:02 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-02-24 10:59 - 2018-02-24 10:59 - 000000000 ____D C:\WINDOWS\Setup
2018-02-24 10:58 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\containers
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\si-LK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\am-ET
2018-02-24 10:54 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\OCR
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\Program Files\MSBuild
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-02-24 10:54 - 2018-02-24 10:54 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-02-24 10:52 - 2018-03-06 20:49 - 000804982 _____ C:\WINDOWS\system32\perfh01D.dat
2018-02-24 10:52 - 2018-03-06 20:49 - 000168664 _____ C:\WINDOWS\system32\perfc01D.dat
2018-02-24 10:52 - 2018-02-24 10:52 - 000301162 _____ C:\WINDOWS\system32\perfi01D.dat
2018-02-24 10:52 - 2018-02-24 10:52 - 000039264 _____ C:\WINDOWS\system32\perfd01D.dat
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sv
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\winrm
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\WCN
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\sv
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\slmgr
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\0409
2018-02-24 10:52 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\DigitalLocker
2018-02-24 10:50 - 2018-02-06 03:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-02-24 10:50 - 2018-02-06 03:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-24 10:47 - 2018-03-09 12:13 - 000000000 ___HD C:\Program Files\WindowsApps
2018-02-24 10:47 - 2018-03-09 12:13 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-02-24 10:47 - 2018-03-09 02:31 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-02-24 10:47 - 2018-03-06 20:57 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2018-02-24 10:47 - 2018-03-05 02:08 - 000000000 ___RD C:\Program Files (x86)
2018-02-24 10:47 - 2018-03-04 04:15 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-02-24 10:47 - 2018-03-03 10:43 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-02-24 10:47 - 2018-03-02 21:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-02-24 10:47 - 2018-03-01 12:34 - 000000000 ___RD C:\Program Files\Windows Defender
2018-02-24 10:47 - 2018-02-27 13:53 - 000000000 ____D C:\WINDOWS\rescache
2018-02-24 10:47 - 2018-02-25 03:29 - 000000000 ____D C:\WINDOWS\appcompat
2018-02-24 10:47 - 2018-02-24 11:26 - 000000000 ____D C:\Program Files\windows nt
2018-02-24 10:47 - 2018-02-24 11:23 - 000000000 __RHD C:\Users\Public\Libraries
2018-02-24 10:47 - 2018-02-24 11:20 - 000000000 ____D C:\WINDOWS\system32\spool
2018-02-24 10:47 - 2018-02-24 11:20 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2018-02-24 10:47 - 2018-02-24 11:18 - 000000000 ____D C:\ProgramData\USOPrivate
2018-02-24 10:47 - 2018-02-24 11:16 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-02-24 10:47 - 2018-02-24 11:13 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-02-24 10:47 - 2018-02-24 11:13 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-02-24 10:47 - 2018-02-24 11:06 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2018-02-24 10:47 - 2018-02-24 11:03 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-02-24 10:47 - 2018-02-24 11:03 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-02-24 10:47 - 2018-02-24 11:03 - 000000000 ____D C:\WINDOWS\CSC
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\TextInput
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\Provisioning
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-02-24 10:47 - 2018-02-24 10:58 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2018-02-24 10:47 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-02-24 10:47 - 2018-02-24 10:54 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ___SD C:\WINDOWS\system32\dsc
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\SysWOW64\com
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\setup
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\system32\com
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\IME
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\Help
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\Program Files\Common Files\system
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-02-24 10:47 - 2018-02-24 10:52 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 __SHD C:\Program Files\Windows Sidebar
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 __RSD C:\WINDOWS\media
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\system32\UNP
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\system32\Nui
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\system32\AppV
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Vss
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Web
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\tracing
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\TAPI
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SystemResources
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SystemApps
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\winevt
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\ras
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\IME
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\icsxml
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\ias
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\hydrogen
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\downlevel
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\DDFs
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\System
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SKB
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\security
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\schemas
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\SchCache
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Resources
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\RemotePackages
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Registration
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\PLA
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Performance
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\L2Schemas
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\InputMethod
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Globalization
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Cursors
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\Branding
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\addins
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files\Windows Security
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files\Windows Portable Devices
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files\Common Files\Services
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files (x86)\windows nt
2018-02-24 10:47 - 2018-02-24 10:47 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2018-02-24 10:47 - 2018-02-24 10:44 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2018-02-24 10:47 - 2018-02-24 10:44 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2018-02-24 10:47 - 2018-02-24 10:44 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2018-02-24 10:47 - 2018-02-24 10:44 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2018-02-24 10:47 - 2018-02-24 10:44 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2018-02-24 10:47 - 2018-02-24 10:44 - 000017572 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2018-02-24 10:47 - 2018-02-24 10:44 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2018-02-24 10:47 - 2018-02-24 10:44 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2018-02-24 10:47 - 2018-02-24 10:44 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2018-02-24 10:47 - 2018-02-24 10:44 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2018-02-24 10:47 - 2018-02-24 10:44 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2018-02-24 10:47 - 2018-02-24 10:44 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2018-02-24 10:47 - 2018-02-24 10:44 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2018-02-24 10:47 - 2018-02-24 10:43 - 000000219 _____ C:\WINDOWS\system.ini
2018-02-24 10:47 - 2018-02-24 10:43 - 000000092 _____ C:\WINDOWS\win.ini
2018-02-24 10:45 - 2018-03-04 04:15 - 000000000 ____D C:\WINDOWS\INF
2018-02-24 10:33 - 2018-02-25 01:21 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-02-24 10:26 - 2018-03-03 18:42 - 072613888 _____ C:\WINDOWS\system32\config\SOFTWARE
2018-02-24 10:26 - 2018-03-03 18:42 - 012320768 _____ C:\WINDOWS\system32\config\SYSTEM
2018-02-24 10:26 - 2018-03-03 18:42 - 000524288 _____ C:\WINDOWS\system32\config\DEFAULT
2018-02-24 10:26 - 2018-03-03 18:42 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-02-24 10:26 - 2018-03-03 18:42 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2018-02-24 10:26 - 2018-02-24 11:25 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-02-24 10:26 - 2018-02-24 11:03 - 000032768 _____ C:\WINDOWS\system32\config\SAM
2018-02-24 10:26 - 2018-02-24 10:52 - 000000000 ____D C:\WINDOWS\servicing
2018-02-24 10:26 - 2018-02-24 10:47 - 000000000 ____D C:\WINDOWS\system32\SMI
2018-02-24 10:25 - 2018-02-24 11:05 - 000000000 ___HD C:\$SysReset
2018-02-22 11:34 - 2018-03-04 02:17 - 000000000 ____D C:\Inspelningar
2018-02-14 13:28 - 2018-02-10 07:20 - 001055640 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-02-14 13:28 - 2018-02-10 07:20 - 000599448 ____N (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-02-14 13:28 - 2018-02-10 07:20 - 000077208 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-02-14 13:28 - 2018-02-10 07:16 - 008603032 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-02-14 13:28 - 2018-02-10 07:16 - 000739696 ____N (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-02-14 13:28 - 2018-02-10 07:15 - 001954048 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-02-14 13:28 - 2018-02-10 07:15 - 000471968 ____N (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-02-14 13:28 - 2018-02-10 07:14 - 002395032 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-02-14 13:28 - 2018-02-10 07:13 - 000373656 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-02-14 13:28 - 2018-02-10 07:12 - 001277848 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-02-14 13:28 - 2018-02-10 07:09 - 000755712 ____N (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-02-14 13:28 - 2018-02-10 07:08 - 003010248 ____N (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-02-14 13:28 - 2018-02-10 07:08 - 002574232 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-02-14 13:28 - 2018-02-10 07:07 - 002710728 ____N (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-02-14 13:28 - 2018-02-10 07:06 - 000727448 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-02-14 13:28 - 2018-02-10 07:06 - 000494488 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-02-14 13:28 - 2018-02-10 07:06 - 000362904 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-02-14 13:28 - 2018-02-10 07:06 - 000087384 ____N (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-02-14 13:28 - 2018-02-10 07:04 - 001254144 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-02-14 13:28 - 2018-02-10 07:04 - 001170008 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-02-14 13:28 - 2018-02-10 07:04 - 000614296 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2018-02-14 13:28 - 2018-02-10 07:04 - 000603920 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-02-14 13:28 - 2018-02-10 07:02 - 002773400 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-02-14 13:28 - 2018-02-10 07:02 - 000617304 ____N (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-02-14 13:28 - 2018-02-10 06:21 - 001615712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-02-14 13:28 - 2018-02-10 06:17 - 000597160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-02-14 13:28 - 2018-02-10 06:08 - 002193168 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-02-14 13:28 - 2018-02-10 06:06 - 006014688 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-02-14 13:28 - 2018-02-10 06:06 - 004670728 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-02-14 13:28 - 2018-02-10 06:06 - 000982528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-02-14 13:28 - 2018-02-10 06:05 - 001149272 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-02-14 13:28 - 2018-02-10 06:05 - 000662208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-02-14 13:28 - 2018-02-10 06:05 - 000129184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-02-14 13:28 - 2018-02-10 06:05 - 000074992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2018-02-14 13:28 - 2018-02-10 05:50 - 003665408 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-02-14 13:28 - 2018-02-10 05:49 - 000536576 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-02-14 13:28 - 2018-02-10 05:49 - 000385536 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2018-02-14 13:28 - 2018-02-10 05:49 - 000329728 ____N (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-02-14 13:28 - 2018-02-10 05:47 - 017160704 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-02-14 13:28 - 2018-02-10 05:47 - 013704192 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-02-14 13:28 - 2018-02-10 05:46 - 002902528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-02-14 13:28 - 2018-02-10 05:46 - 002393600 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-02-14 13:28 - 2018-02-10 05:46 - 000344576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-02-14 13:28 - 2018-02-10 05:46 - 000225792 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-02-14 13:28 - 2018-02-10 05:46 - 000169472 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-02-14 13:28 - 2018-02-10 05:45 - 000675328 ____N (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-02-14 13:28 - 2018-02-10 05:45 - 000093696 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2018-02-14 13:28 - 2018-02-10 05:45 - 000043008 ____N (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2018-02-14 13:28 - 2018-02-10 05:44 - 001498112 ____N (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-02-14 13:28 - 2018-02-10 05:44 - 000431616 ____N (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-02-14 13:28 - 2018-02-10 05:44 - 000336896 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2018-02-14 13:28 - 2018-02-10 05:44 - 000276480 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2018-02-14 13:28 - 2018-02-10 05:43 - 018923008 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-02-14 13:28 - 2018-02-10 05:43 - 008020480 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-02-14 13:28 - 2018-02-10 05:43 - 000456704 ____N (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2018-02-14 13:28 - 2018-02-10 05:43 - 000394752 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-02-14 13:28 - 2018-02-10 05:43 - 000391168 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-02-14 13:28 - 2018-02-10 05:43 - 000268288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 023671808 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000813568 ____N (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000708096 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000397824 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000236032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000233984 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2018-02-14 13:28 - 2018-02-10 05:42 - 000228352 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-02-14 13:28 - 2018-02-10 05:41 - 019352576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-02-14 13:28 - 2018-02-10 05:41 - 000815616 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-02-14 13:28 - 2018-02-10 05:41 - 000401408 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2018-02-14 13:28 - 2018-02-10 05:41 - 000369152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-02-14 13:28 - 2018-02-10 05:41 - 000365568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-02-14 13:28 - 2018-02-10 05:41 - 000063488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2018-02-14 13:28 - 2018-02-10 05:40 - 012831744 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-02-14 13:28 - 2018-02-10 05:40 - 008110080 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-02-14 13:28 - 2018-02-10 05:40 - 000756736 ____N (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-02-14 13:28 - 2018-02-10 05:40 - 000559104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-02-14 13:28 - 2018-02-10 05:40 - 000343040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-02-14 13:28 - 2018-02-10 05:39 - 011925504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-02-14 13:28 - 2018-02-10 05:39 - 004748288 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 006567936 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 005833216 ____N (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 003334144 ____N (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 003125760 ____N (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 002857984 ____N (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 002086400 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-02-14 13:28 - 2018-02-10 05:38 - 002082304 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-02-14 13:28 - 2018-02-10 05:38 - 001597952 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 001547776 ____N (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 000668160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-02-14 13:28 - 2018-02-10 05:38 - 000462336 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-02-14 13:28 - 2018-02-10 05:37 - 004839424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-02-14 13:28 - 2018-02-10 05:37 - 003678720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-02-14 13:28 - 2018-02-10 05:37 - 002784256 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-02-14 13:28 - 2018-02-10 05:37 - 001822208 ____N (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-02-14 13:28 - 2018-02-10 05:37 - 001488384 ____N (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 006031360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 002869760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 002464768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 001559552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 000685056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-02-14 13:28 - 2018-02-10 05:36 - 000666624 ____N (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
2018-02-14 13:28 - 2018-02-10 05:35 - 002349568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-02-14 13:28 - 2018-02-10 05:35 - 002013184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-02-14 13:28 - 2018-02-10 05:35 - 001474560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-02-14 13:28 - 2018-02-10 05:35 - 000963584 ____N (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-02-14 13:28 - 2018-02-10 05:34 - 004249600 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-02-14 13:27 - 2018-02-10 07:24 - 000270744 ____N (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-02-14 13:27 - 2018-02-10 07:23 - 001577880 ____N (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-02-14 13:27 - 2018-02-10 07:23 - 000758168 ____N (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-02-14 13:27 - 2018-02-10 07:23 - 000613272 ____N (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-02-14 13:27 - 2018-02-10 07:23 - 000138136 ____N (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-02-14 13:27 - 2018-02-10 07:22 - 002003352 ____N (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-02-14 13:27 - 2018-02-10 07:22 - 000662936 ____N (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-02-14 13:27 - 2018-02-10 07:22 - 000460696 ____N (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-02-14 13:27 - 2018-02-10 07:22 - 000387480 ____N (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-02-14 13:27 - 2018-02-10 07:22 - 000272800 ____N (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-02-14 13:27 - 2018-02-10 07:22 - 000070040 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-02-14 13:27 - 2018-02-10 07:22 - 000035224 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2018-02-14 13:27 - 2018-02-10 07:21 - 001092016 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-02-14 13:27 - 2018-02-10 07:21 - 000479912 ____N (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-02-14 13:27 - 2018-02-10 07:21 - 000279456 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2018-02-14 13:27 - 2018-02-10 07:20 - 001206680 ____N (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-02-14 13:27 - 2018-02-10 07:20 - 000924648 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-02-14 13:27 - 2018-02-10 07:19 - 001133888 ____N (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-02-14 13:27 - 2018-02-10 07:18 - 001193192 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-02-14 13:27 - 2018-02-10 07:18 - 000319864 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-02-14 13:27 - 2018-02-10 07:18 - 000098272 ____N (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2018-02-14 13:27 - 2018-02-10 07:18 - 000022400 ____N (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2018-02-14 13:27 - 2018-02-10 07:17 - 001209240 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-02-14 13:27 - 2018-02-10 07:16 - 002406456 ____N (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-02-14 13:27 - 2018-02-10 07:15 - 002514944 ____N (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-02-14 13:27 - 2018-02-10 07:15 - 001415296 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-02-14 13:27 - 2018-02-10 07:14 - 004504464 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-02-14 13:27 - 2018-02-10 07:14 - 001002592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-02-14 13:27 - 2018-02-10 07:13 - 001416392 ____N (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-02-14 13:27 - 2018-02-10 07:13 - 000535960 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2018-02-14 13:27 - 2018-02-10 07:13 - 000408984 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-02-14 13:27 - 2018-02-10 07:12 - 004537040 ____N (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2018-02-14 13:27 - 2018-02-10 07:12 - 001313016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2018-02-14 13:27 - 2018-02-10 07:12 - 000712600 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-02-14 13:27 - 2018-02-10 07:11 - 001029528 ____N (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2018-02-14 13:27 - 2018-02-10 07:11 - 000711432 ____N (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-02-14 13:27 - 2018-02-10 07:11 - 000677784 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-02-14 13:27 - 2018-02-10 07:11 - 000494496 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-02-14 13:27 - 2018-02-10 07:10 - 002447768 ____N (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-02-14 13:27 - 2018-02-10 07:10 - 000749976 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-02-14 13:27 - 2018-02-10 07:10 - 000614160 ____N (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-02-14 13:27 - 2018-02-10 07:10 - 000246168 ____N (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-02-14 13:27 - 2018-02-10 07:10 - 000154520 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2018-02-14 13:27 - 2018-02-10 07:09 - 003904296 ____N (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-02-14 13:27 - 2018-02-10 07:09 - 000525208 ____N (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-02-14 13:27 - 2018-02-10 07:09 - 000491264 ____N (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-02-14 13:27 - 2018-02-10 07:09 - 000075160 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-02-14 13:27 - 2018-02-10 07:08 - 021351624 ____N (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-02-14 13:27 - 2018-02-10 07:08 - 007675784 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-02-14 13:27 - 2018-02-10 07:08 - 000687552 ____N (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2018-02-14 13:27 - 2018-02-10 07:08 - 000398824 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-02-14 13:27 - 2018-02-10 07:08 - 000096200 ____N (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2018-02-14 13:27 - 2018-02-10 07:08 - 000048112 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2018-02-14 13:27 - 2018-02-10 07:07 - 004506576 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-02-14 13:27 - 2018-02-10 07:07 - 000705944 ____N (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-02-14 13:27 - 2018-02-10 07:07 - 000436632 ____N (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 004486904 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 000824896 ____N (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 000819096 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2018-02-14 13:27 - 2018-02-10 07:06 - 000594048 ____N (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 000519144 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-02-14 13:27 - 2018-02-10 07:06 - 000356952 ____N (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 000189336 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-02-14 13:27 - 2018-02-10 07:06 - 000100248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2018-02-14 13:27 - 2018-02-10 07:05 - 000688064 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-02-14 13:27 - 2018-02-10 07:05 - 000413888 ____N (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-02-14 13:27 - 2018-02-10 07:05 - 000097176 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2018-02-14 13:27 - 2018-02-10 07:05 - 000070856 ____N (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 007384576 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 006791984 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 001778584 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 001628056 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 001430760 ____N (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2018-02-14 13:27 - 2018-02-10 07:04 - 001426672 ____N (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 000374032 ____N (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-02-14 13:27 - 2018-02-10 07:04 - 000339872 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 000260896 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 000212880 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-02-14 13:27 - 2018-02-10 07:04 - 000093592 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 001619808 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 000849304 ____N (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 000722616 ____N (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 000706600 ____N (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 000404888 ____N (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2018-02-14 13:27 - 2018-02-10 07:03 - 000098712 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 002220952 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 001420696 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 001103768 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-02-14 13:27 - 2018-02-10 07:02 - 000831384 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000813976 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000744856 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000670104 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000645528 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000628632 ____N (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000495000 ____N (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000397720 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2018-02-14 13:27 - 2018-02-10 07:02 - 000231320 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2018-02-14 13:27 - 2018-02-10 07:02 - 000040352 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2018-02-14 13:27 - 2018-02-10 06:22 - 001930224 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-02-14 13:27 - 2018-02-10 06:18 - 001384288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-02-14 13:27 - 2018-02-10 06:18 - 000022424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll
2018-02-14 13:27 - 2018-02-10 06:17 - 002255112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-02-14 13:27 - 2018-02-10 06:17 - 000542856 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-02-14 13:27 - 2018-02-10 06:17 - 000211864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-02-14 13:27 - 2018-02-10 06:15 - 001145624 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-02-14 13:27 - 2018-02-10 06:12 - 004382032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2018-02-14 13:27 - 2018-02-10 06:11 - 001250528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2018-02-14 13:27 - 2018-02-10 06:10 - 000422592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-02-14 13:27 - 2018-02-10 06:09 - 006092152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-02-14 13:27 - 2018-02-10 06:09 - 003485392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-02-14 13:27 - 2018-02-10 06:09 - 002338776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-02-14 13:27 - 2018-02-10 06:09 - 001123456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-02-14 13:27 - 2018-02-10 06:09 - 000559976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2018-02-14 13:27 - 2018-02-10 06:09 - 000354200 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2018-02-14 13:27 - 2018-02-10 06:08 - 003980720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-02-14 13:27 - 2018-02-10 06:08 - 000592792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 025253376 ____N (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 020286120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000543920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000527864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000284112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000123808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000089504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000083216 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
2018-02-14 13:27 - 2018-02-10 06:07 - 000061024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2018-02-14 13:27 - 2018-02-10 06:06 - 006481640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 001246432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000718232 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000654456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000551672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000386424 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000193248 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000079256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2018-02-14 13:27 - 2018-02-10 06:05 - 000077552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2018-02-14 13:27 - 2018-02-10 06:04 - 001491352 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-02-14 13:27 - 2018-02-10 06:04 - 000027032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVClientPS.dll
2018-02-14 13:27 - 2018-02-10 06:03 - 000505160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2018-02-14 13:27 - 2018-02-10 05:50 - 001313792 ____N (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-02-14 13:27 - 2018-02-10 05:50 - 001294848 ____N (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-02-14 13:27 - 2018-02-10 05:50 - 000849920 ____N (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-02-14 13:27 - 2018-02-10 05:50 - 000496128 ____N (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-02-14 13:27 - 2018-02-10 05:49 - 001664512 ____N (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-02-14 13:27 - 2018-02-10 05:49 - 000848896 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-02-14 13:27 - 2018-02-10 05:49 - 000326656 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-02-14 13:27 - 2018-02-10 05:49 - 000232960 ____N (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
2018-02-14 13:27 - 2018-02-10 05:49 - 000211456 ____N (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-02-14 13:27 - 2018-02-10 05:49 - 000107520 ____N (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2018-02-14 13:27 - 2018-02-10 05:48 - 002890240 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-02-14 13:27 - 2018-02-10 05:48 - 000033280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-02-14 13:27 - 2018-02-10 05:48 - 000025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000331264 ____N (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-02-14 13:27 - 2018-02-10 05:47 - 000201728 ____N (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000201216 ____N (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000143872 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000140800 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000055808 ____N (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000046080 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-02-14 13:27 - 2018-02-10 05:47 - 000043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000033792 ____N (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2018-02-14 13:27 - 2018-02-10 05:47 - 000002560 ____N (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 001470976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 001008640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000199168 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000173568 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000162304 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000135680 ____N (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000082432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000026112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2018-02-14 13:27 - 2018-02-10 05:46 - 000018432 ____N (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:46 - 000004608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2018-02-14 13:27 - 2018-02-10 05:45 - 007545344 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000306688 ____N (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000288768 ____N (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000288256 ____N (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000115200 ____N (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000079872 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000066048 ____N (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2018-02-14 13:27 - 2018-02-10 05:45 - 000016384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EnterpriseAppMgmtClient.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000800768 ____N (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2018-02-14 13:27 - 2018-02-10 05:44 - 000579072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000539136 ____N (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000503296 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_User.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000427008 ____N (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000388608 ____N (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000302592 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000276992 ____N (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000208384 ____N (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000155648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000059392 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000048640 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2018-02-14 13:27 - 2018-02-10 05:44 - 000002560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 006466560 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 003756032 ____N (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000580608 ____N (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000570368 ____N (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000566272 ____N (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000311808 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000247296 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000181248 ____N (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000150528 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppManagementConfiguration.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000147456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000110080 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000106496 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000086528 ____N (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000084480 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2018-02-14 13:27 - 2018-02-10 05:43 - 000013312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 001425408 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 001216000 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 001113600 ____N (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2018-02-14 13:27 - 2018-02-10 05:42 - 000975872 ____N (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000950784 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000837632 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000792064 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000731136 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2018-02-14 13:27 - 2018-02-10 05:42 - 000634880 ____N (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000459776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000403968 ____N (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000286720 ____N (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000270336 ____N (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000234496 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000225280 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2018-02-14 13:27 - 2018-02-10 05:42 - 000184832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000160768 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000160256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000130048 ____N (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000112640 ____N (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000098304 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000078336 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000035328 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2018-02-14 13:27 - 2018-02-10 05:42 - 000024064 ____N (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe
2018-02-14 13:27 - 2018-02-10 05:41 - 001495552 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000859648 ____N (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2018-02-14 13:27 - 2018-02-10 05:41 - 000820224 ____N (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000721408 ____N (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000504832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000466432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000451072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000405504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000377856 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-02-14 13:27 - 2018-02-10 05:41 - 000288768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000255488 ____N (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000221184 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000133120 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppManagementConfiguration.dll
2018-02-14 13:27 - 2018-02-10 05:41 - 000124928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 004498432 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-02-14 13:27 - 2018-02-10 05:40 - 004113408 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 003405824 ____N (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 003367936 ____N (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 002873344 ____N (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 001234432 ____N (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 001002496 ____N (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000940544 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000939520 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000930816 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000886784 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2018-02-14 13:27 - 2018-02-10 05:40 - 000856576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000800256 ____N (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000691200 ____N (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000601088 ____N (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000526336 ____N (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000508416 ____N (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2018-02-14 13:27 - 2018-02-10 05:40 - 000499200 ____N (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000463360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2018-02-14 13:27 - 2018-02-10 05:40 - 000421376 ____N (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000386560 ____N (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000366080 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000298496 ____N (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000232960 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000195072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:40 - 000177152 ____N (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 005500928 ____N (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 004592640 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 002976256 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 002741248 ____N (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 002677760 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 002490880 ____N (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 002209280 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 001669120 ____N (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000908800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000721920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000680960 ____N (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000658432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000648704 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000621056 ____N (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000462848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000447488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000346112 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000315904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2018-02-14 13:27 - 2018-02-10 05:39 - 000157696 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000096256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 000020992 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2018-02-14 13:27 - 2018-02-10 05:38 - 006722560 ____N (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2018-02-14 13:27 - 2018-02-10 05:38 - 004815360 ____N (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 003169280 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 002184192 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001968640 ____N (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001353728 ____N (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001228800 ____N (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001167360 ____N (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001166336 ____N (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 001057792 ____N (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000982016 ____N (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-02-14 13:27 - 2018-02-10 05:38 - 000939520 ____N (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000885248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000863744 ____N (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000755712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2018-02-14 13:27 - 2018-02-10 05:38 - 000699904 ____N (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000653312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000598528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000556544 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000524800 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000509440 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000506880 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000401920 ____N (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-02-14 13:27 - 2018-02-10 05:38 - 000324608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-02-14 13:27 - 2018-02-10 05:38 - 000174592 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 004772352 ____N (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 003578368 ____N (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 003419136 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-02-14 13:27 - 2018-02-10 05:37 - 003287040 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 002523648 ____N (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000965632 ____N (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000862208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000456704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000417792 ____N (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000365568 ____N (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000308224 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2018-02-14 13:27 - 2018-02-10 05:37 - 000199680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2018-02-14 13:27 - 2018-02-10 05:37 - 000198656 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 002859520 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 002462208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 002035712 ____N (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 001759744 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 001739264 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 001342464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 001230848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000915968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000695296 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000599552 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000576512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000559104 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000403968 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000383488 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000141824 ____N (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 000076288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 005388800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 004384768 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 002814976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 002413568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000943104 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000941568 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000918528 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000862208 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000842240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000826880 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-02-14 13:27 - 2018-02-10 05:35 - 000796160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000667136 ____N (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000455680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000433664 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000402944 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000332288 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
2018-02-14 13:27 - 2018-02-10 05:35 - 000329728 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2018-02-14 13:27 - 2018-02-10 05:34 - 006532096 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2018-02-14 13:27 - 2018-02-10 05:34 - 002983936 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2018-02-14 13:27 - 2018-02-10 05:34 - 000624640 ____N (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2018-02-14 13:27 - 2018-02-10 05:34 - 000464384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2018-02-14 13:27 - 2018-02-10 05:34 - 000433152 ____N (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2018-02-14 13:27 - 2018-02-10 05:34 - 000111104 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 001936384 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2018-02-14 13:27 - 2018-02-10 05:33 - 001661440 ____N (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 001570816 ____N (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2018-02-14 13:27 - 2018-02-10 05:33 - 001557504 ____N (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2018-02-14 13:27 - 2018-02-10 05:33 - 001509888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000621568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000620544 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000604672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000482816 ____N (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000341504 ____N (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000266752 ____N (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2018-02-14 13:27 - 2018-02-10 05:33 - 000217088 ____N (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000125952 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2018-02-14 13:27 - 2018-02-10 05:33 - 000093696 ____N (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2018-02-14 13:27 - 2018-02-10 05:32 - 002427904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2018-02-14 13:27 - 2018-02-10 05:32 - 000681472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2018-02-14 13:27 - 2018-02-10 05:32 - 000392704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2018-02-14 13:27 - 2018-02-10 05:32 - 000073216 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2018-02-14 13:27 - 2018-02-10 05:32 - 000056832 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll
2018-02-14 13:27 - 2018-02-10 05:32 - 000050176 ____N (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2018-02-14 13:27 - 2018-02-10 05:31 - 001488896 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2018-02-14 13:27 - 2018-02-10 05:31 - 001159680 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2018-02-14 13:27 - 2018-02-10 05:31 - 000301056 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll
2018-02-14 13:27 - 2018-02-10 05:31 - 000190464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2018-02-14 13:27 - 2018-02-10 05:31 - 000078848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2018-02-14 13:27 - 2018-02-10 03:59 - 000804240 ____N C:\WINDOWS\SysWOW64\locale.nls
2018-02-14 13:27 - 2018-02-10 03:59 - 000804240 ____N C:\WINDOWS\system32\locale.nls
2018-02-14 13:27 - 2018-02-09 04:35 - 004959688 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2018-02-14 13:27 - 2018-02-09 04:35 - 001234888 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2018-02-14 13:27 - 2018-02-09 04:35 - 001002952 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2018-02-14 13:27 - 2018-02-09 04:35 - 000892872 ____N (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2018-02-14 13:27 - 2018-02-09 04:35 - 000065992 ____N (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2018-02-14 13:27 - 2018-02-02 04:36 - 003903944 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2018-02-14 13:27 - 2018-02-02 04:36 - 000921032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2018-02-14 13:27 - 2018-02-02 04:36 - 000854976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2018-02-14 13:27 - 2018-02-02 04:36 - 000649672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2018-02-14 13:27 - 2018-02-02 04:36 - 000054720 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-09 12:19 - 2017-11-22 13:51 - 000000000 ____D C:\Nerladdat
2018-03-09 11:59 - 2017-11-30 00:54 - 000000000 ____D C:\Users\Asus\AppData\LocalLow\Mozilla
2018-03-09 01:27 - 2017-11-29 16:31 - 000000000 ____D C:\League of Legends
2018-03-08 04:01 - 2017-12-03 00:30 - 000001351 _____ C:\Users\Asus\Desktop\Kom ihåg.txt
2018-03-03 20:37 - 2017-12-01 15:39 - 000000000 ____D C:\Games
2018-03-03 16:39 - 2017-11-29 16:34 - 000000895 _____ C:\Users\Asus\Desktop\µTorrent.lnk
2018-03-01 15:46 - 2017-11-22 13:50 - 000000000 ___RD C:\Users\Asus\OneDrive
2018-03-01 10:33 - 2018-01-29 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BankID säkerhetsprogram
2018-02-27 17:05 - 2017-11-22 14:21 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-02-27 17:05 - 2017-11-22 14:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-02-27 16:47 - 2017-12-01 15:40 - 000002255 _____ C:\Users\Public\Desktop\Heroes of Might and Magic 3 Complete.lnk
2018-02-27 16:47 - 2017-12-01 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of Might and Magic 3 Complete [GOG.com]
2018-02-26 12:58 - 2017-11-29 16:32 - 000000826 _____ C:\Users\Public\Desktop\League of Legends.lnk
2018-02-24 11:27 - 2017-11-22 19:48 - 000000000 ___RD C:\Users\Asus\3D Objects
2018-02-24 11:27 - 2017-11-22 14:07 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-02-24 11:23 - 2018-01-11 21:36 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\bwin Poker
2018-02-24 11:23 - 2017-12-04 20:50 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2018-02-24 11:23 - 2017-11-24 11:38 - 000000000 ____D C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-02-24 11:23 - 2017-11-22 13:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
2018-02-24 11:11 - 2018-01-16 14:22 - 000000000 ____D C:\AMD
2018-02-24 11:03 - 2017-11-30 01:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EverQuest
2018-02-24 11:03 - 2017-11-29 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2018-02-24 10:43 - 2017-11-22 18:36 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2018-02-24 10:40 - 2017-09-29 14:40 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
2018-02-24 10:39 - 2017-09-29 14:42 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\smbdirect.sys

==================== Files in the root of some directories =======

2018-02-25 22:41 - 2018-02-25 22:41 - 000000281 _____ () C:\ProgramData\fontcacheev1.dat
2018-03-05 02:08 - 2018-03-05 02:08 - 000000000 _____ () C:\Users\Asus\AppData\Roaming\FC29FA0894FE.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-03-06 20:57

==================== End of FRST.txt ============================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04.03.2018
Ran by Asus (09-03-2018 12:21:30)
Running from C:\Nerladdat
Windows 10 Pro Version 1709 16299.248 (X64) (2018-02-24 10:27:00)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administratör (S-1-5-21-3272428971-2236212934-3590213723-500 - Administrator - Disabled)
Asus (S-1-5-21-3272428971-2236212934-3590213723-1001 - Administrator - Enabled) => C:\Users\Asus
DefaultAccount (S-1-5-21-3272428971-2236212934-3590213723-503 - Limited - Disabled)
Gäst (S-1-5-21-3272428971-2236212934-3590213723-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3272428971-2236212934-3590213723-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\uTorrent) (Version: 3.5.3.44358 - BitTorrent Inc.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
BankID säkerhetsprogram (HKLM-x32\...\{77B5BCDC-5496-48DA-8B16-5EE2AF08CA31}) (Version: 7.5.0.22 - Finansiell ID-Teknik BID AB)
Dying Light Ultimate Edition version 1.0.6.1 (HKLM-x32\...\Dying Light Ultimate Edition_is1) (Version: 1.0.6.1 - Mr DJ)
Dying.Light.The.Following.Enhanced.Edition.v1.13 version 1.13 (HKLM-x32\...\{352FB9B0-971A-4108-B241-221E3F09DE6E}}_is1) (Version: 1.13 - Ali213.net)
GOG.com Heroes of Might and Magic 3 (HKLM\...\{1d3c859c-1028-4822-b0a7-da4f7bbc18bc}.sdb) (Version:  - )
Heroes of Might and Magic 3 Complete (HKLM-x32\...\GOGPACKHOMM3COMPLETE_is1) (Version: 2.0.0.16 - GOG.com)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft OneDrive (HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\OneDriveSetup.exe) (Version: 17.005.0107.0008 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 58.0.2 (x64 sv-SE) (HKLM\...\Mozilla Firefox 58.0.2 (x64 sv-SE)) (Version: 58.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
ProxyGate version 3.0.0.1180 (HKLM-x32\...\{1EC095EE-8CA3-43D6-B9F5-0C55B82ED3D7}}_is1) (Version: 3.0.0.1180 - Gold Click Ltd) <==== ATTENTION
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0BF8CB26-D192-4AD7-BB4E-7DFFA60EE511} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {5C4B41F4-534C-4E7E-9371-EB06B1C2536D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\AVAST Software\Avast\setup\overseer.exe
Task: {8B9D9AAD-41EF-4732-B5A5-8A57C57A4C39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {A0EDE3BE-A9E5-49C8-A4DF-8A83D1FAD197} - System32\Tasks\Asus => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Asus /t REG_SZ /d "explorer.exe hxxp://kb-ribaki.org" <==== ATTENTION
Task: {D2228554-DFCD-4C2C-84C9-2336EF119FBA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {EA48D56C-A2EF-4B13-8CBB-C9BA6FAB9BE6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {FCFBFEC9-F15C-4A96-9B55-75F19C679435} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\Asus\Desktop\Launch Titanium - genväg.lnk -> C:\EverQuest\Launch Titanium.bat ()

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 ____N () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-02-14 13:27 - 2018-02-10 05:39 - 011044864 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-02-14 13:27 - 2018-02-10 05:36 - 001804288 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-02-24 10:47 - 2018-02-24 10:44 - 000000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Asus\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\firefox-bakgrund.bmp
DNS Servers: 83.233.79.36 - 83.233.79.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: BthHFSrv => 3
MSCONFIG\Services: bthserv => 3
HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3272428971-2236212934-3590213723-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1A39A464-A47A-45AD-8FD5-54811EC52946}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{74DABF66-2613-435B-82AD-21E643303C7E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{7AFD82C6-73E8-4093-B343-3DFAC8E4CEA9}C:\windows.old\users\asus\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\windows.old\users\asus\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{7FA648F1-35FC-4238-A109-D9F3CD62FF4C}C:\windows.old\users\asus\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\windows.old\users\asus\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{010B0BBE-CC3D-4992-B6F1-7D2E142EE383}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5A178FDE-082B-44D2-995F-34DF93524062}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4ABEAFD0-6CB9-4F3B-9B80-E4BD36976500}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6B78934F-8B76-4C21-95B5-85AAB54A08B4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4D995F94-5805-4AF9-BABA-C5D26DE4C8B8}] => (Allow) C:\Users\Asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6C4A755B-BD6D-4CF9-8C1B-FFC01E5B86F2}] => (Allow) C:\Users\Asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{49089FDE-44F3-453B-A920-ABD21FF9CFA9}] => (Allow) C:\Dying Light\DyingLightGame.exe
FirewallRules: [{303CA841-A95F-4F11-810C-79180751321D}] => (Allow) C:\Dying Light\DyingLightGame.exe
FirewallRules: [TCP Query User{6FF3BBC2-F1F9-4638-A98C-9CB0FCB697DF}C:\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [UDP Query User{2BF43D6B-6308-4D58-AC06-52D7714C115B}C:\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe

==================== Restore Points =========================

04-03-2018 19:12:02 Schemalagd kontrollpunkt

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/09/2018 12:00:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/09/2018 12:00:32 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (03/09/2018 12:00:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/08/2018 12:29:19 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/08/2018 12:29:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=4

Error: (03/08/2018 12:29:11 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/08/2018 02:39:25 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/08/2018 02:39:22 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Licensaktiveringen (slui.exe) misslyckades med följande felkod:
hr=0x8007007B
Kommandoradsargument:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=3


System errors:
=============
Error: (03/06/2018 08:45:00 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Den senaste avstängningen av datorn vid 20:42:48 den ‎2018-‎03-‎06 skedde oväntat.

Error: (03/04/2018 07:06:41 PM) (Source: Disk) (EventID: 7) (User: )
Description: Det finns ett felaktigt block på enhet \Device\Harddisk0\DR0.

Error: (03/04/2018 07:06:31 PM) (Source: Disk) (EventID: 7) (User: )
Description: Det finns ett felaktigt block på enhet \Device\Harddisk0\DR0.

Error: (03/04/2018 07:06:29 PM) (Source: Disk) (EventID: 7) (User: )
Description: Det finns ett felaktigt block på enhet \Device\Harddisk0\DR0.

Error: (03/04/2018 06:58:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT instans)
Description: Installationsfel: Det gick inte att installera följande uppdatering på grund av fel 0x80070643: Definitionsuppdatering för Windows Defender Antivirus - KB2267602 (Definition 1.263.132.0).

Error: (03/03/2018 10:45:50 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Skuggkopiorna för volymen C: avbröts eftersom lagringsutrymmet för skuggkopian inte kunde växa på grund av en begränsning som angetts av användaren.

Error: (03/03/2018 08:45:03 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Skuggkopiorna för volymen C: avbröts eftersom lagringsutrymmet för skuggkopian inte kunde växa på grund av en begränsning som angetts av användaren.

Error: (03/03/2018 06:42:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: En timeout (120000 ms) inträffade vid väntan på att tjänsten OneSyncSvc_35435 skulle ansluta.


Windows Defender:
===================================
Date: 2018-03-03 18:00:11.372
Description:
Windows Defender Antivirus har upptäckt ett misstänkt beteende.
Namn: Behavior:Win32/ModifiedBootRecord
ID: 3434542534
Allvarlighetsgrad: Låg
Kategori: Misstänkt beteende
Sökväg som hittats: file:_C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe;process:_3908
Ursprung till identifieringen: Lokal dator
Identifieringstyp: Misstänkt
Identifieringskälla: Realtidsskydd
Status: Kör
Användare: DESKTOP-BSU9JD8\Asus
Processnamn: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
Signatur-ID: 23858570787236
Signaturversion: AV: 1.263.113.0, AS: 1.263.113.0
Sökmotorversion: 1.1.14600.4
Riktighetsetikett:  Medel
Målfilens namn:  

==================== Memory info ===========================

Processor: Intel® Core™2 Extreme CPU X9650 @ 3.00GHz
Percentage of memory in use: 16%
Total physical RAM: 16383.11 MB
Available physical RAM: 13624.36 MB
Total Virtual: 18815.11 MB
Available Virtual: 15779 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.56 GB) (Free:42.89 GB) NTFS

\\?\Volume{1549f232-0000-0000-0000-100000000000}\ (Reserverad av systemet) (Fixed) (Total:0.49 GB) (Free:0.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 114.5 GB) (Disk ID: 39E939E8)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=148.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:22 AM

Posted 09 March 2018 - 08:10 AM

Hi Kraeger :)

My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state.
  • As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens
  • As long as I'm assisting you on BleepingComputer, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you
  • The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system
  • If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry!
  • If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off
  • Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced
  • I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against BleepingComputer's rules
  • In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process
  • I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely gone
    This being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread
This being said, it's time to clean-up some malware, so let's get started, shall we? :)

Start by uninstalling the following program, ProxyGate version 3.0.0.1180.

j1Bynr2.pngMalwarebytes - Clean Mode
  • Download and install the free version of Malwarebytes
    Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  • Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  • Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  • Let the scan run, the time required to complete the scan depends of your system and computer specs
  • Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
    • If it asks you to restart your computer to complete the removal, do so
  • Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:22 AM

Posted 13 March 2018 - 07:05 AM

Hi Kraeger,

Are you still with me?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:22 AM

Posted 15 March 2018 - 07:16 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users