Hey. Unfortunately I have been infected with this Ramnit(?) for over a year now, and sometimes it feels like it's just a useless virus sitting there, while other times it feels like somehow the beast is awakened, creating a *srv.exe of every single .exe I run, and constantly opens Chrome tabs whenever a .exe runs. It's been like this for a whole year, and it actually remained quiet for most of the time.
But recently I reformatted my C disk, and of course the Desktoplayer is still there, and apparently the reformat had awakened it. It's back opening browsers and creating *srv.exe's.
Please read this thread https://www.bleepingcomputer.com/forums/t/336044/infected-with-desktoplayerexe-srvexe-virus/ as the person who had created that thread explained this virus thing pretty accurately, and I'm having the exact same symptoms. I also did a lot of what he tried to do too, did every way I could think of to get rid of this damn Ramnit but of course, I lost.
The only current difference is the location of Desktoplayer.exe. It used to create itself in C:\Program Files\Microsoft\Destoplayer.exe but after I tried to rename Desktoplayer.exe and change some permissions in attempt to make it stop executing, it recreated itself in C:\Users\<myusername>\Microsoft\Desktoplayer.exe
Of course I've tried tens of malware programs, they all detect the file and claim to have quarantined/fixed it but obviously they couldn't.
I was going to try some scans in Safe Mode but I thought I'll just ask for your help before doing anything.
Oh just a small note, from the thread I've linked and my experience with this Ramnit, it's a one hell of a virus that's ridiculously difficult to remove. So it's gonna probably take a lot of time and effort.
I will wait until advised on what to do next. I've seen people claiming that this virus may be stealing personal information, but I've had it for more than a year now so if it had stolen anything I would've most definitely noticed.
P.S: My brother's laptop is also infected with this thing. Should I follow what you instruct me to do on this laptop, on his laptop too? Or shall I tell him to create another thread?
Thank you in advance. Here are the FRST.txt and Addition.txt
FRST.txt:
Ran by Astronomy (administrator) on ASTRONOMY-PC (22-03-2018 14:51:23)
Running from C:\Users\Astronomy\Desktop
Loaded Profiles: Astronomy (Available Profiles: Astronomy)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Discord Inc.) C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\Discord.exe
(Spotify Ltd) C:\Users\Astronomy\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe
(Discord Inc.) C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\Discord.exe
(Discord Inc.) C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\Discord.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Spotify Ltd) C:\Users\Astronomy\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Astronomy\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Astronomy\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Astronomy\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2120808 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [135968 2018-03-15] (Intel)
HKLM-x32\...\Winlogon: [Userinit] userinit.exe,c:\program files (x86)\microsoft\desktoplayer.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\Run: [Discord] => C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\Discord.exe [57821176 2018-01-08] (Discord Inc.)
HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\Run: [Spotify] => C:\Users\Astronomy\AppData\Roaming\Spotify\Spotify.exe [21894544 2018-03-19] (Spotify Ltd)
HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\Run: [Spotify Web Helper] => C:\Users\Astronomy\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-03-19] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E873CAB-4887-4290-BBF8-476DD9ED45A7}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7FC10E8F-2971-4AD8-9994-DB6C1E4ABF40}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/tr-tr/?ocid=iehp
SearchScopes: HKU\S-1-5-21-3396332571-2748628541-2424829021-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2018-03-19] (Oracle Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2018-03-19] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2018-03-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2018-03-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-19] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN)
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBEQo0lOCwIxrzs2Rcb6iYzGZUPVTFL1sFLQyq3KgDxdxe018PxDU44QCtWa2hqIOPxM-3JTrIWWyoOp8Gzh-pjEuuOmC_2umfS-4hkjZGM6p1kqj-Wmk1hKIlxwQSVD6XAlWtHj2QJITG9nqnjUDIU2jsbKgKEPAlqG3J1pgDGB6Y6GvfEEkFabILFO325xw,,
CHR Profile: C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default [2018-03-22]
CHR Extension: (Slides) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-19]
CHR Extension: (Docs) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-19]
CHR Extension: (Google Drive) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-19]
CHR Extension: (YouTube) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-19]
CHR Extension: (Sheets) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-19]
CHR Extension: (Google Docs Offline) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-19]
CHR Extension: (Gmail) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-03-19]
CHR Extension: (Chrome Media Router) - C:\Users\Astronomy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-19]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22816 2018-03-15] (Intel)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [886032 2018-01-11] ()
S3 Intel® SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel Corporation)
R2 LDrvSvc; C:\Program Files (x86)\OSTotoSoft\DriverTalent\LDrvSvc.dll [181928 2017-01-20] ()
R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [182544 2018-01-11] ()
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [886032 2018-01-11] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-22 14:51 - 2018-03-22 14:51 - 000011052 _____ C:\Users\Astronomy\Desktop\FRST.txt
2018-03-22 14:51 - 2018-03-22 14:51 - 000000000 ____D C:\FRST
2018-03-22 14:50 - 2018-03-22 14:50 - 002403328 _____ (Farbar) C:\Users\Astronomy\Desktop\FRST64.exe
2018-03-22 14:18 - 2018-03-22 14:18 - 000003718 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2018-03-22 14:17 - 2018-03-22 14:17 - 000000000 ____D C:\Windows\LastGood
2018-03-22 14:10 - 2018-02-06 01:47 - 000981960 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2018-03-22 14:10 - 2018-02-06 01:47 - 000122824 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2018-03-22 14:08 - 2018-03-22 14:08 - 010926372 _____ C:\Users\Astronomy\Downloads\0020-Install_Win7_7116_02082018.zip
2018-03-22 14:03 - 2018-03-22 14:05 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant
2018-03-22 14:03 - 2018-03-22 14:03 - 000003616 _____ C:\Windows\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2018-03-22 14:03 - 2018-03-22 14:03 - 000003482 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK
2018-03-22 14:03 - 2018-03-22 14:03 - 000003370 _____ C:\Windows\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2018-03-22 14:03 - 2018-03-22 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant
2018-03-22 14:03 - 2018-01-11 01:25 - 000041512 _____ C:\Windows\system32\Drivers\semav6msr64.sys
2018-03-22 14:02 - 2018-03-22 14:18 - 000000000 ____D C:\ProgramData\Intel
2018-03-22 14:01 - 2018-03-22 14:01 - 013884872 _____ (Intel) C:\Users\Astronomy\Downloads\Intel Driver and Support Assistant Installer.exe
2018-03-22 04:54 - 2018-03-22 05:10 - 000000000 ____D C:\Users\Astronomy\Doctor Web
2018-03-22 04:54 - 2018-03-22 04:54 - 000000000 ____D C:\ProgramData\Doctor Web
2018-03-22 04:51 - 2018-03-22 04:53 - 169069008 _____ C:\Users\Astronomy\Downloads\z9wx5sb2.exe
2018-03-22 04:29 - 2018-03-22 04:30 - 005186991 _____ C:\Users\Astronomy\Downloads\uniextract161_noinst.rar
2018-03-21 15:36 - 2018-03-21 15:37 - 050611304 _____ (Google Inc.) C:\Users\Astronomy\Downloads\ChromeStandaloneSetup64.exe
2018-03-20 20:36 - 2013-10-19 05:18 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2018-03-20 20:36 - 2013-10-19 04:36 - 000159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2018-03-20 14:11 - 2018-03-20 14:11 - 000158282 _____ C:\Users\Astronomy\Downloads\viner-hand-itc.zip
2018-03-20 12:42 - 2018-03-20 12:42 - 000003474 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-Astronomy-PC-Astronomy
2018-03-20 12:41 - 2018-03-20 20:34 - 000000000 ____D C:\Windows\system32\MRT
2018-03-20 12:41 - 2018-03-20 12:41 - 130364688 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-03-20 12:39 - 2018-03-20 12:40 - 130364688 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-03-20 06:28 - 2015-07-30 16:13 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2018-03-20 06:28 - 2015-07-30 16:13 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-03-20 05:53 - 2012-03-01 09:46 - 000023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2018-03-20 05:53 - 2012-03-01 09:28 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2018-03-20 05:53 - 2012-03-01 08:29 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2018-03-20 05:42 - 2014-07-01 01:24 - 000008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2018-03-20 05:42 - 2014-07-01 01:14 - 000008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2018-03-20 05:42 - 2014-06-06 09:16 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2018-03-20 05:42 - 2014-06-06 09:12 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2018-03-20 05:42 - 2014-03-10 00:48 - 001389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2018-03-20 05:42 - 2014-03-10 00:48 - 000171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2018-03-20 05:42 - 2014-03-10 00:47 - 000619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2018-03-20 05:42 - 2014-03-10 00:47 - 000099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2018-03-20 05:25 - 2018-03-20 05:25 - 000000000 ____D C:\Users\Astronomy\AppData\LocalLow\Adobe
2018-03-20 05:22 - 2018-03-20 05:22 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk
2018-03-20 05:16 - 2018-03-20 05:22 - 000000000 ____D C:\Program Files\Common Files\Adobe
2018-03-20 05:15 - 2018-03-20 05:15 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-03-20 05:01 - 2018-03-20 05:24 - 000000000 ____D C:\pstemp
2018-03-20 04:19 - 2015-11-14 02:09 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2018-03-20 04:19 - 2015-11-14 02:09 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2018-03-20 04:19 - 2015-11-14 02:08 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2018-03-20 04:19 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2018-03-20 04:19 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2018-03-20 04:19 - 2015-11-14 01:49 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2018-03-20 04:19 - 2015-06-02 03:07 - 000254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2018-03-20 04:19 - 2015-06-02 02:47 - 000210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2018-03-20 04:19 - 2015-04-13 06:28 - 000328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2018-03-20 04:19 - 2014-12-11 20:47 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2018-03-20 04:18 - 2016-01-06 22:02 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2018-03-20 04:18 - 2016-01-06 21:41 - 000216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2018-03-20 04:18 - 2015-08-05 20:56 - 001110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-03-20 04:18 - 2015-07-15 21:10 - 001743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-03-20 04:18 - 2015-07-10 20:51 - 003722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2018-03-20 04:18 - 2015-07-10 20:51 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2018-03-20 04:18 - 2015-07-10 20:51 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2018-03-20 04:18 - 2015-07-10 20:34 - 003221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2018-03-20 04:18 - 2015-07-10 20:34 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2018-03-20 04:18 - 2015-07-10 20:33 - 000131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2018-03-20 04:18 - 2011-06-15 13:02 - 000212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2018-03-20 04:18 - 2011-06-15 13:02 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2018-03-20 04:18 - 2011-06-15 13:02 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2018-03-20 04:18 - 2011-06-15 13:02 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2018-03-20 04:18 - 2011-06-15 11:55 - 000319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2018-03-20 04:18 - 2011-06-15 11:55 - 000163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2018-03-20 04:18 - 2011-06-15 11:55 - 000122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2018-03-20 04:18 - 2011-06-15 11:55 - 000086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2018-03-20 04:18 - 2011-06-15 11:55 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2018-03-20 04:18 - 2010-12-23 13:42 - 001118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2018-03-20 04:18 - 2010-12-23 13:36 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2018-03-20 04:18 - 2010-12-23 08:54 - 000850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2018-03-20 04:18 - 2010-12-23 08:50 - 000199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2018-03-20 04:17 - 2017-11-17 07:23 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-03-20 04:17 - 2017-11-07 19:31 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-03-20 04:17 - 2017-11-07 19:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-03-20 04:17 - 2017-11-04 18:31 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-03-20 04:17 - 2017-11-04 18:31 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-03-20 04:17 - 2017-11-04 18:10 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-03-20 04:17 - 2017-11-04 18:10 - 000142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-03-20 04:17 - 2017-11-02 19:55 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2018-03-20 04:17 - 2017-11-02 19:55 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\rtm.dll
2018-03-20 04:17 - 2017-11-02 19:55 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2018-03-20 04:17 - 2017-11-02 19:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\iprtprio.dll
2018-03-20 04:17 - 2017-11-02 18:11 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2018-03-20 04:17 - 2017-11-02 18:11 - 000115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtm.dll
2018-03-20 04:17 - 2017-11-02 18:11 - 000075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
2018-03-20 04:17 - 2017-11-02 17:56 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtprio.dll
2018-03-20 04:17 - 2017-10-18 05:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2018-03-20 04:17 - 2017-10-18 05:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2018-03-20 04:17 - 2017-10-18 05:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2018-03-20 04:17 - 2017-10-18 05:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2018-03-20 04:17 - 2017-10-18 05:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2018-03-20 04:17 - 2017-10-17 02:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-03-20 04:17 - 2017-10-17 02:04 - 001001984 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2018-03-20 04:17 - 2017-10-17 01:46 - 000953344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2018-03-20 04:17 - 2017-10-17 00:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-03-20 04:17 - 2017-10-12 03:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2018-03-20 04:17 - 2017-10-12 03:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2018-03-20 04:17 - 2017-10-12 03:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2018-03-20 04:17 - 2017-10-12 03:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2018-03-20 04:17 - 2017-10-12 03:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-03-20 04:17 - 2017-10-12 03:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2018-03-20 04:17 - 2017-10-12 03:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2018-03-20 04:17 - 2017-10-12 03:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2018-03-20 04:17 - 2017-10-12 03:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2018-03-20 04:17 - 2017-10-12 03:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-03-20 04:17 - 2017-10-12 03:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-03-20 04:17 - 2017-10-12 03:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2018-03-20 04:17 - 2017-10-12 03:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2018-03-20 04:17 - 2017-10-12 03:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2018-03-20 04:17 - 2017-10-12 03:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2018-03-20 04:17 - 2017-10-12 03:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2018-03-20 04:17 - 2017-10-12 03:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2018-03-20 04:17 - 2017-10-12 03:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2018-03-20 04:17 - 2017-10-12 03:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-03-20 04:17 - 2017-10-12 03:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2018-03-20 04:17 - 2017-10-12 03:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-03-20 04:17 - 2017-09-13 18:33 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-03-20 04:17 - 2017-09-13 18:32 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-03-20 04:17 - 2017-09-13 18:32 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-03-20 04:17 - 2017-09-13 18:32 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-03-20 04:17 - 2017-09-13 18:32 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-03-20 04:17 - 2017-09-13 18:31 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000886272 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-03-20 04:17 - 2017-09-13 18:28 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:27 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:13 - 004001512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-03-20 04:17 - 2017-09-13 18:13 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-03-20 04:17 - 2017-09-13 18:10 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-03-20 04:17 - 2017-09-13 18:09 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:08 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 18:05 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2018-03-20 04:17 - 2017-09-13 18:00 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-03-20 04:17 - 2017-09-13 18:00 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-03-20 04:17 - 2017-09-13 18:00 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-03-20 04:17 - 2017-09-13 18:00 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-03-20 04:17 - 2017-09-13 17:57 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-03-20 04:17 - 2017-09-13 17:56 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-03-20 04:17 - 2017-09-13 17:53 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-03-20 04:17 - 2017-09-13 17:53 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-03-20 04:17 - 2017-09-13 17:53 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-03-20 04:17 - 2017-09-13 17:52 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-03-20 04:17 - 2017-09-13 17:52 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-03-20 04:17 - 2017-09-13 17:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-03-20 04:17 - 2017-09-13 17:47 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-03-20 04:17 - 2017-09-13 17:46 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-03-20 04:17 - 2017-09-13 17:46 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-03-20 04:17 - 2017-09-13 17:46 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-03-20 04:17 - 2017-09-08 18:30 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-03-20 04:17 - 2017-09-08 18:10 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-03-20 04:17 - 2017-09-08 17:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2018-03-20 04:17 - 2017-09-08 17:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2018-03-20 04:17 - 2017-09-07 18:31 - 002851328 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2018-03-20 04:17 - 2017-09-07 18:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2018-03-20 04:17 - 2017-09-07 17:55 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-03-20 04:17 - 2017-09-07 17:55 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-03-20 04:17 - 2017-09-07 17:55 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-03-20 04:17 - 2017-09-07 16:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-03-20 04:17 - 2017-09-07 16:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-03-20 04:17 - 2017-08-19 18:28 - 004121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2018-03-20 04:17 - 2017-08-19 18:28 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2018-03-20 04:17 - 2017-08-19 18:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2018-03-20 04:17 - 2017-08-19 18:28 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2018-03-20 04:17 - 2017-08-19 18:10 - 003209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2018-03-20 04:17 - 2017-08-19 18:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2018-03-20 04:17 - 2017-08-19 18:10 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2018-03-20 04:17 - 2017-08-19 18:10 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2018-03-20 04:17 - 2017-08-19 18:08 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2018-03-20 04:17 - 2017-08-19 18:08 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2018-03-20 04:17 - 2017-08-19 17:57 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2018-03-20 04:17 - 2017-08-19 17:57 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2018-03-20 04:17 - 2017-08-16 18:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2018-03-20 04:17 - 2017-08-16 18:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2018-03-20 04:17 - 2017-08-15 18:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-03-20 04:17 - 2017-08-15 18:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-03-20 04:17 - 2017-08-15 18:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-03-20 04:17 - 2017-08-15 18:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 001032192 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2018-03-20 04:17 - 2017-08-14 20:35 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2018-03-20 04:17 - 2017-08-14 20:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2018-03-20 04:17 - 2017-08-14 00:46 - 001112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-03-20 04:17 - 2017-08-14 00:45 - 000162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2018-03-20 04:17 - 2017-08-14 00:45 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2018-03-20 04:17 - 2017-08-14 00:45 - 000020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2018-03-20 04:17 - 2017-08-14 00:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2018-03-20 04:17 - 2017-08-14 00:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2018-03-20 04:17 - 2017-08-11 09:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2018-03-20 04:17 - 2017-08-11 09:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2018-03-20 04:17 - 2017-08-11 09:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2018-03-20 04:17 - 2017-08-11 09:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2018-03-20 04:17 - 2017-08-11 09:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2018-03-20 04:17 - 2017-08-11 09:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-03-20 04:17 - 2017-08-11 09:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2018-03-20 04:17 - 2017-08-11 09:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2018-03-20 04:17 - 2017-08-11 09:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2018-03-20 04:17 - 2017-08-11 09:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2018-03-20 04:17 - 2017-08-11 09:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2018-03-20 04:17 - 2017-08-11 09:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2018-03-20 04:17 - 2017-08-11 09:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2018-03-20 04:17 - 2017-08-11 09:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2018-03-20 04:17 - 2017-08-11 09:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-03-20 04:17 - 2017-08-11 09:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2018-03-20 04:17 - 2017-08-11 08:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2018-03-20 04:17 - 2017-07-29 17:56 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2018-03-20 04:17 - 2017-07-21 17:26 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
2018-03-20 04:17 - 2017-07-21 17:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexch40.dll
2018-03-20 04:17 - 2017-07-21 17:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2018-03-20 04:17 - 2017-07-21 17:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2018-03-20 04:17 - 2017-07-14 18:29 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2018-03-20 04:17 - 2017-07-14 18:29 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2018-03-20 04:17 - 2017-07-14 18:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2018-03-20 04:17 - 2017-07-14 17:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2018-03-20 04:17 - 2017-07-14 17:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2018-03-20 04:17 - 2017-07-14 17:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2018-03-20 04:17 - 2017-07-08 18:34 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-03-20 04:17 - 2017-07-07 18:33 - 000363752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2018-03-20 04:17 - 2017-07-07 18:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2018-03-20 04:17 - 2017-07-07 18:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2018-03-20 04:17 - 2017-07-01 16:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2018-03-20 04:17 - 2017-06-15 23:23 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-03-20 04:17 - 2017-06-13 01:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2018-03-20 04:17 - 2017-06-13 01:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2018-03-20 04:17 - 2017-06-13 01:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2018-03-20 04:17 - 2017-06-13 01:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2018-03-20 04:17 - 2017-06-13 01:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2018-03-20 04:17 - 2017-06-13 01:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2018-03-20 04:17 - 2017-06-13 01:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2018-03-20 04:17 - 2017-06-13 01:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
2018-03-20 04:17 - 2017-06-13 01:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2018-03-20 04:17 - 2017-06-13 01:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2018-03-20 04:17 - 2017-06-13 01:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2018-03-20 04:17 - 2017-06-13 01:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2018-03-20 04:17 - 2017-06-13 01:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
2018-03-20 04:17 - 2017-06-13 01:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
2018-03-20 04:17 - 2017-06-02 11:10 - 000733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2018-03-20 04:17 - 2017-05-30 07:56 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-03-20 04:17 - 2017-05-30 07:56 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-03-20 04:17 - 2017-05-30 07:56 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-03-20 04:17 - 2017-05-16 18:35 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-03-20 04:17 - 2017-05-16 18:35 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2018-03-20 04:17 - 2017-05-16 18:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2018-03-20 04:17 - 2017-05-12 21:22 - 001554944 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2018-03-20 04:17 - 2017-05-12 21:22 - 001152000 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2018-03-20 04:17 - 2017-05-12 21:03 - 001082368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2018-03-20 04:17 - 2017-05-10 18:33 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2018-03-20 04:17 - 2017-05-10 18:29 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-03-20 04:17 - 2017-05-10 18:29 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-03-20 04:17 - 2017-05-10 18:29 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-03-20 04:17 - 2017-05-10 18:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-03-20 04:17 - 2017-05-10 18:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2018-03-20 04:17 - 2017-05-10 18:14 - 002651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-03-20 04:17 - 2017-05-10 18:13 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-03-20 04:17 - 2017-05-10 18:13 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-03-20 04:17 - 2017-05-10 18:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-03-20 04:17 - 2017-05-10 18:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-03-20 04:17 - 2017-05-10 18:13 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-03-20 04:17 - 2017-05-10 18:13 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-03-20 04:17 - 2017-05-10 18:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-03-20 04:17 - 2017-05-10 18:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-03-20 04:17 - 2017-05-10 18:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-03-20 04:17 - 2017-05-10 18:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-03-20 04:17 - 2017-05-10 18:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-03-20 04:17 - 2017-05-07 18:33 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2018-03-20 04:17 - 2017-05-07 18:29 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2018-03-20 04:17 - 2017-04-21 18:34 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-03-20 04:17 - 2017-04-21 18:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2018-03-20 04:17 - 2017-04-17 18:37 - 000876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-03-20 04:17 - 2017-04-17 18:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-03-20 04:17 - 2017-04-12 18:32 - 001483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-03-20 04:17 - 2017-04-12 18:32 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-03-20 04:17 - 2017-04-12 18:32 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-03-20 04:17 - 2017-04-12 18:32 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-03-20 04:17 - 2017-04-12 18:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-03-20 04:17 - 2017-04-12 18:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-03-20 04:17 - 2017-04-12 18:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-03-20 04:17 - 2017-04-12 18:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-03-20 04:17 - 2017-04-04 17:53 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2018-03-20 04:17 - 2017-03-30 18:03 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2018-03-20 04:17 - 2017-03-30 17:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
2018-03-20 04:17 - 2017-03-10 19:32 - 001389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2018-03-20 04:17 - 2017-03-10 19:32 - 000300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2018-03-20 04:17 - 2017-03-10 19:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2018-03-20 04:17 - 2017-03-10 19:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2018-03-20 04:17 - 2017-03-10 18:57 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2018-03-20 04:17 - 2017-03-10 18:55 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2018-03-20 04:17 - 2017-03-10 18:55 - 000195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2018-03-20 04:17 - 2017-03-07 19:30 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2018-03-20 04:17 - 2017-03-07 19:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2018-03-20 04:17 - 2017-03-04 04:27 - 001574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2018-03-20 04:17 - 2017-03-04 04:27 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2018-03-20 04:17 - 2017-03-04 04:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2018-03-20 04:17 - 2017-03-04 04:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2018-03-20 04:17 - 2017-02-09 19:32 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2018-03-20 04:17 - 2017-02-09 19:32 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2018-03-20 04:17 - 2017-02-09 19:32 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2018-03-20 04:17 - 2017-02-09 19:31 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2018-03-20 04:17 - 2017-02-09 19:31 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2018-03-20 04:17 - 2017-02-09 19:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2018-03-20 04:17 - 2017-02-09 19:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2018-03-20 04:17 - 2017-02-09 19:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2018-03-20 04:17 - 2017-02-09 18:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2018-03-20 04:17 - 2017-01-13 21:00 - 000976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-03-20 04:17 - 2017-01-13 21:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2018-03-20 04:17 - 2017-01-13 20:45 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-03-20 04:17 - 2017-01-13 20:45 - 000084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2018-03-20 04:17 - 2017-01-11 21:01 - 001887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-03-20 04:17 - 2017-01-11 21:01 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2018-03-20 04:17 - 2017-01-11 20:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-03-20 04:17 - 2017-01-11 20:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2018-03-20 04:17 - 2016-11-21 21:12 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2018-03-20 04:17 - 2016-11-20 19:19 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-03-20 04:17 - 2016-11-20 17:07 - 000467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-03-20 04:17 - 2016-11-10 19:32 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2018-03-20 04:17 - 2016-11-10 19:19 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2018-03-20 04:17 - 2016-11-09 19:41 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-03-20 04:17 - 2016-11-09 19:33 - 003244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-03-20 04:17 - 2016-11-09 19:33 - 001941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-03-20 04:17 - 2016-11-09 19:33 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2018-03-20 04:17 - 2016-11-09 19:33 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-03-20 04:17 - 2016-11-09 19:33 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2018-03-20 04:17 - 2016-11-09 19:17 - 002365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-03-20 04:17 - 2016-11-09 19:17 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-03-20 04:17 - 2016-11-09 19:17 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2018-03-20 04:17 - 2016-11-09 19:17 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2018-03-20 04:17 - 2016-11-09 19:02 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-03-20 04:17 - 2016-11-09 18:55 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-03-20 04:17 - 2016-10-11 18:32 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2018-03-20 04:17 - 2016-10-11 18:32 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2018-03-20 04:17 - 2016-10-11 18:31 - 001148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2018-03-20 04:17 - 2016-10-11 18:31 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2018-03-20 04:17 - 2016-10-11 18:31 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2018-03-20 04:17 - 2016-10-11 18:31 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2018-03-20 04:17 - 2016-10-11 18:31 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 001027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
2018-03-20 04:17 - 2016-10-11 18:18 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2018-03-20 04:17 - 2016-10-11 18:18 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2018-03-20 04:17 - 2016-10-11 18:18 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime
2018-03-20 04:17 - 2016-10-11 18:18 - 000069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2018-03-20 04:17 - 2016-10-11 17:55 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2018-03-20 04:17 - 2016-10-11 17:53 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2018-03-20 04:17 - 2016-10-11 16:18 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
2018-03-20 04:17 - 2016-10-11 16:17 - 000419648 _____ C:\Windows\system32\locale.nls
2018-03-20 04:17 - 2016-10-08 16:06 - 000633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-03-20 04:17 - 2016-10-07 18:32 - 003649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2018-03-20 04:17 - 2016-10-07 18:12 - 002291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2018-03-20 04:17 - 2016-10-05 17:54 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2018-03-20 04:17 - 2016-09-15 17:56 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2018-03-20 04:17 - 2016-09-13 00:08 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2018-03-20 04:17 - 2016-09-12 23:49 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2018-03-20 04:17 - 2016-09-08 23:34 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2018-03-20 04:17 - 2016-09-08 23:34 - 000208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2018-03-20 04:17 - 2016-09-08 23:34 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2018-03-20 04:17 - 2016-09-08 23:34 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2018-03-20 04:17 - 2016-09-08 17:55 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2018-03-20 04:17 - 2016-09-08 17:55 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-03-20 04:17 - 2016-08-22 19:19 - 001386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-03-20 04:17 - 2016-08-12 19:26 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 002023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 000310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2018-03-20 04:17 - 2016-08-06 18:31 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2018-03-20 04:17 - 2016-08-06 18:15 - 001178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2018-03-20 04:17 - 2016-08-06 18:15 - 000249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2018-03-20 04:17 - 2016-08-06 18:15 - 000214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2018-03-20 04:17 - 2016-08-06 18:15 - 000146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2018-03-20 04:17 - 2016-08-06 18:15 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2018-03-20 04:17 - 2016-08-06 18:01 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2018-03-20 04:17 - 2016-08-06 18:01 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2018-03-20 04:17 - 2016-08-06 17:53 - 000199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2018-03-20 04:17 - 2016-08-06 17:53 - 000012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2018-03-20 04:17 - 2016-08-06 17:53 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 002646528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 001202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2018-03-20 04:17 - 2016-06-14 20:16 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2018-03-20 04:17 - 2016-06-14 20:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2018-03-20 04:17 - 2016-06-14 18:21 - 002136064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 001005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2018-03-20 04:17 - 2016-06-14 18:21 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2018-03-20 04:17 - 2016-06-14 18:15 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2018-03-20 04:17 - 2016-06-14 18:00 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2018-03-20 04:17 - 2016-06-14 18:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2018-03-20 04:17 - 2016-05-12 16:05 - 000297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2018-03-20 04:17 - 2016-05-12 16:04 - 000249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2018-03-20 04:17 - 2016-03-24 01:43 - 000457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2018-03-20 04:17 - 2016-03-24 01:40 - 000546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-03-20 04:13 - 2014-12-19 06:06 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 001943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 001131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 000156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 000156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 000081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2018-03-20 04:13 - 2014-06-19 01:23 - 000073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2018-03-20 04:13 - 2011-11-17 09:35 - 000395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2018-03-20 04:13 - 2011-11-17 08:35 - 000314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2018-03-20 04:12 - 2015-07-15 06:19 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2018-03-20 04:12 - 2014-12-06 07:17 - 000303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-03-20 04:12 - 2014-12-06 06:50 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2018-03-20 04:12 - 2014-12-06 06:50 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-03-20 04:12 - 2014-10-14 05:13 - 000683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2018-03-20 04:12 - 2012-10-03 20:44 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-03-20 04:12 - 2012-10-03 20:44 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-03-20 04:07 - 2015-02-03 06:31 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2018-03-20 04:07 - 2015-02-03 06:12 - 000171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2018-03-20 04:07 - 2014-06-18 05:18 - 000692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2018-03-20 04:07 - 2014-06-18 04:51 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2018-03-20 04:06 - 2015-07-15 06:19 - 002004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-03-20 04:06 - 2015-07-15 06:14 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-03-20 04:06 - 2015-07-15 05:55 - 001390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-03-20 04:06 - 2015-07-15 05:51 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-03-20 04:06 - 2011-03-11 09:34 - 001395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2018-03-20 04:06 - 2011-03-11 09:34 - 001359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2018-03-20 04:06 - 2011-03-11 08:33 - 001164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2018-03-20 04:06 - 2011-03-11 08:33 - 001137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2018-03-20 04:03 - 2016-02-05 04:19 - 000381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2018-03-20 04:03 - 2016-02-04 21:41 - 000296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2018-03-20 04:03 - 2016-02-03 21:07 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2018-03-20 04:03 - 2015-11-11 21:53 - 001735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-03-20 04:03 - 2015-11-11 21:53 - 000525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-03-20 04:03 - 2015-11-11 21:39 - 001242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-03-20 04:03 - 2015-11-11 21:39 - 000487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-03-20 04:03 - 2015-11-05 22:05 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2018-03-20 04:03 - 2015-11-05 22:02 - 000014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2018-03-20 04:03 - 2015-11-05 12:53 - 000146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2018-03-20 04:03 - 2015-04-24 21:17 - 000633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2018-03-20 04:03 - 2015-04-24 20:56 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2018-03-20 04:03 - 2013-07-12 13:41 - 000185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2018-03-20 04:03 - 2013-07-12 13:41 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2018-03-20 04:03 - 2013-07-03 07:05 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-03-20 04:03 - 2013-07-03 07:05 - 000032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-03-20 04:03 - 2013-06-26 01:55 - 000785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2018-03-20 04:03 - 2013-02-12 07:12 - 000019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2018-03-20 04:03 - 2012-11-29 01:56 - 000054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2018-03-20 04:03 - 2012-11-29 01:56 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2018-03-20 04:03 - 2012-11-29 01:56 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2018-03-20 04:03 - 2011-03-03 09:24 - 000357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2018-03-20 04:03 - 2011-03-03 09:24 - 000183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2018-03-20 04:03 - 2011-03-03 09:21 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2018-03-20 04:03 - 2011-03-03 08:38 - 000270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2018-03-20 04:03 - 2011-03-03 08:36 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2018-03-20 04:02 - 2014-03-04 12:44 - 000722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2018-03-20 04:02 - 2014-03-04 12:44 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2018-03-20 04:02 - 2014-03-04 12:43 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2018-03-20 04:02 - 2014-03-04 12:43 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2018-03-20 04:02 - 2014-03-04 12:43 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2018-03-20 04:02 - 2014-03-04 12:43 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2018-03-20 04:02 - 2014-03-04 12:43 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2018-03-20 04:02 - 2014-03-04 12:17 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2018-03-20 04:02 - 2012-11-02 08:59 - 000478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2018-03-20 04:02 - 2012-11-02 08:11 - 000376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2018-03-20 03:59 - 2015-07-30 21:06 - 001838080 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2018-03-20 03:59 - 2015-07-30 20:57 - 001171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2018-03-20 03:53 - 2015-07-09 20:57 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2018-03-20 03:53 - 2015-07-09 20:57 - 000193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2018-03-20 03:53 - 2015-07-09 20:42 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2018-03-20 03:51 - 2016-05-11 20:02 - 000483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-03-20 03:51 - 2016-05-11 18:19 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-03-20 03:51 - 2015-12-09 00:53 - 000509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2018-03-20 03:51 - 2015-12-08 22:07 - 000624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2018-03-20 03:51 - 2011-08-17 08:26 - 000613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2018-03-20 03:51 - 2011-08-17 08:25 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2018-03-20 03:51 - 2011-08-17 07:24 - 000465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2018-03-20 03:51 - 2011-08-17 07:19 - 000075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2018-03-20 03:46 - 2016-04-14 19:42 - 000573952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2018-03-20 03:46 - 2016-04-14 18:33 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2018-03-20 03:46 - 2014-11-11 06:08 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2018-03-20 03:46 - 2014-11-11 05:44 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2018-03-20 03:46 - 2012-03-17 10:58 - 000075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2018-03-20 03:44 - 2015-12-09 00:54 - 001620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 001568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 001325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2018-03-20 03:44 - 2015-12-09 00:54 - 000739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2018-03-20 03:44 - 2015-12-09 00:54 - 000154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2018-03-20 03:44 - 2015-12-09 00:53 - 000829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2018-03-20 03:44 - 2015-12-09 00:53 - 000193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2018-03-20 03:44 - 2015-12-09 00:53 - 000153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2018-03-20 03:44 - 2015-12-09 00:53 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2018-03-20 03:44 - 2015-12-09 00:53 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2018-03-20 03:44 - 2015-12-09 00:53 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 001955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 001307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 001232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 001026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 001010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 000978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 000292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2018-03-20 03:44 - 2015-12-08 22:07 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2018-03-20 03:44 - 2015-12-08 22:07 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2018-03-20 03:44 - 2015-12-08 22:06 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2018-03-20 03:44 - 2015-12-08 21:54 - 000116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2018-03-20 03:44 - 2015-12-08 21:12 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2018-03-20 03:44 - 2015-12-08 21:11 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2018-03-20 03:43 - 2016-05-11 20:02 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-03-20 03:43 - 2016-05-11 20:02 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2018-03-20 03:43 - 2016-05-11 20:02 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2018-03-20 03:43 - 2016-05-11 18:19 - 000351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-03-20 03:43 - 2016-05-11 18:19 - 000231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2018-03-20 03:43 - 2016-05-11 18:19 - 000206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2018-03-20 03:43 - 2016-02-09 12:55 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2018-03-20 03:43 - 2016-01-22 09:18 - 000961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2018-03-20 03:43 - 2016-01-22 09:18 - 000723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2018-03-20 03:43 - 2016-01-22 09:04 - 000642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2018-03-20 03:43 - 2016-01-22 09:04 - 000535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2018-03-20 03:43 - 2014-09-04 08:23 - 000424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2018-03-20 03:43 - 2014-09-04 08:04 - 000372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2018-03-20 03:43 - 2012-09-26 01:47 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2018-03-20 03:43 - 2012-09-26 01:46 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2018-03-20 03:43 - 2012-06-16 08:16 - 000609792 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-03-20 03:43 - 2012-06-16 08:15 - 000911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-03-20 03:43 - 2012-06-16 07:26 - 000717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-03-20 03:43 - 2012-06-16 07:26 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-03-20 03:43 - 2011-02-05 20:10 - 000020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2018-03-20 03:43 - 2011-02-05 20:10 - 000019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2018-03-20 03:43 - 2011-02-05 20:10 - 000017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2018-03-20 03:42 - 2016-05-12 20:15 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2018-03-20 03:42 - 2016-05-12 20:14 - 000373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2018-03-20 03:42 - 2016-05-12 20:14 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2018-03-20 03:42 - 2016-05-12 18:18 - 000591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2018-03-20 03:42 - 2016-05-12 18:18 - 000274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2018-03-20 03:42 - 2016-05-12 18:18 - 000079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2018-03-20 03:42 - 2016-05-12 18:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2018-03-20 03:42 - 2016-05-12 18:18 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2018-03-20 03:42 - 2016-05-12 18:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2018-03-20 03:42 - 2016-05-12 17:57 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2018-03-20 03:42 - 2016-05-12 17:57 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2018-03-20 03:42 - 2016-01-22 09:17 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2018-03-20 03:42 - 2016-01-22 09:02 - 000176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2018-03-20 03:42 - 2016-01-22 09:02 - 000114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2018-03-20 03:42 - 2012-11-23 06:13 - 000068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2018-03-20 03:41 - 2018-03-20 03:41 - 000000797 _____ C:\Users\Astronomy\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2018-03-20 03:41 - 2016-04-06 18:27 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2018-03-20 03:41 - 2015-10-13 07:57 - 000950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-03-20 03:41 - 2014-10-25 04:57 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2018-03-20 03:41 - 2014-10-25 04:32 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2018-03-20 03:41 - 2014-07-17 05:07 - 001118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2018-03-20 03:41 - 2014-07-17 05:07 - 000455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-03-20 03:41 - 2014-07-17 05:07 - 000235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2018-03-20 03:41 - 2014-07-17 05:07 - 000150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2018-03-20 03:41 - 2014-07-17 04:40 - 000157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2018-03-20 03:41 - 2014-07-17 04:39 - 001051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2018-03-20 03:41 - 2014-07-17 04:21 - 000212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2018-03-20 03:41 - 2012-04-26 08:41 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2018-03-20 03:41 - 2012-04-26 08:34 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2018-03-20 03:41 - 2011-05-24 14:42 - 000404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2018-03-20 03:41 - 2011-05-24 13:40 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2018-03-20 03:41 - 2011-05-24 13:40 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2018-03-20 03:41 - 2011-05-24 13:39 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2018-03-20 03:41 - 2011-05-24 13:37 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2018-03-20 03:40 - 2012-07-05 01:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2018-03-20 03:40 - 2012-07-05 01:13 - 000136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2018-03-20 03:40 - 2012-07-05 01:13 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2018-03-20 03:40 - 2012-07-05 00:16 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2018-03-20 03:40 - 2012-07-05 00:14 - 000041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2018-03-20 03:39 - 2018-03-20 03:40 - 003114288 _____ (BitTorrent Inc.) C:\Users\Astronomy\Downloads\uTorrent.exe
2018-03-20 03:39 - 2015-11-03 22:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2018-03-20 03:39 - 2015-11-03 21:55 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2018-03-20 03:39 - 2014-12-08 06:09 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2018-03-20 03:39 - 2014-12-08 05:46 - 000308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2018-03-20 03:39 - 2013-10-12 05:32 - 000150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2018-03-20 03:39 - 2013-10-12 05:31 - 000202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2018-03-20 03:39 - 2013-10-12 05:04 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2018-03-20 03:39 - 2013-10-12 05:03 - 000163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2018-03-20 03:39 - 2013-10-12 04:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2018-03-20 03:39 - 2013-10-12 04:33 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2018-03-20 03:39 - 2013-10-12 04:15 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2018-03-20 03:39 - 2013-10-12 04:15 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2018-03-20 03:39 - 2013-05-13 08:50 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2018-03-20 03:39 - 2013-05-13 06:43 - 001192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2018-03-20 03:39 - 2013-05-13 06:08 - 000903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2018-03-20 03:39 - 2013-05-13 06:08 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2018-03-20 03:39 - 2011-12-16 11:46 - 000634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2018-03-20 03:39 - 2011-12-16 10:52 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2018-03-20 03:39 - 2011-02-12 14:34 - 000267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2018-03-20 03:38 - 2015-03-04 07:41 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2018-03-20 03:38 - 2015-03-04 07:10 - 000058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2018-03-20 03:38 - 2011-08-27 08:37 - 000331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2018-03-20 03:38 - 2011-08-27 07:26 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2018-03-20 03:37 - 2016-04-09 09:58 - 001190912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2018-03-20 03:37 - 2016-04-09 09:54 - 001011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2018-03-20 03:37 - 2015-02-04 06:16 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2018-03-20 03:37 - 2015-02-04 05:54 - 000318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2018-03-20 03:37 - 2013-10-12 05:30 - 000830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-03-20 03:37 - 2013-10-12 05:29 - 000859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-03-20 03:37 - 2013-10-12 05:29 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2018-03-20 03:37 - 2013-10-12 05:03 - 000656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-03-20 03:37 - 2013-10-12 05:01 - 000216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2018-03-20 03:36 - 2018-03-20 03:37 - 000014306 _____ C:\Users\Astronomy\Downloads\Adobe Photoshop CC 2018 19.1.1.42094 + Pre-Cracked - [CrackzSoft].torrent
2018-03-20 03:14 - 2016-07-22 17:58 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2018-03-20 03:14 - 2016-07-22 17:51 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2018-03-20 03:00 - 2018-03-20 03:00 - 000008192 __RSH C:\BOOTSECT.BAK
2018-03-20 03:00 - 2018-03-19 17:22 - 000000000 ____D C:\Windows\Panther
2018-03-20 03:00 - 2010-11-21 06:23 - 000383786 __RSH C:\bootmgr
2018-03-20 02:47 - 2018-03-20 02:47 - 000000000 ____D C:\ProgramData\FLEXnet
2018-03-20 02:33 - 2018-03-20 02:33 - 000000000 ____D C:\Windows\SysWOW64\spool
2018-03-20 02:33 - 2018-03-20 02:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-03-20 02:21 - 2018-03-20 05:18 - 000000000 ____D C:\ProgramData\Adobe
2018-03-20 02:12 - 2018-03-20 02:12 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2018-03-20 02:11 - 2018-03-20 02:11 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2018-03-20 02:09 - 2018-03-20 20:31 - 000017920 _____ C:\Windows\SysWOW64\rpcnetp.dll
2018-03-20 02:09 - 2018-03-20 02:09 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2018-03-20 02:08 - 2018-03-22 14:13 - 000017920 _____ C:\Windows\system32\rpcnetp.exe
2018-03-20 02:08 - 2018-03-20 20:30 - 000017920 _____ C:\Windows\SysWOW64\rpcnetp.exe
2018-03-19 22:10 - 2018-03-19 22:10 - 000000000 ____D C:\Users\Astronomy\AppData\Local\CEF
2018-03-19 22:10 - 2018-03-19 22:10 - 000000000 ____D C:\ProgramData\Riot Games
2018-03-19 22:08 - 2018-03-19 23:33 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Equalify
2018-03-19 22:07 - 2018-03-19 22:07 - 003753688 _____ (Leonardsen Software ) C:\Users\Astronomy\Downloads\Equalify1.4.0-installer.exe
2018-03-19 21:42 - 2018-03-22 13:55 - 000000000 ____D C:\Users\Astronomy\AppData\Local\Spotify
2018-03-19 21:42 - 2018-03-19 21:42 - 000001773 _____ C:\Users\Astronomy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2018-03-19 21:41 - 2018-03-22 14:38 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Spotify
2018-03-19 21:39 - 2018-03-19 21:39 - 000727536 _____ (Spotify Ltd) C:\Users\Astronomy\Downloads\SpotifySetup.exe
2018-03-19 19:45 - 2018-03-19 19:45 - 000001023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2018-03-19 19:45 - 2018-03-19 19:45 - 000000000 ____D C:\Program Files (x86)\Audacity
2018-03-19 19:41 - 2018-03-21 07:15 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2018-03-19 19:41 - 2018-03-21 07:15 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\discord
2018-03-19 19:40 - 2018-03-22 04:10 - 000000000 ____D C:\Users\Astronomy\AppData\Local\SquirrelTemp
2018-03-19 19:40 - 2018-03-19 19:41 - 000000000 ____D C:\Users\Astronomy\AppData\Local\Discord
2018-03-19 19:21 - 2018-03-20 05:49 - 000774004 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-03-19 19:18 - 2018-03-21 07:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-03-19 19:18 - 2018-03-19 19:18 - 000110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2018-03-19 19:18 - 2018-03-19 19:18 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Sun
2018-03-19 19:18 - 2018-03-19 19:18 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Macromedia
2018-03-19 19:18 - 2018-03-19 19:18 - 000000000 ____D C:\Users\Astronomy\AppData\LocalLow\Sun
2018-03-19 19:17 - 2018-03-20 13:10 - 000000000 ____D C:\Users\Astronomy\AppData\Local\Adobe
2018-03-19 19:17 - 2018-03-20 05:35 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Adobe
2018-03-19 19:17 - 2018-03-19 19:17 - 000000000 ____D C:\ProgramData\Oracle
2018-03-19 19:17 - 2018-03-19 19:17 - 000000000 ____D C:\Program Files\Java
2018-03-19 19:16 - 2018-03-21 07:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-03-19 19:16 - 2018-03-19 19:16 - 000000000 ____D C:\Program Files (x86)\VideoLAN
2018-03-19 19:15 - 2018-03-21 07:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinCDEmu
2018-03-19 19:15 - 2018-03-19 19:15 - 000000000 ____D C:\Program Files (x86)\WinCDEmu
2018-03-19 18:52 - 2018-03-19 18:52 - 000000000 ____D C:\Program Files (x86)\Microsoft XNA
2018-03-19 18:52 - 2018-03-19 18:52 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2018-03-19 18:39 - 2018-03-20 04:57 - 000000000 ____D C:\Program Files (x86)\OpenAL
2018-03-19 18:39 - 2018-03-20 04:57 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2018-03-19 18:39 - 2018-03-19 18:39 - 000466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2018-03-19 18:32 - 2018-03-19 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2018-03-19 18:32 - 2018-03-19 18:32 - 000000000 ____D C:\Program Files (x86)\Toshiba
2018-03-19 18:27 - 2018-03-21 07:15 - 000000000 ____D C:\Users\Astronomy\Downloads\Driver Talent Pro 6.5.61.174 + Crack [CracksNow]
2018-03-19 18:25 - 2018-03-20 05:29 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\uTorrent
2018-03-19 18:16 - 2018-03-19 18:29 - 000000000 ____D C:\Program Files (x86)\DriverToolkit
2018-03-19 18:16 - 2018-03-19 18:16 - 016922006 _____ C:\Users\Astronomy\Downloads\broadcom_bcm_43xx_wireless_7_12_39_13_win8_64bit_whql.zip
2018-03-19 18:16 - 2018-03-19 18:16 - 000000000 ____D C:\Users\Astronomy\AppData\Local\DriverToolkit
2018-03-19 18:08 - 2018-03-19 18:08 - 002022165 _____ C:\Users\Astronomy\Downloads\wtf.cab
2018-03-19 18:07 - 2018-03-19 18:07 - 017839936 _____ (Sony Corporation) C:\Users\Astronomy\Downloads\EP0000307546.exe
2018-03-19 18:07 - 2018-03-19 18:07 - 000000000 ____D C:\ProgramData\Sony Corporation
2018-03-19 18:03 - 2018-03-19 18:03 - 000000000 ____D C:\Program Files\Intel
2018-03-19 17:47 - 2018-03-19 17:47 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Easeware
2018-03-19 17:43 - 2018-03-19 17:43 - 005965603 _____ (Intel Corporation ) C:\Users\Astronomy\Downloads\LAN_allWin7_7.031_PV_RTL.exe
2018-03-19 17:43 - 2018-03-19 17:43 - 000000000 ____D C:\Program Files (x86)\Intel Desktop Board
2018-03-19 17:41 - 2018-03-19 17:42 - 057250832 _____ C:\Users\Astronomy\Downloads\PROWinx64Legacy.exe
2018-03-19 17:40 - 2018-03-19 17:40 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Google
2018-03-19 17:37 - 2018-03-21 14:49 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-19 17:35 - 2018-03-21 07:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Talent
2018-03-19 17:35 - 2018-03-20 14:15 - 000057952 _____ C:\Users\Astronomy\AppData\Local\GDIPFONTCACHEV1.DAT
2018-03-19 17:35 - 2018-03-19 17:35 - 000000000 ____D C:\Program Files (x86)\OSTotoSoft
2018-03-19 17:35 - 2018-02-06 01:47 - 000118784 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2018-03-19 17:35 - 2014-06-16 19:00 - 000107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\SETA3A1.tmp
2018-03-19 17:35 - 2013-09-27 19:00 - 008030928 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS
2018-03-19 17:35 - 2013-09-27 19:00 - 004393984 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll
2018-03-19 17:35 - 2013-09-27 19:00 - 003660800 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll
2018-03-19 17:35 - 2013-09-27 19:00 - 000096560 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2018-03-19 17:35 - 2012-02-17 07:57 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2018-03-19 17:33 - 2018-03-22 14:10 - 000000000 ____D C:\Program Files (x86)\Realtek
2018-03-19 17:33 - 2018-03-20 04:57 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-03-19 17:33 - 2018-03-19 18:37 - 000000000 ___HD C:\Program Files (x86)\Temp
2018-03-19 17:33 - 2018-03-19 17:33 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2018-03-19 17:33 - 2018-03-19 17:33 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\WinBatch
2018-03-19 17:33 - 2018-03-19 17:33 - 000000000 ____D C:\Program Files\Realtek
2018-03-19 17:33 - 2010-08-04 19:16 - 000000008 _____ C:\Windows\system32\Drivers\rtkhdaud.dat
2018-03-19 17:33 - 2010-07-28 19:26 - 002445672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2018-03-19 17:33 - 2010-07-28 19:26 - 002032232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2018-03-19 17:33 - 2010-07-28 19:26 - 001146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2018-03-19 17:33 - 2010-07-28 19:26 - 000332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2018-03-19 17:33 - 2010-07-28 19:26 - 000149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2018-03-19 17:33 - 2010-07-28 19:25 - 002618984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2018-03-19 17:33 - 2010-07-28 19:25 - 001213544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2018-03-19 17:33 - 2010-07-28 19:25 - 000476264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2018-03-19 17:33 - 2010-07-28 19:25 - 000372328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2018-03-19 17:33 - 2010-07-28 19:25 - 000076904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2018-03-19 17:33 - 2010-07-27 14:54 - 001251944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2018-03-19 17:33 - 2010-07-22 17:48 - 000220496 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFNHK64.dll
2018-03-19 17:33 - 2010-07-22 17:48 - 000081232 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFCOM64.dll
2018-03-19 17:33 - 2010-07-22 17:48 - 000078160 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFAPO64.dll
2018-03-19 17:33 - 2010-07-22 17:48 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2018-03-19 17:33 - 2010-07-22 17:37 - 000200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2018-03-19 17:33 - 2010-07-06 12:48 - 001756160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2018-03-19 17:33 - 2010-07-01 14:44 - 000124128 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2018-03-19 17:33 - 2010-07-01 14:44 - 000124128 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2018-03-19 17:33 - 2010-07-01 14:44 - 000123104 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2018-03-19 17:33 - 2010-06-27 18:14 - 000334848 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2018-03-19 17:33 - 2010-05-06 18:34 - 000334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2018-03-19 17:33 - 2010-05-06 17:43 - 002601816 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2018-03-19 17:33 - 2010-04-27 14:50 - 000330656 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2018-03-19 17:33 - 2010-04-14 18:56 - 000318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2018-03-19 17:33 - 2010-01-05 14:41 - 001325328 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:41 - 000489744 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:41 - 000474896 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 001178384 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 001110800 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 000504592 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 000315152 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 000268560 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2018-03-19 17:33 - 2010-01-05 14:40 - 000265488 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2018-03-19 17:33 - 2009-12-15 19:26 - 000372936 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2018-03-19 17:33 - 2009-12-15 19:26 - 000201928 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2018-03-19 17:33 - 2009-12-15 19:26 - 000099016 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2018-03-19 17:33 - 2009-12-15 19:26 - 000076488 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2018-03-19 17:33 - 2009-12-11 10:55 - 000307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2018-03-19 17:33 - 2009-12-11 10:55 - 000307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2018-03-19 17:33 - 2009-11-24 10:55 - 000518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2018-03-19 17:33 - 2009-11-24 10:55 - 000211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2018-03-19 17:33 - 2009-11-24 10:55 - 000198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2018-03-19 17:33 - 2009-11-24 10:55 - 000155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2018-03-19 17:33 - 2009-11-18 19:42 - 002197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2018-03-19 17:33 - 2009-11-17 19:12 - 000108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2018-03-19 17:32 - 2018-03-22 14:02 - 000000000 ____D C:\ProgramData\Package Cache
2018-03-19 17:32 - 2017-04-28 01:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2018-03-19 17:32 - 2017-04-12 16:05 - 004296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2018-03-19 17:22 - 2018-03-22 14:12 - 000000000 ____D C:\Users\Astronomy
2018-03-19 17:22 - 2018-03-19 17:22 - 000000020 ___SH C:\Users\Astronomy\ntuser.ini
2018-03-19 17:22 - 2018-03-19 17:22 - 000000000 ____D C:\Users\Astronomy\AppData\Local\VirtualStore
2018-03-19 17:22 - 2010-11-21 10:16 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Media Center Programs
2018-03-19 17:18 - 2018-03-20 04:56 - 000000000 ____D C:\Users\Astronomy\AppData\Local\Google
2018-03-19 17:18 - 2018-03-19 19:23 - 000003330 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-03-19 17:18 - 2018-03-19 19:23 - 000003202 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-03-19 17:18 - 2018-03-19 17:37 - 000000000 ____D C:\Program Files (x86)\Google
2018-03-19 17:15 - 2018-03-19 17:15 - 000015340 _____ C:\Windows\system32\results.xml
2018-03-19 17:13 - 2018-03-19 17:13 - 000000355 _____ C:\Users\Astronomy\Desktop\Computer.lnk
2018-03-19 16:53 - 2018-03-22 14:13 - 000073232 _____ (Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.dll
2018-03-19 16:53 - 2018-03-19 16:53 - 000073232 ____N (Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.exe
2018-03-19 16:50 - 2018-03-19 16:50 - 000413172 __RSH C:\RTGMP
2018-03-19 16:49 - 2009-03-16 15:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2018-03-19 16:49 - 2009-03-16 15:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2018-03-19 16:49 - 2009-03-09 16:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2018-03-19 16:49 - 2008-10-15 08:03 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2018-03-19 16:49 - 2008-10-15 07:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2018-03-19 16:49 - 2008-07-30 07:20 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2018-03-19 16:49 - 2008-07-10 12:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2018-03-19 16:49 - 2008-07-10 12:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2018-03-19 16:49 - 2008-07-10 12:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2018-03-19 16:49 - 2008-07-10 12:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2018-03-19 16:49 - 2008-07-10 12:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2018-03-19 16:49 - 2008-07-10 12:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2018-03-19 16:49 - 2008-05-30 15:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2018-03-19 16:49 - 2008-05-30 15:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2018-03-19 16:49 - 2008-05-30 15:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2018-03-19 16:49 - 2008-05-30 15:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2018-03-19 16:49 - 2008-05-30 15:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2018-03-19 16:49 - 2008-05-30 15:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2018-03-19 16:49 - 2008-05-30 15:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2018-03-19 16:49 - 2008-05-30 15:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2018-03-19 16:49 - 2008-05-30 15:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2018-03-19 16:49 - 2008-03-05 17:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2018-03-19 16:49 - 2008-03-05 17:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2018-03-19 16:49 - 2008-03-05 17:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2018-03-19 16:49 - 2008-03-05 17:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2018-03-19 16:49 - 2008-03-05 17:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2018-03-19 16:49 - 2008-03-05 17:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2018-03-19 16:49 - 2008-03-05 16:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2018-03-19 16:49 - 2008-03-05 16:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2018-03-19 16:49 - 2008-03-05 16:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2018-03-19 16:49 - 2008-03-05 16:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2018-03-19 16:49 - 2008-02-06 00:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2018-03-19 16:49 - 2008-02-06 00:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2018-03-19 16:49 - 2007-10-22 04:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2018-03-19 16:49 - 2007-10-22 04:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2018-03-19 16:49 - 2007-10-22 04:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2018-03-19 16:49 - 2007-10-22 04:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2018-03-19 16:49 - 2007-10-12 16:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2018-03-19 16:49 - 2007-10-12 16:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2018-03-19 16:49 - 2007-10-12 16:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2018-03-19 16:49 - 2007-10-12 16:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2018-03-19 16:49 - 2007-10-02 10:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2018-03-19 16:49 - 2007-10-02 10:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2018-03-19 16:49 - 2007-07-20 01:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2018-03-19 16:49 - 2007-07-20 01:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2018-03-19 16:49 - 2007-07-19 19:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2018-03-19 16:49 - 2007-06-20 21:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2018-03-19 16:49 - 2007-06-20 21:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2018-03-19 16:49 - 2007-05-16 17:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2018-03-19 16:49 - 2007-04-04 19:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2018-03-19 16:49 - 2007-04-04 19:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2018-03-19 16:49 - 2007-04-04 19:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2018-03-19 16:49 - 2007-04-04 19:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2018-03-19 16:49 - 2007-03-15 17:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2018-03-19 16:49 - 2007-03-15 17:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2018-03-19 16:49 - 2007-03-12 17:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2018-03-19 16:49 - 2007-03-12 17:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2018-03-19 16:49 - 2007-03-12 17:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2018-03-19 16:49 - 2007-03-12 17:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2018-03-19 16:49 - 2007-03-05 13:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2018-03-19 16:49 - 2007-03-05 13:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2018-03-19 16:49 - 2007-01-24 16:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2018-03-19 16:49 - 2007-01-24 16:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2018-03-19 16:49 - 2006-12-08 13:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2018-03-19 16:49 - 2006-12-08 13:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2018-03-19 16:49 - 2006-11-29 14:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2018-03-19 16:49 - 2006-11-29 14:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2018-03-19 16:49 - 2006-11-29 14:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2018-03-19 16:49 - 2006-11-29 14:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2018-03-19 16:49 - 2006-09-28 17:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2018-03-19 16:49 - 2006-09-28 17:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2018-03-19 16:49 - 2006-09-28 17:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2018-03-19 16:49 - 2006-09-28 17:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2018-03-19 16:49 - 2006-07-28 10:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2018-03-19 16:49 - 2006-07-28 10:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2018-03-19 16:49 - 2006-07-28 10:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2018-03-19 16:49 - 2006-07-28 10:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2018-03-19 16:49 - 2006-05-31 08:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2018-03-19 16:49 - 2006-05-31 08:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2018-03-19 16:49 - 2006-03-31 13:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2018-03-19 16:49 - 2006-03-31 13:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2018-03-19 16:49 - 2006-03-31 13:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2018-03-19 16:49 - 2006-03-31 13:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2018-03-19 16:48 - 2018-03-19 16:48 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-03-19 16:48 - 2018-03-19 16:48 - 000000000 ____D C:\Program Files (x86)\Intel
2018-03-19 16:48 - 2006-03-31 13:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2018-03-19 16:48 - 2006-03-31 13:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2018-03-19 16:48 - 2006-02-03 09:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2018-03-19 16:48 - 2006-02-03 09:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2018-03-19 16:48 - 2006-02-03 09:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2018-03-19 16:48 - 2006-02-03 09:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2018-03-19 16:48 - 2006-02-03 09:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2018-03-19 16:48 - 2006-02-03 09:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2018-03-19 16:48 - 2005-12-05 19:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2018-03-19 16:48 - 2005-12-05 19:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2018-03-19 16:48 - 2005-07-22 20:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2018-03-19 16:48 - 2005-07-22 20:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2018-03-19 16:48 - 2005-05-26 16:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2018-03-19 16:48 - 2005-05-26 16:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2018-03-19 16:48 - 2005-03-18 18:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2018-03-19 16:48 - 2005-03-18 18:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2018-03-19 16:48 - 2005-02-05 20:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2018-03-19 16:48 - 2005-02-05 20:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2018-03-19 16:47 - 2018-03-19 16:47 - 000000000 ____D C:\Intel
2018-03-19 16:43 - 2018-03-21 07:15 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-03-19 16:43 - 2018-03-21 07:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-03-19 16:43 - 2018-03-19 16:43 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\WinRAR
2018-03-19 16:43 - 2018-03-19 16:43 - 000000000 ____D C:\Program Files\WinRAR
2018-03-19 16:39 - 2018-03-19 16:39 - 000000000 ____D C:\Users\Public\Thunder Network
2018-03-19 16:39 - 2018-03-19 16:39 - 000000000 ____D C:\ProgramData\Thunder Network
2018-03-19 16:36 - 2018-03-21 07:15 - 000000000 ____D C:\Users\Astronomy\AppData\Roaming\DriverTalent
2018-03-19 16:36 - 2018-03-20 20:11 - 000000000 ____D C:\ProgramData\DriverTalent
2018-03-19 16:36 - 2018-03-19 16:36 - 000000000 ____D C:\OSTotoFolder
2018-02-25 20:30 - 2018-03-19 16:59 - 000000000 ____D C:\Users\Astronomy\Documents\My Games
2018-02-21 16:27 - 2018-03-20 05:22 - 000000000 ____D C:\Users\Astronomy\Documents\Adobe
2018-02-21 04:09 - 2018-02-21 04:09 - 000000000 ____D C:\Users\Astronomy\Documents\AdobeInstalledCodecs
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-22 14:23 - 2009-07-14 07:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-03-22 14:23 - 2009-07-14 07:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-03-22 14:20 - 2018-01-25 03:31 - 000000000 ____D C:\Users\Astronomy\Desktop\Pics
2018-03-22 14:20 - 2009-07-14 08:13 - 000781298 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-22 14:20 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
2018-03-22 14:13 - 2009-07-14 08:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-03-22 13:56 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\NDF
2018-03-22 13:49 - 2017-05-31 04:08 - 006324224 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2018-03-22 13:49 - 2017-05-31 04:08 - 000581120 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdx32.dll
2018-03-22 05:10 - 2017-05-31 04:08 - 013913600 _____ C:\Windows\SysWOW64\ig4icd32.dll
2018-03-22 05:10 - 2017-05-31 04:08 - 007988224 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2018-03-22 05:10 - 2017-05-31 04:08 - 002191872 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2018-03-22 05:10 - 2017-05-31 04:08 - 000293888 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2018-03-22 05:10 - 2017-05-31 04:08 - 000246784 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2018-03-21 07:16 - 2009-07-14 08:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-03-21 07:15 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\security
2018-03-21 07:15 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\registration
2018-03-21 07:15 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\AppCompat
2018-03-20 21:13 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\rescache
2018-03-20 20:30 - 2009-07-14 07:45 - 002193352 _____ C:\Windows\system32\FNTCACHE.DAT
2018-03-20 18:08 - 2018-01-25 03:33 - 000000000 ____D C:\Users\Astronomy\Desktop\Texts
2018-03-20 12:26 - 2009-07-14 08:32 - 000000000 ____D C:\Program Files\DVD Maker
2018-03-20 12:26 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2018-03-20 12:26 - 2009-07-14 06:20 - 000000000 ____D C:\Program Files\Common Files\System
2018-03-20 12:25 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\SysWOW64\Setup
2018-03-20 12:25 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2018-03-20 12:25 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\Setup
2018-03-20 12:25 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\migwiz
2018-03-20 12:25 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\Dism
2018-03-20 12:24 - 2010-11-21 10:16 - 000000000 ____D C:\Program Files\Windows Journal
2018-03-20 12:24 - 2009-07-14 08:32 - 000000000 ____D C:\Program Files\Windows Defender
2018-03-20 12:24 - 2009-07-14 08:32 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-03-20 12:24 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-03-20 05:16 - 2017-06-02 17:36 - 000000000 ____D C:\Program Files\Adobe
2018-03-20 05:13 - 2009-07-14 06:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2018-03-20 03:00 - 2009-07-14 08:32 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2018-03-20 02:11 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\sysprep
2018-03-20 02:09 - 2010-11-21 10:16 - 000000000 ____D C:\Windows\CSC
2018-03-19 22:09 - 2018-01-25 03:29 - 000000000 ____D C:\Users\Astronomy\Desktop\Shortcuts
2018-03-19 19:14 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\servicing
2018-03-19 17:02 - 2018-01-25 03:31 - 000000000 ____D C:\Users\Astronomy\Desktop\Sound
2018-03-19 17:01 - 2018-01-25 03:33 - 000000000 ____D C:\Users\Astronomy\Desktop\Other
2018-03-19 16:59 - 2017-12-05 19:08 - 000000000 ____D C:\Users\Astronomy\Documents\NFS Most Wanted
2018-03-19 16:59 - 2017-11-30 17:12 - 000000000 ____D C:\Users\Astronomy\Documents\Max Payne Savegames
2018-03-19 16:59 - 2017-09-22 22:55 - 000000000 ____D C:\Users\Astronomy\Documents\Haste
2018-03-19 16:59 - 2017-09-02 22:00 - 000000000 ____D C:\Users\Astronomy\Documents\Steam
2018-03-19 16:59 - 2016-06-27 01:37 - 000000000 ____D C:\Users\Astronomy\Documents\League of Legends
2018-03-19 16:58 - 2017-06-04 00:55 - 000000000 ____D C:\Users\Astronomy\Documents\Electronic Arts
2018-03-19 16:51 - 2016-12-16 20:26 - 000000000 ____D C:\Users\Astronomy\Documents\EA Games
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-03-20 18:42
==================== End of FRST.txt ============================
Addition.txt:
Ran by Astronomy (22-03-2018 14:52:28)
Running from C:\Users\Astronomy\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2018-03-19 14:22:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3396332571-2748628541-2424829021-500 - Administrator - Disabled)
Astronomy (S-1-5-21-3396332571-2748628541-2424829021-1000 - Administrator - Enabled) => C:\Users\Astronomy
Guest (S-1-5-21-3396332571-2748628541-2424829021-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
. . (HKLM\...\{3D383E25-72E7-4F09-AA1C-9ADE6A2EF42F}) (Version: 7.1 - Intel) Hidden
. . . (HKLM-x32\...\{0C9A6167-6560-4085-9C35-EDB1AE105328}) (Version: 3.2.0.9 - Intel) Hidden
µTorrent (HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\uTorrent) (Version: 3.5.3.44358 - BitTorrent Inc.)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_1) (Version: 19.1.1 - Adobe Systems Incorporated)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
Discord (HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\Discord) (Version: 0.0.300 - Discord Inc.)
Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.4.49.150 - OSToto Co., Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 65.0.3325.181 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.111 - Google Inc.) Hidden
Intel® Computing Improvement Program (HKLM\...\{699E6891-25C3-443A-9B8E-80C74F0172C8}) (Version: 2.1.03413 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2993 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{4d839fe1-a8d3-4edc-b0ca-844394309856}) (Version: 3.2.0.9 - Intel)
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.116.119.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\...\Spotify) (Version: 1.0.75.483.g7ff4a0dc - Spotify AB)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.0 - VideoLAN)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
WinRAR 5.60 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.60.1 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1: [WinCDEmu] -> {D0E37FD2-F675-426F-B09A-2CF37BA46FD5} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-03-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-03-16] (Alexander Roshal)
ContextMenuHandlers2: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-02-19] (Intel Corporation)
ContextMenuHandlers6: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-03-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-03-16] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2B9278BE-B082-4B26-80D7-4D0F0993CF83} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe
Task: {41C38194-D990-4DBB-B045-6066020D6956} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-19] (Google Inc.)
Task: {5F986EA6-0B3C-4ADC-AAC3-08B511DA29B0} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {71AFCC4D-FE34-419E-A92D-01969163AA81} - System32\Tasks\AdobeGCInvoker-1.0-Astronomy-PC-Astronomy => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05] (Adobe Systems, Incorporated)
Task: {AF522470-58A3-4A4C-8F7D-1D8A6EAF47DF} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)
Task: {CD0DF49A-6AD6-4C7B-AF24-906873BA48CD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-19] (Google Inc.)
Task: {F66DACA1-3181-4108-B0ED-E4F505B72361} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2018-01-11 01:25 - 2018-01-11 01:25 - 000182544 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
2018-01-11 01:25 - 2018-01-11 01:25 - 000886032 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
2018-01-11 01:25 - 2018-01-11 01:25 - 002309904 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_modeler.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000270096 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\pl_agent_lib.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000260368 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_acpi_battery_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000306960 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_wifi_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000231184 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\devices_use_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000277776 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_system_power_state_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000638736 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_os_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000212240 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_winstat_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000453392 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_upnp_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000375568 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_process_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000609552 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_hw_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000295184 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_sampler_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000248080 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_sgx_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000708368 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\sql_logger.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000818448 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
2018-01-11 01:25 - 2018-01-11 01:25 - 000214800 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\foreground_window_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000279312 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_user_waiting_input.dll
2018-01-11 01:25 - 2018-01-11 01:25 - 000207120 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_events_input.dll
2018-03-21 14:49 - 2018-03-20 09:00 - 004435288 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libglesv2.dll
2018-03-21 14:49 - 2018-03-20 09:00 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libegl.dll
2018-03-19 17:35 - 2017-01-20 09:46 - 000181928 _____ () c:\program files (x86)\ostotosoft\drivertalent\ldrvsvc.dll
2018-03-19 17:35 - 2017-01-20 09:46 - 000254824 _____ () c:\program files (x86)\ostotosoft\drivertalent\updater\checkupdate.dll
2018-03-19 17:35 - 2017-01-20 09:46 - 000172200 _____ () c:\program files (x86)\ostotosoft\drivertalent\substat.dll
2018-03-19 17:35 - 2017-01-20 09:46 - 000112296 _____ () c:\program files (x86)\ostotosoft\drivertalent\dstudp.dll
2018-03-19 17:35 - 2017-01-20 09:46 - 000117088 _____ () c:\program files (x86)\ostotosoft\drivertalent\udp.dll
2018-03-19 19:40 - 2018-01-08 18:52 - 001891832 _____ () C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\ffmpeg.dll
2018-03-19 19:41 - 2018-03-19 19:41 - 001780216 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_overlay2\discord_overlay2.node
2018-03-19 19:40 - 2018-01-08 18:52 - 001937912 _____ () C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\libglesv2.dll
2018-03-19 19:40 - 2018-01-08 18:52 - 000095736 _____ () C:\Users\Astronomy\AppData\Local\Discord\app-0.0.300\libegl.dll
2018-03-19 19:41 - 2018-03-20 18:53 - 009623896 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_voice\discord_voice.node
2018-03-19 19:41 - 2018-03-19 19:41 - 001508344 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_utils\discord_utils.node
2018-03-19 19:41 - 2018-03-19 19:41 - 000513016 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_erlpack\discord_erlpack.node
2018-03-19 19:41 - 2018-03-19 19:41 - 001517560 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_game_utils\discord_game_utils.node
2018-03-19 19:41 - 2018-03-19 19:41 - 002662904 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_rpc\discord_rpc.node
2018-03-19 19:44 - 2018-03-19 19:44 - 002749944 _____ () \\?\C:\Users\Astronomy\AppData\Roaming\discord\0.0.300\modules\discord_contact_import\discord_contact_import.node
2018-03-19 21:42 - 2018-03-19 21:42 - 080302992 _____ () C:\Users\Astronomy\AppData\Roaming\Spotify\libcef.dll
2018-03-19 21:42 - 2018-03-19 21:42 - 003734416 _____ () C:\Users\Astronomy\AppData\Roaming\Spotify\libglesv2.dll
2018-03-19 21:42 - 2018-03-19 21:42 - 000088464 _____ () C:\Users\Astronomy\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\rpcnet => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rpcnet => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 05:34 - 2009-06-11 00:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3396332571-2748628541-2424829021-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Astronomy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{DD7FBE80-CF10-46E8-B028-741085D35E2D}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DriverTalent.exe
FirewallRules: [{4BC8A7D1-41E8-4BF2-9356-7F58429375B9}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLService.exe
FirewallRules: [{5C5F12C2-EE52-4EE9-A444-B10744737944}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\MiniThunderPlatform.exe
FirewallRules: [TCP Query User{4D067A0D-6E1D-4D7E-920A-FD98F1059040}C:\users\astronomy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\astronomy\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5BCFCA91-54D0-4C0E-BE35-A68014F01B8C}C:\users\astronomy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\astronomy\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{67A8E99B-853C-4964-99AF-7717853F55EC}D:\talonted\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) D:\talonted\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [UDP Query User{8BD88BB5-31D6-4E29-8041-FF057380C088}D:\talonted\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) D:\talonted\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [{80CA9D72-2CA0-4A33-837D-D7CC26EF51FB}] => (Allow) C:\Users\Astronomy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{129A06E1-41D3-476A-BBAF-639414982026}] => (Allow) C:\Users\Astronomy\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E8DA4AFA-48B9-4D6F-9F6B-29912EE80122}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{00489C33-7691-4E31-931D-0CD222990A13}C:\users\astronomy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\astronomy\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{484EF83D-D713-4228-A501-A728DF032E8B}C:\users\astronomy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\astronomy\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6DDC5D41-14A4-4157-B2DD-02DB39CA3C5F}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
FirewallRules: [{BC3EDF12-4711-4B70-87B5-8ACDFEC156E7}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
FirewallRules: [{78CC7B42-294B-4E77-9BD9-91CE8A6663AC}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
FirewallRules: [{016F158B-D303-43EB-B22B-2D13D920D0F4}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
==================== Restore Points =========================
21-03-2018 05:17:33 Windows Update
22-03-2018 01:23:05 Windows Update
22-03-2018 14:02:15 Intel® Driver & Support Assistant
22-03-2018 14:09:44 Installed Realtek Ethernet Controller Driver
==================== Faulty Device Manager Devices =============
Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/22/2018 02:15:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (03/22/2018 02:03:57 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (03/22/2018 02:03:57 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (03/22/2018 01:56:12 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (03/22/2018 01:56:12 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (03/22/2018 01:51:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (03/22/2018 05:33:14 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (03/22/2018 05:33:14 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
System errors:
=============
Error: (03/22/2018 02:17:54 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.
Error: (03/22/2018 02:17:53 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
Error: (03/22/2018 02:17:53 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.
Error: (03/22/2018 02:17:53 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
Error: (03/22/2018 02:17:21 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.
Error: (03/22/2018 02:17:21 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
Error: (03/22/2018 02:15:32 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Intel® System Usage Report Service SystemUsageReportSvc_QUEENCREEK service hung on starting.
Error: (03/22/2018 02:13:09 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.
Module Path: C:\Windows\System32\bcmihvsrv64.dll
Windows Defender:
===================================
Date: 2018-03-20 20:33:15.351
Description:
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Backup
Error Code:0x8050a004
Error description:This package does not contain up-to-date definition files for this program. For more information, see Help and Support.
Signature version:1.263.585.0
Engine version:1.1.6402.0
Date: 2018-03-20 20:33:09.876
Description:
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified.
Signature version:0.0.0.0
Engine version:0.0.0.0
==================== Memory info ===========================
Processor: Intel® Core i3 CPU M 380 @ 2.53GHz
Percentage of memory in use: 67%
Total physical RAM: 3890.67 MB
Available physical RAM: 1245.74 MB
Total Virtual: 7779.53 MB
Available Virtual: 4955.33 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.56 GB) (Free:60.71 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:200.43 GB) (Free:50.21 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 7EE6B75C)
Partition 1: (Active) - (Size=97.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=200.4 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================