Rechner verseucht ; Programme laufen nicht ; win 7

Kisska · 28.03.2017, 19:56

Hallo zusammen,

vor ein Paar Tagen habe ich mir ein paar Programme heruntergeladen. Vor deren Installation habe ich den Bitdefender Total Security 2017 besorgt. Wie es aussieht, hat die Installation von Bitdefender die Schädlinge nicht erkannt.

Mein System:
Ein 7 professional
Service Pack 1
64 bit
WindowsDVD liegt nicht vor, da es ein vorinstallierter Dell Notebook ist

Symptome:
- keine I-net Verbindung
- Firewall von Windows und Bitdefender deaktiviert
- Bildschirmhelligkeit ist auf Sparmodus
- Taskleiste und Explorer sehen im Layout anders aus (schlicht und grau)
- es laufen nur sehr wenige Start Programme wie sonst.
- Windows Installer funktioniert nicht bzw Deinstallation von den zuletzt installierten Programme geht nicht
- USB wird nicht mehr erkannt (wollte darüber adv cleaner kopieren)
- Bluetooth Übertragung geht auch nicht

Im abgesicherten Modus läuft der Windows Installer auch nicht. Dies habe ich nach folgender Anweisung geprüft:
hxxp://support.eset.de/kb2098/?viewlocale=de_DE

Systemwiederherstellung funktioniert nicht.
Fehler: 0x80042302

Der Rechner lässt sich zumindest noch hochfahren und ich kann auch auf die Daten zugreifen.

Gibt es eine Hoffnung, den Rechner wieder ans Laufen zu bringen ohne formatieren zu müssen?

VG
Kisska

P.S.: Ich schreibe von meinem Smartphone aus

M-K-D-B · 28.03.2017, 22:31

Sichere deine Daten und dann ab mit der Neuinstallation von Windows.

Kisska · 31.03.2017, 14:37

Hallo M-K-D-B,

danke! Nun habe ich eine Neuinstallation gemacht - von Win 7 auf Win 10 und habe direkt mit Windows Defender meine zweite Festplatte mit den Daten überprüft. Während des Scan-Vorgangs wurde angezeigt, dass es irgendwelche Schadprogramme gibt, diese würden aber erst nach Beendigung des Scan-Vorgangs angezeigt. Komischerweise wurde nach Scan-Abschluss nichts gefunden, obwohl es während des Scan-Vorgangs einen Warnhinweis gab.
Könntest du mir einen Rat geben, ob ich zusätzlich zum Windows Defender vorsichtshalber noch ein externes Programm zur Prüfung herunterladen soll? Oder bist du der Meinung, dass Windows Defender bei Win 10 absolut ausreichend ist und meine Daten 100% frei von Schädlingen sind?

VG
Kisska

M-K-D-B · 31.03.2017, 21:13

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Um die Bereinigung möchlichst effektiv und schnell gestalten zu können, bitte ich um Beachtung der folgenden Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir meine Anleitungen immer sorgfältig durch, arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste immer alle Logdateien (auch wenn nichts gefunden wurde). Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Außerdem bitte ich dich, nicht eigenmächtig irgendwelche Sicherheitsprogramme auszuführen und damit deinen Rechner zu überprüfen/bereinigen, da ich so leicht den Überblick verlieren kann.
Außerdem hättest du dir das Eröffnen eines Themas in diesem Fall auch gleich sparen können, wenn du dann doch wieder alleine rumhantierst.
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop ( C:\users\dein Benutzername\Desktop\ ) abzuspeichern und von dort als Administrator zu starten!
Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.
Sollten die Logdateien einmal die zulässige Länge (~ 120.000 Zeichen) überschreiten, so teile die Logdateien auf mehrere Posts auf.
Zur Not kannst du die Logdateien dann auch zippen (in ein .zip Archiv packen) und als Anhang hochladen.
Bitte arbeite so lange mit mir zusammen, bis ich dir sage, dass wir fertig sind und dein Rechner "sauber" ist. Das vorzeitige Verschwinden von Symptomen heißt nicht automatisch, dass dein Rechner bereits vollständig sauber ist.
In der Regel antworte ich dir innerhalb von 24 Stunden, oft sogar wesentlich schneller.
Jedoch habe auch ich einen normalen Beruf und Familie. Ich bin daher nicht jeden Tag stundenlag hier im Forum unterwegs. Es kann unter Umständen bis zu 2 Tage dauern, bis du eine Antwort von mir erhältst. Sollte diese Zeit überschritten sein, so kannst du mir gerne eine PM als Erinnerung schicken.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Wir schauen kurz nach.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

Kisska · 02.04.2017, 14:28

Hallo Matthias,

danke für deine Hilfsbereitschaft!
Gerne werde ich deinen Anweisungen folgen.
Vorab eine Frage bzgl. FRST: Bei deinem Link steht nicht, dass Win 10 unterstützt wird. Kann ich es trotzdem ausführen?

VG
Kisska

M-K-D-B · 02.04.2017, 21:02

Servus,

Zitat:

Zitat von Kisska

Vorab eine Frage bzgl. FRST: Bei deinem Link steht nicht, dass Win 10 unterstützt wird. Kann ich es trotzdem ausführen?

FRST unterstützt alle Betriebssysteme von Windows 95 bis Windows 10.

Kisska · 04.04.2017, 18:43

Hallo Matthias,

aufgrund der Zeichenlänge poste ich die Logdateien nachfolgend separat.

1) FRST.txt - Teil 1

[CODE]Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Margo (Administrator) auf MARGO-PC (04-04-2017 17:22:04)
Gestartet von C:\Users\Margo\Desktop
Geladene Profile: Margo (Verfügbare Profile: defaultuser0 & Margo)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.79.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_5.0.13.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [717688 2015-11-18] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-06] (IDT, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKU\S-1-5-21-2190986405-3282524184-141134257-1001\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [360776 2017-02-22] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{c8006aa6-f40d-4bb9-b578-5700ded48c46}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-04-01] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-04-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-04-01] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-04-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-04-01] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [djhangopedggnlnicpbjklghlckmndge] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3704520 2017-02-18] (Microsoft Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319080 2015-12-10] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-03-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-03-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-03-17] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-03-17] (NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvlddmkm.sys [14574640 2017-03-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2017-03-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47672 2017-03-17] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [59448 2017-03-17] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek )
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [752856 2015-05-29] (Realsil Semiconductor Corporation)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-04 17:22 - 2017-04-04 17:22 - 00013749 _____ C:\Users\Margo\Desktop\FRST.txt
2017-04-04 17:21 - 2017-04-04 17:22 - 00000000 ____D C:\FRST
2017-04-04 17:18 - 2017-04-04 17:20 - 02424832 _____ (Farbar) C:\Users\Margo\Desktop\FRST64.exe
2017-04-03 01:12 - 2017-04-03 01:12 - 00000000 ____D C:\Users\Margo\AppData\LocalLow\Temp
2017-04-02 23:58 - 2017-04-04 17:07 - 00000000 ____D C:\Users\Margo\Documents\Outlook-Dateien
2017-04-02 23:19 - 2017-04-02 23:19 - 00000000 ___HD C:\OneDriveTemp
2017-04-02 18:27 - 2017-04-02 18:27 - 00000000 ____D C:\Users\Margo\Documents\Benutzerdefinierte Office-Vorlagen
2017-04-02 14:05 - 2017-04-02 14:05 - 00000000 ____D C:\Users\Margo\AppData\Local\ElevatedDiagnostics
2017-04-01 22:16 - 2017-04-01 22:16 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002536 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2017-04-01 22:09 - 2017-04-02 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-01 22:08 - 2017-04-01 22:08 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-04-01 22:07 - 2017-04-01 22:08 - 04035888 _____ (Microsoft Corporation) C:\Users\Margo\Downloads\Setup.x86.de-DE_ProPlusRetail_XXXXX-XXXXX-XXXXX-XXXXX-XXXXX_act_1_.exe
2017-04-01 11:28 - 2017-04-01 11:28 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-04-01 00:16 - 2017-04-01 00:16 - 00000000 ____D C:\Users\Margo\AppData\Local\PeerDistRepub
2017-03-31 17:58 - 2017-03-31 17:58 - 00079543 _____ C:\Users\Margo\Downloads\Briefmarken.1Stk.31.03.2017_1758.pdf
2017-03-31 16:12 - 2017-03-31 16:12 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-03-31 13:01 - 2017-03-31 13:01 - 00000000 ____D C:\Users\Margo\AppData\Local\CEF
2017-03-31 04:17 - 2017-03-31 04:17 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-03-31 02:40 - 2017-03-31 02:41 - 00000000 ____D C:\Windows\system32\MRT
2017-03-31 02:40 - 2017-03-31 02:40 - 138634176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-31 02:33 - 2017-03-04 09:57 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-03-31 02:33 - 2017-03-04 09:57 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-03-31 02:33 - 2017-03-04 09:44 - 01470816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-03-31 02:33 - 2017-03-04 09:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2017-03-31 02:33 - 2017-03-04 09:24 - 00090976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2017-03-31 02:33 - 2017-03-04 09:09 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2017-03-31 02:33 - 2017-03-04 09:09 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2017-03-31 02:33 - 2017-03-04 09:09 - 00497416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-03-31 02:33 - 2017-03-04 09:08 - 00130912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-03-31 02:33 - 2017-03-04 09:07 - 00557400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-03-31 02:33 - 2017-03-04 09:04 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-03-31 02:33 - 2017-03-04 08:56 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-03-31 02:33 - 2017-03-04 08:56 - 00248992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2017-03-31 02:33 - 2017-03-04 08:54 - 02277288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-03-31 02:33 - 2017-03-04 08:54 - 00524776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 05722320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 02256080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00781152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-03-31 02:33 - 2017-03-04 08:53 - 00493912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-03-31 02:33 - 2017-03-04 08:52 - 00549088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2017-03-31 02:33 - 2017-03-04 08:52 - 00272720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-03-31 02:33 - 2017-03-04 08:51 - 01980768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-03-31 02:33 - 2017-03-04 08:51 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-03-31 02:33 - 2017-03-04 08:50 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 06667528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 04023000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01853224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01360456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01202384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00981376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00976184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00530480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00352760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-03-31 02:33 - 2017-03-04 08:46 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-03-31 02:33 - 2017-03-04 08:46 - 00321792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2017-03-31 02:33 - 2017-03-04 08:42 - 01415240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-03-31 02:33 - 2017-03-04 08:42 - 01260784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-03-31 02:33 - 2017-03-04 08:42 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-03-31 02:33 - 2017-03-04 08:36 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-03-31 02:33 - 2017-03-04 08:24 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-03-31 02:33 - 2017-03-04 08:23 - 00506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-03-31 02:33 - 2017-03-04 08:22 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2017-03-31 02:33 - 2017-03-04 08:21 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-03-31 02:33 - 2017-03-04 08:20 - 13873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-03-31 02:33 - 2017-03-04 08:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
2017-03-31 02:33 - 2017-03-04 08:19 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-03-31 02:33 - 2017-03-04 08:18 - 00819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 01456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 00636928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-03-31 02:33 - 2017-03-04 08:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-03-31 02:33 - 2017-03-04 08:15 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-03-31 02:33 - 2017-03-04 08:15 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 04613120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-31 02:33 - 2017-03-04 08:11 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2017-03-31 02:33 - 2017-03-04 08:11 - 01137152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2017-03-31 02:33 - 2017-03-04 08:10 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-03-31 02:33 - 2017-03-04 08:10 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-03-31 02:33 - 2017-03-04 08:09 - 00570368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2017-03-31 02:33 - 2017-03-04 08:07 - 02748928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2017-03-31 02:33 - 2017-03-04 08:07 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 02153984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2017-03-31 02:33 - 2017-03-04 08:05 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-03-31 02:33 - 2017-03-04 08:05 - 00545792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-03-31 02:33 - 2017-03-04 08:04 - 00719872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_sr.dll
2017-03-31 02:33 - 2017-03-04 08:04 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 02740224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 01004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01993216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01595904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01571840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 00773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-03-31 02:33 - 2017-03-04 08:01 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 04557824 _____ (Microsoft) C:\Windows\SysWOW64\dbgeng.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 02996736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-03-31 02:33 - 2017-03-04 08:00 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 02003968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 01883648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 00862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-03-31 02:33 - 2017-03-04 07:59 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2017-03-31 02:33 - 2017-03-04 07:57 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-03-31 02:33 - 2016-12-21 07:59 - 00218976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
2017-03-31 02:33 - 2016-12-21 06:40 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-03-31 02:33 - 2016-12-21 06:24 - 05061120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-03-31 02:33 - 2016-12-14 07:18 - 00715104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-03-31 02:33 - 2016-12-14 07:18 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2017-03-31 02:33 - 2016-12-14 07:08 - 00341344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-03-31 02:33 - 2016-12-14 07:01 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2017-03-31 02:33 - 2016-12-14 07:01 - 00076984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2017-03-31 02:33 - 2016-12-14 06:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2017-03-31 02:33 - 2016-12-14 06:40 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-03-31 02:33 - 2016-12-14 06:38 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll
2017-03-31 02:33 - 2016-12-14 06:32 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2017-03-31 02:33 - 2016-12-14 06:22 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2017-03-31 02:33 - 2016-12-09 12:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-03-31 02:33 - 2016-12-09 12:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-03-31 02:33 - 2016-12-09 12:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-03-31 02:33 - 2016-12-09 11:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-03-31 02:33 - 2016-12-09 11:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-03-31 02:33 - 2016-12-09 11:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2017-03-31 02:33 - 2016-12-09 11:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-03-31 02:33 - 2016-12-09 11:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2017-03-31 02:33 - 2016-11-11 12:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-03-31 02:33 - 2016-11-11 11:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2017-03-31 02:33 - 2016-11-11 09:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-31 02:33 - 2016-11-11 09:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2017-03-31 02:33 - 2016-11-11 09:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2017-03-31 02:33 - 2016-11-11 09:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
2017-03-31 02:33 - 2016-11-11 09:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2017-03-31 02:33 - 2016-11-11 09:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2017-03-31 02:33 - 2016-11-11 09:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2017-03-31 02:33 - 2016-11-11 09:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-03-31 02:33 - 2016-11-11 09:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2017-03-31 02:33 - 2016-11-11 09:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-03-31 02:33 - 2016-11-11 09:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2017-03-31 02:33 - 2016-11-11 09:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-03-31 02:33 - 2016-11-11 09:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2017-03-31 02:33 - 2016-11-11 09:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2017-03-31 02:33 - 2016-11-11 09:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2017-03-31 02:33 - 2016-11-11 09:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2017-03-31 02:33 - 2016-11-11 09:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-03-31 02:33 - 2016-11-11 09:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2017-03-31 02:33 - 2016-11-02 13:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-03-31 02:33 - 2016-11-02 13:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2017-03-31 02:33 - 2016-11-02 13:08 - 00186424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2017-03-31 02:33 - 2016-11-02 13:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-03-31 02:33 - 2016-11-02 13:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2017-03-31 02:33 - 2016-11-02 12:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2017-03-31 02:33 - 2016-11-02 12:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8.dll
2017-03-31 02:33 - 2016-11-02 12:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2017-03-31 02:33 - 2016-11-02 12:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2017-03-31 02:33 - 2016-11-02 12:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-03-31 02:33 - 2016-11-02 12:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2017-03-31 02:33 - 2016-11-02 12:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2017-03-31 02:33 - 2016-10-15 06:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-03-31 02:33 - 2016-10-15 06:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2017-03-31 02:33 - 2016-10-15 06:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2017-03-31 02:33 - 2016-10-15 05:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2017-03-31 02:33 - 2016-10-15 05:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2017-03-31 02:33 - 2016-10-15 05:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\hidclass.sys
2017-03-31 02:33 - 2016-10-15 05:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2017-03-31 02:33 - 2016-10-15 05:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2017-03-31 02:33 - 2016-10-15 05:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2017-03-31 02:33 - 2016-10-15 05:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-03-31 02:33 - 2016-10-15 05:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-03-31 02:33 - 2016-10-15 05:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-03-31 02:33 - 2016-10-15 05:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-03-31 02:33 - 2016-10-15 05:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2017-03-31 02:33 - 2016-10-05 12:35 - 00279904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-03-31 02:33 - 2016-10-05 12:16 - 00187232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-03-31 02:33 - 2016-10-05 12:09 - 00064352 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2017-03-31 02:33 - 2016-10-05 11:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2017-03-31 02:33 - 2016-10-05 11:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovs.dll
2017-03-31 02:33 - 2016-09-15 19:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2017-03-31 02:33 - 2016-09-15 19:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2017-03-31 02:33 - 2016-09-15 19:29 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-03-31 02:33 - 2016-09-15 19:23 - 00170960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-03-31 02:33 - 2016-09-15 19:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TempSignedLicenseExchangeTask.dll
2017-03-31 02:33 - 2016-09-15 19:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-03-31 02:33 - 2016-09-15 18:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlancfg.dll
2017-03-31 02:33 - 2016-09-15 18:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DataExchange.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManagerApi.dll
2017-03-31 02:33 - 2016-09-15 18:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-03-31 02:33 - 2016-09-15 18:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2017-03-31 02:33 - 2016-09-15 18:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2017-03-31 02:33 - 2016-09-15 18:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
2017-03-31 02:33 - 2016-09-15 18:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
2017-03-31 02:33 - 2016-09-15 18:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-03-31 02:33 - 2016-09-15 18:41 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthA2DP.sys
2017-03-31 02:33 - 2016-09-15 18:40 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2017-03-31 02:33 - 2016-09-15 18:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2017-03-31 02:33 - 2016-09-07 07:29 - 00118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2017-03-31 02:33 - 2016-09-07 06:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
2017-03-31 02:33 - 2016-09-07 06:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
2017-03-31 02:33 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2017-03-31 02:33 - 2016-08-06 06:17 - 00790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-03-31 02:33 - 2016-08-06 05:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2017-03-31 02:33 - 2016-07-22 03:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
2017-03-31 02:32 - 2017-03-04 09:19 - 02049480 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-03-31 02:32 - 2017-03-04 09:09 - 07220696 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-03-31 02:32 - 2017-03-04 09:09 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-03-31 02:32 - 2017-03-04 09:09 - 00527808 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2017-03-31 02:32 - 2017-03-04 09:04 - 08169536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-03-31 02:32 - 2017-03-04 09:04 - 01362512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2017-03-31 02:32 - 2017-03-04 09:03 - 22223968 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-03-31 02:32 - 2017-03-04 09:02 - 00184416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
2017-03-31 02:32 - 2017-03-04 08:53 - 00313568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2017-03-31 02:32 - 2017-03-04 08:53 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00640976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2017-03-31 02:32 - 2017-03-04 08:45 - 00173408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-03-31 02:32 - 2017-03-04 08:45 - 00112120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2017-03-31 02:32 - 2017-03-04 08:42 - 00276832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2017-03-31 02:32 - 2017-03-04 08:40 - 00306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-03-31 02:32 - 2017-03-04 08:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-03-31 02:32 - 2017-03-04 08:34 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-03-31 02:32 - 2017-03-04 08:34 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-03-31 02:32 - 2017-03-04 08:34 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-03-31 02:32 - 2017-03-04 08:33 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.UI.GameBar.dll
2017-03-31 02:32 - 2017-03-04 08:32 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-03-31 02:32 - 2017-03-04 08:31 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-03-31 02:32 - 2017-03-04 08:31 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-03-31 02:32 - 2017-03-04 08:30 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2017-03-31 02:32 - 2017-03-04 08:30 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfp.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XInputUap.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00019968 _____ C:\Windows\SysWOW64\GamePanelExternalHook.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 01507840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-03-31 02:32 - 2017-03-04 08:27 - 00275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accountaccessor.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.UI.GameBar.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2017-03-31 02:32 - 2017-03-04 08:25 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-03-31 02:32 - 2017-03-04 08:25 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscandui.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCCSEngineShared.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfui.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2017-03-31 02:32 - 2017-03-04 08:23 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00531456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DavSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 01299968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00237568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-03-31 02:32 - 2017-03-04 08:22 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00631296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
2017-03-31 02:32 - 2017-03-04 08:21 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapi32.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00632832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00424960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00714752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-03-31 02:32 - 2017-03-04 08:19 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 01231360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00896512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-03-31 02:32 - 2017-03-04 08:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-03-31 02:32 - 2017-03-04 08:17 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-03-31 02:32 - 2017-03-04 08:17 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00968704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2017-03-31 02:32 - 2017-03-04 08:16 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-03-31 02:32 - 2017-03-04 08:15 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
2017-03-31 02:32 - 2017-03-04 08:14 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-03-31 02:32 - 2017-03-04 08:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-03-31 02:32 - 2017-03-04 08:13 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 02458112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00256512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-03-31 02:32 - 2017-03-04 08:12 - 00700416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Search.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 01357312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 01320448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2017-03-31 02:32 - 2017-03-04 08:10 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regedit.exe
2017-03-31 02:32 - 2017-03-04 08:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommon.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 03405312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 01266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-03-31 02:32 - 2017-03-04 08:07 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 02538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-03-31 02:32 - 2017-03-04 08:05 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 01133568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CameraCaptureUI.dll
2017-03-31 02:32 - 2017-03-04 08:04 - 00753152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2017-03-31 02:32 - 2017-03-04 08:03 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2017-03-31 02:32 - 2017-03-04 08:03 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-03-31 02:32 - 2017-03-04 08:03 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01709056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVP9DEC.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01293312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2017-03-31 02:32 - 2017-03-04 08:01 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01154560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Pimstore.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00620544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00560640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00422400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-03-31 02:32 - 2017-03-04 07:59 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2017-03-31 02:32 - 2017-03-04 07:36 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-03-31 02:32 - 2017-02-22 04:17 - 00448285 _____ C:\Windows\system32\ApnDatabase.xml
2017-03-31 02:32 - 2016-12-21 06:43 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-03-31 02:32 - 2016-12-21 06:41 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2017-03-31 02:32 - 2016-12-21 06:40 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2017-03-31 02:32 - 2016-12-21 06:40 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-03-31 02:32 - 2016-12-21 06:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-03-31 02:32 - 2016-12-21 06:38 - 00866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2017-03-31 02:32 - 2016-12-21 06:30 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2017-03-31 02:32 - 2016-12-14 06:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2017-03-31 02:32 - 2016-12-14 06:39 - 00837632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2017-03-31 02:32 - 2016-12-14 06:35 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-03-31 02:32 - 2016-12-14 06:35 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2017-03-31 02:32 - 2016-12-09 11:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2017-03-31 02:32 - 2016-12-09 11:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2017-03-31 02:32 - 2016-12-09 11:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2017-03-31 02:32 - 2016-12-09 11:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2017-03-31 02:32 - 2016-12-09 11:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2017-03-31 02:32 - 2016-11-11 11:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2017-03-31 02:32 - 2016-11-11 11:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2017-03-31 02:32 - 2016-11-11 11:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2017-03-31 02:32 - 2016-11-11 10:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-03-31 02:32 - 2016-11-11 09:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2017-03-31 02:32 - 2016-11-11 09:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2017-03-31 02:32 - 2016-11-11 09:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
2017-03-31 02:32 - 2016-11-11 09:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2017-03-31 02:32 - 2016-11-11 09:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2017-03-31 02:32 - 2016-11-11 09:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-03-31 02:32 - 2016-11-11 09:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-03-31 02:32 - 2016-11-11 09:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-03-31 02:32 - 2016-11-11 09:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2017-03-31 02:32 - 2016-11-11 09:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2017-03-31 02:32 - 2016-11-11 09:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2017-03-31 02:32 - 2016-11-11 09:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2017-03-31 02:32 - 2016-11-11 09:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2017-03-31 02:32 - 2016-11-11 09:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2017-03-31 02:32 - 2016-11-02 13:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2017-03-31 02:32 - 2016-11-02 12:49 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-03-31 02:32 - 2016-11-02 12:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-03-31 02:32 - 2016-11-02 12:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efsext.dll
2017-03-31 02:32 - 2016-11-02 12:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2017-03-31 02:32 - 2016-11-02 12:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthExt.dll
2017-03-31 02:32 - 2016-11-02 12:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
2017-03-31 02:32 - 2016-11-02 12:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetailsUpdate.dll
2017-03-31 02:32 - 2016-11-02 12:35 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-03-31 02:32 - 2016-11-02 12:28 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chartv.dll
2017-03-31 02:32 - 2016-11-02 12:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-03-31 02:32 - 2016-11-02 12:26 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2017-03-31 02:32 - 2016-11-02 12:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2017-03-31 02:32 - 2016-10-15 06:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2017-03-31 02:32 - 2016-10-15 06:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
2017-03-31 02:32 - 2016-10-15 05:57 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2017-03-31 02:32 - 2016-10-15 05:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentutl.exe
2017-03-31 02:32 - 2016-10-15 05:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
2017-03-31 02:32 - 2016-10-15 05:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2017-03-31 02:32 - 2016-10-15 05:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2017-03-31 02:32 - 2016-10-15 05:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2017-03-31 02:32 - 2016-10-15 05:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-03-31 02:32 - 2016-10-15 05:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmifw.dll
2017-03-31 02:32 - 2016-10-05 11:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-03-31 02:32 - 2016-10-05 11:36 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2017-03-31 02:32 - 2016-10-05 11:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2017-03-31 02:32 - 2016-10-05 11:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2017-03-31 02:32 - 2016-10-05 11:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2017-03-31 02:32 - 2016-10-05 11:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2017-03-31 02:32 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-03-31 02:32 - 2016-10-05 11:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2017-03-31 02:32 - 2016-09-15 19:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2017-03-31 02:32 - 2016-09-15 19:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2017-03-31 02:32 - 2016-09-15 19:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2017-03-31 02:32 - 2016-09-15 19:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2017-03-31 02:32 - 2016-09-15 18:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovslegacy.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-03-31 02:32 - 2016-09-15 18:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-03-31 02:32 - 2016-09-15 18:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2017-03-31 02:32 - 2016-09-15 18:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
2017-03-31 02:32 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2017-03-31 02:32 - 2016-09-15 18:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-03-31 02:32 - 2016-09-15 18:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
2017-03-31 02:32 - 2016-09-15 18:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
2017-03-31 02:32 - 2016-09-15 18:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2017-03-31 02:32 - 2016-09-15 18:43 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2017-03-31 02:32 - 2016-09-15 18:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundMediaPolicy.dll
2017-03-31 02:32 - 2016-09-15 18:40 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-03-31 02:32 - 2016-09-15 18:35 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2017-03-31 02:32 - 2016-09-15 18:34 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-03-31 02:32 - 2016-09-15 18:24 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-03-31 02:32 - 2016-09-10 15:21 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2017-03-31 02:32 - 2016-09-07 07:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosTrace.dll
2017-03-31 02:32 - 2016-09-07 07:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosHost.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosResource.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MapControls.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlStringsRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AddressParser.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccessRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneutilRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2017-03-31 02:32 - 2016-09-07 06:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-31 02:32 - 2016-09-07 06:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-03-31 02:32 - 2016-09-07 06:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactActivation.dll
2017-03-31 02:32 - 2016-09-07 06:54 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2017-03-31 02:32 - 2016-09-07 06:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
2017-03-31 02:32 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-03-31 02:32 - 2016-09-07 06:53 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NmaDirect.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2017-03-31 02:32 - 2016-09-07 06:50 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2017-03-31 02:32 - 2016-09-07 06:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2017-03-31 02:32 - 2016-09-07 06:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2017-03-31 02:32 - 2016-09-07 06:31 - 00461312 _____ (Microsoft) C:\Windows\SysWOW64\DbgModel.dll
2017-03-31 02:32 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2017-03-31 02:32 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
2017-03-31 02:32 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-03-31 02:32 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2017-03-31 02:32 - 2016-08-20 07:18 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2017-03-31 02:32 - 2016-08-20 07:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2017-03-31 02:32 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2017-03-31 02:32 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2017-03-31 02:32 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2017-03-31 02:32 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2017-03-31 02:32 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
2017-03-31 02:32 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
2017-03-31 02:32 - 2016-08-06 06:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2017-03-31 02:32 - 2016-08-06 05:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2017-03-31 02:32 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\hidusb.sys
2017-03-31 02:32 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2017-03-31 02:32 - 2016-08-06 05:46 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2017-03-31 02:32 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\hidparse.sys
2017-03-31 02:32 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2017-03-31 02:32 - 2016-08-06 05:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2017-03-31 02:32 - 2016-08-06 05:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2017-03-31 02:32 - 2016-08-06 05:41 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2017-03-31 02:32 - 2016-08-06 05:41 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2017-03-31 02:32 - 2016-08-06 05:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
2017-03-31 02:32 - 2016-08-06 05:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-03-31 02:32 - 2016-08-06 05:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2017-03-31 02:32 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2017-03-31 02:32 - 2016-08-05 10:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2017-03-31 02:32 - 2016-08-05 10:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2017-03-31 02:32 - 2016-08-05 10:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2017-03-31 02:32 - 2016-08-02 06:47 - 00079536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2017-03-31 02:31 - 2017-03-04 09:26 - 00794416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 00646688 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-03-31 02:31 - 2017-03-04 09:23 - 02512304 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-03-31 02:31 - 2017-03-04 09:22 - 07786336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-31 02:31 - 2017-03-04 09:22 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-03-31 02:31 - 2017-03-04 09:18 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-03-31 02:31 - 2017-03-04 09:18 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-03-31 02:31 - 2017-03-04 09:17 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-03-31 02:31 - 2017-03-04 09:15 - 01000280 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2017-03-31 02:31 - 2017-03-04 09:10 - 02828384 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2017-03-31 02:31 - 2017-03-04 09:10 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-31 02:31 - 2017-03-04 09:10 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-03-31 02:31 - 2017-03-04 09:09 - 02750384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01157000 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-03-31 02:31 - 2017-03-04 09:09 - 00635864 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-03-31 02:31 - 2017-03-04 09:06 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-03-31 02:31 - 2017-03-04 09:04 - 01063472 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01989072 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01723560 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2017-03-31 02:31 - 2017-03-04 09:03 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01454512 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01301112 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01071736 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00811416 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00596040 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00443232 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00382272 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2017-03-31 02:31 - 2017-03-04 09:01 - 00137936 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2017-03-31 02:31 - 2017-03-04 08:57 - 02536288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-03-31 02:31 - 2017-03-04 08:57 - 00387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-03-31 02:31 - 2017-03-04 08:39 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 22565376 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\DuCsps.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2017-03-31 02:31 - 2017-03-04 08:35 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-03-31 02:31 - 2017-03-04 08:35 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-03-31 02:31 - 2017-03-04 08:34 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-03-31 02:31 - 2017-03-04 08:34 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-03-31 02:31 - 2017-03-04 08:34 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2017-03-31 02:31 - 2017-03-04 08:33 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-03-31 02:31 - 2017-03-04 08:33 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2017-03-31 02:31 - 2017-03-04 08:32 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2017-03-31 02:31 - 2017-03-04 08:32 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\MCCSEngineShared.dll
2017-03-31 02:31 - 2017-03-04 08:32 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-31 02:31 - 2017-03-04 08:31 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2017-03-31 02:31 - 2017-03-04 08:31 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00535552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-03-31 02:31 - 2017-03-04 08:30 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-03-31 02:31 - 2017-03-04 08:29 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\tapi32.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\ppcsnap.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-03-31 02:31 - 2017-03-04 08:27 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00460288 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00383488 _____ (Microsoft Corporation) C:\Windows\system32\DavSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00579584 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-03-31 02:31 - 2017-03-04 08:24 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-03-31 02:31 - 2017-03-04 08:24 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 01184256 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00945152 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00820224 _____ (Microsoft Corporation) C:\Windows\system32\PrintRenderAPIHost.DLL
2017-03-31 02:31 - 2017-03-04 08:23 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-03-31 02:31 - 2017-03-04 08:23 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 06285824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 01937920 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-03-31 02:31 - 2017-03-04 08:21 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00809984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Search.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-31 02:31 - 2017-03-04 08:20 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 23676416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01639424 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2017-03-31 02:31 - 2017-03-04 08:19 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-31 02:31 - 2017-03-04 08:18 - 17198592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 01189376 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2017-03-31 02:31 - 2017-03-04 08:17 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-03-31 02:31 - 2017-03-04 08:17 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 13441536 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 18362368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 01837056 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 19411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 13085184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 07654912 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 03441664 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 01891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01917440 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01536000 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01399296 _____ (Microsoft Corporation) C:\Windows\system32\Pimstore.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 08125952 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 12349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 01981440 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 01780224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

Code:

ATTFilter

2017-03-31 02:31 - 2017-03-04 08:08 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2017-03-31 02:31 - 2017-03-04 08:07 - 12178944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01840640 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-03-31 02:31 - 2017-03-04 08:07 - 01512448 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 00707584 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 03202048 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02475008 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 01013760 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 01826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00998912 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00531456 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 06044672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 00119808 ____R (Microsoft Corporation) C:\Windows\system32\SecureAssessmentHandlers.dll
2017-03-31 02:31 - 2017-03-04 08:02 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.SecureAssessment.dll
2017-03-31 02:31 - 2017-03-04 08:01 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2017-03-31 02:31 - 2016-12-21 09:43 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-03-31 02:31 - 2016-12-21 09:13 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2017-03-31 02:31 - 2016-12-21 09:12 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2017-03-31 02:31 - 2016-12-21 09:10 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-03-31 02:31 - 2016-12-21 09:07 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-03-31 02:31 - 2016-12-21 09:06 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-03-31 02:31 - 2016-12-21 08:51 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-03-31 02:31 - 2016-12-21 08:49 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

Kisska · 04.04.2017, 18:46

1) FRST.txt - Teil 2

Code:

ATTFilter

2017-03-31 02:31 - 2016-12-14 07:23 - 00404832 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-31 02:31 - 2016-12-14 06:42 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2017-03-31 02:31 - 2016-12-14 06:42 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-03-31 02:31 - 2016-12-14 06:40 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2017-03-31 02:31 - 2016-12-14 06:40 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2017-03-31 02:31 - 2016-12-14 06:24 - 01005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2017-03-31 02:31 - 2016-12-14 06:23 - 03134976 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-03-31 02:31 - 2016-12-14 06:23 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-03-31 02:31 - 2016-12-09 12:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-03-31 02:31 - 2016-12-09 12:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-31 02:31 - 2016-12-09 12:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-03-31 02:31 - 2016-12-09 12:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-03-31 02:31 - 2016-12-09 12:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-03-31 02:31 - 2016-12-09 11:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2017-03-31 02:31 - 2016-12-09 11:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-31 02:31 - 2016-12-09 11:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2017-03-31 02:31 - 2016-12-09 11:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2017-03-31 02:31 - 2016-11-11 12:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-03-31 02:31 - 2016-11-11 12:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-03-31 02:31 - 2016-11-11 11:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2017-03-31 02:31 - 2016-11-11 11:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2017-03-31 02:31 - 2016-11-11 11:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2017-03-31 02:31 - 2016-11-11 11:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2017-03-31 02:31 - 2016-11-11 11:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2017-03-31 02:31 - 2016-11-11 11:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2017-03-31 02:31 - 2016-11-11 11:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-03-31 02:31 - 2016-11-11 11:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2017-03-31 02:31 - 2016-11-11 11:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2017-03-31 02:31 - 2016-11-11 11:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2017-03-31 02:31 - 2016-11-11 11:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-03-31 02:31 - 2016-11-11 11:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2017-03-31 02:31 - 2016-11-11 11:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2017-03-31 02:31 - 2016-11-11 11:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2017-03-31 02:31 - 2016-11-11 11:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2017-03-31 02:31 - 2016-11-11 11:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-31 02:31 - 2016-11-11 11:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2017-03-31 02:31 - 2016-11-11 11:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2017-03-31 02:31 - 2016-11-11 11:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-31 02:31 - 2016-11-11 11:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-03-31 02:31 - 2016-11-11 11:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2017-03-31 02:31 - 2016-11-11 11:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2017-03-31 02:31 - 2016-11-11 11:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2017-03-31 02:31 - 2016-11-11 11:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2017-03-31 02:31 - 2016-11-11 11:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2017-03-31 02:31 - 2016-11-11 11:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2017-03-31 02:31 - 2016-11-11 11:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2017-03-31 02:31 - 2016-11-02 13:13 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-03-31 02:31 - 2016-11-02 13:02 - 00848736 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2017-03-31 02:31 - 2016-11-02 13:02 - 00148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2017-03-31 02:31 - 2016-11-02 12:55 - 00048992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2017-03-31 02:31 - 2016-11-02 12:37 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2017-03-31 02:31 - 2016-11-02 12:36 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2017-03-31 02:31 - 2016-11-02 12:30 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2017-03-31 02:31 - 2016-11-02 12:28 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2017-03-31 02:31 - 2016-11-02 12:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-03-31 02:31 - 2016-11-02 12:19 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-03-31 02:31 - 2016-11-02 12:18 - 00836608 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2017-03-31 02:31 - 2016-11-02 12:16 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2017-03-31 02:31 - 2016-11-02 12:13 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-03-31 02:31 - 2016-10-15 06:26 - 00691080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2017-03-31 02:31 - 2016-10-15 06:21 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-03-31 02:31 - 2016-10-15 06:21 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-03-31 02:31 - 2016-10-15 06:21 - 00292872 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2017-03-31 02:31 - 2016-10-15 06:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2017-03-31 02:31 - 2016-10-15 06:00 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-03-31 02:31 - 2016-10-15 05:59 - 00272384 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2017-03-31 02:31 - 2016-10-15 05:59 - 00130560 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2017-03-31 02:31 - 2016-10-15 05:57 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2017-03-31 02:31 - 2016-10-15 05:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2017-03-31 02:31 - 2016-10-15 05:55 - 00329216 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-03-31 02:31 - 2016-10-15 05:55 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2017-03-31 02:31 - 2016-10-15 05:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2017-03-31 02:31 - 2016-10-15 05:50 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2017-03-31 02:31 - 2016-10-15 05:47 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2017-03-31 02:31 - 2016-10-15 05:46 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-03-31 02:31 - 2016-10-15 05:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2017-03-31 02:31 - 2016-10-15 05:45 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2017-03-31 02:31 - 2016-10-15 05:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2017-03-31 02:31 - 2016-10-15 05:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2017-03-31 02:31 - 2016-10-15 05:36 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2017-03-31 02:31 - 2016-10-15 05:35 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-03-31 02:31 - 2016-10-05 12:12 - 01112928 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2017-03-31 02:31 - 2016-10-05 11:19 - 02390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-03-31 02:31 - 2016-10-05 11:18 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-03-31 02:31 - 2016-10-05 11:18 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-31 02:31 - 2016-10-05 11:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00512416 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00424640 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00218008 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-03-31 02:31 - 2016-09-15 19:25 - 00280472 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2017-03-31 02:31 - 2016-09-15 19:11 - 00862064 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2017-03-31 02:31 - 2016-09-15 19:11 - 00725664 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2017-03-31 02:31 - 2016-09-15 18:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetworkCollectionAgent.dll
2017-03-31 02:31 - 2016-09-15 18:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2017-03-31 02:31 - 2016-09-15 18:39 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\PrintWSDAHost.dll
2017-03-31 02:31 - 2016-09-15 18:37 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-03-31 02:31 - 2016-09-15 18:37 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2017-03-31 02:31 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2017-03-31 02:31 - 2016-09-15 18:34 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2017-03-31 02:31 - 2016-09-15 18:32 - 01037312 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2017-03-31 02:31 - 2016-09-15 18:32 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2017-03-31 02:31 - 2016-09-15 18:30 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-03-31 02:31 - 2016-09-15 18:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2017-03-31 02:31 - 2016-09-15 18:29 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2017-03-31 02:31 - 2016-09-15 18:28 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-03-31 02:31 - 2016-09-15 18:28 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2017-03-31 02:31 - 2016-09-15 18:27 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2017-03-31 02:31 - 2016-09-15 18:27 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2017-03-31 02:31 - 2016-09-15 18:27 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2017-03-31 02:31 - 2016-09-15 18:27 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2017-03-31 02:31 - 2016-09-15 18:27 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2017-03-31 02:31 - 2016-09-15 18:25 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-03-31 02:31 - 2016-09-15 18:25 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2017-03-31 02:31 - 2016-09-15 18:17 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2017-03-31 02:31 - 2016-09-15 18:16 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2017-03-31 02:31 - 2016-09-15 18:16 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2017-03-31 02:31 - 2016-09-07 07:54 - 00133472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-31 02:31 - 2016-09-07 07:24 - 00057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-31 02:31 - 2016-09-07 07:04 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2017-03-31 02:31 - 2016-09-07 07:01 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2017-03-31 02:31 - 2016-09-07 07:01 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2017-03-31 02:31 - 2016-09-07 07:00 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2017-03-31 02:31 - 2016-09-07 06:56 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2017-03-31 02:31 - 2016-09-07 06:55 - 00820736 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2017-03-31 02:31 - 2016-09-07 06:54 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2017-03-31 02:31 - 2016-09-07 06:54 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2017-03-31 02:31 - 2016-09-07 06:45 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-31 02:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-03-31 02:31 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2017-03-31 02:31 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2017-03-31 02:31 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2017-03-31 02:31 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2017-03-31 02:31 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2017-03-31 02:31 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2017-03-31 02:31 - 2016-08-06 06:26 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-31 02:31 - 2016-08-06 06:15 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-03-31 02:31 - 2016-08-06 06:13 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-03-31 02:31 - 2016-08-06 05:48 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-03-31 02:31 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-03-31 02:31 - 2016-08-06 05:47 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2017-03-31 02:31 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-03-31 02:31 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-03-31 02:31 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-03-31 02:31 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-03-31 02:31 - 2016-08-06 05:46 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2017-03-31 02:31 - 2016-08-06 05:45 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2017-03-31 02:31 - 2016-08-06 05:44 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2017-03-31 02:31 - 2016-08-06 05:43 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2017-03-31 02:31 - 2016-08-06 05:41 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-03-31 02:31 - 2016-08-06 05:40 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2017-03-31 02:31 - 2016-08-06 05:39 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2017-03-31 02:31 - 2016-08-06 05:36 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2017-03-31 02:30 - 2017-03-04 09:57 - 00192352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 01617760 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 01294688 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00655200 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00378720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00343904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00315232 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00242528 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00086368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-31 02:30 - 2017-03-04 09:35 - 00038240 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-03-31 02:30 - 2017-03-04 09:27 - 02170720 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-03-31 02:30 - 2017-03-04 09:27 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-03-31 02:30 - 2017-03-04 09:24 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-03-31 02:30 - 2017-03-04 09:24 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-03-31 02:30 - 2017-03-04 09:22 - 01354312 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-03-31 02:30 - 2017-03-04 09:22 - 01172984 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-03-31 02:30 - 2017-03-04 09:21 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-03-31 02:30 - 2017-03-04 09:18 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-03-31 02:30 - 2017-03-04 09:18 - 00219040 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2017-03-31 02:30 - 2017-03-04 09:15 - 00404320 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-03-31 02:30 - 2017-03-04 09:15 - 00063328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-03-31 02:30 - 2017-03-04 09:13 - 00635456 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-03-31 02:30 - 2017-03-04 09:11 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-03-31 02:30 - 2017-03-04 09:11 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2017-03-31 02:30 - 2017-03-04 09:09 - 00681312 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2017-03-31 02:30 - 2017-03-04 09:09 - 00578392 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-03-31 02:30 - 2017-03-04 09:09 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00342456 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-03-31 02:30 - 2017-03-04 09:08 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-31 02:30 - 2017-03-04 09:07 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-03-31 02:30 - 2017-03-04 09:07 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00989016 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-03-31 02:30 - 2017-03-04 09:07 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00682808 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-03-31 02:30 - 2017-03-04 09:07 - 00432992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-03-31 02:30 - 2017-03-04 09:03 - 04674360 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-03-31 02:30 - 2017-03-04 09:03 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00755648 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00523712 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00241496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-03-31 02:30 - 2017-03-04 08:59 - 01570208 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-03-31 02:30 - 2017-03-04 08:58 - 01416224 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-03-31 02:30 - 2017-03-04 08:58 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-03-31 02:30 - 2017-03-04 08:42 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-03-31 02:30 - 2017-03-04 08:37 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-03-31 02:30 - 2017-03-04 08:36 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2017-03-31 02:30 - 2017-03-04 08:35 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
2017-03-31 02:30 - 2017-03-04 08:34 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\dggpext.dll
2017-03-31 02:30 - 2017-03-04 08:33 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-03-31 02:30 - 2017-03-04 08:33 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-03-31 02:30 - 2017-03-04 08:33 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-03-31 02:30 - 2017-03-04 08:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2017-03-31 02:30 - 2017-03-04 08:29 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00394752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2017-03-31 02:30 - 2017-03-04 08:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00264704 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 01016320 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-03-31 02:30 - 2017-03-04 08:24 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-03-31 02:30 - 2017-03-04 08:24 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-03-31 02:30 - 2017-03-04 08:23 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00541696 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01913856 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01361408 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01280512 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\Tabbtn.dll
2017-03-31 02:30 - 2017-03-04 08:18 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2017-03-31 02:30 - 2017-03-04 08:18 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 03289088 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 09130496 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 02860032 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 01345024 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2017-03-31 02:30 - 2017-03-04 08:13 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00982528 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00947200 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00937472 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\CameraCaptureUI.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-31 02:30 - 2017-03-04 08:11 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2017-03-31 02:30 - 2017-03-04 08:10 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-31 02:30 - 2017-03-04 08:10 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00770560 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
2017-03-31 02:30 - 2017-03-04 08:09 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-31 02:30 - 2017-03-04 08:08 - 01714688 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2017-03-31 02:30 - 2017-03-04 08:08 - 00540160 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 02914816 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 01064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00935936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 05384192 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 04060672 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 03614720 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-03-31 02:30 - 2017-03-04 08:06 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-03-31 02:30 - 2017-03-04 08:04 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2017-03-31 02:30 - 2017-03-04 08:03 - 01817088 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-03-31 02:30 - 2017-03-04 08:02 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2017-03-31 02:30 - 2017-03-04 08:01 - 03478528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2017-03-31 02:30 - 2017-03-04 08:00 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-03-31 02:30 - 2016-12-21 09:09 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2017-03-31 02:30 - 2016-12-21 08:59 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-03-31 02:30 - 2016-12-21 08:57 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll
2017-03-31 02:30 - 2016-12-21 08:54 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01400160 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01356864 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2017-03-31 02:30 - 2016-12-14 07:33 - 00992096 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-03-31 02:30 - 2016-12-14 07:33 - 00813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00779616 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00752992 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00571744 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00513376 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-03-31 02:30 - 2016-12-14 07:14 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2017-03-31 02:30 - 2016-12-14 06:41 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-31 02:30 - 2016-12-14 06:39 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2017-03-31 02:30 - 2016-12-14 06:26 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-31 02:30 - 2016-12-14 06:25 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2017-03-31 02:30 - 2016-12-14 06:24 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-03-31 02:30 - 2016-12-09 12:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-31 02:30 - 2016-12-09 12:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2017-03-31 02:30 - 2016-12-09 11:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2017-03-31 02:30 - 2016-12-09 11:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-03-31 02:30 - 2016-12-09 11:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-03-31 02:30 - 2016-12-09 11:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2017-03-31 02:30 - 2016-11-11 12:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-31 02:30 - 2016-11-11 12:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-03-31 02:30 - 2016-11-11 11:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2017-03-31 02:30 - 2016-11-11 11:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2017-03-31 02:30 - 2016-11-11 11:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2017-03-31 02:30 - 2016-11-11 11:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-03-31 02:30 - 2016-11-11 11:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-03-31 02:30 - 2016-11-11 11:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2017-03-31 02:30 - 2016-11-11 11:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2017-03-31 02:30 - 2016-11-11 11:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-03-31 02:30 - 2016-11-11 11:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2017-03-31 02:30 - 2016-11-11 11:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2017-03-31 02:30 - 2016-11-11 11:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2017-03-31 02:30 - 2016-11-11 11:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2017-03-31 02:30 - 2016-11-11 11:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2017-03-31 02:30 - 2016-11-11 11:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-03-31 02:30 - 2016-11-11 11:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-03-31 02:30 - 2016-11-11 11:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-03-31 02:30 - 2016-11-11 11:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2017-03-31 02:30 - 2016-11-11 11:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2017-03-31 02:30 - 2016-11-11 11:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-03-31 02:30 - 2016-11-11 11:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2017-03-31 02:30 - 2016-11-11 11:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-03-31 02:30 - 2016-11-11 09:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-03-31 02:30 - 2016-11-02 13:13 - 00423776 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2017-03-31 02:30 - 2016-11-02 12:56 - 01609920 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2017-03-31 02:30 - 2016-11-02 12:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-03-31 02:30 - 2016-11-02 12:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-03-31 02:30 - 2016-11-02 12:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-03-31 02:30 - 2016-11-02 12:34 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2017-03-31 02:30 - 2016-11-02 12:31 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2017-03-31 02:30 - 2016-11-02 12:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2017-03-31 02:30 - 2016-11-02 12:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2017-03-31 02:30 - 2016-11-02 12:29 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-31 02:30 - 2016-11-02 12:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-31 02:30 - 2016-11-02 12:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2017-03-31 02:30 - 2016-11-02 12:23 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2017-03-31 02:30 - 2016-11-02 12:22 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-03-31 02:30 - 2016-11-02 12:21 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-03-31 02:30 - 2016-11-02 12:19 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-03-31 02:30 - 2016-11-02 12:16 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-31 02:30 - 2016-11-02 12:16 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2017-03-31 02:30 - 2016-11-02 12:13 - 03496960 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2017-03-31 02:30 - 2016-11-02 11:11 - 00788624 _____ C:\Windows\SysWOW64\locale.nls
2017-03-31 02:30 - 2016-11-02 11:11 - 00788624 _____ C:\Windows\system32\locale.nls
2017-03-31 02:30 - 2016-10-15 06:48 - 00498952 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2017-03-31 02:30 - 2016-10-15 06:41 - 05622088 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2017-03-31 02:30 - 2016-10-15 06:38 - 00500064 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-03-31 02:30 - 2016-10-15 06:30 - 01851696 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-03-31 02:30 - 2016-10-15 06:29 - 00908640 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2017-03-31 02:30 - 2016-10-15 06:29 - 00079200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2017-03-31 02:30 - 2016-10-15 05:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2017-03-31 02:30 - 2016-10-15 05:56 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2017-03-31 02:30 - 2016-10-15 05:56 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2017-03-31 02:30 - 2016-10-15 05:56 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2017-03-31 02:30 - 2016-10-15 05:54 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2017-03-31 02:30 - 2016-10-15 05:51 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2017-03-31 02:30 - 2016-10-15 05:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2017-03-31 02:30 - 2016-10-15 05:48 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2017-03-31 02:30 - 2016-10-15 05:43 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2017-03-31 02:30 - 2016-10-15 05:39 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2017-03-31 02:30 - 2016-10-15 05:36 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2017-03-31 02:30 - 2016-10-15 05:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2017-03-31 02:30 - 2016-10-15 05:35 - 03054080 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2017-03-31 02:30 - 2016-10-15 05:31 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2017-03-31 02:30 - 2016-10-05 12:17 - 01322848 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2017-03-31 02:30 - 2016-10-05 11:33 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2017-03-31 02:30 - 2016-10-05 11:30 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2017-03-31 02:30 - 2016-10-05 11:29 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2017-03-31 02:30 - 2016-09-15 19:29 - 00023392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2017-03-31 02:30 - 2016-09-15 19:27 - 00434528 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-03-31 02:30 - 2016-09-15 19:26 - 00090400 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2017-03-31 02:30 - 2016-09-15 19:16 - 00206096 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-31 02:30 - 2016-09-15 19:15 - 00649568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2017-03-31 02:30 - 2016-09-15 19:14 - 00119648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2017-03-31 02:30 - 2016-09-15 18:53 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-03-31 02:30 - 2016-09-15 18:42 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2017-03-31 02:30 - 2016-09-15 18:41 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2017-03-31 02:30 - 2016-09-15 18:40 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2017-03-31 02:30 - 2016-09-15 18:38 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2017-03-31 02:30 - 2016-09-15 18:38 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2017-03-31 02:30 - 2016-09-15 18:37 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00686592 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2017-03-31 02:30 - 2016-09-15 18:36 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2017-03-31 02:30 - 2016-09-15 18:35 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2017-03-31 02:30 - 2016-09-15 18:35 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2017-03-31 02:30 - 2016-09-15 18:34 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2017-03-31 02:30 - 2016-09-15 18:33 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2017-03-31 02:30 - 2016-09-15 18:30 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2017-03-31 02:30 - 2016-09-15 18:30 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2017-03-31 02:30 - 2016-09-15 18:27 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2017-03-31 02:30 - 2016-09-15 18:22 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2017-03-31 02:30 - 2016-09-07 07:33 - 00681304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2017-03-31 02:30 - 2016-09-07 07:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2017-03-31 02:30 - 2016-09-07 07:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-31 02:30 - 2016-09-07 06:59 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2017-03-31 02:30 - 2016-09-07 06:56 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2017-03-31 02:30 - 2016-09-07 06:56 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2017-03-31 02:30 - 2016-09-07 06:55 - 00781824 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2017-03-31 02:30 - 2016-09-07 06:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2017-03-31 02:30 - 2016-09-07 06:54 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-31 02:30 - 2016-09-07 06:54 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2017-03-31 02:30 - 2016-09-07 06:53 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2017-03-31 02:30 - 2016-09-07 06:43 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2017-03-31 02:30 - 2016-09-07 06:39 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2017-03-31 02:30 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2017-03-31 02:30 - 2016-08-06 05:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-03-31 02:30 - 2016-08-06 05:48 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-31 02:30 - 2016-08-06 05:47 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-03-31 02:30 - 2016-08-06 05:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-03-31 02:30 - 2016-08-06 05:43 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2017-03-31 02:30 - 2016-08-06 05:40 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2017-03-31 02:30 - 2016-08-06 05:40 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2017-03-31 02:30 - 2016-08-06 05:35 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2017-03-31 02:30 - 2016-08-06 05:23 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2017-03-31 02:30 - 2016-08-02 10:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2017-03-31 02:30 - 2016-08-02 10:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-03-31 02:30 - 2016-08-02 06:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2017-03-31 02:30 - 2016-07-22 03:25 - 00389000 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2017-03-31 02:30 - 2016-07-16 04:29 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\CspCellularSettings.dll
2017-03-31 02:30 - 2016-07-16 04:28 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAPNCsp.dll
2017-03-31 02:30 - 2016-07-16 04:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CfgSPCellular.dll
2017-03-31 02:29 - 2017-03-04 09:25 - 01117024 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2017-03-31 02:29 - 2017-03-04 09:24 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2017-03-31 02:29 - 2017-03-04 09:20 - 00379744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2017-03-31 02:29 - 2017-03-04 09:20 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2017-03-31 02:29 - 2017-03-04 09:09 - 00178520 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-03-31 02:29 - 2017-03-04 09:08 - 00509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-03-31 02:29 - 2017-03-04 09:07 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 00110944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvsocket.sys
2017-03-31 02:29 - 2017-03-04 09:07 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
2017-03-31 02:29 - 2017-03-04 09:03 - 00038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2017-03-31 02:29 - 2017-03-04 09:01 - 00201568 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-03-31 02:29 - 2017-03-04 09:01 - 00128648 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2017-03-31 02:29 - 2017-03-04 08:58 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2017-03-31 02:29 - 2017-03-04 08:57 - 00372432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-03-31 02:29 - 2017-03-04 08:37 - 00025088 _____ C:\Windows\system32\GamePanelExternalHook.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2017-03-31 02:29 - 2017-03-04 08:35 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmclr.sys
2017-03-31 02:29 - 2017-03-04 08:33 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothDesktopHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\XInputUap.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2017-03-31 02:29 - 2017-03-04 08:31 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2017-03-31 02:29 - 2017-03-04 08:31 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-03-31 02:29 - 2017-03-04 08:29 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:29 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2017-03-31 02:29 - 2017-03-04 08:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00450048 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2017-03-31 02:29 - 2017-03-04 08:25 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 01092096 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationFrame.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 03753984 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:21 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2017-03-31 02:29 - 2017-03-04 08:21 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2017-03-31 02:29 - 2017-03-04 08:20 - 00893952 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2017-03-31 02:29 - 2017-03-04 08:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2017-03-31 02:29 - 2017-03-04 08:19 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-03-31 02:29 - 2017-03-04 08:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2017-03-31 02:29 - 2017-03-04 08:18 - 00320512 _____ (Microsoft Corporation) C:\Windows\regedit.exe
2017-03-31 02:29 - 2017-03-04 08:17 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-03-31 02:29 - 2017-03-04 08:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2017-03-31 02:29 - 2017-03-04 08:16 - 00583168 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2017-03-31 02:29 - 2017-03-04 08:15 - 01443328 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2017-03-31 02:29 - 2017-03-04 08:14 - 01562112 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2017-03-31 02:29 - 2017-03-04 08:14 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2017-03-31 02:29 - 2017-03-04 08:14 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-03-31 02:29 - 2017-03-04 08:13 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2017-03-31 02:29 - 2017-03-04 08:12 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2017-03-31 02:29 - 2017-03-04 08:11 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2017-03-31 02:29 - 2017-03-04 08:11 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2017-03-31 02:29 - 2017-03-04 08:10 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-03-31 02:29 - 2017-03-04 08:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-03-31 02:29 - 2017-03-04 08:09 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2017-03-31 02:29 - 2017-03-04 08:08 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2017-03-31 02:29 - 2017-03-04 08:07 - 02512384 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2017-03-31 02:29 - 2017-03-04 08:07 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2017-03-31 02:29 - 2017-03-04 08:06 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-03-31 02:29 - 2017-03-04 08:06 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2017-03-31 02:29 - 2017-03-04 08:05 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-03-31 02:29 - 2016-12-21 10:08 - 00245600 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2017-03-31 02:29 - 2016-12-21 10:08 - 00136032 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
2017-03-31 02:29 - 2016-12-21 09:37 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-03-31 02:29 - 2016-12-21 09:09 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
2017-03-31 02:29 - 2016-12-14 07:33 - 01054048 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2017-03-31 02:29 - 2016-12-14 07:33 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
2017-03-31 02:29 - 2016-12-14 07:33 - 00190816 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
2017-03-31 02:29 - 2016-12-14 07:17 - 00319288 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-03-31 02:29 - 2016-12-14 07:14 - 00089416 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2017-03-31 02:29 - 2016-12-14 06:46 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-31 02:29 - 2016-12-14 06:43 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-03-31 02:29 - 2016-12-14 06:42 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2017-03-31 02:29 - 2016-12-14 06:36 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-03-31 02:29 - 2016-12-14 06:35 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2017-03-31 02:29 - 2016-12-09 11:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2017-03-31 02:29 - 2016-12-09 11:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2017-03-31 02:29 - 2016-11-11 12:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2017-03-31 02:29 - 2016-11-11 12:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2017-03-31 02:29 - 2016-11-11 11:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2017-03-31 02:29 - 2016-11-11 11:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2017-03-31 02:29 - 2016-11-11 11:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2017-03-31 02:29 - 2016-11-11 11:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-03-31 02:29 - 2016-11-11 11:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2017-03-31 02:29 - 2016-11-11 11:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2017-03-31 02:29 - 2016-11-11 11:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2017-03-31 02:29 - 2016-11-11 11:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2017-03-31 02:29 - 2016-11-11 11:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-03-31 02:29 - 2016-11-11 11:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2017-03-31 02:29 - 2016-11-11 11:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2017-03-31 02:29 - 2016-11-11 11:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2017-03-31 02:29 - 2016-11-11 11:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2017-03-31 02:29 - 2016-11-11 11:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2017-03-31 02:29 - 2016-11-11 11:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2017-03-31 02:29 - 2016-11-11 11:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2017-03-31 02:29 - 2016-11-11 11:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2017-03-31 02:29 - 2016-11-11 11:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2017-03-31 02:29 - 2016-11-11 11:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2017-03-31 02:29 - 2016-11-02 13:02 - 00238056 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2017-03-31 02:29 - 2016-11-02 13:00 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-03-31 02:29 - 2016-11-02 12:32 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-03-31 02:29 - 2016-11-02 12:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2017-03-31 02:29 - 2016-11-02 12:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-31 02:29 - 2016-11-02 12:28 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2017-03-31 02:29 - 2016-11-02 12:27 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2017-03-31 02:29 - 2016-11-02 12:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2017-03-31 02:29 - 2016-11-02 12:22 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-03-31 02:29 - 2016-11-02 12:19 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2017-03-31 02:29 - 2016-11-02 12:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-03-31 02:29 - 2016-11-02 12:13 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2017-03-31 02:29 - 2016-10-15 05:56 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2017-03-31 02:29 - 2016-10-15 05:56 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2017-03-31 02:29 - 2016-10-15 05:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2017-03-31 02:29 - 2016-10-15 05:50 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2017-03-31 02:29 - 2016-10-15 05:37 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2017-03-31 02:29 - 2016-10-15 05:32 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-03-31 02:29 - 2016-10-05 12:33 - 00128864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-03-31 02:29 - 2016-10-05 12:13 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-03-31 02:29 - 2016-10-05 11:35 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-03-31 02:29 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-03-31 02:29 - 2016-10-05 11:31 - 00480768 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2017-03-31 02:29 - 2016-10-05 11:31 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-03-31 02:29 - 2016-10-05 11:24 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2017-03-31 02:29 - 2016-10-05 11:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2017-03-31 02:29 - 2016-09-15 19:29 - 00169056 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2017-03-31 02:29 - 2016-09-15 19:29 - 00127328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2017-03-31 02:29 - 2016-09-15 19:29 - 00074080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys
2017-03-31 02:29 - 2016-09-15 19:07 - 00128864 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2017-03-31 02:29 - 2016-09-15 18:46 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2017-03-31 02:29 - 2016-09-15 18:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
2017-03-31 02:29 - 2016-09-15 18:41 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-03-31 02:29 - 2016-09-15 18:41 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2017-03-31 02:29 - 2016-09-15 18:40 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-03-31 02:29 - 2016-09-15 18:38 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\rshx32.dll
2017-03-31 02:29 - 2016-09-15 18:33 - 00966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-03-31 02:29 - 2016-09-15 18:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2017-03-31 02:29 - 2016-09-15 18:27 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2017-03-31 02:29 - 2016-09-15 18:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2017-03-31 02:29 - 2016-09-15 18:24 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-03-31 02:29 - 2016-09-15 18:23 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2017-03-31 02:29 - 2016-09-07 06:56 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\XamlTileRender.dll
2017-03-31 02:29 - 2016-09-07 06:46 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-03-31 02:29 - 2016-09-07 06:35 - 00650240 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2017-03-31 02:29 - 2016-09-07 06:33 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-31 02:29 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2017-03-31 02:29 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2017-03-31 02:29 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2017-03-31 02:29 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2017-03-31 02:29 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2017-03-31 02:29 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2017-03-31 02:29 - 2016-08-19 03:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2017-03-31 02:29 - 2016-08-06 06:31 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2017-03-31 02:29 - 2016-08-06 06:29 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2017-03-31 02:29 - 2016-08-06 06:23 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-31 02:29 - 2016-08-06 06:16 - 00073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2017-03-31 02:29 - 2016-08-06 06:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-03-31 02:29 - 2016-08-06 06:16 - 00020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2017-03-31 02:29 - 2016-08-06 05:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-03-31 02:29 - 2016-08-06 05:48 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2017-03-31 02:29 - 2016-08-06 05:34 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2017-03-31 02:29 - 2016-08-06 05:29 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-03-31 02:29 - 2016-08-06 05:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2017-03-31 02:29 - 2016-08-05 11:14 - 01066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2017-03-31 02:29 - 2016-08-05 11:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2017-03-31 02:29 - 2016-08-05 11:05 - 00665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2017-03-31 02:29 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2017-03-31 02:29 - 2016-08-05 10:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2017-03-31 02:29 - 2016-08-05 10:22 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2017-03-31 02:29 - 2016-08-05 10:08 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2017-03-31 02:29 - 2016-08-02 10:44 - 00114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2017-03-31 02:29 - 2016-05-29 20:38 - 08886976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSetup.exe
2017-03-31 02:15 - 2016-12-21 09:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-31 02:15 - 2016-12-21 06:44 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-03-31 01:24 - 2017-03-31 01:24 - 01544192 _____ C:\Users\Margo\Downloads\Dot4x64.msi
2017-03-31 01:14 - 2017-03-31 01:14 - 00000000 ____D C:\Users\Margo\AppData\Roaming\vlc
2017-03-31 01:13 - 2017-03-31 01:13 - 00001139 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-03-31 01:13 - 2017-03-31 01:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-03-31 01:13 - 2017-03-31 01:13 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-03-31 01:11 - 2017-03-31 01:11 - 31457544 _____ C:\Users\Margo\Downloads\vlc-2.2.4-win32.exe
2017-03-31 01:11 - 2017-03-31 01:11 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Mozilla
2017-03-31 01:11 - 2017-03-31 01:11 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Updater
2017-03-31 01:11 - 2017-03-31 01:11 - 00000000 ____D C:\Program Files (x86)\VLC Updater
2017-03-31 01:06 - 2017-03-31 01:07 - 89137031 _____ C:\Users\Margo\Downloads\Windows6.3-KB2835517-x64.msu
2017-03-31 00:09 - 2017-03-31 02:05 - 00513192 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-03-31 00:06 - 2017-03-31 13:02 - 00000000 ____D C:\Users\Margo\AppData\Local\NVIDIA Corporation
2017-03-31 00:05 - 2017-03-31 00:05 - 00019696 _____ C:\Windows\system32\results.xml
2017-03-31 00:04 - 2017-03-31 00:04 - 00000451 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2017-03-31 00:02 - 2017-03-31 00:02 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2017-03-30 23:59 - 2017-03-31 00:01 - 138221080 _____ (Dell Inc.) C:\Users\Margo\Downloads\Video_Driver_YFH2F_WN32_10.18.10.4338_A01.EXE
2017-03-30 23:59 - 2017-03-30 23:59 - 01414648 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-03-30 23:59 - 2017-03-30 23:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-03-30 23:59 - 2017-03-30 23:59 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Intel Corporation
2017-03-30 23:57 - 2017-03-30 23:58 - 24001184 _____ (Dell Inc.) C:\Users\Margo\Downloads\5460_Serial-ATA_Driver_NGJJW_WN_12.8.2.1000_A00.EXE
2017-03-30 23:57 - 2015-05-29 10:14 - 00886528 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2017-03-30 23:57 - 2015-05-29 10:14 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2017-03-30 23:56 - 2017-03-30 23:56 - 30744736 _____ (Dell Inc.) C:\Users\Margo\Downloads\Network_Driver_3C3C6_WN32_10.1.505.2015_A00.EXE
2017-03-30 23:56 - 2017-03-30 23:56 - 00000000 ____D C:\Windows\Dell
2017-03-30 23:56 - 2017-03-30 23:01 - 00000000 ____D C:\Windows\Panther
2017-03-30 23:55 - 2017-03-30 23:55 - 70418432 _____ (Dell Inc.) C:\Users\Margo\Downloads\Input_Driver_Y9JHW_WN32_10.1200.101.202_A00.EXE
2017-03-30 23:54 - 2017-03-30 23:59 - 00000000 ____D C:\ProgramData\Intel
2017-03-30 23:54 - 2017-03-30 23:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2017-03-30 23:54 - 2013-09-03 16:52 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-03-30 23:54 - 2013-09-03 16:52 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2017-03-30 23:54 - 2013-09-03 16:52 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2017-03-30 23:53 - 2017-03-30 23:54 - 70061728 _____ (Dell Inc.) C:\Users\Margo\Downloads\Chipset_Driver_CN7W1_WN_9.5.14.1724_A01.EXE
2017-03-30 23:51 - 2017-04-02 00:24 - 00000000 ____D C:\Users\Margo\AppData\Local\CrashDumps
2017-03-30 23:50 - 2017-03-30 23:57 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-03-30 23:50 - 2017-03-30 23:51 - 16555872 _____ (Dell Inc.) C:\Users\Margo\Downloads\Chipset_Driver_2WGG0_WN32_10.1.1.7_A00.EXE
2017-03-30 23:50 - 2017-03-30 23:50 - 00000000 ____D C:\Dell
2017-03-30 23:50 - 2015-05-29 14:35 - 00752856 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys
2017-03-30 23:50 - 2015-05-15 16:04 - 00313048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2017-03-30 23:50 - 2015-05-15 15:46 - 00301784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2017-03-30 23:50 - 2015-05-15 15:14 - 00365272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsPStor.sys
2017-03-30 23:50 - 2014-10-20 17:50 - 00083160 _____ (Realtek Semiconductor.) C:\Windows\system32\RtCRX64.dll
2017-03-30 23:50 - 2014-01-27 13:39 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2017-03-30 23:49 - 2017-03-30 23:49 - 15265008 _____ C:\Users\Margo\Downloads\CardReader_Driver_Realtek_A00_Win1064_Win1032-Setup_ZPE.exe
2017-03-30 23:48 - 2017-03-30 23:57 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-30 23:48 - 2017-03-30 23:48 - 00001705 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDT Audio Control Panel.lnk
2017-03-30 23:48 - 2017-03-30 23:48 - 00000000 ____D C:\ProgramData\Dell
2017-03-30 23:48 - 2017-03-30 23:48 - 00000000 ____D C:\Program Files\IDT
2017-03-30 23:48 - 2012-09-06 08:10 - 06100480 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 02188800 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 01821184 _____ (IDT, Inc.) C:\Windows\system32\IDTNC64.cpl
2017-03-30 23:48 - 2012-09-06 08:10 - 00672256 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 00542208 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
2017-03-30 23:48 - 2012-09-06 08:10 - 00499200 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 00255488 _____ (IDT, Inc.) C:\Windows\system32\st646426.dll
2017-03-30 23:48 - 2012-04-30 20:53 - 01008472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2017-03-30 23:48 - 2012-03-31 06:52 - 00849434 _____ C:\Windows\system32\W92HDM6BSKULL.mps
2017-03-30 23:48 - 2012-02-22 00:14 - 00188383 _____ C:\Windows\system32\W92HDM14.mps
2017-03-30 23:48 - 2012-01-31 20:29 - 00576856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2017-03-30 23:48 - 2012-01-05 20:28 - 02603864 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2017-03-30 23:48 - 2012-01-05 20:28 - 01806168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioMeters64.exe
2017-03-30 23:48 - 2012-01-05 20:28 - 01468760 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioIDT.dll
2017-03-30 23:48 - 2011-09-03 23:42 - 00339288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO3064.dll
2017-03-30 23:48 - 2011-04-20 22:29 - 00874496 _____ (Creative Technology Ltd.) C:\Windows\system32\imapo64.dll
2017-03-30 23:48 - 2011-04-20 22:28 - 00734720 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\IMAPO32.dll
2017-03-30 23:48 - 2011-04-20 22:28 - 00734720 _____ (Creative Technology Ltd.) C:\Windows\system32\imapo32.dll
2017-03-30 23:48 - 2010-10-15 08:56 - 00390656 _____ (Creative Technology Ltd.) C:\Windows\system32\imthx64.dll
2017-03-30 23:47 - 2017-03-30 23:48 - 38496800 _____ (Dell Inc.) C:\Users\Margo\Downloads\5460_Audio_Driver_HCMKP_WN_6.10.0.6426_A00.EXE
2017-03-30 23:43 - 2017-03-30 23:44 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-03-30 23:43 - 2017-03-30 23:43 - 00001269 _____ C:\Users\Margo\Desktop\CrystalDiskInfo.lnk
2017-03-30 23:43 - 2017-03-30 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-03-30 23:42 - 2017-03-30 23:42 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-30 23:42 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-30 23:42 - 2017-03-17 03:01 - 01882168 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01470520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-03-30 23:42 - 2017-01-26 02:13 - 00103936 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-03-30 23:42 - 2017-01-26 02:12 - 00326656 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-03-30 23:42 - 2017-01-26 02:09 - 00322560 _____ C:\Windows\system32\vulkan-1.dll
2017-03-30 23:42 - 2017-01-26 02:09 - 00118272 _____ C:\Windows\system32\vulkaninfo.exe
2017-03-30 23:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-03-30 23:41 - 2017-04-04 17:01 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-30 23:41 - 2017-03-30 23:42 - 03958792 _____ (Crystal Dew World ) C:\Users\Margo\Downloads\crystaldiskinfo7_0_2-en.exe
2017-03-30 23:41 - 2017-03-17 03:01 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-03-30 23:39 - 2017-03-30 23:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-30 23:36 - 2017-03-17 22:04 - 00047032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 40190400 _____ C:\Windows\system32\nvcompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 34991672 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 28254264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 19006832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 14674896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 11122728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 11019888 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 09306312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 08990256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 04078008 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 03597456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 03169848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 02716096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437892.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437892.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01052096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00991288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00959424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00946456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00910784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00721952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00687408 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00609728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00573632 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00447984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00059448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-03-30 23:36 - 2017-03-17 03:01 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-03-30 23:33 - 2017-03-30 23:33 - 00000000 ____D C:\NVIDIA
2017-03-30 23:29 - 2017-03-30 23:33 - 405596328 _____ (NVIDIA Corporation) C:\Users\Margo\Downloads\378.92-notebook-win10-64bit-international-whql.exe
2017-03-30 23:26 - 2017-03-30 23:26 - 60602643 _____ C:\Users\Margo\Downloads\NVIDIA-Solaris-x86-331.17.run
2017-03-30 23:25 - 2017-03-30 23:25 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Macromedia
2017-03-30 23:18 - 2017-03-30 23:18 - 00000000 ____D C:\Users\Margo\AppData\Local\MicrosoftEdge
2017-03-30 23:17 - 2017-03-30 23:17 - 00000000 ____D C:\Users\Margo\AppData\Local\NVIDIA
2017-03-30 23:14 - 2017-04-02 23:09 - 00000000 __SHD C:\Users\Margo\IntelGraphicsProfiles
2017-03-30 23:14 - 2017-03-31 00:02 - 00000000 ____D C:\Program Files (x86)\Intel
2017-03-30 23:14 - 2017-03-31 00:01 - 00000000 ____D C:\Intel
2017-03-30 23:14 - 2017-03-30 23:58 - 00000000 ____D C:\Program Files\Intel
2017-03-30 23:12 - 2017-03-31 04:14 - 00000000 ____D C:\Program Files\DellTPad
2017-03-30 23:12 - 2017-03-30 23:50 - 00000000 ____D C:\Windows\SysWOW64\sda
2017-03-30 23:12 - 2017-03-30 23:12 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2017-03-30 23:11 - 2017-03-31 13:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-17 03:01 - 00512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 02477504 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00549944 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-03-30 23:11 - 2017-03-16 11:39 - 07813427 _____ C:\Windows\system32\nvcoproc.bin
2017-03-30 23:09 - 2017-04-02 23:12 - 01570854 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-30 23:09 - 2017-03-30 23:09 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-30 23:09 - 2017-03-30 23:09 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Skype
2017-03-30 23:09 - 2017-03-30 23:09 - 00000000 ____D C:\Users\Margo\AppData\Local\Comms
2017-03-30 23:08 - 2017-04-02 23:19 - 00000000 ___RD C:\Users\Margo\OneDrive
2017-03-30 23:08 - 2017-03-30 23:09 - 00002383 _____ C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-30 23:08 - 2017-03-30 23:08 - 00000000 ____D C:\Users\Margo\AppData\Local\NetworkTiles
2017-03-30 23:08 - 2017-03-30 23:08 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-03-30 23:06 - 2017-04-03 03:02 - 00000000 ____D C:\Users\Margo\AppData\Local\Packages
2017-03-30 23:06 - 2017-03-31 04:17 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-30 23:06 - 2017-03-30 23:21 - 00000000 ____D C:\Users\Margo\AppData\Local\ConnectedDevicesPlatform
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Adobe
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\VirtualStore
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\TileDataLayer
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\Publishers
2017-03-30 23:05 - 2017-03-31 15:45 - 00000000 ____D C:\Users\Margo
2017-03-30 23:05 - 2017-03-30 23:05 - 00000020 ___SH C:\Users\Margo\ntuser.ini
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Vorlagen
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Startmenü
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Netzwerkumgebung
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Lokale Einstellungen
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Eigene Dateien
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Druckumgebung
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Videos
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Musik
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Bilder
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Local\Verlauf
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Local\Anwendungsdaten
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Anwendungsdaten
2017-03-30 23:04 - 2017-03-30 23:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Windows\CSC
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2017-03-30 23:04 - 2017-03-04 09:09 - 02717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-03-30 23:02 - 2017-03-30 23:02 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Dokumente
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Dokumente und Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 ____D C:\Users\defaultuser0
2017-03-30 22:58 - 2017-03-30 22:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-03-30 22:58 - 2017-03-30 22:58 - 00000000 ____D C:\ProgramData\USOShared
2017-03-30 22:57 - 2017-04-04 16:58 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-03-30 22:57 - 2017-04-02 23:07 - 00335472 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-30 22:57 - 2017-04-02 23:07 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-30 22:57 - 2017-03-30 22:57 - 00000000 ____D C:\Windows\ServiceProfiles

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-04 17:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-04-04 17:01 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-04-03 21:56 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-03 21:56 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-04-03 00:27 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2017-04-02 23:14 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\NDF
2017-04-02 23:12 - 2016-07-17 00:51 - 00565140 _____ C:\Windows\system32\perfh007.dat
2017-04-02 23:12 - 2016-07-17 00:51 - 00110128 _____ C:\Windows\system32\perfc007.dat
2017-04-02 23:06 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-04-01 22:30 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-01 22:08 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-04-01 00:19 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-04-01 00:19 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2017-03-31 04:12 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-03-31 04:11 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\F12
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\dsc
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\PrintDialog
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\setup
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\oobe
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\migwiz
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lv-LV
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lt-LT
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\et-EE
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\es-MX
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\en-GB
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\bcastdvr
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Defender
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Sysprep
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Dism
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\servicing
2017-03-31 04:10 - 2016-07-16 13:47 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2017-03-31 03:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\appcompat
2017-03-31 01:15 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2017-03-30 23:56 - 2016-07-16 13:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-03-30 23:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Help
2017-03-30 23:04 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\spool
2017-03-30 23:04 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-03-30 23:02 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2017-03-30 22:58 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\MiracastView
2017-03-30 22:58 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2017-03-30 22:58 - 2016-07-16 08:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-03-17 03:01 - 2016-07-17 00:57 - 00418752 _____ (Khronos Group) C:\Windows\SysWOW64\opencl.dll
2017-03-17 03:01 - 2015-07-23 04:02 - 00043636 _____ C:\Windows\system32\nvinfo.pb
2017-03-10 07:17 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-10 07:17 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-03-30 22:57

==================== Ende von FRST.txt ============================

Kisska · 04.04.2017, 18:59

2) Addition.txt

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Margo (04-04-2017 17:23:14)
Gestartet von C:\Users\Margo\Desktop
Windows 10 Pro Version 1607 (X64) (2017-03-30 21:04:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2190986405-3282524184-141134257-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2190986405-3282524184-141134257-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2190986405-3282524184-141134257-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-2190986405-3282524184-141134257-501 - Limited - Disabled)
Margo (S-1-5-21-2190986405-3282524184-141134257-1001 - Administrator - Enabled) => C:\Users\Margo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ansel (Version: 378.92 - NVIDIA Corporation) Hidden
CrystalDiskInfo 7.0.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.2 - Crystal Dew World)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 10.1200.101.203 - ALPS ELECTRIC CO., LTD.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6426.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4338 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.7766.2060 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2190986405-3282524184-141134257-1001\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation)
NVIDIA Grafiktreiber 378.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.92 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.16.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.88 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 10.1.505.2015 - Realtek)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VLC Updater (HKLM-x32\...\VLC Updater) (Version: 1.1 - VLC Updater) <==== ACHTUNG
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2190986405-3282524184-141134257-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {193E138C-05B2-42A5-A4D2-96042F0A297B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-17] (NVIDIA Corporation)
Task: {34FF026E-B8BD-40D6-BC7E-AFDF87D431BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-04-01] (Microsoft Corporation)
Task: {3D2F15C0-9B2C-4608-AC47-4265C6D28FBE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-02-18] (Microsoft Corporation)
Task: {54B14175-5E3F-44DF-B22A-F6EB83DC5B0C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-03-17] (NVIDIA Corporation)
Task: {55808C77-3A86-43E6-B807-264431358B8B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-17] (NVIDIA Corporation)
Task: {5F2C5C06-4C8D-47C8-BE83-8743B56EBC57} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-17] (NVIDIA Corporation)
Task: {7916B9CC-3BD7-41F6-85A4-060523332270} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-03-17] (NVIDIA Corporation)
Task: {96F5F276-889D-45D0-9548-CA94F3008C6E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-17] (NVIDIA Corporation)
Task: {BA966BEE-DA38-4D86-BD69-CE7EF3437061} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-02-18] (Microsoft Corporation)
Task: {C275FD8B-5546-434D-8157-63956DBFE43C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-04-01] (Microsoft Corporation)
Task: {DC249202-80F0-49B0-885A-93772B98912A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-03-17] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2017-03-31 02:31 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-30 23:45 - 2017-03-30 23:45 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2017-03-30 23:38 - 2017-03-30 23:39 - 10650112 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.79.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-03-30 23:38 - 2017-03-30 23:39 - 02653184 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.79.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-03-30 23:38 - 2017-03-30 23:39 - 00761344 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.79.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll
2017-04-03 21:56 - 2017-04-03 21:56 - 00015872 _____ () C:\Program Files\WindowsApps\Microsoft.Getstarted_5.0.13.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
2017-04-03 21:56 - 2017-04-03 21:56 - 06557696 _____ () C:\Program Files\WindowsApps\Microsoft.Getstarted_5.0.13.0_x64__8wekyb3d8bbwe\WhatsNew.Store.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 04046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll
2017-03-31 02:30 - 2017-03-04 08:04 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2017-03-30 23:54 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 03776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2017-03-30 23:42 - 2017-03-17 03:01 - 02443320 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00543288 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00468536 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2190986405-3282524184-141134257-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{4243D4F9-0721-46BC-99DD-210190F69E15}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{3C3732B5-1ECF-4555-8CB4-F9EFBD40375E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{FF1AC755-40A8-4E8C-95EF-F9A9979DA684}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{223ED16B-7242-460C-AECD-10BEC54EC253}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{75EB0515-4435-4B99-A12D-7F5F973538F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FE80A459-5ABC-424A-ACB2-D49F4B3DBB3D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{C54B46DC-9215-4C48-A9CB-159C24C82F4A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{BEBB8E01-A75B-4FF7-9055-BC1F89BCAD99}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{CC4BC085-8A8E-48F5-BABF-16C269806A11}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{A9053800-C716-460A-BFCE-35AC238B4511}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

==================== Wiederherstellungspunkte =========================

30-03-2017 23:39:35 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
01-04-2017 23:01:46 Windows-Sicherung
02-04-2017 00:18:15 Windows-Sicherung
02-04-2017 00:24:01 Windows-Sicherung
02-04-2017 00:55:10 Windows-Sicherung
02-04-2017 01:06:31 Windows-Sicherung

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/04/2017 05:01:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/03/2017 03:23:53 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (04/03/2017 03:24:29 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/02/2017 03:19:50 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (04/02/2017 02:06:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/02/2017 01:11:39 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:09:41 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:09:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:06:31 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:06:27 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (04/04/2017 12:55:01 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:20 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 01:56:19 PM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/03/2017 03:27:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/02/2017 11:09:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
  Date: 2017-04-03 00:04:17.615
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-01 00:15:48.931
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 8049.51 MB
Verfügbarer physikalischer RAM: 4456.84 MB
Summe virtueller Speicher: 9969.51 MB
Verfügbarer virtueller Speicher: 5405.52 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.96 GB) (Free:898.82 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:625.78 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7981A8E6)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 84F4EB8A)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

3) TDSSKiller.exe - Teil 1

Code:

ATTFilter

18:01:14.0032 0x22b8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
18:01:14.0032 0x22b8  UEFI system
18:01:43.0780 0x22b8  ============================================================
18:01:43.0780 0x22b8  Current date / time: 2017/04/04 18:01:43.0780
18:01:43.0780 0x22b8  SystemInfo:
18:01:43.0780 0x22b8  
18:01:43.0780 0x22b8  OS Version: 10.0.14393 ServicePack: 0.0
18:01:43.0780 0x22b8  Product type: Workstation
18:01:43.0780 0x22b8  ComputerName: MARGO-PC
18:01:43.0780 0x22b8  UserName: Margo
18:01:43.0780 0x22b8  Windows directory: C:\Windows
18:01:43.0780 0x22b8  System windows directory: C:\Windows
18:01:43.0780 0x22b8  Running under WOW64
18:01:43.0780 0x22b8  Processor architecture: Intel x64
18:01:43.0780 0x22b8  Number of processors: 8
18:01:43.0780 0x22b8  Page size: 0x1000
18:01:43.0780 0x22b8  Boot type: Normal boot
18:01:43.0780 0x22b8  CodeIntegrityOptions = 0x00000001
18:01:43.0780 0x22b8  ============================================================
18:01:44.0060 0x22b8  KLMD registered as C:\Windows\system32\drivers\23232340.sys
18:01:44.0060 0x22b8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.953, osProperties = 0x19
18:01:44.0844 0x22b8  System UUID: {53304D77-40D5-AB33-A120-4D4044BCA2DB}
18:01:45.0390 0x22b8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:01:45.0755 0x22b8  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:01:45.0804 0x22b8  ============================================================
18:01:45.0804 0x22b8  \Device\Harddisk0\DR0:
18:01:45.0804 0x22b8  GPT partitions:
18:01:45.0804 0x22b8  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {1A1AD3B8-77F6-48F0-917A-7F688EA803EF}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xE1000
18:01:45.0804 0x22b8  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {CC624C7F-443D-4CF3-ABA1-DC81BEACF090}, Name: EFI system partition, StartLBA 0xE1800, BlocksNum 0x32000
18:01:45.0804 0x22b8  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {2EEFF33D-71D7-4CE7-9486-A6D2EAB473C9}, Name: Microsoft reserved partition, StartLBA 0x113800, BlocksNum 0x8000
18:01:45.0804 0x22b8  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {85C50018-7C27-4039-87AC-D54918AB73DE}, Name: Basic data partition, StartLBA 0x11B800, BlocksNum 0x745EB000
18:01:45.0804 0x22b8  MBR partitions:
18:01:45.0804 0x22b8  \Device\Harddisk1\DR1:
18:01:45.0817 0x22b8  MBR partitions:
18:01:45.0817 0x22b8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
18:01:45.0817 0x22b8  ============================================================
18:01:45.0821 0x22b8  C: <-> \Device\Harddisk0\DR0\Partition4
18:01:45.0837 0x22b8  D: <-> \Device\Harddisk1\DR1\Partition1
18:01:45.0837 0x22b8  ============================================================
18:01:45.0837 0x22b8  Initialize success
18:01:45.0837 0x22b8  ============================================================
18:02:37.0452 0x29fc  ============================================================
18:02:37.0452 0x29fc  Scan started
18:02:37.0452 0x29fc  Mode: Manual; SigCheck; TDLFS; 
18:02:37.0452 0x29fc  ============================================================
18:02:37.0452 0x29fc  KSN ping started
18:02:37.0630 0x29fc  KSN ping finished: true
18:02:39.0740 0x29fc  ================ Scan system memory ========================
18:02:39.0740 0x29fc  System memory - ok
18:02:39.0740 0x29fc  ================ Scan services =============================
18:02:39.0878 0x29fc  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
18:02:39.0956 0x29fc  1394ohci - ok
18:02:39.0956 0x29fc  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\Windows\system32\drivers\3ware.sys
18:02:39.0979 0x29fc  3ware - ok
18:02:40.0026 0x29fc  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:02:40.0042 0x29fc  ACPI - ok
18:02:40.0057 0x29fc  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\Windows\System32\drivers\AcpiDev.sys
18:02:40.0078 0x29fc  AcpiDev - ok
18:02:40.0095 0x29fc  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
18:02:40.0095 0x29fc  acpiex - ok
18:02:40.0111 0x29fc  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
18:02:40.0126 0x29fc  acpipagr - ok
18:02:40.0142 0x29fc  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
18:02:40.0157 0x29fc  AcpiPmi - ok
18:02:40.0177 0x29fc  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
18:02:40.0179 0x29fc  acpitime - ok
18:02:40.0211 0x29fc  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS
18:02:40.0242 0x29fc  ADP80XX - ok
18:02:40.0282 0x29fc  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD             C:\Windows\system32\drivers\afd.sys
18:02:40.0313 0x29fc  AFD - ok
18:02:40.0329 0x29fc  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys
18:02:40.0344 0x29fc  ahcache - ok
18:02:40.0360 0x29fc  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll
18:02:40.0379 0x29fc  AJRouter - ok
18:02:40.0398 0x29fc  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\Windows\System32\alg.exe
18:02:40.0398 0x29fc  ALG - ok
18:02:40.0445 0x29fc  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
18:02:40.0461 0x29fc  AmdK8 - ok
18:02:40.0461 0x29fc  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
18:02:40.0480 0x29fc  AmdPPM - ok
18:02:40.0483 0x29fc  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
18:02:40.0483 0x29fc  amdsata - ok
18:02:40.0498 0x29fc  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
18:02:40.0514 0x29fc  amdsbs - ok
18:02:40.0514 0x29fc  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\Windows\system32\drivers\amdxata.sys
18:02:40.0514 0x29fc  amdxata - ok
18:02:40.0583 0x29fc  [ E39913AE643DCCFEFD7E8F9B9098C343, F42FAC694B58B30F63CF1CB983DF046D9CD30B4A6681A2F1086AC50B2151443A ] ApfiltrService  C:\Windows\system32\DRIVERS\Apfiltr.sys
18:02:40.0614 0x29fc  ApfiltrService - ok
18:02:40.0645 0x29fc  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\Windows\system32\drivers\appid.sys
18:02:40.0645 0x29fc  AppID - ok
18:02:40.0685 0x29fc  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
18:02:40.0701 0x29fc  AppIDSvc - ok
18:02:40.0717 0x29fc  [ 79A87DD43331290A276C02DC396BF530, D0781DC027EE60C94831A2C9C3DD741F8F2100A253CD847E7FCFA59919014278 ] Appinfo         C:\Windows\System32\appinfo.dll
18:02:40.0732 0x29fc  Appinfo - ok
18:02:40.0732 0x29fc  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\Windows\system32\drivers\applockerfltr.sys
18:02:40.0764 0x29fc  applockerfltr - ok
18:02:40.0801 0x29fc  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt         C:\Windows\System32\appmgmts.dll
18:02:40.0817 0x29fc  AppMgmt - ok
18:02:40.0848 0x29fc  [ 32155E028491267CF2DB6085A0B7E359, 562831841293E4849CD01992DECE39B9B3C0835DCD352994CA2E2FE1C76A7CB3 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
18:02:40.0886 0x29fc  AppReadiness - ok
18:02:40.0917 0x29fc  [ 99CA3E622070FDBD7B75EB7E86B2DE40, 12BDD092667250EBC99B4D597897C1B2C83115CD83ECCDEAC36B2D9C9BEA77B6 ] AppVClient      C:\Windows\system32\AppVClient.exe
18:02:40.0933 0x29fc  AppVClient - ok
18:02:40.0964 0x29fc  [ B66ED2CB37F7E4696A51612AFBA08834, 70BA67AF7F1290E3145B873B53516F138E50D8AAC80CD00CBA66467ABC6643CB ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
18:02:40.0986 0x29fc  AppvStrm - ok
18:02:41.0018 0x29fc  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr       C:\Windows\system32\drivers\AppvVemgr.sys
18:02:41.0033 0x29fc  AppvVemgr - ok
18:02:41.0033 0x29fc  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs         C:\Windows\system32\drivers\AppvVfs.sys
18:02:41.0049 0x29fc  AppvVfs - ok
18:02:41.0133 0x29fc  [ 465CD915B245BB6B788A38BE19D47950, 36FA30C67D581FF158EF1D621938CF93102110635AC9298C6E002E7B87900EBD ] AppXSvc         C:\Windows\system32\appxdeploymentserver.dll
18:02:41.0203 0x29fc  AppXSvc - ok
18:02:41.0218 0x29fc  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
18:02:41.0234 0x29fc  arcsas - ok
18:02:41.0265 0x29fc  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
18:02:41.0265 0x29fc  AsyncMac - ok
18:02:41.0287 0x29fc  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\Windows\system32\drivers\atapi.sys
18:02:41.0287 0x29fc  atapi - ok
18:02:41.0318 0x29fc  [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
18:02:41.0334 0x29fc  AudioEndpointBuilder - ok
18:02:41.0365 0x29fc  [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv        C:\Windows\System32\Audiosrv.dll
18:02:41.0403 0x29fc  Audiosrv - ok
18:02:41.0434 0x29fc  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
18:02:41.0434 0x29fc  AxInstSV - ok
18:02:41.0487 0x29fc  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
18:02:41.0503 0x29fc  b06bdrv - ok
18:02:41.0519 0x29fc  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
18:02:41.0519 0x29fc  BasicDisplay - ok
18:02:41.0534 0x29fc  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys
18:02:41.0550 0x29fc  BasicRender - ok
18:02:41.0565 0x29fc  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\Windows\System32\drivers\bcmfn.sys
18:02:41.0565 0x29fc  bcmfn - ok
18:02:41.0565 0x29fc  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
18:02:41.0588 0x29fc  bcmfn2 - ok
18:02:41.0635 0x29fc  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\Windows\System32\bdesvc.dll
18:02:41.0650 0x29fc  BDESVC - ok
18:02:41.0666 0x29fc  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\Windows\system32\drivers\Beep.sys
18:02:41.0666 0x29fc  Beep - ok
18:02:41.0703 0x29fc  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\Windows\System32\bfe.dll
18:02:41.0734 0x29fc  BFE - ok
18:02:41.0788 0x29fc  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\Windows\System32\qmgr.dll
18:02:41.0819 0x29fc  BITS - ok
18:02:41.0850 0x29fc  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
18:02:41.0866 0x29fc  bowser - ok
18:02:41.0903 0x29fc  [ 6A15C5140B6F7D9479A32276AC2BA108, 0A8C6DB88148C6DB61226DD2FF816BDF3FED9E7A60EF17CCA17FA7D9EEC01C71 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
18:02:41.0935 0x29fc  BrokerInfrastructure - ok
18:02:41.0950 0x29fc  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\Windows\System32\browser.dll
18:02:41.0966 0x29fc  Browser - ok
18:02:42.0003 0x29fc  [ A70E09FD082BFA67BE085D41C8B6A85F, 1711163E7BE0DE83701A0293BF5D4D37AAD124D88F6FFA3FCC6CF0F3A7D3B78D ] BthA2DP         C:\Windows\system32\drivers\BthA2DP.sys
18:02:42.0019 0x29fc  BthA2DP - ok
18:02:42.0050 0x29fc  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
18:02:42.0066 0x29fc  BthAvrcpTg - ok
18:02:42.0087 0x29fc  [ 77630A51FAF6A07922FEE835F4DED8F6, E096A9DC12885FD19575346A9693A66D0DDFF96C3155AD2040F2BF4249D1D609 ] BthEnum         C:\Windows\System32\drivers\BthEnum.sys
18:02:42.0103 0x29fc  BthEnum - ok
18:02:42.0134 0x29fc  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys
18:02:42.0134 0x29fc  BthHFEnum - ok
18:02:42.0150 0x29fc  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
18:02:42.0150 0x29fc  bthhfhid - ok
18:02:42.0207 0x29fc  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
18:02:42.0223 0x29fc  BthHFSrv - ok
18:02:42.0254 0x29fc  [ 0AB691736D4D4029444AF62DE59CFD37, C1C22EFBF67331B87AB261BBF9813009257437BA02F728EC2DFA1A49ECC5FABF ] BthLEEnum       C:\Windows\System32\drivers\BthLEEnum.sys
18:02:42.0270 0x29fc  BthLEEnum - ok
18:02:42.0270 0x29fc  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
18:02:42.0287 0x29fc  BTHMODEM - ok
18:02:42.0291 0x29fc  [ 224BA1CB1F3C702F0D001D2AFC9793B1, F139F6F78C716E1167E16530AE31E4A26C2A69467BCB08A9A52A101B31DF7771 ] BthPan          C:\Windows\System32\drivers\bthpan.sys
18:02:42.0307 0x29fc  BthPan - ok
18:02:42.0338 0x29fc  [ 851ED52AE3E62CD5374BD4BBFF7A9DAB, 381281CB7D8FC4026092330B06E24BC84EEF79EE3C97E21900D950D7D9AB2FC3 ] BTHPORT         C:\Windows\System32\drivers\BTHport.sys
18:02:42.0369 0x29fc  BTHPORT - ok
18:02:42.0407 0x29fc  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv         C:\Windows\system32\bthserv.dll
18:02:42.0422 0x29fc  bthserv - ok
18:02:42.0454 0x29fc  [ DC5955E589C55E2313D69B64E1A183F3, 06D703246D0813DE53D62885C8B7381135783673FF4BDDD5CC38FEB54901BB76 ] BTHUSB          C:\Windows\System32\drivers\BTHUSB.sys
18:02:42.0454 0x29fc  BTHUSB - ok
18:02:42.0485 0x29fc  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
18:02:42.0491 0x29fc  buttonconverter - ok
18:02:42.0507 0x29fc  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\Windows\System32\drivers\capimg.sys
18:02:42.0523 0x29fc  CapImg - ok
18:02:42.0538 0x29fc  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
18:02:42.0554 0x29fc  cdfs - ok
18:02:42.0589 0x29fc  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
18:02:42.0607 0x29fc  CDPSvc - ok
18:02:42.0623 0x29fc  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
18:02:42.0654 0x29fc  CDPUserSvc - ok
18:02:42.0707 0x29fc  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\Windows\System32\drivers\cdrom.sys
18:02:42.0723 0x29fc  cdrom - ok
18:02:42.0754 0x29fc  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] CertPropSvc     C:\Windows\System32\certprop.dll
18:02:42.0770 0x29fc  CertPropSvc - ok
18:02:42.0828 0x29fc  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\Windows\system32\drivers\cht4sx64.sys
18:02:42.0843 0x29fc  cht4iscsi - ok
18:02:42.0902 0x29fc  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\Windows\System32\drivers\cht4vx64.sys
18:02:42.0965 0x29fc  cht4vbd - ok
18:02:42.0996 0x29fc  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\Windows\System32\drivers\circlass.sys
18:02:43.0012 0x29fc  circlass - ok
18:02:43.0043 0x29fc  [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
18:02:43.0059 0x29fc  CLFS - ok
18:02:43.0213 0x29fc  [ CB6AC02C92BBA30187EA4591D771660E, B3BB15DC814F131672D864CAAD1537933EE83C9029DF143E5E105077EA4D7F30 ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
18:02:43.0276 0x29fc  ClickToRunSvc - ok
18:02:43.0329 0x29fc  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\Windows\System32\ClipSVC.dll
18:02:43.0344 0x29fc  ClipSVC - ok
18:02:43.0360 0x29fc  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\Windows\System32\drivers\registry.sys
18:02:43.0375 0x29fc  clreg - ok
18:02:43.0414 0x29fc  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
18:02:43.0430 0x29fc  CmBatt - ok
18:02:43.0497 0x29fc  [ 43D1405674332A7883A68C27ACE08359, 789ACBF3A50904B47C847D9262F1BA00F837A7EF705BCC29EA85216DBC965288 ] CNG             C:\Windows\system32\Drivers\cng.sys
18:02:43.0529 0x29fc  CNG - ok
18:02:43.0544 0x29fc  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\Windows\system32\DRIVERS\cnghwassist.sys
18:02:43.0544 0x29fc  cnghwassist - ok
18:02:43.0624 0x29fc  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
18:02:43.0640 0x29fc  CompositeBus - ok
18:02:43.0640 0x29fc  COMSysApp - ok
18:02:43.0671 0x29fc  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\Windows\system32\drivers\condrv.sys
18:02:43.0671 0x29fc  condrv - ok
18:02:43.0724 0x29fc  [ 0E965F9D654C64EAA8970DE25AF32839, 91709A4561A9536B4A9B00BAB8D7B63D5B904065375AF37598C2B0A2C5A8E47C ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
18:02:43.0740 0x29fc  CoreMessagingRegistrar - ok
18:02:43.0824 0x29fc  [ 82183F6C6E130A0E9BC03DA63C89B631, 8B7585D2FA9E1CCBF2EDA5FDC564957E15DB3CDEA0F9E67A37220BA98DBFB22D ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
18:02:43.0840 0x29fc  cphs - ok
18:02:43.0871 0x29fc  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
18:02:43.0893 0x29fc  CryptSvc - ok
18:02:43.0924 0x29fc  [ EC2EA2F6C6D23315C20B4829F00D0440, BF1F47C3485E9112FB64F582DFA4679455203574F82A5ADB222BDA1FED1601E6 ] CSC             C:\Windows\system32\drivers\csc.sys
18:02:43.0940 0x29fc  CSC - ok
18:02:43.0993 0x29fc  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\Windows\System32\cscsvc.dll
18:02:44.0009 0x29fc  CscService - ok
18:02:44.0025 0x29fc  [ 3BBD0073265DA6D3EFBA54B26E5D8236, 3C10C8BEC0D8AC41A3FBD589F41A83D6345C1FDD04B8B99063B2F5670CF10B18 ] dam             C:\Windows\system32\drivers\dam.sys
18:02:44.0040 0x29fc  dam - ok
18:02:44.0088 0x29fc  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\Windows\system32\rpcss.dll
18:02:44.0109 0x29fc  DcomLaunch - ok
18:02:44.0125 0x29fc  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
18:02:44.0141 0x29fc  DcpSvc - ok
18:02:44.0192 0x29fc  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\Windows\System32\defragsvc.dll
18:02:44.0209 0x29fc  defragsvc - ok
18:02:44.0241 0x29fc  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\Windows\system32\das.dll
18:02:44.0256 0x29fc  DeviceAssociationService - ok
18:02:44.0291 0x29fc  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll
18:02:44.0294 0x29fc  DeviceInstall - ok
18:02:44.0310 0x29fc  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
18:02:44.0325 0x29fc  DevQueryBroker - ok
18:02:44.0341 0x29fc  [ 4BC21E937E9F9F408672D2C2CBE4A153, 2F27560D09D184ABB7B4415146F5B8DE56C84FF74A4042596635EF896E39CBC4 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
18:02:44.0357 0x29fc  Dfsc - ok
18:02:44.0393 0x29fc  [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
18:02:44.0393 0x29fc  dg_ssudbus - ok
18:02:44.0440 0x29fc  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\Windows\system32\dhcpcore.dll
18:02:44.0472 0x29fc  Dhcp - ok
18:02:44.0510 0x29fc  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
18:02:44.0526 0x29fc  diagnosticshub.standardcollector.service - ok
18:02:44.0590 0x29fc  [ A9122954D36E4EDFA3E3DB35DCA9E048, 350692BEE164CED1E0BD1A71D1BC90D5B6E0B0A5D1CB6633D115C58FF8A09B92 ] DiagTrack       C:\Windows\system32\diagtrack.dll
18:02:44.0642 0x29fc  DiagTrack - ok
18:02:44.0673 0x29fc  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\Windows\system32\drivers\disk.sys
18:02:44.0673 0x29fc  disk - ok
18:02:44.0711 0x29fc  [ 00DF9E7ACB0376294E3D602AB6625B3E, 1D53DF89826A71FEC48B7602DD2F3E3B09024782B3CC5C787517DC374CC586C8 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
18:02:44.0742 0x29fc  DmEnrollmentSvc - ok
18:02:44.0742 0x29fc  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys
18:02:44.0757 0x29fc  dmvsc - ok
18:02:44.0795 0x29fc  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
18:02:44.0811 0x29fc  dmwappushservice - ok
18:02:44.0826 0x29fc  [ 86E507EE1457D7FA463BBF05BA76EB1E, 2D2D05CED57C22F41684DC6DD00ACECDF708407493286B2D4007068154E436FF ] Dnscache        C:\Windows\System32\dnsrslvr.dll
18:02:44.0842 0x29fc  Dnscache - ok
18:02:44.0873 0x29fc  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\Windows\System32\dot3svc.dll
18:02:44.0890 0x29fc  dot3svc - ok
18:02:44.0915 0x29fc  [ C0AA415718DDD13A136E353844628A65, 7E2F2A139E897EAE56038B920BDA9381094BC0AE9E626F6634E6B444B8B0C91F ] dot4            C:\Windows\system32\DRIVERS\Dot4.sys
18:02:44.0946 0x29fc  dot4 - ok
18:02:44.0962 0x29fc  [ CC88A1D8A39752859101ECCE1F1BC888, F21C1D478180BC5E932BB2C2E4618E3ED463CA87ACEDEB139682D218435F82F1 ] Dot4Print       C:\Windows\System32\drivers\Dot4Prt.sys
18:02:44.0962 0x29fc  Dot4Print - ok
18:02:44.0978 0x29fc  [ DAE2C276739676593250AD3F732A2E74, DBC6AFAF80141E2480E19878F581EDFE9C2B018DA2EC527C4025FF04D5587AFD ] Dot4Scan        C:\Windows\system32\DRIVERS\Dot4Scan.sys
18:02:44.0996 0x29fc  Dot4Scan - ok
18:02:45.0013 0x29fc  [ 292ADB7C57B5457F18F2FC06934B0B40, 12FFDF5F48A79B1B4ADBB88BA2CB6C59DD6719554E8EA6BEEFE99B3E3C66F1AC ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
18:02:45.0017 0x29fc  dot4usb - ok
18:02:45.0033 0x29fc  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\Windows\system32\dps.dll
18:02:45.0048 0x29fc  DPS - ok
18:02:45.0085 0x29fc  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\Windows\system32\DRIVERS\drmkaud.sys
18:02:45.0094 0x29fc  drmkaud - ok
18:02:45.0132 0x29fc  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
18:02:45.0163 0x29fc  DsmSvc - ok
18:02:45.0179 0x29fc  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\Windows\System32\DsSvc.dll
18:02:45.0196 0x29fc  DsSvc - ok
18:02:45.0264 0x29fc  [ 928E2749E01AEB9948F5D548B1F0C116, FBBC525306E6CE387BAF3DDD8145FD8AADDEFB2DC93E5692A8ED7F116C3EDD08 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
18:02:45.0316 0x29fc  DXGKrnl - ok
18:02:45.0347 0x29fc  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\Windows\System32\eapsvc.dll
18:02:45.0363 0x29fc  EapHost - ok
18:02:45.0464 0x29fc  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
18:02:45.0536 0x29fc  ebdrv - ok
18:02:45.0552 0x29fc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS             C:\Windows\System32\lsass.exe
18:02:45.0568 0x29fc  EFS - ok
18:02:45.0594 0x29fc  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys
18:02:45.0596 0x29fc  EhStorClass - ok
18:02:45.0617 0x29fc  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
18:02:45.0633 0x29fc  EhStorTcgDrv - ok
18:02:45.0664 0x29fc  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
18:02:45.0679 0x29fc  embeddedmode - ok
18:02:45.0711 0x29fc  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc       C:\Windows\system32\EnterpriseAppMgmtSvc.dll
18:02:45.0718 0x29fc  EntAppSvc - ok
18:02:45.0749 0x29fc  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
18:02:45.0765 0x29fc  ErrDev - ok
18:02:45.0796 0x29fc  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\Windows\system32\es.dll
18:02:45.0817 0x29fc  EventSystem - ok
18:02:45.0833 0x29fc  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\Windows\system32\drivers\exfat.sys
18:02:45.0864 0x29fc  exfat - ok
18:02:45.0896 0x29fc  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat         C:\Windows\system32\drivers\fastfat.sys
18:02:45.0912 0x29fc  fastfat - ok
18:02:45.0958 0x29fc  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\Windows\system32\fxssvc.exe
18:02:45.0974 0x29fc  Fax - ok
18:02:46.0011 0x29fc  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\Windows\System32\drivers\fdc.sys
18:02:46.0027 0x29fc  fdc - ok
18:02:46.0058 0x29fc  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\Windows\system32\fdPHost.dll
18:02:46.0096 0x29fc  fdPHost - ok
18:02:46.0096 0x29fc  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\Windows\system32\fdrespub.dll
18:02:46.0112 0x29fc  FDResPub - ok
18:02:46.0143 0x29fc  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\Windows\system32\fhsvc.dll
18:02:46.0159 0x29fc  fhsvc - ok
18:02:46.0197 0x29fc  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\Windows\system32\drivers\filecrypt.sys
18:02:46.0213 0x29fc  FileCrypt - ok
18:02:46.0228 0x29fc  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
18:02:46.0244 0x29fc  FileInfo - ok
18:02:46.0244 0x29fc  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
18:02:46.0259 0x29fc  Filetrace - ok
18:02:46.0259 0x29fc  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
18:02:46.0275 0x29fc  flpydisk - ok
18:02:46.0297 0x29fc  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
18:02:46.0313 0x29fc  FltMgr - ok
18:02:46.0360 0x29fc  [ 2E193D24CE8460A9C703D0F193192BEF, CD95928BC240D556DFEA265A09A655FFE157A36D2230CD10BBAD4CA15CB98412 ] FontCache       C:\Windows\system32\FntCache.dll
18:02:46.0413 0x29fc  FontCache - ok
18:02:46.0460 0x29fc  [ CD7CD19E72EA2F597D01FC68ECD2F28E, 4E8BAA4AEF28B043780E2FEFFEB5E4DF4E2FB3211CE617D2DBAFB6C7B7DBBDFD ] FrameServer     C:\Windows\system32\FrameServer.dll
18:02:46.0497 0x29fc  FrameServer - ok
18:02:46.0529 0x29fc  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
18:02:46.0529 0x29fc  FsDepends - ok
18:02:46.0544 0x29fc  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
18:02:46.0544 0x29fc  Fs_Rec - ok
18:02:46.0576 0x29fc  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
18:02:46.0598 0x29fc  fvevol - ok
18:02:46.0629 0x29fc  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
18:02:46.0645 0x29fc  gencounter - ok
18:02:46.0660 0x29fc  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
18:02:46.0676 0x29fc  genericusbfn - ok
18:02:46.0697 0x29fc  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys
18:02:46.0698 0x29fc  GPIOClx0101 - ok
18:02:46.0760 0x29fc  [ 8997353398C8466ECD183942D5FCC65B, C73FD5FFD71003F7FDDC17F59812BD6860992FA35EC0ECC8DE37D935606B485B ] gpsvc           C:\Windows\System32\gpsvc.dll
18:02:46.0798 0x29fc  gpsvc - ok
18:02:46.0821 0x29fc  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
18:02:46.0821 0x29fc  GpuEnergyDrv - ok
18:02:46.0853 0x29fc  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
18:02:46.0868 0x29fc  HdAudAddService - ok
18:02:46.0898 0x29fc  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
18:02:46.0914 0x29fc  HDAudBus - ok
18:02:46.0914 0x29fc  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys
18:02:46.0935 0x29fc  HidBatt - ok
18:02:46.0940 0x29fc  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\Windows\System32\drivers\hidbth.sys
18:02:46.0956 0x29fc  HidBth - ok
18:02:46.0996 0x29fc  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
18:02:46.0998 0x29fc  hidi2c - ok
18:02:47.0014 0x29fc  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
18:02:47.0031 0x29fc  hidinterrupt - ok
18:02:47.0039 0x29fc  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\Windows\System32\drivers\hidir.sys
18:02:47.0039 0x29fc  HidIr - ok
18:02:47.0071 0x29fc  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\Windows\system32\hidserv.dll
18:02:47.0071 0x29fc  hidserv - ok
18:02:47.0098 0x29fc  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
18:02:47.0099 0x29fc  HidUsb - ok
18:02:47.0136 0x29fc  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:02:47.0152 0x29fc  HomeGroupListener - ok
18:02:47.0189 0x29fc  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:02:47.0198 0x29fc  HomeGroupProvider - ok
18:02:47.0231 0x29fc  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
18:02:47.0236 0x29fc  HpSAMD - ok
18:02:47.0289 0x29fc  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
18:02:47.0314 0x29fc  HTTP - ok
18:02:47.0336 0x29fc  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\Windows\System32\hvhostsvc.dll
18:02:47.0351 0x29fc  HvHost - ok
18:02:47.0385 0x29fc  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice       C:\Windows\system32\drivers\hvservice.sys
18:02:47.0394 0x29fc  hvservice - ok
18:02:47.0398 0x29fc  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
18:02:47.0414 0x29fc  hwpolicy - ok
18:02:47.0430 0x29fc  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
18:02:47.0445 0x29fc  hyperkbd - ok
18:02:47.0477 0x29fc  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
18:02:47.0477 0x29fc  i8042prt - ok
18:02:47.0493 0x29fc  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\Windows\System32\drivers\iagpio.sys
18:02:47.0499 0x29fc  iagpio - ok
18:02:47.0499 0x29fc  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\Windows\System32\drivers\iai2c.sys
18:02:47.0514 0x29fc  iai2c - ok
18:02:47.0533 0x29fc  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys
18:02:47.0541 0x29fc  iaLPSS2i_GPIO2 - ok
18:02:47.0557 0x29fc  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\Windows\System32\drivers\iaLPSS2i_I2C.sys
18:02:47.0573 0x29fc  iaLPSS2i_I2C - ok
18:02:47.0573 0x29fc  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
18:02:47.0573 0x29fc  iaLPSSi_GPIO - ok
18:02:47.0590 0x29fc  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\Windows\System32\drivers\iaLPSSi_I2C.sys
18:02:47.0599 0x29fc  iaLPSSi_I2C - ok
18:02:47.0654 0x29fc  [ 71341219FBB4BAB7F2462C4267DAB594, 0C6B684781D27F423D20186A40D7513DD6ABC38AD286D013791B37CBF5477A55 ] iaStorA         C:\Windows\system32\drivers\iaStorA.sys
18:02:47.0669 0x29fc  iaStorA - ok
18:02:47.0698 0x29fc  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
18:02:47.0714 0x29fc  iaStorAV - ok
18:02:47.0799 0x29fc  [ B64E1D5BABD095C13A382838F9DCC77F, D8FF4E1BBA7EF5EE136CC5892C72E0774D0AAE40CD9EB3368A698DA6C078BBAA ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
18:02:47.0814 0x29fc  IAStorDataMgrSvc - ok
18:02:47.0830 0x29fc  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
18:02:47.0849 0x29fc  iaStorV - ok
18:02:47.0898 0x29fc  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\Windows\System32\drivers\ibbus.sys
18:02:47.0915 0x29fc  ibbus - ok
18:02:47.0930 0x29fc  [ 62F0CB0A54EAF37E15EC385300957BB8, 55FCF7068D84D5AEEAF3149A5349BF13F1D18E34956217916ED7C1950885E63C ] ibtfltcoex      C:\Windows\system32\DRIVERS\ibtfltcoex.sys
18:02:47.0949 0x29fc  ibtfltcoex - ok
18:02:48.0014 0x29fc  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
18:02:48.0030 0x29fc  ICCS - ok
18:02:48.0054 0x29fc  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\Windows\System32\tetheringservice.dll
18:02:48.0070 0x29fc  icssvc - ok
18:02:48.0215 0x29fc  [ FDE2AF2F325BC2F7F81401B406CAA9F6, C8C4E3CD6060377B68D104FA829770E6370925710B9F2316294F3F6FF8FF7286 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
18:02:48.0288 0x29fc  igfx - ok
18:02:48.0300 0x29fc  [ C8FAB0795551944836AEEE94307C8BB1, DF5E14DAAA06B872DDA96C7F4E0BFCB468D3D068A937B726DBECE0FE8BA024BF ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
18:02:48.0315 0x29fc  igfxCUIService1.0.0.0 - ok
18:02:48.0354 0x29fc  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\Windows\System32\ikeext.dll
18:02:48.0400 0x29fc  IKEEXT - ok
18:02:48.0416 0x29fc  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\Windows\System32\drivers\IndirectKmd.sys
18:02:48.0431 0x29fc  IndirectKmd - ok
18:02:48.0455 0x29fc  [ B1F193AB8FB72E9FC34B3A39314ED872, 408E98D9C8ABB928090DD9E5D1BB227EFBC997BF168437BAEF0461EB0D1DAE3D ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
18:02:48.0470 0x29fc  intaud_WaveExtensible - ok
18:02:48.0516 0x29fc  [ 87871AB7AC797F922A6F3D4C874CED96, 2BCD89911E42827CD294DD7D1486A7845D1F98019E51958E0F488384401B2944 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
18:02:48.0532 0x29fc  IntcDAud - ok
18:02:48.0600 0x29fc  [ 0DB1E3F6189C628675F855C0EB510419, 989F539E82105019D2D81255369B96DC65826CD2A421DA09809155B26F69C555 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
18:02:48.0616 0x29fc  Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
18:02:48.0747 0x29fc  Detect skipped due to KSN trusted
18:02:48.0747 0x29fc  Intel(R) Capability Licensing Service Interface - ok
18:02:48.0800 0x29fc  [ 492AAF2FF66F437F0E796574B116EFC3, 6BF21C61ED05705DD58203952A750D1AB4D4B62F3A2B640BBBD9B85D1ECC3E5C ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
18:02:48.0816 0x29fc  Intel(R) Capability Licensing Service TCP IP Interface - ok
18:02:48.0851 0x29fc  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\Windows\system32\drivers\intelide.sys
18:02:48.0855 0x29fc  intelide - ok
18:02:48.0871 0x29fc  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\Windows\system32\drivers\intelpep.sys
18:02:48.0871 0x29fc  intelpep - ok
18:02:48.0899 0x29fc  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
18:02:48.0900 0x29fc  intelppm - ok
18:02:48.0932 0x29fc  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\Windows\system32\drivers\iorate.sys
18:02:48.0932 0x29fc  iorate - ok
18:02:48.0955 0x29fc  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:02:48.0955 0x29fc  IpFilterDriver - ok
18:02:49.0032 0x29fc  [ 68C50E8E4265698BE6835156F4DD5008, 5B9CBBCE99315E5569E6733F13E91A687A36F536A68A2B670CC24C4BCC4EAFF4 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
18:02:49.0055 0x29fc  iphlpsvc - ok
18:02:49.0094 0x29fc  [ 10D01A3657AC8E8004C83D613163DE1E, F9389F1BF87A2D28899F50D270DA6F48B0912CFAF06CEE566697B041DBE92F9C ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys
18:02:49.0101 0x29fc  IPMIDRV - ok
18:02:49.0117 0x29fc  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
18:02:49.0132 0x29fc  IPNAT - ok
18:02:49.0132 0x29fc  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\Windows\system32\drivers\irda.sys
18:02:49.0155 0x29fc  irda - ok
18:02:49.0155 0x29fc  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
18:02:49.0171 0x29fc  IRENUM - ok
18:02:49.0192 0x29fc  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\Windows\System32\irmon.dll
18:02:49.0201 0x29fc  irmon - ok
18:02:49.0217 0x29fc  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
18:02:49.0232 0x29fc  isapnp - ok
18:02:49.0232 0x29fc  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
18:02:49.0255 0x29fc  iScsiPrt - ok
18:02:49.0255 0x29fc  [ DD1F43B86AD84E53203F92FD3EF3AEB6, 9DE2BA80B315E56DF2E74EAA65F4ECB8324DFC19E30EB56EDDF08340AB100E87 ] iwdbus          C:\Windows\System32\drivers\iwdbus.sys
18:02:49.0271 0x29fc  iwdbus - ok
18:02:49.0317 0x29fc  [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
18:02:49.0317 0x29fc  jhi_service - ok
18:02:49.0348 0x29fc  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
18:02:49.0348 0x29fc  kbdclass - ok
18:02:49.0380 0x29fc  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
18:02:49.0401 0x29fc  kbdhid - ok
18:02:49.0401 0x29fc  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\Windows\System32\drivers\kdnic.sys
18:02:49.0417 0x29fc  kdnic - ok
18:02:49.0433 0x29fc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\Windows\system32\lsass.exe
18:02:49.0433 0x29fc  KeyIso - ok
18:02:49.0464 0x29fc  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
18:02:49.0464 0x29fc  KSecDD - ok
18:02:49.0480 0x29fc  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
18:02:49.0502 0x29fc  KSecPkg - ok
18:02:49.0517 0x29fc  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
18:02:49.0533 0x29fc  ksthunk - ok
18:02:49.0580 0x29fc  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\Windows\system32\msdtckrm.dll
18:02:49.0602 0x29fc  KtmRm - ok
18:02:49.0633 0x29fc  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\Windows\system32\srvsvc.dll
18:02:49.0665 0x29fc  LanmanServer - ok
18:02:49.0718 0x29fc  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:02:49.0733 0x29fc  LanmanWorkstation - ok
18:02:49.0802 0x29fc  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\Windows\System32\lfsvc.dll
18:02:49.0802 0x29fc  lfsvc - ok
18:02:49.0834 0x29fc  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
18:02:49.0834 0x29fc  LicenseManager - ok
18:02:49.0865 0x29fc  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\Windows\system32\drivers\lltdio.sys
18:02:49.0880 0x29fc  lltdio - ok
18:02:49.0899 0x29fc  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
18:02:49.0903 0x29fc  lltdsvc - ok
18:02:49.0934 0x29fc  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\Windows\System32\lmhsvc.dll
18:02:49.0949 0x29fc  lmhosts - ok
18:02:50.0050 0x29fc  [ 6A35B295812CE7064CFBCD9F254169CF, 561DD131FED6F90686D8C031B45B87B6D065C7E0C8804AEFCDE239725AAEE43E ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
18:02:50.0066 0x29fc  LMS - ok
18:02:50.0097 0x29fc  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
18:02:50.0102 0x29fc  LSI_SAS - ok
18:02:50.0102 0x29fc  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\Windows\system32\drivers\lsi_sas2i.sys
18:02:50.0118 0x29fc  LSI_SAS2i - ok
18:02:50.0118 0x29fc  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\Windows\system32\drivers\lsi_sas3i.sys
18:02:50.0134 0x29fc  LSI_SAS3i - ok
18:02:50.0134 0x29fc  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys
18:02:50.0149 0x29fc  LSI_SSS - ok
18:02:50.0203 0x29fc  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM             C:\Windows\System32\lsm.dll
18:02:50.0234 0x29fc  LSM - ok
18:02:50.0250 0x29fc  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\Windows\system32\drivers\luafv.sys
18:02:50.0265 0x29fc  luafv - ok
18:02:50.0298 0x29fc  [ 9F699136FA1A8A170C2C05D7790A5FC0, 4363C527BD2FC9FD8937E9866CA200809AC87B64EA57084491BAB6DEB8ED9E87 ] MapsBroker      C:\Windows\System32\moshost.dll
18:02:50.0303 0x29fc  MapsBroker - ok
18:02:50.0334 0x29fc  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\Windows\system32\drivers\megasas.sys
18:02:50.0350 0x29fc  megasas - ok
18:02:50.0365 0x29fc  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\Windows\system32\drivers\MegaSas2i.sys
18:02:50.0381 0x29fc  megasas2i - ok
18:02:50.0401 0x29fc  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\Windows\system32\drivers\megasr.sys
18:02:50.0419 0x29fc  megasr - ok
18:02:50.0450 0x29fc  [ 926C135CFB0C75B32FB714B5C0C58FAA, AF627CD125794B69D450D298D5608D357F2C91FB89EBFAA0DA2A0F07C6A304A8 ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
18:02:50.0466 0x29fc  MEIx64 - ok
18:02:50.0486 0x29fc  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\Windows\System32\MessagingService.dll
18:02:50.0502 0x29fc  MessagingService - ok
18:02:50.0550 0x29fc  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
18:02:50.0565 0x29fc  mlx4_bus - ok
18:02:50.0601 0x29fc  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\Windows\system32\drivers\mmcss.sys
18:02:50.0607 0x29fc  MMCSS - ok
18:02:50.0623 0x29fc  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem           C:\Windows\system32\drivers\modem.sys
18:02:50.0638 0x29fc  Modem - ok
18:02:50.0638 0x29fc  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\Windows\System32\drivers\monitor.sys
18:02:50.0654 0x29fc  monitor - ok
18:02:50.0670 0x29fc  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
18:02:50.0685 0x29fc  mouclass - ok
18:02:50.0703 0x29fc  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\Windows\System32\drivers\mouhid.sys
18:02:50.0708 0x29fc  mouhid - ok
18:02:50.0708 0x29fc  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
18:02:50.0724 0x29fc  mountmgr - ok
18:02:50.0739 0x29fc  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
18:02:50.0755 0x29fc  mpsdrv - ok
18:02:50.0786 0x29fc  [ A231E1861F7AA9CCC24B97176BBA838D, CDAB9A25CC55B71E8A83E50504B12E948D7A88F035918E4F94E3624E4AA0A28D ] MpsSvc          C:\Windows\system32\mpssvc.dll
18:02:50.0824 0x29fc  MpsSvc - ok
18:02:50.0839 0x29fc  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
18:02:50.0839 0x29fc  MRxDAV - ok
18:02:50.0886 0x29fc  [ D559FF28B1AD9B1E15A4186E785E61F6, 4B22A740E86CA10B1B43E36CBE9A50B53D1E5504C25694C8FF3A514DF699E99C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
18:02:50.0903 0x29fc  mrxsmb - ok
18:02:50.0919 0x29fc  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:02:50.0935 0x29fc  mrxsmb10 - ok
18:02:50.0950 0x29fc  [ 0698B15E21EA1B8742F2E7BB3142B754, 0DB79841E863F08452F895DA47CEEF6CA4D527A616EB616FDFF5F7431487E5F7 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:02:50.0966 0x29fc  mrxsmb20 - ok
18:02:50.0981 0x29fc  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
18:02:51.0003 0x29fc  MsBridge - ok
18:02:51.0019 0x29fc  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\Windows\System32\msdtc.exe
18:02:51.0035 0x29fc  MSDTC - ok
18:02:51.0119 0x29fc  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
18:02:51.0151 0x29fc  Msfs - ok
18:02:51.0166 0x29fc  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys
18:02:51.0166 0x29fc  msgpiowin32 - ok
18:02:51.0182 0x29fc  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
18:02:51.0182 0x29fc  mshidkmdf - ok
18:02:51.0198 0x29fc  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys
18:02:51.0204 0x29fc  mshidumdf - ok
18:02:51.0221 0x29fc  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
18:02:51.0230 0x29fc  msisadrv - ok
18:02:51.0261 0x29fc  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
18:02:51.0261 0x29fc  MSiSCSI - ok
18:02:51.0276 0x29fc  msiserver - ok
18:02:51.0299 0x29fc  [ 4586CDA25B7866DD9505CEECF9DB3C74, B94CE1A7C1B6FFEF7AA33AEC30C27E01E44E6E56A4274705684BFBB738F95BCF ] MSKSSRV         C:\Windows\system32\DRIVERS\MSKSSRV.sys
18:02:51.0304 0x29fc  MSKSSRV - ok
18:02:51.0320 0x29fc  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
18:02:51.0320 0x29fc  MsLldp - ok
18:02:51.0341 0x29fc  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys
18:02:51.0357 0x29fc  MSPCLOCK - ok
18:02:51.0357 0x29fc  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\Windows\system32\DRIVERS\MSPQM.sys
18:02:51.0372 0x29fc  MSPQM - ok
18:02:51.0403 0x29fc  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
18:02:51.0419 0x29fc  MsRPC - ok
18:02:51.0457 0x29fc  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
18:02:51.0457 0x29fc  MsSecFlt - ok
18:02:51.0473 0x29fc  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
18:02:51.0494 0x29fc  mssmbios - ok
18:02:51.0502 0x29fc  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\Windows\system32\DRIVERS\MSTEE.sys
18:02:51.0504 0x29fc  MSTEE - ok
18:02:51.0520 0x29fc  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
18:02:51.0520 0x29fc  MTConfig - ok
18:02:51.0557 0x29fc  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup             C:\Windows\system32\Drivers\mup.sys
18:02:51.0557 0x29fc  Mup - ok
18:02:51.0572 0x29fc  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
18:02:51.0572 0x29fc  mvumis - ok
18:02:51.0619 0x29fc  [ A5FA29F748BBF38FC3FAE4B54FA20A93, 8912F08967CFDD2A74593C9D23F43D6487D1920969C380B39BA8EA4672B24C3B ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
18:02:51.0641 0x29fc  NativeWifiP - ok
18:02:51.0697 0x29fc  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\Windows\System32\ncasvc.dll
18:02:51.0704 0x29fc  NcaSvc - ok
18:02:51.0720 0x29fc  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\Windows\System32\ncbservice.dll
18:02:51.0741 0x29fc  NcbService - ok
18:02:51.0757 0x29fc  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
18:02:51.0792 0x29fc  NcdAutoSetup - ok
18:02:51.0803 0x29fc  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
18:02:51.0819 0x29fc  ndfltr - ok
18:02:51.0858 0x29fc  [ 3B41B4CF8F3F7C4041AC516830561533, 1EA616164AF9EA6B5DEC569DD255CB81C9EC3D4288E214CD8EE72C334ADEA3B8 ] NDIS            C:\Windows\system32\drivers\ndis.sys
18:02:51.0901 0x29fc  NDIS - ok
18:02:51.0919 0x29fc  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\Windows\system32\drivers\ndiscap.sys
18:02:51.0919 0x29fc  NdisCap - ok
18:02:51.0935 0x29fc  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
18:02:51.0951 0x29fc  NdisImPlatform - ok
18:02:51.0966 0x29fc  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
18:02:51.0982 0x29fc  NdisTapi - ok
18:02:51.0999 0x29fc  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\Windows\system32\drivers\ndisuio.sys
18:02:52.0004 0x29fc  Ndisuio - ok
18:02:52.0020 0x29fc  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
18:02:52.0035 0x29fc  NdisVirtualBus - ok
18:02:52.0051 0x29fc  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\Windows\System32\drivers\ndiswan.sys
18:02:52.0067 0x29fc  NdisWan - ok
18:02:52.0082 0x29fc  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\Windows\system32\DRIVERS\ndiswan.sys
18:02:52.0104 0x29fc  ndiswanlegacy - ok
18:02:52.0120 0x29fc  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\Windows\system32\DRIVERS\NDProxy.sys
18:02:52.0135 0x29fc  ndproxy - ok
18:02:52.0151 0x29fc  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\Windows\system32\drivers\Ndu.sys
18:02:52.0167 0x29fc  Ndu - ok
18:02:52.0182 0x29fc  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
18:02:52.0204 0x29fc  NetAdapterCx - ok
18:02:52.0204 0x29fc  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\Windows\system32\drivers\netbios.sys
18:02:52.0220 0x29fc  NetBIOS - ok
18:02:52.0251 0x29fc  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
18:02:52.0267 0x29fc  NetBT - ok
18:02:52.0267 0x29fc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\Windows\system32\lsass.exe
18:02:52.0282 0x29fc  Netlogon - ok
18:02:52.0304 0x29fc  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\Windows\System32\netman.dll
18:02:52.0336 0x29fc  Netman - ok
18:02:52.0351 0x29fc  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\Windows\System32\netprofmsvc.dll
18:02:52.0383 0x29fc  netprofm - ok
18:02:52.0420 0x29fc  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc     C:\Windows\System32\NetSetupSvc.dll
18:02:52.0436 0x29fc  NetSetupSvc - ok
18:02:52.0505 0x29fc  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:02:52.0521 0x29fc  NetTcpPortSharing - ok
18:02:52.0606 0x29fc  [ 99C24A7DC1F3D4845553B4BD189274A0, 801C2A1F12E6F0D646E92C98477FCDB84C6743803CD7365B774B0F88EB650584 ] NETwNe64        C:\Windows\System32\drivers\NETwew01.sys
18:02:52.0708 0x29fc  NETwNe64 - ok
18:02:52.0725 0x29fc  [ E79E364AF827EB1F141BE000ABB8727D, 96218EB8B7C9E0F614AB9EAEAEC41BD4DB0E9EFE5C1D87EC749B9CB71653CEB1 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
18:02:52.0757 0x29fc  NgcCtnrSvc - ok
18:02:52.0788 0x29fc  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\Windows\system32\ngcsvc.dll
18:02:52.0826 0x29fc  NgcSvc - ok
18:02:52.0857 0x29fc  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\Windows\System32\nlasvc.dll
18:02:52.0873 0x29fc  NlaSvc - ok
18:02:52.0904 0x29fc  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
18:02:52.0922 0x29fc  Npfs - ok
18:02:52.0926 0x29fc  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys
18:02:52.0942 0x29fc  npsvctrig - ok
18:02:52.0958 0x29fc  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\Windows\system32\nsisvc.dll
18:02:52.0958 0x29fc  nsi - ok
18:02:52.0973 0x29fc  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
18:02:52.0989 0x29fc  nsiproxy - ok
18:02:53.0058 0x29fc  [ 98BBD81DC481E9D58EEB31C81EBDEFF5, 28FAAFCB90721C557C37D18533681C274428BC97AB3C3AAFCC75212074E9F2CA ] NTFS            C:\Windows\system32\drivers\NTFS.sys
18:02:53.0143 0x29fc  NTFS - ok
18:02:53.0174 0x29fc  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\Windows\system32\drivers\Null.sys
18:02:53.0190 0x29fc  Null - ok
18:02:53.0258 0x29fc  [ 7C87B6C03A27AF13C97B8DC69DE1E0A8, D938352DA52EA13C004A3116F3F25E1722F8A786621D00A3473B071028D30E1C ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
18:02:53.0258 0x29fc  NvContainerLocalSystem - ok
18:02:53.0289 0x29fc  [ 7C87B6C03A27AF13C97B8DC69DE1E0A8, D938352DA52EA13C004A3116F3F25E1722F8A786621D00A3473B071028D30E1C ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
18:02:53.0305 0x29fc  NvContainerNetworkService - ok
18:02:53.0705 0x29fc  [ C3594335F6D26A475E6CB32534DD9F08, E0AC44476AC93282A600C589ED8B84CBC79F60EB7F7AD25E73439B9738A96484 ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvlddmkm.sys
18:02:53.0955 0x29fc  nvlddmkm - ok
18:02:53.0981 0x29fc  [ CBF44B55E4FE9BE48902CF784A208256, DAA09F345CA0940F222CAD201BB90DC34B93C7B99348B751DDCE85CB9CE62E37 ] nvpciflt        C:\Windows\system32\DRIVERS\nvpciflt.sys
18:02:53.0988 0x29fc  nvpciflt - ok
18:02:54.0019 0x29fc  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
18:02:54.0019 0x29fc  nvraid - ok
18:02:54.0035 0x29fc  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\Windows\system32\drivers\nvstor.sys
18:02:54.0035 0x29fc  nvstor - ok
18:02:54.0066 0x29fc  [ 191DAD20FA73E099BAD05953892EAF18, FA99677CA732EC58CC9FC717DA64C2591F8371E2877CE6DFC684DC3A4D5B66AD ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
18:02:54.0083 0x29fc  NvStreamKms - ok
18:02:54.0120 0x29fc  [ F0E82FD4F609E50CBF198F04C9F66A46, AE555BAD65D75DD9D4F7D6C76098448D7055A8298D037D0FA3DE640A50E34A21 ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
18:02:54.0136 0x29fc  NvTelemetryContainer - ok
18:02:54.0167 0x29fc  [ 8736A38B0326664CA7BA4E5DE51EBC9D, C218220C987197C6E60514A5425F459011A70350F7AAE1824851B879FF542906 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
18:02:54.0167 0x29fc  nvvad_WaveExtensible - ok
18:02:54.0189 0x29fc  [ BCEBAC08D60020C800E1A80B257DCE43, C2BCDF9C0233E7BD82951FBCD41E2861EAB17684F277208DD28AE0E93360D9C5 ] nvvhci          C:\Windows\System32\drivers\nvvhci.sys
18:02:54.0204 0x29fc  nvvhci - ok
18:02:54.0220 0x29fc  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\Windows\System32\APHostService.dll
18:02:54.0236 0x29fc  OneSyncSvc - ok
18:02:54.0289 0x29fc  [ 5C12E1436BD6CC9ED022CA5335D4F1A0, CE323DE98A4328B348193B10867E16C840224559F391213590629360EFB5F33D ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:02:54.0304 0x29fc  ose - ok
18:02:54.0320 0x29fc  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
18:02:54.0351 0x29fc  p2pimsvc - ok
18:02:54.0367 0x29fc  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\Windows\system32\p2psvc.dll
18:02:54.0390 0x29fc  p2psvc - ok
18:02:54.0405 0x29fc  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\Windows\System32\drivers\parport.sys
18:02:54.0421 0x29fc  Parport - ok
18:02:54.0436 0x29fc  [ 0553ECB742278C8F4CFA28B43FF20EAD, ACD7F5BC36573BCEC2C3413DEA687034ECC101EDD3C1544B264BBA29EFCE3425 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
18:02:54.0452 0x29fc  partmgr - ok
18:02:54.0490 0x29fc  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\Windows\System32\pcasvc.dll
18:02:54.0505 0x29fc  PcaSvc - ok
18:02:54.0537 0x29fc  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\Windows\system32\drivers\pci.sys
18:02:54.0552 0x29fc  pci - ok

Kisska · 04.04.2017, 19:01

3) TDSSKiller.exe - Teil 2

Code:

ATTFilter

18:02:54.0568 0x29fc  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\Windows\system32\drivers\pciide.sys
18:02:54.0590 0x29fc  pciide - ok
18:02:54.0590 0x29fc  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
18:02:54.0606 0x29fc  pcmcia - ok
18:02:54.0606 0x29fc  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\Windows\system32\drivers\pcw.sys
18:02:54.0622 0x29fc  pcw - ok
18:02:54.0637 0x29fc  [ CA979960D3A580C78EDB4BBD6BD3ABCC, 2A136BC562235D26F6421027B158D406FB1D08FE7D70A50DD3E4D344B0E27205 ] pdc             C:\Windows\system32\drivers\pdc.sys
18:02:54.0653 0x29fc  pdc - ok
18:02:54.0669 0x29fc  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
18:02:54.0706 0x29fc  PEAUTH - ok
18:02:54.0753 0x29fc  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
18:02:54.0822 0x29fc  PeerDistSvc - ok
18:02:54.0838 0x29fc  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\Windows\system32\drivers\percsas2i.sys
18:02:54.0838 0x29fc  percsas2i - ok
18:02:54.0853 0x29fc  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\Windows\system32\drivers\percsas3i.sys
18:02:54.0869 0x29fc  percsas3i - ok
18:02:54.0939 0x29fc  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
18:02:54.0954 0x29fc  PerfHost - ok
18:02:54.0992 0x29fc  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\Windows\System32\PhoneService.dll
18:02:55.0023 0x29fc  PhoneSvc - ok
18:02:55.0054 0x29fc  [ C7A94D99CDF054248EFBD9B93D096DA6, F59F0EB5B17DC078E47D044B1126A786D67DC149AC9614CDA6AA1226EEE3EF55 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
18:02:55.0070 0x29fc  PimIndexMaintenanceSvc - ok
18:02:55.0155 0x29fc  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\Windows\system32\pla.dll
18:02:55.0192 0x29fc  pla - ok
18:02:55.0223 0x29fc  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
18:02:55.0239 0x29fc  PlugPlay - ok
18:02:55.0239 0x29fc  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
18:02:55.0255 0x29fc  PNRPAutoReg - ok
18:02:55.0270 0x29fc  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
18:02:55.0292 0x29fc  PNRPsvc - ok
18:02:55.0308 0x29fc  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
18:02:55.0324 0x29fc  PolicyAgent - ok
18:02:55.0339 0x29fc  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\Windows\system32\umpo.dll
18:02:55.0355 0x29fc  Power - ok
18:02:55.0355 0x29fc  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
18:02:55.0370 0x29fc  PptpMiniport - ok
18:02:55.0524 0x29fc  [ 77ABF70C71922873BC160933571B3F83, 7FCFBB4B42E7A92FCF11388CD5B600EA79A7C134F13A8A88CF8DCD3DB96C3F5A ] PrintNotify     C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
18:02:55.0609 0x29fc  PrintNotify - ok
18:02:55.0640 0x29fc  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\Windows\System32\drivers\processr.sys
18:02:55.0655 0x29fc  Processor - ok
18:02:55.0693 0x29fc  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc         C:\Windows\system32\profsvc.dll
18:02:55.0709 0x29fc  ProfSvc - ok
18:02:55.0724 0x29fc  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\Windows\system32\drivers\pacer.sys
18:02:55.0740 0x29fc  Psched - ok
18:02:55.0771 0x29fc  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\Windows\system32\qwave.dll
18:02:55.0793 0x29fc  QWAVE - ok
18:02:55.0809 0x29fc  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
18:02:55.0825 0x29fc  QWAVEdrv - ok
18:02:55.0856 0x29fc  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
18:02:55.0871 0x29fc  RasAcd - ok
18:02:55.0891 0x29fc  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\Windows\System32\drivers\AgileVpn.sys
18:02:55.0893 0x29fc  RasAgileVpn - ok
18:02:55.0909 0x29fc  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\Windows\System32\rasauto.dll
18:02:55.0924 0x29fc  RasAuto - ok
18:02:55.0955 0x29fc  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\Windows\System32\drivers\rasl2tp.sys
18:02:55.0971 0x29fc  Rasl2tp - ok
18:02:55.0993 0x29fc  [ 989DBF4805124A31610947E502501696, BCB73879AEC0588D0BFAB915D1F6EB637333A24D2030ED6572B3A3C03865AE93 ] RasMan          C:\Windows\System32\rasmans.dll
18:02:56.0024 0x29fc  RasMan - ok
18:02:56.0040 0x29fc  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
18:02:56.0040 0x29fc  RasPppoe - ok
18:02:56.0056 0x29fc  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\Windows\System32\drivers\rassstp.sys
18:02:56.0071 0x29fc  RasSstp - ok
18:02:56.0108 0x29fc  [ 6132B142C5A1FA4C05F06FE43DE5E55E, CCF64C9A778501635B8B5E20BB617D39D0298329FD6911DC125FC8B31FEFEDE1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
18:02:56.0124 0x29fc  rdbss - ok
18:02:56.0140 0x29fc  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
18:02:56.0140 0x29fc  rdpbus - ok
18:02:56.0171 0x29fc  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
18:02:56.0187 0x29fc  RDPDR - ok
18:02:56.0193 0x29fc  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
18:02:56.0193 0x29fc  RdpVideoMiniport - ok
18:02:56.0225 0x29fc  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
18:02:56.0225 0x29fc  rdyboost - ok
18:02:56.0272 0x29fc  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
18:02:56.0309 0x29fc  ReFSv1 - ok
18:02:56.0341 0x29fc  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\Windows\System32\mprdim.dll
18:02:56.0372 0x29fc  RemoteAccess - ok
18:02:56.0394 0x29fc  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
18:02:56.0425 0x29fc  RemoteRegistry - ok
18:02:56.0457 0x29fc  [ CE44FB62412C9B78008BE740B0E16D11, 4FA01F54EE3924EEE0953FB27336FFB01069F2248859B4984030E5D364807335 ] RetailDemo      C:\Windows\system32\RDXService.dll
18:02:56.0491 0x29fc  RetailDemo - ok
18:02:56.0510 0x29fc  [ E82F3B1918C6A5FE6EB761CDF1E772AF, 0C993FCB7BFD6E01B70A1821E0DEAFA2CB241AF8C2E6D4CC120F59C1B5F6FF5F ] RFCOMM          C:\Windows\System32\drivers\rfcomm.sys
18:02:56.0526 0x29fc  RFCOMM - ok
18:02:56.0541 0x29fc  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc           C:\Windows\System32\RMapi.dll
18:02:56.0557 0x29fc  RmSvc - ok
18:02:56.0594 0x29fc  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
18:02:56.0610 0x29fc  RpcEptMapper - ok
18:02:56.0626 0x29fc  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\Windows\system32\locator.exe
18:02:56.0641 0x29fc  RpcLocator - ok
18:02:56.0673 0x29fc  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs           C:\Windows\system32\rpcss.dll
18:02:56.0695 0x29fc  RpcSs - ok
18:02:56.0726 0x29fc  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\Windows\system32\drivers\rspndr.sys
18:02:56.0742 0x29fc  rspndr - ok
18:02:56.0773 0x29fc  [ 12A3D1530E3F67B8664EBA923A3981E4, 8670C39EB0A7C37C17D014A8917493B776DE0829B55EFED13D91B6FA7B81CA11 ] rt640x64        C:\Windows\System32\drivers\rt640x64.sys
18:02:56.0795 0x29fc  rt640x64 - ok
18:02:56.0842 0x29fc  [ AB959F26FBB851A9D31E2F229DB3FA1A, 35961B761C83B48DBB9960C6DEC89806F3BC9FA0F450E566333ABE3F22E42AA9 ] RTSUER          C:\Windows\system32\Drivers\RtsUer.sys
18:02:56.0858 0x29fc  RTSUER - ok
18:02:56.0873 0x29fc  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys
18:02:56.0873 0x29fc  s3cap - ok
18:02:56.0895 0x29fc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs           C:\Windows\system32\lsass.exe
18:02:56.0911 0x29fc  SamSs - ok
18:02:56.0942 0x29fc  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
18:02:56.0942 0x29fc  sbp2port - ok
18:02:56.0973 0x29fc  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
18:02:56.0996 0x29fc  SCardSvr - ok
18:02:57.0027 0x29fc  [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
18:02:57.0043 0x29fc  ScDeviceEnum - ok
18:02:57.0074 0x29fc  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
18:02:57.0096 0x29fc  scfilter - ok
18:02:57.0127 0x29fc  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\Windows\system32\schedsvc.dll
18:02:57.0158 0x29fc  Schedule - ok
18:02:57.0190 0x29fc  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\Windows\system32\drivers\scmbus.sys
18:02:57.0196 0x29fc  scmbus - ok
18:02:57.0212 0x29fc  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101     C:\Windows\System32\drivers\scmdisk0101.sys
18:02:57.0227 0x29fc  scmdisk0101 - ok
18:02:57.0274 0x29fc  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] SCPolicySvc     C:\Windows\System32\certprop.dll
18:02:57.0292 0x29fc  SCPolicySvc - ok
18:02:57.0331 0x29fc  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\Windows\System32\drivers\sdbus.sys
18:02:57.0331 0x29fc  sdbus - ok
18:02:57.0363 0x29fc  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\Windows\System32\SDRSVC.dll
18:02:57.0378 0x29fc  SDRSVC - ok
18:02:57.0420 0x29fc  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
18:02:57.0435 0x29fc  sdstor - ok
18:02:57.0435 0x29fc  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\Windows\system32\seclogon.dll
18:02:57.0451 0x29fc  seclogon - ok
18:02:57.0467 0x29fc  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\Windows\System32\sens.dll
18:02:57.0482 0x29fc  SENS - ok
18:02:57.0504 0x29fc  Sense - ok
18:02:57.0552 0x29fc  [ CF2AEB951CFC56D4F6CF2D66218B673C, CEA0B0E0251EA198893830080EE4CB8A9F18ADBF1F6FEFFC9C7E8AB4588D0639 ] SensorDataService C:\Windows\System32\SensorDataService.exe
18:02:57.0583 0x29fc  SensorDataService - ok
18:02:57.0620 0x29fc  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService   C:\Windows\system32\SensorService.dll
18:02:57.0651 0x29fc  SensorService - ok
18:02:57.0667 0x29fc  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
18:02:57.0683 0x29fc  SensrSvc - ok
18:02:57.0721 0x29fc  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\Windows\system32\drivers\SerCx.sys
18:02:57.0721 0x29fc  SerCx - ok
18:02:57.0736 0x29fc  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
18:02:57.0752 0x29fc  SerCx2 - ok
18:02:57.0752 0x29fc  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\Windows\System32\drivers\serenum.sys
18:02:57.0767 0x29fc  Serenum - ok
18:02:57.0767 0x29fc  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\Windows\System32\drivers\serial.sys
18:02:57.0783 0x29fc  Serial - ok
18:02:57.0799 0x29fc  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\Windows\System32\drivers\sermouse.sys
18:02:57.0806 0x29fc  sermouse - ok
18:02:57.0821 0x29fc  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\Windows\system32\sessenv.dll
18:02:57.0837 0x29fc  SessionEnv - ok
18:02:57.0837 0x29fc  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys
18:02:57.0853 0x29fc  sfloppy - ok
18:02:57.0884 0x29fc  [ E38BE81F0F6D9C74E420A82BC6A02AFE, 25D7594FD1BE0B303F9777ACBA702ACD0C27B00D21F82659989C40636851A330 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
18:02:57.0906 0x29fc  SharedAccess - ok
18:02:57.0953 0x29fc  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:02:57.0984 0x29fc  ShellHWDetection - ok
18:02:58.0007 0x29fc  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
18:02:58.0023 0x29fc  shpamsvc - ok
18:02:58.0038 0x29fc  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
18:02:58.0054 0x29fc  SiSRaid2 - ok
18:02:58.0054 0x29fc  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
18:02:58.0070 0x29fc  SiSRaid4 - ok
18:02:58.0085 0x29fc  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost         C:\Windows\System32\smphost.dll
18:02:58.0107 0x29fc  smphost - ok
18:02:58.0138 0x29fc  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\Windows\system32\SmsRouterSvc.dll
18:02:58.0170 0x29fc  SmsRouter - ok
18:02:58.0205 0x29fc  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
18:02:58.0207 0x29fc  SNMPTRAP - ok
18:02:58.0254 0x29fc  [ 8BDB9E47D84144110F05AB757E630374, 8A49004895B8AD17C877AA8E7B6A0F14936BDDCBB88F0E5FB880DD0D816AEAB4 ] spaceport       C:\Windows\system32\drivers\spaceport.sys
18:02:58.0270 0x29fc  spaceport - ok
18:02:58.0285 0x29fc  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys
18:02:58.0308 0x29fc  SpbCx - ok
18:02:58.0339 0x29fc  [ 1DFE222F8D6A422B7ADC909E0C8840DA, 96761691CF4447710D65573044A1005F2F0F89443DF581A30B97D7944940BB70 ] Spooler         C:\Windows\System32\spoolsv.exe
18:02:58.0370 0x29fc  Spooler - ok
18:02:58.0623 0x29fc  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\Windows\system32\sppsvc.exe
18:02:58.0745 0x29fc  sppsvc - ok
18:02:58.0784 0x29fc  [ FD3C05C412BE1C9FA477AD9CF9B2AADB, 19BEF5B3A0DAF8227200C2294547A497021F0B2558211345BFFFD13678522592 ] srv             C:\Windows\system32\DRIVERS\srv.sys
18:02:58.0800 0x29fc  srv - ok
18:02:58.0831 0x29fc  [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
18:02:58.0869 0x29fc  srv2 - ok
18:02:58.0900 0x29fc  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
18:02:58.0915 0x29fc  srvnet - ok
18:02:58.0947 0x29fc  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
18:02:58.0969 0x29fc  SSDPSRV - ok
18:02:59.0000 0x29fc  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
18:02:59.0016 0x29fc  SstpSvc - ok
18:02:59.0047 0x29fc  [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
18:02:59.0068 0x29fc  ssudmdm - ok
18:02:59.0100 0x29fc  [ B6CCE8FE8E7E1B05F6D5EB52A3A70EAB, 0A44ABB277D4F599662C6B80260925CF497C850D3E46E960242A7B066B81F1E5 ] STacSV          C:\Program Files\IDT\WDM\STacSV64.exe
18:02:59.0132 0x29fc  STacSV - ok
18:02:59.0247 0x29fc  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\Windows\system32\windows.staterepository.dll
18:02:59.0369 0x29fc  StateRepository - ok
18:02:59.0385 0x29fc  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
18:02:59.0385 0x29fc  stexstor - ok
18:02:59.0432 0x29fc  [ 70FC67F49972EA0EFC60F65EA9A4B716, 6ABA13B625F4344E2AE302F24E840F58E385F62CED65B76BEEC9E07B91CC5F1A ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys
18:02:59.0448 0x29fc  STHDA - ok
18:02:59.0503 0x29fc  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\Windows\System32\wiaservc.dll
18:02:59.0535 0x29fc  stisvc - ok
18:02:59.0550 0x29fc  [ 6BC6023E866489D22CE30E18846B80D9, FD0D13332F3E267524A9FA7FEC128298D4905722807C172AE8E3DFE445C28DB1 ] storahci        C:\Windows\system32\drivers\storahci.sys
18:02:59.0572 0x29fc  storahci - ok
18:02:59.0572 0x29fc  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
18:02:59.0588 0x29fc  storflt - ok
18:02:59.0619 0x29fc  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\Windows\system32\drivers\stornvme.sys
18:02:59.0619 0x29fc  stornvme - ok
18:02:59.0650 0x29fc  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
18:02:59.0673 0x29fc  storqosflt - ok
18:02:59.0688 0x29fc  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc         C:\Windows\system32\storsvc.dll
18:02:59.0704 0x29fc  StorSvc - ok
18:02:59.0719 0x29fc  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\Windows\system32\drivers\storufs.sys
18:02:59.0719 0x29fc  storufs - ok
18:02:59.0735 0x29fc  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
18:02:59.0735 0x29fc  storvsc - ok
18:02:59.0751 0x29fc  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\Windows\system32\svsvc.dll
18:02:59.0773 0x29fc  svsvc - ok
18:02:59.0788 0x29fc  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\Windows\System32\drivers\swenum.sys
18:02:59.0788 0x29fc  swenum - ok
18:02:59.0820 0x29fc  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\Windows\System32\swprv.dll
18:02:59.0835 0x29fc  swprv - ok
18:02:59.0869 0x29fc  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
18:02:59.0873 0x29fc  Synth3dVsc - ok
18:02:59.0904 0x29fc  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\Windows\system32\sysmain.dll
18:02:59.0951 0x29fc  SysMain - ok
18:02:59.0973 0x29fc  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
18:03:00.0004 0x29fc  SystemEventsBroker - ok
18:03:00.0020 0x29fc  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:03:00.0035 0x29fc  TabletInputService - ok
18:03:00.0051 0x29fc  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\Windows\System32\tapisrv.dll
18:03:00.0073 0x29fc  TapiSrv - ok
18:03:00.0151 0x29fc  [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
18:03:00.0205 0x29fc  Tcpip - ok
18:03:00.0274 0x29fc  [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
18:03:00.0321 0x29fc  Tcpip6 - ok
18:03:00.0352 0x29fc  [ EC9450227A4C661513661F1F9C1F7DD6, 4DB122DECEA7C76BD20A6682958609A40CA2C9EDD236DFA19E9B31C57114DA3A ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
18:03:00.0371 0x29fc  tcpipreg - ok
18:03:00.0374 0x29fc  [ 0B237F8A96952BF95A14865030E131F2, 263089672218D3A768A6FC9D28DBEFE113D6757A9ECBAB4D364A62AC5DDA8AAE ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
18:03:00.0390 0x29fc  tdx - ok
18:03:00.0421 0x29fc  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
18:03:00.0421 0x29fc  terminpt - ok
18:03:00.0474 0x29fc  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\Windows\System32\termsrv.dll
18:03:00.0506 0x29fc  TermService - ok
18:03:00.0506 0x29fc  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\Windows\system32\themeservice.dll
18:03:00.0537 0x29fc  Themes - ok
18:03:00.0569 0x29fc  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
18:03:00.0590 0x29fc  TieringEngineService - ok
18:03:00.0590 0x29fc  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
18:03:00.0621 0x29fc  tiledatamodelsvc - ok
18:03:00.0621 0x29fc  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\Windows\System32\TimeBrokerServer.dll
18:03:00.0637 0x29fc  TimeBrokerSvc - ok
18:03:00.0653 0x29fc  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\Windows\System32\drivers\tpm.sys
18:03:00.0675 0x29fc  TPM - ok
18:03:00.0675 0x29fc  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\Windows\System32\trkwks.dll
18:03:00.0690 0x29fc  TrkWks - ok
18:03:00.0737 0x29fc  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:03:00.0753 0x29fc  TrustedInstaller - ok
18:03:00.0778 0x29fc  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\Windows\system32\drivers\TsUsbFlt.sys
18:03:00.0778 0x29fc  tsusbflt - ok
18:03:00.0778 0x29fc  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys
18:03:00.0794 0x29fc  TsUsbGD - ok
18:03:00.0794 0x29fc  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
18:03:00.0809 0x29fc  tsusbhub - ok
18:03:00.0841 0x29fc  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
18:03:00.0856 0x29fc  tunnel - ok
18:03:00.0878 0x29fc  [ 13781908186770ABE9F8EBCC2B45B138, 4BEC8466254E0C6492CC55CE344A6173878CFA040238C6BE5842E5209F066DEE ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
18:03:00.0894 0x29fc  tzautoupdate - ok
18:03:00.0909 0x29fc  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
18:03:00.0925 0x29fc  UASPStor - ok
18:03:00.0940 0x29fc  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\Windows\system32\Drivers\UcmCx.sys
18:03:00.0956 0x29fc  UcmCx0101 - ok
18:03:00.0956 0x29fc  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
18:03:00.0977 0x29fc  UcmTcpciCx0101 - ok
18:03:00.0978 0x29fc  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\Windows\System32\drivers\UcmUcsi.sys
18:03:00.0978 0x29fc  UcmUcsi - ok
18:03:01.0010 0x29fc  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
18:03:01.0010 0x29fc  Ucx01000 - ok
18:03:01.0025 0x29fc  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\Windows\system32\drivers\udecx.sys
18:03:01.0025 0x29fc  UdeCx - ok
18:03:01.0041 0x29fc  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
18:03:01.0057 0x29fc  udfs - ok
18:03:01.0057 0x29fc  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
18:03:01.0079 0x29fc  UEFI - ok
18:03:01.0079 0x29fc  [ 166B17AE1DD24D8BA8CA474C7C31148F, D34E786277093278F58EFAC957279DC4ED43A190538C875B80F5B1E0A0C30381 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
18:03:01.0079 0x29fc  UevAgentDriver - ok
18:03:01.0141 0x29fc  [ FCA4D901FB9934DAB82ED31C4EE89A11, 8EDF8DD71C13DE77AC83D1086670E9E90C69DE379F1CF768C8B9C789254C04AA ] UevAgentService C:\Windows\system32\AgentService.exe
18:03:01.0182 0x29fc  UevAgentService - ok
18:03:01.0198 0x29fc  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
18:03:01.0213 0x29fc  Ufx01000 - ok
18:03:01.0229 0x29fc  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea     C:\Windows\System32\drivers\UfxChipidea.sys
18:03:01.0245 0x29fc  UfxChipidea - ok
18:03:01.0245 0x29fc  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys     C:\Windows\System32\drivers\ufxsynopsys.sys
18:03:01.0260 0x29fc  ufxsynopsys - ok
18:03:01.0282 0x29fc  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
18:03:01.0297 0x29fc  UI0Detect - ok
18:03:01.0297 0x29fc  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus           C:\Windows\System32\drivers\umbus.sys
18:03:01.0313 0x29fc  umbus - ok
18:03:01.0329 0x29fc  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\Windows\System32\drivers\umpass.sys
18:03:01.0329 0x29fc  UmPass - ok
18:03:01.0360 0x29fc  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\Windows\System32\umrdp.dll
18:03:01.0379 0x29fc  UmRdpService - ok
18:03:01.0429 0x29fc  [ 4B956444AF2A352366CF59C3A4A87C64, B5FFAF5908DCF78DDA27EA1ABF2AFDD2BDD43FFC0259D847A7107B1597E22BD6 ] UnistoreSvc     C:\Windows\System32\unistore.dll
18:03:01.0461 0x29fc  UnistoreSvc - ok
18:03:01.0499 0x29fc  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\Windows\System32\upnphost.dll
18:03:01.0531 0x29fc  upnphost - ok
18:03:01.0531 0x29fc  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea     C:\Windows\System32\drivers\urschipidea.sys
18:03:01.0546 0x29fc  UrsChipidea - ok
18:03:01.0546 0x29fc  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
18:03:01.0546 0x29fc  UrsCx01000 - ok
18:03:01.0562 0x29fc  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys     C:\Windows\System32\drivers\urssynopsys.sys
18:03:01.0562 0x29fc  UrsSynopsys - ok
18:03:01.0584 0x29fc  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys
18:03:01.0584 0x29fc  usbccgp - ok
18:03:01.0615 0x29fc  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\Windows\System32\drivers\usbcir.sys
18:03:01.0631 0x29fc  usbcir - ok
18:03:01.0646 0x29fc  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci         C:\Windows\System32\drivers\usbehci.sys
18:03:01.0646 0x29fc  usbehci - ok
18:03:01.0684 0x29fc  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
18:03:01.0700 0x29fc  usbhub - ok
18:03:01.0715 0x29fc  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys
18:03:01.0731 0x29fc  USBHUB3 - ok
18:03:01.0746 0x29fc  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci         C:\Windows\System32\drivers\usbohci.sys
18:03:01.0762 0x29fc  usbohci - ok
18:03:01.0762 0x29fc  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
18:03:01.0778 0x29fc  usbprint - ok
18:03:01.0782 0x29fc  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\Windows\System32\drivers\usbser.sys
18:03:01.0784 0x29fc  usbser - ok
18:03:01.0800 0x29fc  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS
18:03:01.0815 0x29fc  USBSTOR - ok
18:03:01.0815 0x29fc  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys
18:03:01.0815 0x29fc  usbuhci - ok
18:03:01.0862 0x29fc  [ B4F448F2424492F99F83D3676A453553, 42F1396616EA93BF91EA847B185C321B189F1A5138CA19D22397E8DB6D576973 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
18:03:01.0878 0x29fc  usbvideo - ok
18:03:01.0900 0x29fc  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS
18:03:01.0916 0x29fc  USBXHCI - ok
18:03:01.0983 0x29fc  [ A39AFDD26E6F2E5595FF2D3997D7E1FE, 30DE54033DE437C16A069602529E63FF971AF0ABB383885E47B4DF5E0F8483AE ] UserDataSvc     C:\Windows\System32\userdataservice.dll
18:03:02.0032 0x29fc  UserDataSvc - ok
18:03:02.0063 0x29fc  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager     C:\Windows\System32\usermgr.dll
18:03:02.0101 0x29fc  UserManager - ok
18:03:02.0132 0x29fc  [ B6911F3CBA01ECC637B3891DFE5099DC, E3ECF7BE729E38C236716B4A4147A29CA7B2CD7CEC17AE50E18437E995D30781 ] UsoSvc          C:\Windows\system32\usocore.dll
18:03:02.0163 0x29fc  UsoSvc - ok
18:03:02.0179 0x29fc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\Windows\system32\lsass.exe
18:03:02.0185 0x29fc  VaultSvc - ok
18:03:02.0201 0x29fc  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
18:03:02.0201 0x29fc  vdrvroot - ok
18:03:02.0248 0x29fc  [ 2C5D96D0BB7EDEF9F2F8966A31007CCE, A8FB02E9E1B8ED5F2026534360C229DA7FC11BA209DE9C3222C65D0A9652FD3C ] vds             C:\Windows\System32\vds.exe
18:03:02.0263 0x29fc  vds - ok
18:03:02.0285 0x29fc  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys
18:03:02.0301 0x29fc  VerifierExt - ok
18:03:02.0332 0x29fc  [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys
18:03:02.0363 0x29fc  vhdmp - ok
18:03:02.0363 0x29fc  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf             C:\Windows\System32\drivers\vhf.sys
18:03:02.0381 0x29fc  vhf - ok
18:03:02.0385 0x29fc  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus           C:\Windows\system32\drivers\vmbus.sys
18:03:02.0385 0x29fc  vmbus - ok
18:03:02.0385 0x29fc  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
18:03:02.0401 0x29fc  VMBusHID - ok
18:03:02.0416 0x29fc  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid           C:\Windows\System32\drivers\vmgid.sys
18:03:02.0432 0x29fc  vmgid - ok
18:03:02.0463 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\Windows\System32\icsvc.dll
18:03:02.0485 0x29fc  vmicguestinterface - ok
18:03:02.0501 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat   C:\Windows\System32\icsvc.dll
18:03:02.0517 0x29fc  vmicheartbeat - ok
18:03:02.0517 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\Windows\System32\icsvc.dll
18:03:02.0532 0x29fc  vmickvpexchange - ok
18:03:02.0564 0x29fc  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicrdv         C:\Windows\System32\icsvcext.dll
18:03:02.0586 0x29fc  vmicrdv - ok
18:03:02.0601 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\Windows\System32\icsvc.dll
18:03:02.0617 0x29fc  vmicshutdown - ok
18:03:02.0617 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\Windows\System32\icsvc.dll
18:03:02.0633 0x29fc  vmictimesync - ok
18:03:02.0648 0x29fc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession   C:\Windows\System32\icsvc.dll
18:03:02.0664 0x29fc  vmicvmsession - ok
18:03:02.0686 0x29fc  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicvss         C:\Windows\System32\icsvcext.dll
18:03:02.0701 0x29fc  vmicvss - ok
18:03:02.0717 0x29fc  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
18:03:02.0717 0x29fc  volmgr - ok
18:03:02.0748 0x29fc  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
18:03:02.0764 0x29fc  volmgrx - ok
18:03:02.0784 0x29fc  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
18:03:02.0786 0x29fc  volsnap - ok
18:03:02.0802 0x29fc  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\Windows\system32\drivers\volume.sys
18:03:02.0802 0x29fc  volume - ok
18:03:02.0833 0x29fc  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\Windows\System32\drivers\vpci.sys
18:03:02.0833 0x29fc  vpci - ok
18:03:02.0864 0x29fc  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
18:03:02.0864 0x29fc  vsmraid - ok
18:03:02.0917 0x29fc  [ 6DBB20053A67EFE5D8114CE93D12BEB3, B48997FADA4A600FEBFE36B249684E9CAF01570BAD36ED1FC9DA99F2D100638E ] VSS             C:\Windows\system32\vssvc.exe
18:03:02.0964 0x29fc  VSS - ok
18:03:02.0986 0x29fc  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
18:03:03.0002 0x29fc  VSTXRAID - ok
18:03:03.0017 0x29fc  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
18:03:03.0033 0x29fc  vwifibus - ok
18:03:03.0049 0x29fc  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
18:03:03.0049 0x29fc  vwififlt - ok
18:03:03.0064 0x29fc  [ 59920894C38A827091A06AF559834E47, 8B40FE0B1BA3B2A79BFF70803D039DB921F85C978724722E5E5AFF188FA75471 ] vwifimp         C:\Windows\System32\drivers\vwifimp.sys
18:03:03.0064 0x29fc  vwifimp - ok
18:03:03.0102 0x29fc  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time         C:\Windows\system32\w32time.dll
18:03:03.0118 0x29fc  W32Time - ok
18:03:03.0133 0x29fc  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
18:03:03.0149 0x29fc  WacomPen - ok
18:03:03.0165 0x29fc  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService   C:\Windows\system32\WalletService.dll
18:03:03.0186 0x29fc  WalletService - ok
18:03:03.0202 0x29fc  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
18:03:03.0218 0x29fc  wanarp - ok
18:03:03.0234 0x29fc  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
18:03:03.0249 0x29fc  wanarpv6 - ok
18:03:03.0286 0x29fc  [ 68CC5E83B6F220F5BD7B5BC394917505, 24A793E1293608D1D1DB9396627DBF5FE66C9EFD1D49CCCD832CF1762B4E0E7D ] wbengine        C:\Windows\system32\wbengine.exe
18:03:03.0334 0x29fc  wbengine - ok
18:03:03.0365 0x29fc  [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
18:03:03.0403 0x29fc  WbioSrvc - ok
18:03:03.0434 0x29fc  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs           C:\Windows\system32\drivers\wcifs.sys
18:03:03.0434 0x29fc  wcifs - ok
18:03:03.0465 0x29fc  [ CA10C91D802ABE6E5136E2168C2CD2B4, 5979FF9ED783ED3154257ED0507C7BBAF8C77C081CC30AE835EA8AF7508AAD08 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
18:03:03.0503 0x29fc  Wcmsvc - ok
18:03:03.0519 0x29fc  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc         C:\Windows\System32\wcncsvc.dll
18:03:03.0550 0x29fc  wcncsvc - ok
18:03:03.0582 0x29fc  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs           C:\Windows\system32\drivers\wcnfs.sys
18:03:03.0587 0x29fc  wcnfs - ok
18:03:03.0587 0x29fc  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
18:03:03.0603 0x29fc  WdBoot - ok
18:03:03.0650 0x29fc  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
18:03:03.0665 0x29fc  Wdf01000 - ok
18:03:03.0688 0x29fc  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
18:03:03.0688 0x29fc  WdFilter - ok
18:03:03.0704 0x29fc  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\Windows\system32\wdi.dll
18:03:03.0719 0x29fc  WdiServiceHost - ok
18:03:03.0719 0x29fc  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost   C:\Windows\system32\wdi.dll
18:03:03.0751 0x29fc  WdiSystemHost - ok
18:03:03.0784 0x29fc  [ EDC08B8D3E67F96688774841C247B82A, DB5AFAF87C74431B8EB5420DBF5428691F291B63C2FDE8282EE2E399C76F63F3 ] wdiwifi         C:\Windows\system32\DRIVERS\wdiwifi.sys
18:03:03.0804 0x29fc  wdiwifi - ok
18:03:03.0804 0x29fc  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
18:03:03.0820 0x29fc  WdNisDrv - ok
18:03:03.0835 0x29fc  WdNisSvc - ok
18:03:03.0851 0x29fc  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient       C:\Windows\System32\webclnt.dll
18:03:03.0883 0x29fc  WebClient - ok
18:03:03.0889 0x29fc  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\Windows\system32\wecsvc.dll
18:03:03.0920 0x29fc  Wecsvc - ok
18:03:03.0920 0x29fc  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
18:03:03.0935 0x29fc  WEPHOSTSVC - ok
18:03:03.0951 0x29fc  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport   C:\Windows\System32\wercplsupport.dll
18:03:03.0967 0x29fc  wercplsupport - ok
18:03:03.0982 0x29fc  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\Windows\System32\WerSvc.dll
18:03:03.0989 0x29fc  WerSvc - ok
18:03:04.0004 0x29fc  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS         C:\Windows\system32\drivers\wfplwfs.sys
18:03:04.0020 0x29fc  WFPLWFS - ok
18:03:04.0020 0x29fc  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\Windows\System32\wiarpc.dll
18:03:04.0036 0x29fc  WiaRpc - ok
18:03:04.0051 0x29fc  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
18:03:04.0051 0x29fc  WIMMount - ok
18:03:04.0051 0x29fc  WinDefend - ok
18:03:04.0067 0x29fc  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
18:03:04.0089 0x29fc  WindowsTrustedRT - ok
18:03:04.0105 0x29fc  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
18:03:04.0105 0x29fc  WindowsTrustedRTProxy - ok
18:03:04.0136 0x29fc  [ 4AB1AC1E60118443A14C241F91AC8FC9, 2B9237AC124874664E31B4F313BAAF8059BD0749653496784B4B89B4B7F66784 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
18:03:04.0167 0x29fc  WinHttpAutoProxySvc - ok
18:03:04.0205 0x29fc  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\Windows\System32\drivers\winmad.sys
18:03:04.0205 0x29fc  WinMad - ok
18:03:04.0252 0x29fc  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
18:03:04.0267 0x29fc  Winmgmt - ok
18:03:04.0369 0x29fc  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM           C:\Windows\system32\WsmSvc.dll
18:03:04.0438 0x29fc  WinRM - ok
18:03:04.0470 0x29fc  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
18:03:04.0492 0x29fc  WINUSB - ok
18:03:04.0507 0x29fc  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
18:03:04.0507 0x29fc  WinVerbs - ok
18:03:04.0539 0x29fc  [ 78EA65739A50969CD5FC2E71B9B7697A, C442BE91CE5D4F301368915CFBE055233DD1FB8BDBEBD51CD00DC2C7770C8EE3 ] wisvc           C:\Windows\system32\flightsettings.dll
18:03:04.0554 0x29fc  wisvc - ok
18:03:04.0623 0x29fc  [ 5A7AA8198156DC2BFF9F064E29D11AF5, 9CBAF1B99B54CDE087E0FC0A2601B3F056F81F2F5AF63B5BB71C7389247E496A ] WlanSvc         C:\Windows\System32\wlansvc.dll
18:03:04.0707 0x29fc  WlanSvc - ok
18:03:04.0770 0x29fc  [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc         C:\Windows\system32\wlidsvc.dll
18:03:04.0839 0x29fc  wlidsvc - ok
18:03:04.0854 0x29fc  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys
18:03:04.0870 0x29fc  WmiAcpi - ok
18:03:04.0892 0x29fc  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
18:03:04.0907 0x29fc  wmiApSrv - ok
18:03:04.0923 0x29fc  WMPNetworkSvc - ok
18:03:04.0954 0x29fc  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof             C:\Windows\system32\drivers\Wof.sys
18:03:04.0954 0x29fc  Wof - ok
18:03:05.0039 0x29fc  [ 5820CC51AB1C368F29ECCA713397D006, AA0CC2BC4DF7DBFB144FF47C3508BEEF00467C9D312C135AFB3406E42C6CD821 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
18:03:05.0092 0x29fc  workfolderssvc - ok
18:03:05.0108 0x29fc  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
18:03:05.0123 0x29fc  WPDBusEnum - ok
18:03:05.0139 0x29fc  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys
18:03:05.0155 0x29fc  WpdUpFltr - ok
18:03:05.0170 0x29fc  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\Windows\system32\WpnService.dll
18:03:05.0193 0x29fc  WpnService - ok
18:03:05.0239 0x29fc  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\Windows\System32\WpnUserService.dll
18:03:05.0255 0x29fc  WpnUserService - ok
18:03:05.0271 0x29fc  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
18:03:05.0271 0x29fc  ws2ifsl - ok
18:03:05.0308 0x29fc  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\Windows\System32\wscsvc.dll
18:03:05.0324 0x29fc  wscsvc - ok
18:03:05.0324 0x29fc  WSearch - ok
18:03:05.0393 0x29fc  [ 10C4A0CDACAD054C90288D718615B4BA, 76CD5BF3B97DC306B17AB65E1CD841180C6FD147F2CC9EE6A757C27E3AB2D231 ] wuauserv        C:\Windows\system32\wuaueng.dll
18:03:05.0471 0x29fc  wuauserv - ok
18:03:05.0492 0x29fc  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
18:03:05.0492 0x29fc  WudfPf - ok
18:03:05.0508 0x29fc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\Windows\system32\drivers\WudfRd.sys
18:03:05.0524 0x29fc  WUDFRd - ok
18:03:05.0555 0x29fc  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
18:03:05.0571 0x29fc  wudfsvc - ok
18:03:05.0596 0x29fc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys
18:03:05.0612 0x29fc  WUDFWpdFs - ok
18:03:05.0612 0x29fc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
18:03:05.0628 0x29fc  WUDFWpdMtp - ok
18:03:05.0675 0x29fc  [ D313FF382A26D1295B212A66EE3E52A8, 59FEF2AF611507BCB6FE036A7D4F1595F3449B76F9B055CDC67DC1BE1D90EEB8 ] WwanSvc         C:\Windows\System32\wwansvc.dll
18:03:05.0712 0x29fc  WwanSvc - ok
18:03:05.0775 0x29fc  [ 7EF75102A793AAA6AAA45A4F7C15FF4D, A3FB68905F3E3A7DE52B85FAD966ABCB787FAC7E709964CE9BF2A4F9AC8B0653 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
18:03:05.0813 0x29fc  XblAuthManager - ok
18:03:05.0844 0x29fc  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave     C:\Windows\System32\XblGameSave.dll
18:03:05.0895 0x29fc  XblGameSave - ok
18:03:05.0913 0x29fc  [ DB77764B46D02DCB9777D9E00A3F7D63, 469491E3A57FBB0CB0482A2493823B57410E24A5BD4C1C96D79FE9888F7827BB ] xboxgip         C:\Windows\System32\drivers\xboxgip.sys
18:03:05.0929 0x29fc  xboxgip - ok
18:03:05.0975 0x29fc  [ 1A8D9EA4DD1A3E276B85EDB05B42BEC7, 23FC10AC29BDF917AEDB3AAF82537EC2C72453E52B41836FD83643054FA4F0BE ] XboxNetApiSvc   C:\Windows\system32\XboxNetApiSvc.dll
18:03:06.0013 0x29fc  XboxNetApiSvc - ok
18:03:06.0013 0x29fc  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\Windows\System32\drivers\xinputhid.sys
18:03:06.0029 0x29fc  xinputhid - ok
18:03:06.0029 0x29fc  ================ Scan global ===============================
18:03:06.0076 0x29fc  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\Windows\system32\basesrv.dll
18:03:06.0097 0x29fc  [ 1429740F64D4B84EC4F81C07F21EB3C6, CAD89934800F011736BB964126EFB75169B64AD6349859C3009F35C13371C44D ] C:\Windows\system32\winsrv.dll
18:03:06.0129 0x29fc  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\Windows\system32\sxssrv.dll
18:03:06.0160 0x29fc  [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\Windows\system32\services.exe
18:03:06.0176 0x29fc  [ Global ] - ok
18:03:06.0176 0x29fc  ================ Scan MBR ==================================
18:03:06.0176 0x29fc  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
18:03:06.0345 0x29fc  \Device\Harddisk0\DR0 - ok
18:03:06.0345 0x29fc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
18:03:06.0750 0x29fc  \Device\Harddisk1\DR1 - ok
18:03:06.0750 0x29fc  ================ Scan VBR ==================================
18:03:06.0750 0x29fc  [ 0C8FA3D52C4227FE43B539D3E5272772 ] \Device\Harddisk0\DR0\Partition1
18:03:06.0750 0x29fc  \Device\Harddisk0\DR0\Partition1 - ok
18:03:06.0781 0x29fc  [ 5B187FAE333A6CBB0B16031DC81C55BB ] \Device\Harddisk0\DR0\Partition2
18:03:06.0781 0x29fc  \Device\Harddisk0\DR0\Partition2 - ok
18:03:06.0781 0x29fc  [ 7088ED57E9CF39B2EC6EC0E522F484D6 ] \Device\Harddisk0\DR0\Partition3
18:03:06.0781 0x29fc  \Device\Harddisk0\DR0\Partition3 - ok
18:03:06.0801 0x29fc  [ 8346026449DF61C278E49883E5CB7CF6 ] \Device\Harddisk0\DR0\Partition4
18:03:06.0802 0x29fc  \Device\Harddisk0\DR0\Partition4 - ok
18:03:06.0804 0x29fc  [ F889D38C8ED3C4F9FB9624C7DAF9364A ] \Device\Harddisk1\DR1\Partition1
18:03:06.0804 0x29fc  \Device\Harddisk1\DR1\Partition1 - ok
18:03:06.0804 0x29fc  ================ Scan generic autorun ======================
18:03:06.0804 0x29fc  WindowsDefender - ok
18:03:06.0851 0x29fc  [ AB11EAC5C8755AE7EFA59F106B4A5B94, 315AAC08A9AD3135007E86068A1B4A102165F4792597EBFD386F0E191588C1DE ] C:\Program Files\DellTPad\Apoint.exe
18:03:06.0866 0x29fc  Apoint - ok
18:03:06.0882 0x29fc  [ C7645D43451C6D94D87F4D07BDE59C89, 495BBA47FC43EE23054FCD419F2F00457162D1C04296900C6AEA551102A810F3 ] C:\Windows\system32\rundll32.exe
18:03:06.0904 0x29fc  Logitech Download Assistant - ok
18:03:06.0904 0x29fc  [ C7645D43451C6D94D87F4D07BDE59C89, 495BBA47FC43EE23054FCD419F2F00457162D1C04296900C6AEA551102A810F3 ] C:\Windows\system32\rundll32.exe
18:03:06.0919 0x29fc  ShadowPlay - ok
18:03:06.0982 0x29fc  [ 1FECAA856135E8095947A1A5407D9A9A, 5A7C39137FE9ED466D4D5E25AF75216A1CB2D2BD1334632E94E09EABA2DEBF86 ] C:\Program Files\IDT\WDM\sttray64.exe
18:03:07.0035 0x29fc  SysTrayApp - ok
18:03:07.0102 0x29fc  [ BAD24090378CD1D9D70DD21CF21D1BFB, A5FB5F8DCF33BB252304D6DA7CB62906E5A437A561A066A647C8D199EE3C57B8 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
18:03:07.0135 0x29fc  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
18:03:07.0320 0x29fc  Detect skipped due to KSN trusted
18:03:07.0320 0x29fc  IAStorIcon - ok
18:03:07.0602 0x29fc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
18:03:07.0841 0x29fc  OneDriveSetup - ok
18:03:08.0063 0x29fc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
18:03:08.0221 0x29fc  OneDriveSetup - ok
18:03:08.0410 0x29fc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
18:03:08.0567 0x29fc  OneDriveSetup - ok
18:03:08.0683 0x29fc  [ AAE92457F50F4DD74E2D502ADB9549EE, 70C8FBE410FE388D6B85334215EBE3393C16E8F8B19F5A8BA50DB6DF23196D50 ] C:\Users\Margo\AppData\Local\Microsoft\OneDrive\OneDrive.exe
18:03:08.0718 0x29fc  OneDrive - ok
18:03:08.0736 0x29fc  [ 6E5E2EF142A16519555EC00CEC282C0A, 636828B64F46E67291144BA35220971DAAC493EDF900E071AB7179E02C09171C ] C:\Program Files (x86)\VLC Updater\vlc-updater.exe
18:03:08.0752 0x29fc  VLC Updater - ok
18:03:08.0752 0x29fc  Waiting for KSN requests completion. In queue: 234
18:03:09.0759 0x29fc  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
18:03:09.0828 0x29fc  Win FW state via NFP2: enabled ( trusted )
18:03:09.0975 0x29fc  ============================================================
18:03:09.0975 0x29fc  Scan finished
18:03:09.0975 0x29fc  ============================================================
18:03:09.0975 0x2384  Detected object count: 0
18:03:09.0975 0x2384  Actual detected object count: 0

Soweit ich aus den Logdateien erkennen kann, wurde nur die Partition C, auf der mein Windows installiert ist, überprüft. Da ich auf dieser Partition eine Neuinstallation gemacht habe, erwarte ich auch keine Schädlinge. Wie in meinem obigen Post erwähnt, würde ich gerne die zweite Partition mit meinen Daten überprüfen, ggf. auch meine externe Festplatte. Kann dies auch mit den beiden Tools FRST und TDSSKiller erfolgen?

Viele Grüße
Kisska

M-K-D-B · 04.04.2017, 20:51

Servus,

Zitat:

Soweit ich aus den Logdateien erkennen kann, wurde nur die Partition C, auf der mein Windows installiert ist, überprüft. Da ich auf dieser Partition eine Neuinstallation gemacht habe, erwarte ich auch keine Schädlinge.

Trotzdem warst du unvorsichtig und hast dich wieder mit Adware infiziert.

Zitat:

ie in meinem obigen Post erwähnt, würde ich gerne die zweite Partition mit meinen Daten überprüfen, ggf. auch meine externe Festplatte. Kann dies auch mit den beiden Tools FRST und TDSSKiller erfolgen?

Nein, dafür verwenden wir andere Tools. Dies machen wir jedoch erst, wenn die Partition C sauber ist, keine Sorge.

Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel
- "Prefetch" Dateien
- Proxy
- Winsock
- Firewall
- Internet Explorer Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware 3

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Starte die FRST erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die beiden neuen Logdateien von FRST.

Kisska · 05.04.2017, 01:46

Oh man, unglaublich wie schnell ich mir Adware eingefangen habe :/

Schön, dass es Mensch wie dich gibt, die so etwas erkennen und Hilfe anbieten. Danke!

Anbei das Ergebnis von AdwCleaner:

Code:

ATTFilter

# AdwCleaner v6.045 - Bericht erstellt am 05/04/2017 um 01:15:42
# Aktualisiert am 28/03/2017 von Malwarebytes
# Datenbank : 2017-04-04.2 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : Margo - MARGO-PC
# Gestartet von : C:\Users\Margo\Desktop\AdwCleaner_6.045.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC UPDATER
[-] Ordner gelöscht: C:\Program Files (x86)\VLC UPDATER
[-] Ordner gelöscht: C:\Users\Margo\AppData\Local\Temp\BROWSERADDON


***** [ Dateien ] *****

[-] Datei gelöscht: C:\Users\Margo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster Symbol.lnk
[-] Datei gelöscht: C:\Users\Margo\AppData\Local\Temp\VLC Player\startfenster-symbol.exe


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC Updater
[-] Wert gelöscht: HKU\S-1-5-21-2190986405-3282524184-141134257-1001\Software\Microsoft\Windows\CurrentVersion\Run [VLC Updater]
[-] Wert gelöscht: HKU\S-1-5-21-2190986405-3282524184-141134257-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [VLC Updater]
[#] Wert mit Neustart gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [VLC Updater]
[#] Wert mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [VLC Updater]
[-] Wert gelöscht: HKCU\Software\AM [Startfenster Symbol]
[-] Wert gelöscht: HKCU\Software\AM [VLC Updater]


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Firewall Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2156 Bytes] - [05/04/2017 01:15:42]
C:\AdwCleaner\AdwCleaner[S0].txt - [2267 Bytes] - [05/04/2017 01:14:12]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2302 Bytes] ##########

Anbei das Ergebnis von MBAM:

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 05.04.17
Scan-Zeit: 01:34
Protokolldatei: mbam.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.96
Version des Aktualisierungspakets: 1.0.1660
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: MARGO-PC\Margo

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 405033
Abgelaufene Zeit: 1 Min., 48 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.StartFenster, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\djhangopedggnlnicpbjklghlckmndge, In Quarantäne, [2696], [354303],1.0.1660

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 1
PUP.Optional.VLCUpdaterDE, C:\USERS\MARGO\APPDATA\LOCAL\TEMP\VLC PLAYER\UPDATER.EXE, In Quarantäne, [2528], [353736],1.0.1660

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

Sollen die Bedrohungen nun gelöscht werden?
Oder soll ich den VLC-Player lieber gleich deinstallieren? Ich habe es nur installiert, weil ich zunächst irrtümlich gedacht habe, dass es bei Win 10 keinen MediaPlayer mehr gibt.

Kisska · 05.04.2017, 01:59

Anbei das Ergebnis von FRST - Teil 1:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Margo (Administrator) auf MARGO-PC (05-04-2017 01:47:35)
Gestartet von C:\Users\Margo\Desktop
Geladene Profile: Margo (Verfügbare Profile: defaultuser0 & Margo)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.7870.2031\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [717688 2015-11-18] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-06] (IDT, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{c8006aa6-f40d-4bb9-b578-5700ded48c46}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-04-01] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-04-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-04-01] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-04-01] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-04-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-04-01] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3704520 2017-02-18] (Microsoft Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319080 2015-12-10] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-03-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-03-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-03-17] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-03-17] (NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-03-24] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-04-05] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-04-05] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-04-05] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-04-05] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [92096 2017-04-05] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvlddmkm.sys [14574640 2017-03-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2017-03-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47672 2017-03-17] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [59448 2017-03-17] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek                                            )
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [752856 2015-05-29] (Realsil Semiconductor Corporation)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-05 01:41 - 2017-04-05 01:41 - 00001441 _____ C:\Users\Margo\Desktop\mbam.txt
2017-04-05 01:40 - 2017-04-05 01:40 - 00000000 ___HD C:\OneDriveTemp
2017-04-05 01:33 - 2017-04-05 01:38 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-04-05 01:33 - 2017-04-05 01:38 - 00111544 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-04-05 01:33 - 2017-04-05 01:38 - 00092096 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-04-05 01:33 - 2017-04-05 01:38 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-04-05 01:33 - 2017-04-05 01:33 - 00186304 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-04-05 01:33 - 2017-04-05 01:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-04-05 01:33 - 2017-04-05 01:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-04-05 01:33 - 2017-04-05 01:33 - 00000000 ____D C:\Program Files\Malwarebytes
2017-04-05 01:33 - 2017-03-24 04:10 - 00077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-04-05 01:32 - 2017-04-05 01:32 - 00000000 ____D C:\Users\Margo\Downloads\Malwarebytes Anti-Malware 3
2017-04-05 01:11 - 2017-04-05 01:15 - 00000000 ____D C:\AdwCleaner
2017-04-05 01:09 - 2017-04-05 01:10 - 00000220 _____ C:\Users\Margo\Documents\Outlook - OST to PST.txt
2017-04-05 00:57 - 2017-04-05 01:11 - 04089296 _____ C:\Users\Margo\Desktop\AdwCleaner_6.045.exe
2017-04-05 00:56 - 2017-04-05 00:56 - 00000743 _____ C:\Users\Margo\Documents\Bilder - Verknüpfung.lnk
2017-04-04 18:04 - 2017-04-04 18:05 - 00131958 _____ C:\Users\Margo\Desktop\tdsskiller_Report.txt
2017-04-04 18:01 - 2017-04-04 18:20 - 00264006 _____ C:\TDSSKiller.3.1.0.12_04.04.2017_18.01.14_log.txt
2017-04-04 17:58 - 2017-04-04 17:58 - 01363703 _____ C:\Users\Margo\Desktop\Anleitung_TDSSKiller.pdf
2017-04-04 17:57 - 2017-04-04 18:01 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Margo\Desktop\tdsskiller.exe
2017-04-04 17:23 - 2017-04-04 17:24 - 00031465 _____ C:\Users\Margo\Desktop\Addition.txt
2017-04-04 17:22 - 2017-04-05 01:49 - 00012857 _____ C:\Users\Margo\Desktop\FRST.txt
2017-04-04 17:21 - 2017-04-05 01:47 - 00000000 ____D C:\FRST
2017-04-04 17:18 - 2017-04-04 17:20 - 02424832 _____ (Farbar) C:\Users\Margo\Desktop\FRST64.exe
2017-04-03 01:12 - 2017-04-03 01:12 - 00000000 ____D C:\Users\Margo\AppData\LocalLow\Temp
2017-04-02 23:58 - 2017-04-04 17:44 - 00000000 ____D C:\Users\Margo\Documents\Outlook-Dateien
2017-04-02 18:27 - 2017-04-02 18:27 - 00000000 ____D C:\Users\Margo\Documents\Benutzerdefinierte Office-Vorlagen
2017-04-02 14:05 - 2017-04-02 14:05 - 00000000 ____D C:\Users\Margo\AppData\Local\ElevatedDiagnostics
2017-04-01 22:16 - 2017-04-01 22:16 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002536 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-04-01 22:16 - 2017-04-01 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2017-04-01 22:09 - 2017-04-02 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-01 22:08 - 2017-04-01 22:08 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-04-01 22:07 - 2017-04-01 22:08 - 04035888 _____ (Microsoft Corporation) C:\Users\Margo\Downloads\Setup.x86.de-DE_ProPlusRetail_XXXXX-XXXXX-XXXXX-XXXXX-XXXXX_act_1_.exe
2017-04-01 11:28 - 2017-04-01 11:28 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-04-01 00:16 - 2017-04-01 00:16 - 00000000 ____D C:\Users\Margo\AppData\Local\PeerDistRepub
2017-03-31 17:58 - 2017-03-31 17:58 - 00079543 _____ C:\Users\Margo\Downloads\Briefmarken.1Stk.31.03.2017_1758.pdf
2017-03-31 16:12 - 2017-03-31 16:12 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-03-31 13:01 - 2017-03-31 13:01 - 00000000 ____D C:\Users\Margo\AppData\Local\CEF
2017-03-31 04:17 - 2017-03-31 04:17 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-03-31 02:40 - 2017-03-31 02:41 - 00000000 ____D C:\Windows\system32\MRT
2017-03-31 02:40 - 2017-03-31 02:40 - 138634176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-31 02:33 - 2017-03-04 09:57 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-03-31 02:33 - 2017-03-04 09:57 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-03-31 02:33 - 2017-03-04 09:44 - 01470816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-03-31 02:33 - 2017-03-04 09:40 - 00965472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2017-03-31 02:33 - 2017-03-04 09:24 - 00090976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2017-03-31 02:33 - 2017-03-04 09:09 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2017-03-31 02:33 - 2017-03-04 09:09 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2017-03-31 02:33 - 2017-03-04 09:09 - 00497416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-03-31 02:33 - 2017-03-04 09:08 - 00130912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-03-31 02:33 - 2017-03-04 09:07 - 00557400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-03-31 02:33 - 2017-03-04 09:04 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-03-31 02:33 - 2017-03-04 08:56 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-03-31 02:33 - 2017-03-04 08:56 - 00248992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2017-03-31 02:33 - 2017-03-04 08:54 - 02277288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-03-31 02:33 - 2017-03-04 08:54 - 00524776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 05722320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 02256080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-03-31 02:33 - 2017-03-04 08:53 - 00781152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-03-31 02:33 - 2017-03-04 08:53 - 00493912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-03-31 02:33 - 2017-03-04 08:52 - 00549088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2017-03-31 02:33 - 2017-03-04 08:52 - 00272720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-03-31 02:33 - 2017-03-04 08:51 - 01980768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-03-31 02:33 - 2017-03-04 08:51 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-03-31 02:33 - 2017-03-04 08:50 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 06667528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 04023000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01853224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01360456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01202384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00981376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00976184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00530480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-03-31 02:33 - 2017-03-04 08:47 - 00352760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-03-31 02:33 - 2017-03-04 08:46 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-03-31 02:33 - 2017-03-04 08:46 - 00321792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2017-03-31 02:33 - 2017-03-04 08:42 - 01415240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-03-31 02:33 - 2017-03-04 08:42 - 01260784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-03-31 02:33 - 2017-03-04 08:42 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-03-31 02:33 - 2017-03-04 08:36 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-03-31 02:33 - 2017-03-04 08:24 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-03-31 02:33 - 2017-03-04 08:23 - 00506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-03-31 02:33 - 2017-03-04 08:22 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2017-03-31 02:33 - 2017-03-04 08:21 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-03-31 02:33 - 2017-03-04 08:20 - 13873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-03-31 02:33 - 2017-03-04 08:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
2017-03-31 02:33 - 2017-03-04 08:19 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-03-31 02:33 - 2017-03-04 08:18 - 00819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 01456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-03-31 02:33 - 2017-03-04 08:16 - 00636928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-03-31 02:33 - 2017-03-04 08:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-03-31 02:33 - 2017-03-04 08:15 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-03-31 02:33 - 2017-03-04 08:15 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 04613120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-03-31 02:33 - 2017-03-04 08:13 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-03-31 02:33 - 2017-03-04 08:12 - 00884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-31 02:33 - 2017-03-04 08:11 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2017-03-31 02:33 - 2017-03-04 08:11 - 01137152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2017-03-31 02:33 - 2017-03-04 08:10 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-03-31 02:33 - 2017-03-04 08:10 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-03-31 02:33 - 2017-03-04 08:09 - 00570368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2017-03-31 02:33 - 2017-03-04 08:07 - 02748928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2017-03-31 02:33 - 2017-03-04 08:07 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-03-31 02:33 - 2017-03-04 08:06 - 02153984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2017-03-31 02:33 - 2017-03-04 08:05 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-03-31 02:33 - 2017-03-04 08:05 - 00545792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-03-31 02:33 - 2017-03-04 08:04 - 00719872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_sr.dll
2017-03-31 02:33 - 2017-03-04 08:04 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-03-31 02:33 - 2017-03-04 08:03 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 02740224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-03-31 02:33 - 2017-03-04 08:02 - 01004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01993216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01595904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01571840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-03-31 02:33 - 2017-03-04 08:01 - 00773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-03-31 02:33 - 2017-03-04 08:01 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 04557824 _____ (Microsoft) C:\Windows\SysWOW64\dbgeng.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 02996736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-03-31 02:33 - 2017-03-04 08:00 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 02003968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 01883648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 00862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-03-31 02:33 - 2017-03-04 08:00 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-03-31 02:33 - 2017-03-04 07:59 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2017-03-31 02:33 - 2017-03-04 07:57 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-03-31 02:33 - 2016-12-21 07:59 - 00218976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
2017-03-31 02:33 - 2016-12-21 06:40 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-03-31 02:33 - 2016-12-21 06:24 - 05061120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-03-31 02:33 - 2016-12-14 07:18 - 00715104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-03-31 02:33 - 2016-12-14 07:18 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2017-03-31 02:33 - 2016-12-14 07:08 - 00341344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-03-31 02:33 - 2016-12-14 07:01 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2017-03-31 02:33 - 2016-12-14 07:01 - 00076984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2017-03-31 02:33 - 2016-12-14 06:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2017-03-31 02:33 - 2016-12-14 06:40 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-03-31 02:33 - 2016-12-14 06:38 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll
2017-03-31 02:33 - 2016-12-14 06:32 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2017-03-31 02:33 - 2016-12-14 06:22 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2017-03-31 02:33 - 2016-12-09 12:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-03-31 02:33 - 2016-12-09 12:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-03-31 02:33 - 2016-12-09 12:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-03-31 02:33 - 2016-12-09 11:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-03-31 02:33 - 2016-12-09 11:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-03-31 02:33 - 2016-12-09 11:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2017-03-31 02:33 - 2016-12-09 11:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-03-31 02:33 - 2016-12-09 11:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2017-03-31 02:33 - 2016-11-11 12:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-03-31 02:33 - 2016-11-11 11:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2017-03-31 02:33 - 2016-11-11 09:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-31 02:33 - 2016-11-11 09:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2017-03-31 02:33 - 2016-11-11 09:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2017-03-31 02:33 - 2016-11-11 09:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
2017-03-31 02:33 - 2016-11-11 09:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2017-03-31 02:33 - 2016-11-11 09:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2017-03-31 02:33 - 2016-11-11 09:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-03-31 02:33 - 2016-11-11 09:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2017-03-31 02:33 - 2016-11-11 09:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-03-31 02:33 - 2016-11-11 09:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2017-03-31 02:33 - 2016-11-11 09:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-03-31 02:33 - 2016-11-11 09:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2017-03-31 02:33 - 2016-11-11 09:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-03-31 02:33 - 2016-11-11 09:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2017-03-31 02:33 - 2016-11-11 09:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2017-03-31 02:33 - 2016-11-11 09:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2017-03-31 02:33 - 2016-11-11 09:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2017-03-31 02:33 - 2016-11-11 09:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-03-31 02:33 - 2016-11-11 09:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2017-03-31 02:33 - 2016-11-11 09:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2017-03-31 02:33 - 2016-11-02 13:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-03-31 02:33 - 2016-11-02 13:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2017-03-31 02:33 - 2016-11-02 13:08 - 00186424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2017-03-31 02:33 - 2016-11-02 13:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-03-31 02:33 - 2016-11-02 13:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2017-03-31 02:33 - 2016-11-02 12:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2017-03-31 02:33 - 2016-11-02 12:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8.dll
2017-03-31 02:33 - 2016-11-02 12:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2017-03-31 02:33 - 2016-11-02 12:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2017-03-31 02:33 - 2016-11-02 12:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-03-31 02:33 - 2016-11-02 12:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2017-03-31 02:33 - 2016-11-02 12:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2017-03-31 02:33 - 2016-10-15 06:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-03-31 02:33 - 2016-10-15 06:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2017-03-31 02:33 - 2016-10-15 06:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2017-03-31 02:33 - 2016-10-15 05:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2017-03-31 02:33 - 2016-10-15 05:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2017-03-31 02:33 - 2016-10-15 05:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\hidclass.sys
2017-03-31 02:33 - 2016-10-15 05:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2017-03-31 02:33 - 2016-10-15 05:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2017-03-31 02:33 - 2016-10-15 05:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2017-03-31 02:33 - 2016-10-15 05:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-03-31 02:33 - 2016-10-15 05:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-03-31 02:33 - 2016-10-15 05:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-03-31 02:33 - 2016-10-15 05:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-03-31 02:33 - 2016-10-15 05:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2017-03-31 02:33 - 2016-10-05 12:35 - 00279904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-03-31 02:33 - 2016-10-05 12:16 - 00187232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-03-31 02:33 - 2016-10-05 12:09 - 00064352 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2017-03-31 02:33 - 2016-10-05 11:48 - 01022304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2017-03-31 02:33 - 2016-10-05 11:26 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovs.dll
2017-03-31 02:33 - 2016-09-15 19:37 - 00402352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2017-03-31 02:33 - 2016-09-15 19:33 - 00083120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2017-03-31 02:33 - 2016-09-15 19:29 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-03-31 02:33 - 2016-09-15 19:23 - 00170960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-03-31 02:33 - 2016-09-15 19:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TempSignedLicenseExchangeTask.dll
2017-03-31 02:33 - 2016-09-15 19:00 - 00554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-03-31 02:33 - 2016-09-15 18:58 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlancfg.dll
2017-03-31 02:33 - 2016-09-15 18:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00257536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DataExchange.dll
2017-03-31 02:33 - 2016-09-15 18:56 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManagerApi.dll
2017-03-31 02:33 - 2016-09-15 18:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-03-31 02:33 - 2016-09-15 18:55 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2017-03-31 02:33 - 2016-09-15 18:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2017-03-31 02:33 - 2016-09-15 18:54 - 00431104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
2017-03-31 02:33 - 2016-09-15 18:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
2017-03-31 02:33 - 2016-09-15 18:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-03-31 02:33 - 2016-09-15 18:41 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthA2DP.sys
2017-03-31 02:33 - 2016-09-15 18:40 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2017-03-31 02:33 - 2016-09-15 18:35 - 00331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2017-03-31 02:33 - 2016-09-07 07:29 - 00118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\EhStorTcgDrv.sys
2017-03-31 02:33 - 2016-09-07 06:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
2017-03-31 02:33 - 2016-09-07 06:36 - 02423296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
2017-03-31 02:33 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2017-03-31 02:33 - 2016-08-06 06:17 - 00790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-03-31 02:33 - 2016-08-06 05:44 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2017-03-31 02:33 - 2016-07-22 03:18 - 00297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
2017-03-31 02:32 - 2017-03-04 09:19 - 02049480 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-03-31 02:32 - 2017-03-04 09:09 - 07220696 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-03-31 02:32 - 2017-03-04 09:09 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-03-31 02:32 - 2017-03-04 09:09 - 00527808 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2017-03-31 02:32 - 2017-03-04 09:04 - 08169536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-03-31 02:32 - 2017-03-04 09:04 - 01362512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2017-03-31 02:32 - 2017-03-04 09:03 - 22223968 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-03-31 02:32 - 2017-03-04 09:02 - 00184416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL
2017-03-31 02:32 - 2017-03-04 08:53 - 00313568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2017-03-31 02:32 - 2017-03-04 08:53 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00640976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2017-03-31 02:32 - 2017-03-04 08:47 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2017-03-31 02:32 - 2017-03-04 08:45 - 00173408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-03-31 02:32 - 2017-03-04 08:45 - 00112120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2017-03-31 02:32 - 2017-03-04 08:42 - 00276832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2017-03-31 02:32 - 2017-03-04 08:40 - 00306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-03-31 02:32 - 2017-03-04 08:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-03-31 02:32 - 2017-03-04 08:34 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-03-31 02:32 - 2017-03-04 08:34 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-03-31 02:32 - 2017-03-04 08:34 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-03-31 02:32 - 2017-03-04 08:33 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.UI.GameBar.dll
2017-03-31 02:32 - 2017-03-04 08:32 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-03-31 02:32 - 2017-03-04 08:31 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-03-31 02:32 - 2017-03-04 08:31 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-03-31 02:32 - 2017-03-04 08:30 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2017-03-31 02:32 - 2017-03-04 08:30 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2017-03-31 02:32 - 2017-03-04 08:30 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfp.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XInputUap.dll
2017-03-31 02:32 - 2017-03-04 08:29 - 00019968 _____ C:\Windows\SysWOW64\GamePanelExternalHook.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 01507840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2017-03-31 02:32 - 2017-03-04 08:28 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-03-31 02:32 - 2017-03-04 08:27 - 00275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accountaccessor.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2017-03-31 02:32 - 2017-03-04 08:27 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.UI.GameBar.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2017-03-31 02:32 - 2017-03-04 08:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2017-03-31 02:32 - 2017-03-04 08:25 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-03-31 02:32 - 2017-03-04 08:25 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscandui.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCCSEngineShared.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
2017-03-31 02:32 - 2017-03-04 08:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 01293312 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfui.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-31 02:32 - 2017-03-04 08:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2017-03-31 02:32 - 2017-03-04 08:23 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00531456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DavSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-03-31 02:32 - 2017-03-04 08:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 01299968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00237568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-03-31 02:32 - 2017-03-04 08:22 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-03-31 02:32 - 2017-03-04 08:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00631296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl
2017-03-31 02:32 - 2017-03-04 08:21 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapi32.dll
2017-03-31 02:32 - 2017-03-04 08:21 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00632832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00424960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-03-31 02:32 - 2017-03-04 08:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00714752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-03-31 02:32 - 2017-03-04 08:19 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2017-03-31 02:32 - 2017-03-04 08:19 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 01231360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00896512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-03-31 02:32 - 2017-03-04 08:18 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-03-31 02:32 - 2017-03-04 08:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-03-31 02:32 - 2017-03-04 08:17 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-03-31 02:32 - 2017-03-04 08:17 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00968704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2017-03-31 02:32 - 2017-03-04 08:16 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2017-03-31 02:32 - 2017-03-04 08:16 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-03-31 02:32 - 2017-03-04 08:15 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
2017-03-31 02:32 - 2017-03-04 08:14 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-03-31 02:32 - 2017-03-04 08:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-03-31 02:32 - 2017-03-04 08:13 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 02458112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-03-31 02:32 - 2017-03-04 08:13 - 00256512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-03-31 02:32 - 2017-03-04 08:12 - 00700416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Search.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-03-31 02:32 - 2017-03-04 08:12 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 01357312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 01320448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2017-03-31 02:32 - 2017-03-04 08:11 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2017-03-31 02:32 - 2017-03-04 08:10 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-03-31 02:32 - 2017-03-04 08:10 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regedit.exe
2017-03-31 02:32 - 2017-03-04 08:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-03-31 02:32 - 2017-03-04 08:09 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommon.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 03405312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 01266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-03-31 02:32 - 2017-03-04 08:08 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-03-31 02:32 - 2017-03-04 08:07 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2017-03-31 02:32 - 2017-03-04 08:07 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 02538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-03-31 02:32 - 2017-03-04 08:06 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-03-31 02:32 - 2017-03-04 08:05 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 01133568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-03-31 02:32 - 2017-03-04 08:05 - 00089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CameraCaptureUI.dll
2017-03-31 02:32 - 2017-03-04 08:04 - 00753152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2017-03-31 02:32 - 2017-03-04 08:03 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2017-03-31 02:32 - 2017-03-04 08:03 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-03-31 02:32 - 2017-03-04 08:03 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01709056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVP9DEC.dll
2017-03-31 02:32 - 2017-03-04 08:02 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01293312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2017-03-31 02:32 - 2017-03-04 08:01 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 01154560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Pimstore.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00620544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00560640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2017-03-31 02:32 - 2017-03-04 08:01 - 00422400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2017-03-31 02:32 - 2017-03-04 08:00 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-03-31 02:32 - 2017-03-04 07:59 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-03-31 02:32 - 2017-03-04 07:57 - 00299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2017-03-31 02:32 - 2017-03-04 07:36 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-03-31 02:32 - 2017-02-22 04:17 - 00448285 _____ C:\Windows\system32\ApnDatabase.xml
2017-03-31 02:32 - 2016-12-21 06:43 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-03-31 02:32 - 2016-12-21 06:41 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2017-03-31 02:32 - 2016-12-21 06:40 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2017-03-31 02:32 - 2016-12-21 06:40 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-03-31 02:32 - 2016-12-21 06:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-03-31 02:32 - 2016-12-21 06:38 - 00866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2017-03-31 02:32 - 2016-12-21 06:30 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2017-03-31 02:32 - 2016-12-14 06:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2017-03-31 02:32 - 2016-12-14 06:39 - 00837632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2017-03-31 02:32 - 2016-12-14 06:35 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-03-31 02:32 - 2016-12-14 06:35 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2017-03-31 02:32 - 2016-12-09 11:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2017-03-31 02:32 - 2016-12-09 11:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2017-03-31 02:32 - 2016-12-09 11:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2017-03-31 02:32 - 2016-12-09 11:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2017-03-31 02:32 - 2016-12-09 11:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2017-03-31 02:32 - 2016-11-11 11:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2017-03-31 02:32 - 2016-11-11 11:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2017-03-31 02:32 - 2016-11-11 11:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2017-03-31 02:32 - 2016-11-11 10:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-03-31 02:32 - 2016-11-11 09:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2017-03-31 02:32 - 2016-11-11 09:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2017-03-31 02:32 - 2016-11-11 09:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
2017-03-31 02:32 - 2016-11-11 09:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2017-03-31 02:32 - 2016-11-11 09:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2017-03-31 02:32 - 2016-11-11 09:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-03-31 02:32 - 2016-11-11 09:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-03-31 02:32 - 2016-11-11 09:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-03-31 02:32 - 2016-11-11 09:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2017-03-31 02:32 - 2016-11-11 09:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2017-03-31 02:32 - 2016-11-11 09:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2017-03-31 02:32 - 2016-11-11 09:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2017-03-31 02:32 - 2016-11-11 09:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2017-03-31 02:32 - 2016-11-11 09:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2017-03-31 02:32 - 2016-11-02 13:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2017-03-31 02:32 - 2016-11-02 12:49 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-03-31 02:32 - 2016-11-02 12:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-03-31 02:32 - 2016-11-02 12:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efsext.dll
2017-03-31 02:32 - 2016-11-02 12:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2017-03-31 02:32 - 2016-11-02 12:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthExt.dll
2017-03-31 02:32 - 2016-11-02 12:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
2017-03-31 02:32 - 2016-11-02 12:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetailsUpdate.dll
2017-03-31 02:32 - 2016-11-02 12:35 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-03-31 02:32 - 2016-11-02 12:28 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chartv.dll
2017-03-31 02:32 - 2016-11-02 12:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-03-31 02:32 - 2016-11-02 12:26 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2017-03-31 02:32 - 2016-11-02 12:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2017-03-31 02:32 - 2016-10-15 06:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2017-03-31 02:32 - 2016-10-15 06:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
2017-03-31 02:32 - 2016-10-15 05:57 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2017-03-31 02:32 - 2016-10-15 05:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentutl.exe
2017-03-31 02:32 - 2016-10-15 05:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
2017-03-31 02:32 - 2016-10-15 05:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2017-03-31 02:32 - 2016-10-15 05:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2017-03-31 02:32 - 2016-10-15 05:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2017-03-31 02:32 - 2016-10-15 05:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-03-31 02:32 - 2016-10-15 05:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmifw.dll
2017-03-31 02:32 - 2016-10-05 11:50 - 00116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-03-31 02:32 - 2016-10-05 11:36 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2017-03-31 02:32 - 2016-10-05 11:31 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2017-03-31 02:32 - 2016-10-05 11:25 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2017-03-31 02:32 - 2016-10-05 11:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2017-03-31 02:32 - 2016-10-05 11:17 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2017-03-31 02:32 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-03-31 02:32 - 2016-10-05 11:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2017-03-31 02:32 - 2016-09-15 19:22 - 00433832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2017-03-31 02:32 - 2016-09-15 19:19 - 00361104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2017-03-31 02:32 - 2016-09-15 19:18 - 00856872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2017-03-31 02:32 - 2016-09-15 19:13 - 00113504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2017-03-31 02:32 - 2016-09-15 18:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovslegacy.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-03-31 02:32 - 2016-09-15 18:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-03-31 02:32 - 2016-09-15 18:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-03-31 02:32 - 2016-09-15 18:53 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2017-03-31 02:32 - 2016-09-15 18:50 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
2017-03-31 02:32 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2017-03-31 02:32 - 2016-09-15 18:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-03-31 02:32 - 2016-09-15 18:44 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL
2017-03-31 02:32 - 2016-09-15 18:43 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll
2017-03-31 02:32 - 2016-09-15 18:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2017-03-31 02:32 - 2016-09-15 18:43 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2017-03-31 02:32 - 2016-09-15 18:42 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundMediaPolicy.dll
2017-03-31 02:32 - 2016-09-15 18:40 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-03-31 02:32 - 2016-09-15 18:35 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2017-03-31 02:32 - 2016-09-15 18:34 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-03-31 02:32 - 2016-09-15 18:24 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-03-31 02:32 - 2016-09-10 15:21 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2017-03-31 02:32 - 2016-09-07 07:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosTrace.dll
2017-03-31 02:32 - 2016-09-07 07:00 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosHost.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00409088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosResource.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00110080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MapControls.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
2017-03-31 02:32 - 2016-09-07 06:59 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlStringsRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AddressParser.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccessRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneutilRes.dll
2017-03-31 02:32 - 2016-09-07 06:58 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2017-03-31 02:32 - 2016-09-07 06:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-31 02:32 - 2016-09-07 06:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-03-31 02:32 - 2016-09-07 06:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactActivation.dll
2017-03-31 02:32 - 2016-09-07 06:54 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2017-03-31 02:32 - 2016-09-07 06:54 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
2017-03-31 02:32 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-03-31 02:32 - 2016-09-07 06:53 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NmaDirect.dll
2017-03-31 02:32 - 2016-09-07 06:52 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2017-03-31 02:32 - 2016-09-07 06:50 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2017-03-31 02:32 - 2016-09-07 06:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2017-03-31 02:32 - 2016-09-07 06:46 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2017-03-31 02:32 - 2016-09-07 06:31 - 00461312 _____ (Microsoft) C:\Windows\SysWOW64\DbgModel.dll
2017-03-31 02:32 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2017-03-31 02:32 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
2017-03-31 02:32 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-03-31 02:32 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2017-03-31 02:32 - 2016-08-20 07:18 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2017-03-31 02:32 - 2016-08-20 07:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2017-03-31 02:32 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2017-03-31 02:32 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2017-03-31 02:32 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2017-03-31 02:32 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2017-03-31 02:32 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
2017-03-31 02:32 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
2017-03-31 02:32 - 2016-08-06 06:03 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2017-03-31 02:32 - 2016-08-06 05:48 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2017-03-31 02:32 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\hidusb.sys
2017-03-31 02:32 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2017-03-31 02:32 - 2016-08-06 05:46 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2017-03-31 02:32 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\hidparse.sys
2017-03-31 02:32 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2017-03-31 02:32 - 2016-08-06 05:45 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2017-03-31 02:32 - 2016-08-06 05:44 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2017-03-31 02:32 - 2016-08-06 05:41 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2017-03-31 02:32 - 2016-08-06 05:41 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2017-03-31 02:32 - 2016-08-06 05:33 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
2017-03-31 02:32 - 2016-08-06 05:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-03-31 02:32 - 2016-08-06 05:21 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2017-03-31 02:32 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2017-03-31 02:32 - 2016-08-05 10:29 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2017-03-31 02:32 - 2016-08-05 10:23 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2017-03-31 02:32 - 2016-08-05 10:18 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2017-03-31 02:32 - 2016-08-02 06:47 - 00079536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2017-03-31 02:31 - 2017-03-04 09:26 - 00794416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 00646688 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-03-31 02:31 - 2017-03-04 09:24 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-03-31 02:31 - 2017-03-04 09:23 - 02512304 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-03-31 02:31 - 2017-03-04 09:22 - 07786336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-31 02:31 - 2017-03-04 09:22 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-03-31 02:31 - 2017-03-04 09:18 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-03-31 02:31 - 2017-03-04 09:18 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-03-31 02:31 - 2017-03-04 09:17 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-03-31 02:31 - 2017-03-04 09:15 - 01000280 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2017-03-31 02:31 - 2017-03-04 09:10 - 02828384 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2017-03-31 02:31 - 2017-03-04 09:10 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-31 02:31 - 2017-03-04 09:10 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-03-31 02:31 - 2017-03-04 09:09 - 02750384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 01157000 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-03-31 02:31 - 2017-03-04 09:09 - 00635864 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-03-31 02:31 - 2017-03-04 09:09 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-03-31 02:31 - 2017-03-04 09:06 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-03-31 02:31 - 2017-03-04 09:04 - 01063472 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01989072 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01723560 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2017-03-31 02:31 - 2017-03-04 09:03 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01454512 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01301112 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01071736 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00811416 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00596040 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00443232 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2017-03-31 02:31 - 2017-03-04 09:03 - 00382272 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2017-03-31 02:31 - 2017-03-04 09:01 - 00137936 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2017-03-31 02:31 - 2017-03-04 08:57 - 02536288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-03-31 02:31 - 2017-03-04 08:57 - 00387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-03-31 02:31 - 2017-03-04 08:39 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 22565376 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\DuCsps.dll
2017-03-31 02:31 - 2017-03-04 08:36 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2017-03-31 02:31 - 2017-03-04 08:35 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-03-31 02:31 - 2017-03-04 08:35 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-03-31 02:31 - 2017-03-04 08:34 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-03-31 02:31 - 2017-03-04 08:34 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-03-31 02:31 - 2017-03-04 08:34 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2017-03-31 02:31 - 2017-03-04 08:33 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-03-31 02:31 - 2017-03-04 08:33 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2017-03-31 02:31 - 2017-03-04 08:32 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2017-03-31 02:31 - 2017-03-04 08:32 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\MCCSEngineShared.dll
2017-03-31 02:31 - 2017-03-04 08:32 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-31 02:31 - 2017-03-04 08:31 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2017-03-31 02:31 - 2017-03-04 08:31 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00535552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-03-31 02:31 - 2017-03-04 08:30 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2017-03-31 02:31 - 2017-03-04 08:30 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-03-31 02:31 - 2017-03-04 08:29 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\tapi32.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2017-03-31 02:31 - 2017-03-04 08:29 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\ppcsnap.dll
2017-03-31 02:31 - 2017-03-04 08:28 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-03-31 02:31 - 2017-03-04 08:27 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00460288 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-03-31 02:31 - 2017-03-04 08:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00383488 _____ (Microsoft Corporation) C:\Windows\system32\DavSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2017-03-31 02:31 - 2017-03-04 08:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00579584 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-31 02:31 - 2017-03-04 08:25 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-03-31 02:31 - 2017-03-04 08:24 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-03-31 02:31 - 2017-03-04 08:24 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 01184256 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00945152 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00820224 _____ (Microsoft Corporation) C:\Windows\system32\PrintRenderAPIHost.DLL
2017-03-31 02:31 - 2017-03-04 08:23 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2017-03-31 02:31 - 2017-03-04 08:23 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-03-31 02:31 - 2017-03-04 08:23 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 06285824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 01937920 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-03-31 02:31 - 2017-03-04 08:21 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00809984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Search.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-03-31 02:31 - 2017-03-04 08:21 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-31 02:31 - 2017-03-04 08:20 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 23676416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01639424 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2017-03-31 02:31 - 2017-03-04 08:19 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-03-31 02:31 - 2017-03-04 08:19 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-31 02:31 - 2017-03-04 08:18 - 17198592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 01189376 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2017-03-31 02:31 - 2017-03-04 08:18 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2017-03-31 02:31 - 2017-03-04 08:17 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-03-31 02:31 - 2017-03-04 08:17 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 13441536 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2017-03-31 02:31 - 2017-03-04 08:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 18362368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 01837056 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2017-03-31 02:31 - 2017-03-04 08:15 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 19411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 00858112 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2017-03-31 02:31 - 2017-03-04 08:13 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 13085184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 07654912 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 03441664 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-03-31 02:31 - 2017-03-04 08:11 - 01891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01917440 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01536000 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01399296 _____ (Microsoft Corporation) C:\Windows\system32\Pimstore.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
2017-03-31 02:31 - 2017-03-04 08:10 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 08125952 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2017-03-31 02:31 - 2017-03-04 08:09 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 12349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 01981440 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 01780224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2017-03-31 02:31 - 2017-03-04 08:07 - 12178944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 02370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01840640 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-03-31 02:31 - 2017-03-04 08:07 - 01512448 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-03-31 02:31 - 2017-03-04 08:07 - 00707584 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 03202048 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02475008 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 01013760 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2017-03-31 02:31 - 2017-03-04 08:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 01826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00998912 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00531456 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2017-03-31 02:31 - 2017-03-04 08:04 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 06044672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-03-31 02:31 - 2017-03-04 08:03 - 00119808 ____R (Microsoft Corporation) C:\Windows\system32\SecureAssessmentHandlers.dll
2017-03-31 02:31 - 2017-03-04 08:02 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.SecureAssessment.dll
2017-03-31 02:31 - 2017-03-04 08:01 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2017-03-31 02:31 - 2016-12-21 09:43 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-03-31 02:31 - 2016-12-21 09:13 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2017-03-31 02:31 - 2016-12-21 09:12 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2017-03-31 02:31 - 2016-12-21 09:10 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-03-31 02:31 - 2016-12-21 09:08 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-03-31 02:31 - 2016-12-21 09:07 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-03-31 02:31 - 2016-12-21 09:06 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-03-31 02:31 - 2016-12-21 08:51 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-03-31 02:31 - 2016-12-21 08:49 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-03-31 02:31 - 2016-12-14 07:23 - 00404832 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-31 02:31 - 2016-12-14 06:42 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2017-03-31 02:31 - 2016-12-14 06:42 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-03-31 02:31 - 2016-12-14 06:40 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2017-03-31 02:31 - 2016-12-14 06:40 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2017-03-31 02:31 - 2016-12-14 06:24 - 01005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2017-03-31 02:31 - 2016-12-14 06:23 - 03134976 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-03-31 02:31 - 2016-12-14 06:23 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-03-31 02:31 - 2016-12-09 12:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-03-31 02:31 - 2016-12-09 12:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-31 02:31 - 2016-12-09 12:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-03-31 02:31 - 2016-12-09 12:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-03-31 02:31 - 2016-12-09 12:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-03-31 02:31 - 2016-12-09 11:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2017-03-31 02:31 - 2016-12-09 11:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-31 02:31 - 2016-12-09 11:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2017-03-31 02:31 - 2016-12-09 11:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2017-03-31 02:31 - 2016-12-09 11:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2017-03-31 02:31 - 2016-11-11 12:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-03-31 02:31 - 2016-11-11 12:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-03-31 02:31 - 2016-11-11 11:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2017-03-31 02:31 - 2016-11-11 11:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2017-03-31 02:31 - 2016-11-11 11:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2017-03-31 02:31 - 2016-11-11 11:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2017-03-31 02:31 - 2016-11-11 11:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2017-03-31 02:31 - 2016-11-11 11:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2017-03-31 02:31 - 2016-11-11 11:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-03-31 02:31 - 2016-11-11 11:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2017-03-31 02:31 - 2016-11-11 11:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2017-03-31 02:31 - 2016-11-11 11:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2017-03-31 02:31 - 2016-11-11 11:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-03-31 02:31 - 2016-11-11 11:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2017-03-31 02:31 - 2016-11-11 11:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2017-03-31 02:31 - 2016-11-11 11:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2017-03-31 02:31 - 2016-11-11 11:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2017-03-31 02:31 - 2016-11-11 11:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-31 02:31 - 2016-11-11 11:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2017-03-31 02:31 - 2016-11-11 11:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2017-03-31 02:31 - 2016-11-11 11:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-31 02:31 - 2016-11-11 11:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-03-31 02:31 - 2016-11-11 11:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2017-03-31 02:31 - 2016-11-11 11:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2017-03-31 02:31 - 2016-11-11 11:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2017-03-31 02:31 - 2016-11-11 11:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2017-03-31 02:31 - 2016-11-11 11:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2017-03-31 02:31 - 2016-11-11 11:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2017-03-31 02:31 - 2016-11-11 11:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2017-03-31 02:31 - 2016-11-02 13:13 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-03-31 02:31 - 2016-11-02 13:02 - 00848736 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2017-03-31 02:31 - 2016-11-02 13:02 - 00148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2017-03-31 02:31 - 2016-11-02 12:55 - 00048992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2017-03-31 02:31 - 2016-11-02 12:37 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2017-03-31 02:31 - 2016-11-02 12:36 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2017-03-31 02:31 - 2016-11-02 12:30 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2017-03-31 02:31 - 2016-11-02 12:29 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2017-03-31 02:31 - 2016-11-02 12:28 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2017-03-31 02:31 - 2016-11-02 12:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-03-31 02:31 - 2016-11-02 12:19 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-03-31 02:31 - 2016-11-02 12:18 - 00836608 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2017-03-31 02:31 - 2016-11-02 12:16 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2017-03-31 02:31 - 2016-11-02 12:13 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-03-31 02:31 - 2016-10-15 06:26 - 00691080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2017-03-31 02:31 - 2016-10-15 06:21 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-03-31 02:31 - 2016-10-15 06:21 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-03-31 02:31 - 2016-10-15 06:21 - 00292872 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2017-03-31 02:31 - 2016-10-15 06:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2017-03-31 02:31 - 2016-10-15 06:00 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-03-31 02:31 - 2016-10-15 05:59 - 00272384 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2017-03-31 02:31 - 2016-10-15 05:59 - 00130560 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

Kisska · 05.04.2017, 01:59

Anbei das Ergebnis von FRST - Teil 2:

Code:

ATTFilter

2017-03-31 02:31 - 2016-10-15 05:57 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2017-03-31 02:31 - 2016-10-15 05:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2017-03-31 02:31 - 2016-10-15 05:55 - 00329216 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-03-31 02:31 - 2016-10-15 05:55 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2017-03-31 02:31 - 2016-10-15 05:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2017-03-31 02:31 - 2016-10-15 05:50 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2017-03-31 02:31 - 2016-10-15 05:47 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2017-03-31 02:31 - 2016-10-15 05:46 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-03-31 02:31 - 2016-10-15 05:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2017-03-31 02:31 - 2016-10-15 05:45 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2017-03-31 02:31 - 2016-10-15 05:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2017-03-31 02:31 - 2016-10-15 05:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2017-03-31 02:31 - 2016-10-15 05:36 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2017-03-31 02:31 - 2016-10-15 05:35 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-03-31 02:31 - 2016-10-05 12:12 - 01112928 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2017-03-31 02:31 - 2016-10-05 11:19 - 02390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-03-31 02:31 - 2016-10-05 11:18 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-03-31 02:31 - 2016-10-05 11:18 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-31 02:31 - 2016-10-05 11:09 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00512416 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00424640 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2017-03-31 02:31 - 2016-09-15 19:29 - 00218008 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-03-31 02:31 - 2016-09-15 19:25 - 00280472 _____ (Microsoft Corporation) C:\Windows\system32\bdeunlock.exe
2017-03-31 02:31 - 2016-09-15 19:11 - 00862064 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2017-03-31 02:31 - 2016-09-15 19:11 - 00725664 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2017-03-31 02:31 - 2016-09-15 18:55 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetworkCollectionAgent.dll
2017-03-31 02:31 - 2016-09-15 18:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\NfcRadioMedia.dll
2017-03-31 02:31 - 2016-09-15 18:39 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\NetworkCollectionAgent.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2017-03-31 02:31 - 2016-09-15 18:38 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\PrintWSDAHost.dll
2017-03-31 02:31 - 2016-09-15 18:37 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-03-31 02:31 - 2016-09-15 18:37 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2017-03-31 02:31 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-03-31 02:31 - 2016-09-15 18:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2017-03-31 02:31 - 2016-09-15 18:34 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2017-03-31 02:31 - 2016-09-15 18:32 - 01037312 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2017-03-31 02:31 - 2016-09-15 18:32 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2017-03-31 02:31 - 2016-09-15 18:30 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-03-31 02:31 - 2016-09-15 18:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2017-03-31 02:31 - 2016-09-15 18:29 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2017-03-31 02:31 - 2016-09-15 18:28 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-03-31 02:31 - 2016-09-15 18:28 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2017-03-31 02:31 - 2016-09-15 18:27 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2017-03-31 02:31 - 2016-09-15 18:27 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2017-03-31 02:31 - 2016-09-15 18:27 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2017-03-31 02:31 - 2016-09-15 18:27 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2017-03-31 02:31 - 2016-09-15 18:27 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdechangepin.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2017-03-31 02:31 - 2016-09-15 18:26 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2017-03-31 02:31 - 2016-09-15 18:25 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-03-31 02:31 - 2016-09-15 18:25 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundMediaPolicy.dll
2017-03-31 02:31 - 2016-09-15 18:17 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2017-03-31 02:31 - 2016-09-15 18:16 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2017-03-31 02:31 - 2016-09-15 18:16 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2017-03-31 02:31 - 2016-09-07 07:54 - 00133472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-31 02:31 - 2016-09-07 07:24 - 00057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-31 02:31 - 2016-09-07 07:04 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2017-03-31 02:31 - 2016-09-07 07:03 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccessRes.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneutilRes.dll
2017-03-31 02:31 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2017-03-31 02:31 - 2016-09-07 07:01 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\AddressParser.dll
2017-03-31 02:31 - 2016-09-07 07:01 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2017-03-31 02:31 - 2016-09-07 07:00 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\ContactActivation.dll
2017-03-31 02:31 - 2016-09-07 06:59 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2017-03-31 02:31 - 2016-09-07 06:56 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2017-03-31 02:31 - 2016-09-07 06:55 - 00820736 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2017-03-31 02:31 - 2016-09-07 06:54 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\NmaDirect.dll
2017-03-31 02:31 - 2016-09-07 06:54 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2017-03-31 02:31 - 2016-09-07 06:45 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-31 02:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-03-31 02:31 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2017-03-31 02:31 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2017-03-31 02:31 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2017-03-31 02:31 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2017-03-31 02:31 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2017-03-31 02:31 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2017-03-31 02:31 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2017-03-31 02:31 - 2016-08-06 06:26 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-31 02:31 - 2016-08-06 06:15 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-03-31 02:31 - 2016-08-06 06:13 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-03-31 02:31 - 2016-08-06 05:48 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-03-31 02:31 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-03-31 02:31 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-03-31 02:31 - 2016-08-06 05:47 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2017-03-31 02:31 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-03-31 02:31 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-03-31 02:31 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-03-31 02:31 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-03-31 02:31 - 2016-08-06 05:46 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2017-03-31 02:31 - 2016-08-06 05:45 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2017-03-31 02:31 - 2016-08-06 05:44 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2017-03-31 02:31 - 2016-08-06 05:43 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2017-03-31 02:31 - 2016-08-06 05:41 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-03-31 02:31 - 2016-08-06 05:40 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2017-03-31 02:31 - 2016-08-06 05:39 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2017-03-31 02:31 - 2016-08-06 05:36 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2017-03-31 02:30 - 2017-03-04 09:57 - 00192352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 01617760 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 01294688 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00655200 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00378720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00343904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00315232 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00242528 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-31 02:30 - 2017-03-04 09:35 - 00086368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-31 02:30 - 2017-03-04 09:35 - 00038240 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-03-31 02:30 - 2017-03-04 09:27 - 02170720 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-03-31 02:30 - 2017-03-04 09:27 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-03-31 02:30 - 2017-03-04 09:24 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-03-31 02:30 - 2017-03-04 09:24 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-03-31 02:30 - 2017-03-04 09:22 - 01354312 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-03-31 02:30 - 2017-03-04 09:22 - 01172984 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-03-31 02:30 - 2017-03-04 09:21 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-03-31 02:30 - 2017-03-04 09:18 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-03-31 02:30 - 2017-03-04 09:18 - 00219040 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2017-03-31 02:30 - 2017-03-04 09:15 - 00404320 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-03-31 02:30 - 2017-03-04 09:15 - 00063328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-03-31 02:30 - 2017-03-04 09:13 - 00635456 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-03-31 02:30 - 2017-03-04 09:11 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-03-31 02:30 - 2017-03-04 09:11 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2017-03-31 02:30 - 2017-03-04 09:09 - 00681312 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2017-03-31 02:30 - 2017-03-04 09:09 - 00578392 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-03-31 02:30 - 2017-03-04 09:09 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-31 02:30 - 2017-03-04 09:08 - 00342456 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-03-31 02:30 - 2017-03-04 09:08 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-31 02:30 - 2017-03-04 09:07 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-03-31 02:30 - 2017-03-04 09:07 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00989016 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-03-31 02:30 - 2017-03-04 09:07 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2017-03-31 02:30 - 2017-03-04 09:07 - 00682808 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-03-31 02:30 - 2017-03-04 09:07 - 00432992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-03-31 02:30 - 2017-03-04 09:03 - 04674360 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-03-31 02:30 - 2017-03-04 09:03 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00755648 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00523712 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00241496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-03-31 02:30 - 2017-03-04 09:03 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-03-31 02:30 - 2017-03-04 08:59 - 01570208 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-03-31 02:30 - 2017-03-04 08:58 - 01416224 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-03-31 02:30 - 2017-03-04 08:58 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-03-31 02:30 - 2017-03-04 08:42 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-03-31 02:30 - 2017-03-04 08:37 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-03-31 02:30 - 2017-03-04 08:36 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2017-03-31 02:30 - 2017-03-04 08:35 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
2017-03-31 02:30 - 2017-03-04 08:34 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\dggpext.dll
2017-03-31 02:30 - 2017-03-04 08:33 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-03-31 02:30 - 2017-03-04 08:33 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-03-31 02:30 - 2017-03-04 08:33 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-03-31 02:30 - 2017-03-04 08:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2017-03-31 02:30 - 2017-03-04 08:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2017-03-31 02:30 - 2017-03-04 08:29 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-03-31 02:30 - 2017-03-04 08:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00394752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2017-03-31 02:30 - 2017-03-04 08:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-03-31 02:30 - 2017-03-04 08:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2017-03-31 02:30 - 2017-03-04 08:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00264704 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-03-31 02:30 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 01016320 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2017-03-31 02:30 - 2017-03-04 08:25 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-03-31 02:30 - 2017-03-04 08:24 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-03-31 02:30 - 2017-03-04 08:24 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-03-31 02:30 - 2017-03-04 08:23 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00541696 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2017-03-31 02:30 - 2017-03-04 08:23 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2017-03-31 02:30 - 2017-03-04 08:22 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01913856 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01361408 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 01280512 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-03-31 02:30 - 2017-03-04 08:20 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-03-31 02:30 - 2017-03-04 08:19 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\Tabbtn.dll
2017-03-31 02:30 - 2017-03-04 08:18 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2017-03-31 02:30 - 2017-03-04 08:18 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-03-31 02:30 - 2017-03-04 08:17 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 03289088 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
2017-03-31 02:30 - 2017-03-04 08:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 09130496 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 02860032 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2017-03-31 02:30 - 2017-03-04 08:15 - 01345024 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-03-31 02:30 - 2017-03-04 08:14 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2017-03-31 02:30 - 2017-03-04 08:13 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00982528 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00947200 _____ (Microsoft Corporation) C:\Windows\system32\wsp_sr.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00937472 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\CameraCaptureUI.dll
2017-03-31 02:30 - 2017-03-04 08:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-03-31 02:30 - 2017-03-04 08:12 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-31 02:30 - 2017-03-04 08:11 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2017-03-31 02:30 - 2017-03-04 08:11 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2017-03-31 02:30 - 2017-03-04 08:10 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-31 02:30 - 2017-03-04 08:10 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00770560 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-03-31 02:30 - 2017-03-04 08:10 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
2017-03-31 02:30 - 2017-03-04 08:09 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-31 02:30 - 2017-03-04 08:08 - 01714688 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2017-03-31 02:30 - 2017-03-04 08:08 - 00540160 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 02914816 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 01064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00935936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-03-31 02:30 - 2017-03-04 08:07 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 05384192 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 04060672 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2017-03-31 02:30 - 2017-03-04 08:06 - 03614720 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-03-31 02:30 - 2017-03-04 08:06 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-03-31 02:30 - 2017-03-04 08:04 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2017-03-31 02:30 - 2017-03-04 08:03 - 01817088 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-03-31 02:30 - 2017-03-04 08:02 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2017-03-31 02:30 - 2017-03-04 08:01 - 03478528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2017-03-31 02:30 - 2017-03-04 08:00 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-03-31 02:30 - 2016-12-21 09:09 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2017-03-31 02:30 - 2016-12-21 08:59 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-03-31 02:30 - 2016-12-21 08:57 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll
2017-03-31 02:30 - 2016-12-21 08:54 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01400160 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 01356864 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2017-03-31 02:30 - 2016-12-14 07:33 - 00992096 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-03-31 02:30 - 2016-12-14 07:33 - 00813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00779616 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00752992 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00571744 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00513376 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2017-03-31 02:30 - 2016-12-14 07:33 - 00406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-03-31 02:30 - 2016-12-14 07:14 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2017-03-31 02:30 - 2016-12-14 06:41 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-31 02:30 - 2016-12-14 06:39 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2017-03-31 02:30 - 2016-12-14 06:26 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-31 02:30 - 2016-12-14 06:25 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2017-03-31 02:30 - 2016-12-14 06:24 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-03-31 02:30 - 2016-12-09 12:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-31 02:30 - 2016-12-09 12:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2017-03-31 02:30 - 2016-12-09 11:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2017-03-31 02:30 - 2016-12-09 11:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-03-31 02:30 - 2016-12-09 11:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-03-31 02:30 - 2016-12-09 11:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2017-03-31 02:30 - 2016-11-11 12:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-31 02:30 - 2016-11-11 12:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-03-31 02:30 - 2016-11-11 11:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2017-03-31 02:30 - 2016-11-11 11:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2017-03-31 02:30 - 2016-11-11 11:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2017-03-31 02:30 - 2016-11-11 11:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-03-31 02:30 - 2016-11-11 11:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-03-31 02:30 - 2016-11-11 11:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-03-31 02:30 - 2016-11-11 11:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2017-03-31 02:30 - 2016-11-11 11:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2017-03-31 02:30 - 2016-11-11 11:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-03-31 02:30 - 2016-11-11 11:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2017-03-31 02:30 - 2016-11-11 11:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2017-03-31 02:30 - 2016-11-11 11:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2017-03-31 02:30 - 2016-11-11 11:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2017-03-31 02:30 - 2016-11-11 11:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2017-03-31 02:30 - 2016-11-11 11:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-03-31 02:30 - 2016-11-11 11:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-03-31 02:30 - 2016-11-11 11:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-03-31 02:30 - 2016-11-11 11:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2017-03-31 02:30 - 2016-11-11 11:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2017-03-31 02:30 - 2016-11-11 11:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-03-31 02:30 - 2016-11-11 11:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2017-03-31 02:30 - 2016-11-11 11:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-03-31 02:30 - 2016-11-11 09:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-03-31 02:30 - 2016-11-02 13:13 - 00423776 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2017-03-31 02:30 - 2016-11-02 12:56 - 01609920 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2017-03-31 02:30 - 2016-11-02 12:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-03-31 02:30 - 2016-11-02 12:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-03-31 02:30 - 2016-11-02 12:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-03-31 02:30 - 2016-11-02 12:34 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2017-03-31 02:30 - 2016-11-02 12:31 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2017-03-31 02:30 - 2016-11-02 12:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2017-03-31 02:30 - 2016-11-02 12:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2017-03-31 02:30 - 2016-11-02 12:29 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-31 02:30 - 2016-11-02 12:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2017-03-31 02:30 - 2016-11-02 12:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-31 02:30 - 2016-11-02 12:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2017-03-31 02:30 - 2016-11-02 12:23 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2017-03-31 02:30 - 2016-11-02 12:22 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-03-31 02:30 - 2016-11-02 12:21 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-03-31 02:30 - 2016-11-02 12:19 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-03-31 02:30 - 2016-11-02 12:16 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-31 02:30 - 2016-11-02 12:16 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2017-03-31 02:30 - 2016-11-02 12:13 - 03496960 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2017-03-31 02:30 - 2016-11-02 11:11 - 00788624 _____ C:\Windows\SysWOW64\locale.nls
2017-03-31 02:30 - 2016-11-02 11:11 - 00788624 _____ C:\Windows\system32\locale.nls
2017-03-31 02:30 - 2016-10-15 06:48 - 00498952 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2017-03-31 02:30 - 2016-10-15 06:41 - 05622088 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2017-03-31 02:30 - 2016-10-15 06:38 - 00500064 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-03-31 02:30 - 2016-10-15 06:30 - 01851696 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-03-31 02:30 - 2016-10-15 06:29 - 00908640 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2017-03-31 02:30 - 2016-10-15 06:29 - 00079200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2017-03-31 02:30 - 2016-10-15 05:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2017-03-31 02:30 - 2016-10-15 05:56 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2017-03-31 02:30 - 2016-10-15 05:56 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2017-03-31 02:30 - 2016-10-15 05:56 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2017-03-31 02:30 - 2016-10-15 05:54 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2017-03-31 02:30 - 2016-10-15 05:51 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2017-03-31 02:30 - 2016-10-15 05:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2017-03-31 02:30 - 2016-10-15 05:48 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2017-03-31 02:30 - 2016-10-15 05:43 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2017-03-31 02:30 - 2016-10-15 05:39 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2017-03-31 02:30 - 2016-10-15 05:36 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2017-03-31 02:30 - 2016-10-15 05:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2017-03-31 02:30 - 2016-10-15 05:35 - 03054080 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2017-03-31 02:30 - 2016-10-15 05:31 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2017-03-31 02:30 - 2016-10-05 12:17 - 01322848 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2017-03-31 02:30 - 2016-10-05 11:33 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\credprovs.dll
2017-03-31 02:30 - 2016-10-05 11:30 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2017-03-31 02:30 - 2016-10-05 11:29 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2017-03-31 02:30 - 2016-09-15 19:29 - 00023392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2017-03-31 02:30 - 2016-09-15 19:27 - 00434528 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-03-31 02:30 - 2016-09-15 19:26 - 00090400 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2017-03-31 02:30 - 2016-09-15 19:16 - 00206096 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-31 02:30 - 2016-09-15 19:15 - 00649568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2017-03-31 02:30 - 2016-09-15 19:14 - 00119648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2017-03-31 02:30 - 2016-09-15 18:53 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-03-31 02:30 - 2016-09-15 18:42 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2017-03-31 02:30 - 2016-09-15 18:41 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2017-03-31 02:30 - 2016-09-15 18:40 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2017-03-31 02:30 - 2016-09-15 18:38 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2017-03-31 02:30 - 2016-09-15 18:38 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2017-03-31 02:30 - 2016-09-15 18:37 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00686592 _____ (Microsoft Corporation) C:\Windows\system32\dsregcmd.exe
2017-03-31 02:30 - 2016-09-15 18:36 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-03-31 02:30 - 2016-09-15 18:36 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\credprovslegacy.dll
2017-03-31 02:30 - 2016-09-15 18:35 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\icsvc.dll
2017-03-31 02:30 - 2016-09-15 18:35 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2017-03-31 02:30 - 2016-09-15 18:34 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2017-03-31 02:30 - 2016-09-15 18:33 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2017-03-31 02:30 - 2016-09-15 18:30 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2017-03-31 02:30 - 2016-09-15 18:30 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2017-03-31 02:30 - 2016-09-15 18:27 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2017-03-31 02:30 - 2016-09-15 18:22 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2017-03-31 02:30 - 2016-09-07 07:33 - 00681304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2017-03-31 02:30 - 2016-09-07 07:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2017-03-31 02:30 - 2016-09-07 07:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-31 02:30 - 2016-09-07 06:59 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2017-03-31 02:30 - 2016-09-07 06:56 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2017-03-31 02:30 - 2016-09-07 06:56 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2017-03-31 02:30 - 2016-09-07 06:55 - 00781824 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2017-03-31 02:30 - 2016-09-07 06:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2017-03-31 02:30 - 2016-09-07 06:54 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-31 02:30 - 2016-09-07 06:54 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2017-03-31 02:30 - 2016-09-07 06:53 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2017-03-31 02:30 - 2016-09-07 06:43 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2017-03-31 02:30 - 2016-09-07 06:39 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2017-03-31 02:30 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2017-03-31 02:30 - 2016-08-06 05:50 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-03-31 02:30 - 2016-08-06 05:48 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-31 02:30 - 2016-08-06 05:47 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-31 02:30 - 2016-08-06 05:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-03-31 02:30 - 2016-08-06 05:44 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-03-31 02:30 - 2016-08-06 05:43 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2017-03-31 02:30 - 2016-08-06 05:40 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2017-03-31 02:30 - 2016-08-06 05:40 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2017-03-31 02:30 - 2016-08-06 05:35 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2017-03-31 02:30 - 2016-08-06 05:23 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2017-03-31 02:30 - 2016-08-02 10:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2017-03-31 02:30 - 2016-08-02 10:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-03-31 02:30 - 2016-08-02 06:37 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2017-03-31 02:30 - 2016-07-22 03:25 - 00389000 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2017-03-31 02:30 - 2016-07-16 04:29 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\CspCellularSettings.dll
2017-03-31 02:30 - 2016-07-16 04:28 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAPNCsp.dll
2017-03-31 02:30 - 2016-07-16 04:26 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CfgSPCellular.dll
2017-03-31 02:29 - 2017-03-04 09:25 - 01117024 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2017-03-31 02:29 - 2017-03-04 09:24 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2017-03-31 02:29 - 2017-03-04 09:20 - 00379744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2017-03-31 02:29 - 2017-03-04 09:20 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2017-03-31 02:29 - 2017-03-04 09:09 - 00178520 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-03-31 02:29 - 2017-03-04 09:08 - 00509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-03-31 02:29 - 2017-03-04 09:07 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2017-03-31 02:29 - 2017-03-04 09:07 - 00110944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvsocket.sys
2017-03-31 02:29 - 2017-03-04 09:07 - 00080224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
2017-03-31 02:29 - 2017-03-04 09:03 - 00038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2017-03-31 02:29 - 2017-03-04 09:01 - 00201568 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-03-31 02:29 - 2017-03-04 09:01 - 00128648 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2017-03-31 02:29 - 2017-03-04 08:58 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2017-03-31 02:29 - 2017-03-04 08:57 - 00372432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-03-31 02:29 - 2017-03-04 08:37 - 00025088 _____ C:\Windows\system32\GamePanelExternalHook.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-03-31 02:29 - 2017-03-04 08:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2017-03-31 02:29 - 2017-03-04 08:35 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2017-03-31 02:29 - 2017-03-04 08:34 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmclr.sys
2017-03-31 02:29 - 2017-03-04 08:33 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothDesktopHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:33 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\XInputUap.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-03-31 02:29 - 2017-03-04 08:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2017-03-31 02:29 - 2017-03-04 08:31 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2017-03-31 02:29 - 2017-03-04 08:31 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2017-03-31 02:29 - 2017-03-04 08:30 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-03-31 02:29 - 2017-03-04 08:29 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:29 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\icsvcext.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-03-31 02:29 - 2017-03-04 08:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-03-31 02:29 - 2017-03-04 08:27 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2017-03-31 02:29 - 2017-03-04 08:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00450048 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-03-31 02:29 - 2017-03-04 08:26 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2017-03-31 02:29 - 2017-03-04 08:25 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 01092096 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationFrame.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2017-03-31 02:29 - 2017-03-04 08:24 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 03753984 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-03-31 02:29 - 2017-03-04 08:23 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-31 02:29 - 2017-03-04 08:21 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2017-03-31 02:29 - 2017-03-04 08:21 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2017-03-31 02:29 - 2017-03-04 08:20 - 00893952 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2017-03-31 02:29 - 2017-03-04 08:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2017-03-31 02:29 - 2017-03-04 08:19 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-03-31 02:29 - 2017-03-04 08:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2017-03-31 02:29 - 2017-03-04 08:18 - 00320512 _____ (Microsoft Corporation) C:\Windows\regedit.exe
2017-03-31 02:29 - 2017-03-04 08:17 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-03-31 02:29 - 2017-03-04 08:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2017-03-31 02:29 - 2017-03-04 08:16 - 00583168 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2017-03-31 02:29 - 2017-03-04 08:15 - 01443328 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2017-03-31 02:29 - 2017-03-04 08:14 - 01562112 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2017-03-31 02:29 - 2017-03-04 08:14 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2017-03-31 02:29 - 2017-03-04 08:14 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-03-31 02:29 - 2017-03-04 08:13 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2017-03-31 02:29 - 2017-03-04 08:12 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2017-03-31 02:29 - 2017-03-04 08:11 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2017-03-31 02:29 - 2017-03-04 08:11 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2017-03-31 02:29 - 2017-03-04 08:10 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-03-31 02:29 - 2017-03-04 08:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-03-31 02:29 - 2017-03-04 08:09 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2017-03-31 02:29 - 2017-03-04 08:08 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2017-03-31 02:29 - 2017-03-04 08:07 - 02512384 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2017-03-31 02:29 - 2017-03-04 08:07 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2017-03-31 02:29 - 2017-03-04 08:06 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-03-31 02:29 - 2017-03-04 08:06 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2017-03-31 02:29 - 2017-03-04 08:05 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-03-31 02:29 - 2016-12-21 10:08 - 00245600 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2017-03-31 02:29 - 2016-12-21 10:08 - 00136032 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
2017-03-31 02:29 - 2016-12-21 09:37 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-03-31 02:29 - 2016-12-21 09:09 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
2017-03-31 02:29 - 2016-12-14 07:33 - 01054048 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2017-03-31 02:29 - 2016-12-14 07:33 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
2017-03-31 02:29 - 2016-12-14 07:33 - 00190816 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
2017-03-31 02:29 - 2016-12-14 07:17 - 00319288 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-03-31 02:29 - 2016-12-14 07:14 - 00089416 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2017-03-31 02:29 - 2016-12-14 06:46 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-31 02:29 - 2016-12-14 06:43 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-03-31 02:29 - 2016-12-14 06:42 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2017-03-31 02:29 - 2016-12-14 06:36 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-03-31 02:29 - 2016-12-14 06:35 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2017-03-31 02:29 - 2016-12-09 11:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2017-03-31 02:29 - 2016-12-09 11:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2017-03-31 02:29 - 2016-11-11 12:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2017-03-31 02:29 - 2016-11-11 12:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2017-03-31 02:29 - 2016-11-11 11:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2017-03-31 02:29 - 2016-11-11 11:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2017-03-31 02:29 - 2016-11-11 11:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2017-03-31 02:29 - 2016-11-11 11:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-03-31 02:29 - 2016-11-11 11:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2017-03-31 02:29 - 2016-11-11 11:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2017-03-31 02:29 - 2016-11-11 11:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2017-03-31 02:29 - 2016-11-11 11:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2017-03-31 02:29 - 2016-11-11 11:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-03-31 02:29 - 2016-11-11 11:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2017-03-31 02:29 - 2016-11-11 11:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2017-03-31 02:29 - 2016-11-11 11:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2017-03-31 02:29 - 2016-11-11 11:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2017-03-31 02:29 - 2016-11-11 11:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-03-31 02:29 - 2016-11-11 11:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2017-03-31 02:29 - 2016-11-11 11:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2017-03-31 02:29 - 2016-11-11 11:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2017-03-31 02:29 - 2016-11-11 11:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2017-03-31 02:29 - 2016-11-11 11:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2017-03-31 02:29 - 2016-11-11 11:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2017-03-31 02:29 - 2016-11-02 13:02 - 00238056 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2017-03-31 02:29 - 2016-11-02 13:00 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-03-31 02:29 - 2016-11-02 12:32 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-03-31 02:29 - 2016-11-02 12:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2017-03-31 02:29 - 2016-11-02 12:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-31 02:29 - 2016-11-02 12:28 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2017-03-31 02:29 - 2016-11-02 12:27 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2017-03-31 02:29 - 2016-11-02 12:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2017-03-31 02:29 - 2016-11-02 12:22 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-03-31 02:29 - 2016-11-02 12:19 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2017-03-31 02:29 - 2016-11-02 12:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-03-31 02:29 - 2016-11-02 12:13 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2017-03-31 02:29 - 2016-10-15 05:56 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2017-03-31 02:29 - 2016-10-15 05:56 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2017-03-31 02:29 - 2016-10-15 05:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2017-03-31 02:29 - 2016-10-15 05:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2017-03-31 02:29 - 2016-10-15 05:50 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2017-03-31 02:29 - 2016-10-15 05:37 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2017-03-31 02:29 - 2016-10-15 05:32 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-03-31 02:29 - 2016-10-05 12:33 - 00128864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-03-31 02:29 - 2016-10-05 12:13 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-03-31 02:29 - 2016-10-05 11:35 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-03-31 02:29 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-03-31 02:29 - 2016-10-05 11:31 - 00480768 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2017-03-31 02:29 - 2016-10-05 11:31 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-03-31 02:29 - 2016-10-05 11:24 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2017-03-31 02:29 - 2016-10-05 11:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2017-03-31 02:29 - 2016-09-15 19:29 - 00169056 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2017-03-31 02:29 - 2016-09-15 19:29 - 00127328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2017-03-31 02:29 - 2016-09-15 19:29 - 00074080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys
2017-03-31 02:29 - 2016-09-15 19:07 - 00128864 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2017-03-31 02:29 - 2016-09-15 18:46 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2017-03-31 02:29 - 2016-09-15 18:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
2017-03-31 02:29 - 2016-09-15 18:41 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-03-31 02:29 - 2016-09-15 18:41 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2017-03-31 02:29 - 2016-09-15 18:40 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-03-31 02:29 - 2016-09-15 18:38 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrGidsHandler.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2017-03-31 02:29 - 2016-09-15 18:35 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\rshx32.dll
2017-03-31 02:29 - 2016-09-15 18:33 - 00966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-03-31 02:29 - 2016-09-15 18:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2017-03-31 02:29 - 2016-09-15 18:27 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2017-03-31 02:29 - 2016-09-15 18:26 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2017-03-31 02:29 - 2016-09-15 18:24 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-03-31 02:29 - 2016-09-15 18:23 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\PhoneServiceRes.dll
2017-03-31 02:29 - 2016-09-07 07:02 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2017-03-31 02:29 - 2016-09-07 06:56 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\XamlTileRender.dll
2017-03-31 02:29 - 2016-09-07 06:46 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-03-31 02:29 - 2016-09-07 06:35 - 00650240 _____ (Microsoft) C:\Windows\system32\DbgModel.dll
2017-03-31 02:29 - 2016-09-07 06:33 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-31 02:29 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2017-03-31 02:29 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2017-03-31 02:29 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2017-03-31 02:29 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2017-03-31 02:29 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2017-03-31 02:29 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2017-03-31 02:29 - 2016-08-19 03:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2017-03-31 02:29 - 2016-08-06 06:31 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2017-03-31 02:29 - 2016-08-06 06:29 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2017-03-31 02:29 - 2016-08-06 06:23 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-31 02:29 - 2016-08-06 06:16 - 00073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2017-03-31 02:29 - 2016-08-06 06:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-03-31 02:29 - 2016-08-06 06:16 - 00020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2017-03-31 02:29 - 2016-08-06 05:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-03-31 02:29 - 2016-08-06 05:48 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2017-03-31 02:29 - 2016-08-06 05:34 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2017-03-31 02:29 - 2016-08-06 05:29 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-03-31 02:29 - 2016-08-06 05:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2017-03-31 02:29 - 2016-08-05 11:14 - 01066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2017-03-31 02:29 - 2016-08-05 11:10 - 00939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2017-03-31 02:29 - 2016-08-05 11:05 - 00665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2017-03-31 02:29 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2017-03-31 02:29 - 2016-08-05 10:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2017-03-31 02:29 - 2016-08-05 10:22 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2017-03-31 02:29 - 2016-08-05 10:08 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2017-03-31 02:29 - 2016-08-02 10:44 - 00114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2017-03-31 02:29 - 2016-05-29 20:38 - 08886976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSetup.exe
2017-03-31 02:15 - 2016-12-21 09:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-31 02:15 - 2016-12-21 06:44 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-03-31 01:24 - 2017-03-31 01:24 - 01544192 _____ C:\Users\Margo\Downloads\Dot4x64.msi
2017-03-31 01:14 - 2017-03-31 01:14 - 00000000 ____D C:\Users\Margo\AppData\Roaming\vlc
2017-03-31 01:13 - 2017-03-31 01:13 - 00001139 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-03-31 01:13 - 2017-03-31 01:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-03-31 01:13 - 2017-03-31 01:13 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-03-31 01:11 - 2017-03-31 01:11 - 31457544 _____ C:\Users\Margo\Downloads\vlc-2.2.4-win32.exe
2017-03-31 01:11 - 2017-03-31 01:11 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Mozilla
2017-03-31 01:06 - 2017-03-31 01:07 - 89137031 _____ C:\Users\Margo\Downloads\Windows6.3-KB2835517-x64.msu
2017-03-31 00:09 - 2017-03-31 02:05 - 00513192 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-03-31 00:06 - 2017-03-31 13:02 - 00000000 ____D C:\Users\Margo\AppData\Local\NVIDIA Corporation
2017-03-31 00:05 - 2017-03-31 00:05 - 00019696 _____ C:\Windows\system32\results.xml
2017-03-31 00:04 - 2017-03-31 00:04 - 00000451 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2017-03-31 00:02 - 2017-03-31 00:02 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2017-03-30 23:59 - 2017-03-31 00:01 - 138221080 _____ (Dell Inc.) C:\Users\Margo\Downloads\Video_Driver_YFH2F_WN32_10.18.10.4338_A01.EXE
2017-03-30 23:59 - 2017-03-30 23:59 - 01414648 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-03-30 23:59 - 2017-03-30 23:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-03-30 23:59 - 2017-03-30 23:59 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Intel Corporation
2017-03-30 23:57 - 2017-03-30 23:58 - 24001184 _____ (Dell Inc.) C:\Users\Margo\Downloads\5460_Serial-ATA_Driver_NGJJW_WN_12.8.2.1000_A00.EXE
2017-03-30 23:57 - 2015-05-29 10:14 - 00886528 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2017-03-30 23:57 - 2015-05-29 10:14 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2017-03-30 23:56 - 2017-03-30 23:56 - 30744736 _____ (Dell Inc.) C:\Users\Margo\Downloads\Network_Driver_3C3C6_WN32_10.1.505.2015_A00.EXE
2017-03-30 23:56 - 2017-03-30 23:56 - 00000000 ____D C:\Windows\Dell
2017-03-30 23:56 - 2017-03-30 23:01 - 00000000 ____D C:\Windows\Panther
2017-03-30 23:55 - 2017-03-30 23:55 - 70418432 _____ (Dell Inc.) C:\Users\Margo\Downloads\Input_Driver_Y9JHW_WN32_10.1200.101.202_A00.EXE
2017-03-30 23:54 - 2017-03-30 23:59 - 00000000 ____D C:\ProgramData\Intel
2017-03-30 23:54 - 2017-03-30 23:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2017-03-30 23:54 - 2013-09-03 16:52 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-03-30 23:54 - 2013-09-03 16:52 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2017-03-30 23:54 - 2013-09-03 16:52 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2017-03-30 23:53 - 2017-03-30 23:54 - 70061728 _____ (Dell Inc.) C:\Users\Margo\Downloads\Chipset_Driver_CN7W1_WN_9.5.14.1724_A01.EXE
2017-03-30 23:51 - 2017-04-02 00:24 - 00000000 ____D C:\Users\Margo\AppData\Local\CrashDumps
2017-03-30 23:50 - 2017-03-30 23:57 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-03-30 23:50 - 2017-03-30 23:51 - 16555872 _____ (Dell Inc.) C:\Users\Margo\Downloads\Chipset_Driver_2WGG0_WN32_10.1.1.7_A00.EXE
2017-03-30 23:50 - 2017-03-30 23:50 - 00000000 ____D C:\Dell
2017-03-30 23:50 - 2015-05-29 14:35 - 00752856 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys
2017-03-30 23:50 - 2015-05-15 16:04 - 00313048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2017-03-30 23:50 - 2015-05-15 15:46 - 00301784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2017-03-30 23:50 - 2015-05-15 15:14 - 00365272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsPStor.sys
2017-03-30 23:50 - 2014-10-20 17:50 - 00083160 _____ (Realtek Semiconductor.) C:\Windows\system32\RtCRX64.dll
2017-03-30 23:50 - 2014-01-27 13:39 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2017-03-30 23:49 - 2017-03-30 23:49 - 15265008 _____ C:\Users\Margo\Downloads\CardReader_Driver_Realtek_A00_Win1064_Win1032-Setup_ZPE.exe
2017-03-30 23:48 - 2017-03-30 23:57 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-30 23:48 - 2017-03-30 23:48 - 00001705 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDT Audio Control Panel.lnk
2017-03-30 23:48 - 2017-03-30 23:48 - 00000000 ____D C:\ProgramData\Dell
2017-03-30 23:48 - 2017-03-30 23:48 - 00000000 ____D C:\Program Files\IDT
2017-03-30 23:48 - 2012-09-06 08:10 - 06100480 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 02188800 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 01821184 _____ (IDT, Inc.) C:\Windows\system32\IDTNC64.cpl
2017-03-30 23:48 - 2012-09-06 08:10 - 00672256 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 00542208 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
2017-03-30 23:48 - 2012-09-06 08:10 - 00499200 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
2017-03-30 23:48 - 2012-09-06 08:10 - 00255488 _____ (IDT, Inc.) C:\Windows\system32\st646426.dll
2017-03-30 23:48 - 2012-04-30 20:53 - 01008472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2017-03-30 23:48 - 2012-03-31 06:52 - 00849434 _____ C:\Windows\system32\W92HDM6BSKULL.mps
2017-03-30 23:48 - 2012-02-22 00:14 - 00188383 _____ C:\Windows\system32\W92HDM14.mps
2017-03-30 23:48 - 2012-01-31 20:29 - 00576856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2017-03-30 23:48 - 2012-01-05 20:28 - 02603864 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2017-03-30 23:48 - 2012-01-05 20:28 - 01806168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioMeters64.exe
2017-03-30 23:48 - 2012-01-05 20:28 - 01468760 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioIDT.dll
2017-03-30 23:48 - 2011-09-03 23:42 - 00339288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO3064.dll
2017-03-30 23:48 - 2011-04-20 22:29 - 00874496 _____ (Creative Technology Ltd.) C:\Windows\system32\imapo64.dll
2017-03-30 23:48 - 2011-04-20 22:28 - 00734720 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\IMAPO32.dll
2017-03-30 23:48 - 2011-04-20 22:28 - 00734720 _____ (Creative Technology Ltd.) C:\Windows\system32\imapo32.dll
2017-03-30 23:48 - 2010-10-15 08:56 - 00390656 _____ (Creative Technology Ltd.) C:\Windows\system32\imthx64.dll
2017-03-30 23:47 - 2017-03-30 23:48 - 38496800 _____ (Dell Inc.) C:\Users\Margo\Downloads\5460_Audio_Driver_HCMKP_WN_6.10.0.6426_A00.EXE
2017-03-30 23:43 - 2017-03-30 23:44 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-03-30 23:43 - 2017-03-30 23:43 - 00001269 _____ C:\Users\Margo\Desktop\CrystalDiskInfo.lnk
2017-03-30 23:43 - 2017-03-30 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-03-30 23:42 - 2017-03-30 23:42 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-30 23:42 - 2017-03-30 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-30 23:42 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-30 23:42 - 2017-03-17 03:01 - 01882168 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01470520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-03-30 23:42 - 2017-01-26 02:13 - 00103936 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-03-30 23:42 - 2017-01-26 02:12 - 00326656 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-03-30 23:42 - 2017-01-26 02:09 - 00322560 _____ C:\Windows\system32\vulkan-1.dll
2017-03-30 23:42 - 2017-01-26 02:09 - 00118272 _____ C:\Windows\system32\vulkaninfo.exe
2017-03-30 23:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-03-30 23:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-03-30 23:41 - 2017-04-05 01:46 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-30 23:41 - 2017-03-30 23:42 - 03958792 _____ (Crystal Dew World ) C:\Users\Margo\Downloads\crystaldiskinfo7_0_2-en.exe
2017-03-30 23:41 - 2017-03-17 03:01 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-03-30 23:39 - 2017-03-30 23:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-30 23:36 - 2017-03-17 22:04 - 00047032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 40190400 _____ C:\Windows\system32\nvcompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 34991672 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 28254264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 19006832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 14674896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 11122728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 11019888 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 09306312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 08990256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 04078008 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 03597456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 03169848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 02716096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437892.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437892.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 01052096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00991288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00959424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00946456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00910784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00721952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00687408 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00609728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00573632 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00447984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-03-30 23:36 - 2017-03-17 03:01 - 00059448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-03-30 23:36 - 2017-03-17 03:01 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-03-30 23:36 - 2017-03-17 03:01 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-03-30 23:33 - 2017-03-30 23:33 - 00000000 ____D C:\NVIDIA
2017-03-30 23:29 - 2017-03-30 23:33 - 405596328 _____ (NVIDIA Corporation) C:\Users\Margo\Downloads\378.92-notebook-win10-64bit-international-whql.exe
2017-03-30 23:26 - 2017-03-30 23:26 - 60602643 _____ C:\Users\Margo\Downloads\NVIDIA-Solaris-x86-331.17.run
2017-03-30 23:25 - 2017-03-30 23:25 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Macromedia
2017-03-30 23:18 - 2017-03-30 23:18 - 00000000 ____D C:\Users\Margo\AppData\Local\MicrosoftEdge
2017-03-30 23:17 - 2017-03-31 13:03 - 00000000 ____D C:\Users\Margo\AppData\Local\NVIDIA
2017-03-30 23:14 - 2017-04-05 01:39 - 00000000 __SHD C:\Users\Margo\IntelGraphicsProfiles
2017-03-30 23:14 - 2017-03-31 00:02 - 00000000 ____D C:\Program Files (x86)\Intel
2017-03-30 23:14 - 2017-03-31 00:01 - 00000000 ____D C:\Intel
2017-03-30 23:14 - 2017-03-30 23:58 - 00000000 ____D C:\Program Files\Intel
2017-03-30 23:12 - 2017-03-31 04:14 - 00000000 ____D C:\Program Files\DellTPad
2017-03-30 23:12 - 2017-03-30 23:50 - 00000000 ____D C:\Windows\SysWOW64\sda
2017-03-30 23:12 - 2017-03-30 23:12 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2017-03-30 23:11 - 2017-03-31 13:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-30 23:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-30 23:11 - 2017-03-17 03:01 - 00512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 02477504 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00549944 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-03-30 23:11 - 2017-03-16 11:39 - 07813427 _____ C:\Windows\system32\nvcoproc.bin
2017-03-30 23:09 - 2017-04-05 01:45 - 01633114 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-30 23:09 - 2017-04-04 23:14 - 00003276 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-30 23:09 - 2017-03-30 23:09 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Skype
2017-03-30 23:09 - 2017-03-30 23:09 - 00000000 ____D C:\Users\Margo\AppData\Local\Comms
2017-03-30 23:08 - 2017-04-05 01:40 - 00000000 ___RD C:\Users\Margo\OneDrive
2017-03-30 23:08 - 2017-04-04 23:14 - 00002383 _____ C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-30 23:08 - 2017-03-30 23:08 - 00000000 ____D C:\Users\Margo\AppData\Local\NetworkTiles
2017-03-30 23:08 - 2017-03-30 23:08 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-03-30 23:06 - 2017-04-03 03:02 - 00000000 ____D C:\Users\Margo\AppData\Local\Packages
2017-03-30 23:06 - 2017-03-31 04:17 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-30 23:06 - 2017-03-30 23:21 - 00000000 ____D C:\Users\Margo\AppData\Local\ConnectedDevicesPlatform
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Roaming\Adobe
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\VirtualStore
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\TileDataLayer
2017-03-30 23:06 - 2017-03-30 23:06 - 00000000 ____D C:\Users\Margo\AppData\Local\Publishers
2017-03-30 23:05 - 2017-03-31 15:45 - 00000000 ____D C:\Users\Margo
2017-03-30 23:05 - 2017-03-30 23:05 - 00000020 ___SH C:\Users\Margo\ntuser.ini
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Vorlagen
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Startmenü
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Netzwerkumgebung
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Lokale Einstellungen
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Eigene Dateien
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Druckumgebung
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Videos
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Musik
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Documents\Eigene Bilder
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Local\Verlauf
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\AppData\Local\Anwendungsdaten
2017-03-30 23:05 - 2017-03-30 23:05 - 00000000 _SHDL C:\Users\Margo\Anwendungsdaten
2017-03-30 23:04 - 2017-03-30 23:05 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Windows\CSC
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer
2017-03-30 23:04 - 2017-03-30 23:04 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform
2017-03-30 23:04 - 2017-03-04 09:09 - 02717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-03-30 23:02 - 2017-03-30 23:02 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Vorlagen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Startmenü
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Dokumente
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 _SHDL C:\Dokumente und Einstellungen
2017-03-30 23:02 - 2017-03-30 23:02 - 00000000 ____D C:\Users\defaultuser0
2017-03-30 22:58 - 2017-03-30 22:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-03-30 22:58 - 2017-03-30 22:58 - 00000000 ____D C:\ProgramData\USOShared
2017-03-30 22:57 - 2017-04-05 01:38 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-30 22:57 - 2017-04-05 00:56 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-03-30 22:57 - 2017-04-02 23:07 - 00335472 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-30 22:57 - 2017-03-30 22:57 - 00000000 ____D C:\Windows\ServiceProfiles

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-05 01:45 - 2016-07-17 00:51 - 00599024 _____ C:\Windows\system32\perfh007.dat
2017-04-05 01:45 - 2016-07-17 00:51 - 00119600 _____ C:\Windows\system32\perfc007.dat
2017-04-05 01:37 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-04-04 23:04 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-04-04 20:42 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-04 17:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-04-04 17:01 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-04-03 00:27 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2017-04-02 23:14 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\NDF
2017-04-01 22:30 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-01 22:08 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-04-01 00:19 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-04-01 00:19 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2017-03-31 04:12 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2017-03-31 04:12 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-03-31 04:11 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\F12
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\dsc
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\PrintDialog
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\setup
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\oobe
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\migwiz
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lv-LV
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lt-LT
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\et-EE
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\es-MX
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\en-GB
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\bcastdvr
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Defender
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-03-31 04:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Sysprep
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Dism
2017-03-31 04:11 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\servicing
2017-03-31 04:10 - 2016-07-16 13:47 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2017-03-31 03:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\appcompat
2017-03-31 01:15 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2017-03-30 23:56 - 2016-07-16 13:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-03-30 23:11 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Help
2017-03-30 23:04 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\spool
2017-03-30 23:04 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-03-30 23:02 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2017-03-30 22:58 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\MiracastView
2017-03-30 22:58 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2017-03-30 22:58 - 2016-07-16 08:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-03-17 03:01 - 2016-07-17 00:57 - 00418752 _____ (Khronos Group) C:\Windows\SysWOW64\opencl.dll
2017-03-17 03:01 - 2015-07-23 04:02 - 00043636 _____ C:\Windows\system32\nvinfo.pb
2017-03-10 07:17 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-10 07:17 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-03-30 22:57

==================== Ende von FRST.txt ============================

Kisska · 05.04.2017, 02:00

Anbei Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Margo (05-04-2017 01:51:41)
Gestartet von C:\Users\Margo\Desktop
Windows 10 Pro Version 1607 (X64) (2017-03-30 21:04:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2190986405-3282524184-141134257-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2190986405-3282524184-141134257-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2190986405-3282524184-141134257-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-2190986405-3282524184-141134257-501 - Limited - Disabled)
Margo (S-1-5-21-2190986405-3282524184-141134257-1001 - Administrator - Enabled) => C:\Users\Margo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ansel (Version: 378.92 - NVIDIA Corporation) Hidden
CrystalDiskInfo 7.0.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.2 - Crystal Dew World)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 10.1200.101.203 - ALPS ELECTRIC CO., LTD.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6426.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4338 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.7766.2060 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2190986405-3282524184-141134257-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation)
NVIDIA Grafiktreiber 378.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.92 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.16.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7766.2047 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.88 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 10.1.505.2015 - Realtek)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2190986405-3282524184-141134257-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {193E138C-05B2-42A5-A4D2-96042F0A297B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-17] (NVIDIA Corporation)
Task: {34FF026E-B8BD-40D6-BC7E-AFDF87D431BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-04-01] (Microsoft Corporation)
Task: {3D2F15C0-9B2C-4608-AC47-4265C6D28FBE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-02-18] (Microsoft Corporation)
Task: {54B14175-5E3F-44DF-B22A-F6EB83DC5B0C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-03-17] (NVIDIA Corporation)
Task: {55808C77-3A86-43E6-B807-264431358B8B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-17] (NVIDIA Corporation)
Task: {5F2C5C06-4C8D-47C8-BE83-8743B56EBC57} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-17] (NVIDIA Corporation)
Task: {7916B9CC-3BD7-41F6-85A4-060523332270} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-03-17] (NVIDIA Corporation)
Task: {96F5F276-889D-45D0-9548-CA94F3008C6E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-17] (NVIDIA Corporation)
Task: {BA966BEE-DA38-4D86-BD69-CE7EF3437061} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-02-18] (Microsoft Corporation)
Task: {C275FD8B-5546-434D-8157-63956DBFE43C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-04-01] (Microsoft Corporation)
Task: {DC249202-80F0-49B0-885A-93772B98912A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-03-17] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-03-30 23:11 - 2017-03-17 01:16 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-05 01:33 - 2017-03-24 04:09 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-04-05 01:33 - 2017-03-24 04:10 - 02267600 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-03-31 02:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2017-03-31 02:31 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-31 02:30 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-31 02:31 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-31 02:30 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-31 02:31 - 2017-03-04 08:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-31 02:31 - 2017-03-04 08:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-30 23:45 - 2017-03-30 23:45 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-30 23:45 - 2017-03-30 23:45 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 01872384 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSEngine_OneCore.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 03776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-30 23:42 - 2017-03-17 03:01 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2017-03-30 23:42 - 2017-03-17 03:01 - 02443320 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00543288 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2017-03-30 23:42 - 2017-03-17 03:01 - 00468536 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2017-03-30 23:54 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2190986405-3282524184-141134257-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

30-03-2017 23:39:35 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
01-04-2017 23:01:46 Windows-Sicherung
02-04-2017 00:18:15 Windows-Sicherung
02-04-2017 00:24:01 Windows-Sicherung
02-04-2017 00:55:10 Windows-Sicherung
02-04-2017 01:06:31 Windows-Sicherung

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/05/2017 01:37:26 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/05/2017 01:34:33 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/04/2017 05:01:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/03/2017 03:23:53 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (04/03/2017 03:24:29 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/02/2017 03:19:50 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (04/02/2017 02:06:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (04/02/2017 01:11:39 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:09:41 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/02/2017 01:09:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (04/05/2017 01:44:42 AM) (Source: DCOM) (EventID: 10016) (User: MARGO-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MARGO-PC\Margo" (SID: S-1-5-21-2190986405-3282524184-141134257-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:39:30 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:39:30 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:39:27 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:37:22 AM) (Source: DCOM) (EventID: 10010) (User: MARGO-PC)
Description: Der Server "{0002DF02-0000-0000-C000-000000000046}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/05/2017 01:37:22 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:20:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:20:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:20:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/05/2017 01:19:17 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
  Date: 2017-04-05 01:33:52.969
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-04-05 01:33:52.968
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-04-05 01:33:52.965
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-04-05 01:33:52.916
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-04-03 00:04:17.615
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-01 00:15:48.931
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_ea62e0c945f71b38\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8049.51 MB
Verfügbarer physikalischer RAM: 5413.21 MB
Summe virtueller Speicher: 9777.51 MB
Verfügbarer virtueller Speicher: 7042.81 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.96 GB) (Free:897.93 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:625.76 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7981A8E6)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 84F4EB8A)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

28.03.2017, 22:31	#2
M-K-D-B /// TB-Ausbilder	Rechner verseucht ; Programme laufen nicht ; win 7 Sichere deine Daten und dann ab mit der Neuinstallation von Windows. __________________ __________________

Rechner verseucht ; Programme laufen nicht ; win 7

Plagegeister aller Art und deren Bekämpfung: Rechner verseucht ; Programme laufen nicht ; win 7