|
Plagegeister aller Art und deren Bekämpfung: Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.04.2015, 12:55 | #1 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam Liebes Trojaner-Board-Team, als ich gestern Abend etwas im Netz suchte, öffnete sich ein kleines Fenster und entpackte irgendeine Datei auf den Rechner. Was das war konnte ich nicht identifizieren, die Schrift war "kyrillisch". Angeklickt bzw gedownloadet hatte ich nichts, daher bin ich mir nicht ganz sicher, ob sich nun schädliches Material auf unserem Laptop befindet. Avira zeigt mir keinen Fund an. Spybot hat diverse Malware gefunden, kann diese aber nicht löschen. Defogger etc habe ich durchlaufen lassen und folgende Logs erhalten: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015 Ran by Chrssi (administrator) on **** on 03-04-2015 12:56:32 Running from C:\Users\***\Desktop Loaded Profiles: *** (Available profiles: ***) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\LogonUI.exe (AMD) C:\Windows\System32\atieclxx.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe (Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-12] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-04-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] ( (Atheros Communications)) HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [Google Update] => C:\Users\Chrssi\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-12] (Google Inc.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\MountPoints2: {f40816fc-5781-11e3-bebe-b888e3fdb262} - "E:\LGAutoRun.exe" HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> Startup: C:\Users\Chrssi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com SearchScopes: HKLM -> DefaultScope value is missing. SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> DefaultScope {CFAA2CD5-5AA6-405A-A7FD-92AB2F3C3A18} URL = SearchScopes: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> {CFAA2CD5-5AA6-405A-A7FD-92AB2F3C3A18} URL = SearchScopes: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> {D971CE01-3BCC-4E8A-B574-7A40BDEDA0F8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=MGX&o=15359&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^JQ&apn_dtid=^YYYYYY^YY^DE&apn_uid=DCABB183-C5C6-4E97-8FD9-B5DA7B2991F3&apn_sauid=727B937C-8C5A-4BA2-BAF1-8C44FBB514A2 BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-04-02] (Microsoft Corporation) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-09] (Oracle Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-02] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-09] (Oracle Corporation) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-11] (Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-04-02] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-11] (Oracle Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft) Toolbar: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-01-09] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-01-09] (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\windows\SysWOW64\npDeployJava1.dll [2013-09-11] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-09-11] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-10-16] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin HKU\S-1-5-21-1225493163-4127186220-2738876131-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Chrssi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.) FF Plugin HKU\S-1-5-21-1225493163-4127186220-2738876131-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Chrssi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.) FF Plugin HKU\S-1-5-21-1225493163-4127186220-2738876131-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR Profile: C:\Users\***\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-12] CHR Extension: (Google Drive) - C:\Users\Chrssi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-12] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-15] CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-12] CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-12] CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02] CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-12] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-04-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-04-02] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [322176 2014-06-17] (Windows (R) Win 7 DDK provider) [File not signed] R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation) R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2014-10-21] (Samsung Electronics CO., LTD.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.) S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-04-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-04-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-01-06] (Avira Operations GmbH & Co. KG) S3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [599752 2014-06-17] () [File not signed] S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation) R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-03 12:56 - 2015-04-03 12:57 - 00019594 _____ () C:\Users\***\Desktop\FRST.txt 2015-04-03 12:56 - 2015-04-03 12:56 - 00000000 ____D () C:\FRST 2015-04-03 12:55 - 2015-04-03 12:55 - 02095616 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe 2015-04-03 12:54 - 2015-04-03 12:54 - 00000474 _____ () C:\Users\***\Desktop\defogger_disable.log 2015-04-03 12:53 - 2015-04-03 12:53 - 00050477 _____ () C:\Users\***\Desktop\Defogger.exe 2015-04-02 20:38 - 2015-04-02 21:11 - 00000000 ____D () C:\Users\***\AppData\Roaming\ClassicShell 2015-04-02 20:38 - 2015-04-02 20:38 - 00000000 ____D () C:\ProgramData\ClassicShell 2015-04-02 20:37 - 2015-04-02 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2015-04-02 20:37 - 2015-04-02 20:37 - 00000000 ____D () C:\Program Files\Classic Shell 2015-04-02 20:34 - 2015-04-02 20:34 - 00000000 __SHD () C:\Users\***\AppData\Local\EmieBrowserModeList 2015-04-02 20:31 - 2015-04-02 20:31 - 01203488 _____ () C:\Users\***\Downloads\Classic Shell - CHIP-Installer.exe 2015-04-02 20:01 - 2015-04-02 20:01 - 00001153 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-04-02 20:00 - 2013-08-22 15:25 - 00000824 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20150402-200050.backup ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-03 12:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2015-04-03 12:46 - 2013-11-09 17:07 - 01139260 _____ () C:\WINDOWS\WindowsUpdate.log 2015-04-03 12:41 - 2012-12-14 19:31 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1225493163-4127186220-2738876131-1001 2015-04-03 12:41 - 2012-10-19 08:12 - 00000000 ____D () C:\ProgramData\WinClon 2015-04-03 12:39 - 2013-09-30 06:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-04-03 12:39 - 2013-09-30 05:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2015-04-03 12:39 - 2013-09-30 05:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2015-04-03 12:38 - 2012-12-14 19:26 - 00000000 ____D () C:\Users\***\AppData\Local\CrashDumps 2015-04-03 12:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2015-04-02 21:11 - 2012-12-15 08:11 - 00000000 ____D () C:\Users\***\AppData\Local\Adobe 2015-04-02 21:09 - 2014-10-23 19:41 - 00004686 _____ () C:\WINDOWS\setupact.log 2015-04-02 21:09 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-04-02 21:08 - 2014-10-23 19:32 - 00013674 _____ () C:\WINDOWS\PFRO.log 2015-04-02 20:57 - 2013-11-07 22:29 - 00000000 ____D () C:\Users\*** 2015-04-02 20:47 - 2014-10-16 21:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15 2015-04-02 20:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2015-04-02 20:17 - 2013-07-12 17:00 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1225493163-4127186220-2738876131-1001UA.job 2015-04-02 20:01 - 2014-08-14 20:26 - 00000000 ____D () C:\ProgramData\Package Cache 2015-04-02 20:01 - 2013-02-05 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-04-02 20:01 - 2013-02-05 15:35 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-04-02 19:49 - 2013-11-13 08:15 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6AAE1431-92D2-40BE-9EA6-077D34A45FC1} 2015-04-02 19:45 - 2013-05-02 10:24 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2015-04-02 19:45 - 2013-04-21 18:16 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2015-04-02 19:45 - 2013-04-21 18:16 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2015-04-02 19:37 - 2013-08-22 16:44 - 00554360 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-03-24 19:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2015-03-24 19:15 - 2012-12-15 07:49 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-03-24 19:12 - 2014-07-15 17:17 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2015-03-24 19:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-03-24 19:11 - 2015-01-21 22:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser ==================== Files in the root of some directories ======= 2013-07-28 01:25 - 2013-10-28 13:27 - 0000111 _____ () C:\Users\***\AppData\Roaming\WB.CFG 2013-06-23 15:25 - 2013-10-28 13:27 - 0000006 _____ () C:\Users\***\AppData\Roaming\WBPU-TTL.DAT 2013-10-07 21:47 - 2013-10-07 21:47 - 0001456 _____ () C:\Users\***\AppData\Local\Adobe Für Web speichern 12.0 Prefs 2013-03-26 20:58 - 2013-04-27 12:32 - 0007604 _____ () C:\Users\***\AppData\Local\Resmon.ResmonCfg 2013-02-25 17:01 - 2013-02-21 17:59 - 2063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe 2013-02-25 17:01 - 2013-01-13 00:51 - 0003004 _____ () C:\ProgramData\MakeMarkerFile.xml Files to move or delete: ==================== C:\ProgramData\MakeMarkerFile.exe Some content of TEMP: ==================== C:\Users\***\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-03-01 13:40 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015 Ran by *** at 2015-04-03 12:59:00 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19140 - Adobe Systems Incorporated) Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.) AMD Catalyst Install Manager (HKLM\...\{403A4E7A-D239-04D8-6A3D-31DD203C018D}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks) Ashampoo Burning Studio 2013 v.11.0.6 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.6 - Ashampoo GmbH & Co. KG) Avira (HKLM-x32\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG) Avira (x32 Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira) CardRecovery 6.00 (HKLM-x32\...\{88D68A69-D247-466B-90DD-575F6BE16230}_is1) (Version: - WinRecovery Software) CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform) Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.4 - Samsung Electronics CO.,LTD.) Elements 11 Organizer (x32 Version: 11.0 - Ihr Firmenname) Hidden E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.) FaceFilter v3.02 SE (HKLM-x32\...\{6020758E-57A9-41E3-AF20-8EE311EA6156}) (Version: 3.02.2713.1 - Reallusion Inc.) Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.) Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Google Chrome (HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.) Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.) Java 7 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.400 - Oracle) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4701.1002 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC) PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.326 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.2 - Samsung Electronics CO., LTD.) Raccolta foto (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.12.18 - Samsung Electronics CO., LTD.) S Agent (Version: 1.1.50 - Samsung Electronics CO., LTD.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.) Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.19 - Safer-Networking Ltd.) Support Center (HKLM\...\{AB0DEFBB-1A16-47B5-86D2-39F0A2B24AE4}) (Version: 2.1.1210 - Samsung Electronics CO., LTD.) Support Center FAQ (x32 Version: 1.0.14 - Samsung Electronics CO., LTD.) Hidden SW Update (HKLM-x32\...\{4F1936F8-82B4-437E-BC47-FAB9136A04B2}) (Version: 2.2.2 - Samsung Electronics CO., LTD.) TeamSpeak 3 Client (HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH) User Guide (HKLM-x32\...\{2888FDD1-5EEC-4D56-84B7-4D20DAC0E090}) (Version: 1.3.00 - Samsung Electronics CO., LTD.) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation) Windows-Treiberpaket - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\***\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File ==================== Restore Points ========================= 21-11-2014 22:07:58 Windows Update 27-11-2014 21:53:03 Windows Update 06-12-2014 19:19:59 Installed SW Update 13-12-2014 00:01:50 Windows Update 15-01-2015 14:47:13 Windows Update 19-01-2015 23:30:25 Windows Update 24-01-2015 14:32:33 Windows Update 28-01-2015 21:21:19 Windows Modules Installer 15-03-2015 14:37:14 Windows Update 02-04-2015 20:35:34 Installed Classic Shell ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {095D7EFB-4D30-4969-9A6A-8A327EE4F776} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2014-01-29] (Samsung Electronics CO., LTD.) Task: {13AA811A-057C-4D7B-9D1D-A9682209C4C5} - System32\Tasks\DSite => C:\Users\***\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe <==== ATTENTION Task: {304C74F3-E453-4057-BAC5-BF54B3BBB4F5} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2014-11-12] (SEC) Task: {3169D3ED-9CBF-4EA1-8ED8-EF58294E339F} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-04-02] (Microsoft Corporation) Task: {3852D275-616A-4724-B0AB-B8BE2B787024} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-10-10] (Samsung Electronics CO., LTD.) Task: {422CB321-D087-45B3-ACCD-8D17F9BE51A4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-04-02] (Microsoft Corporation) Task: {4F76BB95-6D45-4F0A-995C-203D39EA850C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1225493163-4127186220-2738876131-1001UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-12] (Google Inc.) Task: {630520AE-B2C1-4D9A-BDEB-5EE26B3BCDB3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-04-02] (Microsoft Corporation) Task: {70EB9CC6-D347-41F8-8BC5-D94FE6C129AB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation) Task: {79713469-126D-4CD1-9DFB-1AD73484CF7F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd) Task: {9DA09ED4-B066-4B10-B5B5-D9B7C927AFB8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation) Task: {A7FB3B6D-BE23-44B5-84FB-4F446DB262AC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-03-24] (Microsoft Corporation) Task: {CE3064CC-67E5-4C25-BB3F-B914A8BA0E4D} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-ka1514-697@online.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {E121F40B-94A0-448F-8FA7-4898D77A1AD4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1225493163-4127186220-2738876131-1001Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-12] (Google Inc.) Task: {E801A9F2-F50B-487B-AFEB-7789968FE22E} - System32\Tasks\AdobeAAMUpdater-1.0-Chrissi-*** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: C:\WINDOWS\Tasks\DSite.job => C:\Users\***\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1225493163-4127186220-2738876131-1001Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1225493163-4127186220-2738876131-1001UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (whitelisted) ============== 2014-10-16 21:10 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00084800 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe 2014-06-17 08:32 - 2014-06-17 08:32 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2014-06-17 08:29 - 2014-06-17 08:29 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2014-06-17 08:35 - 2014-06-17 08:35 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2014-10-10 21:35 - 2014-10-10 21:35 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll 2014-09-25 20:44 - 2014-09-25 20:44 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2013-07-07 13:55 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-07-07 13:55 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-07-07 13:55 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-07-07 13:55 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-07-07 13:55 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00027968 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 01141056 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00025920 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00059712 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00102720 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2015-02-23 15:19 - 2015-02-18 00:44 - 01117512 _____ () C:\Users\***\AppData\Local\Google\Chrome\Application\40.0.2214.115\libglesv2.dll 2015-02-23 15:19 - 2015-02-18 00:44 - 00211272 _____ () C:\Users\***\AppData\Local\Google\Chrome\Application\40.0.2214.115\libegl.dll 2015-02-23 15:19 - 2015-02-18 00:44 - 09171272 _____ () C:\Users\***\AppData\Local\Google\Chrome\Application\40.0.2214.115\pdf.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\***\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run: => "BtTray" HKLM\...\StartupApproved\Run32: => "CLVirtualDrive" HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\StartupApproved\Run: => "KiesAirMessage" ==================== Accounts: ============================= Administrator (S-1-5-21-1225493163-4127186220-2738876131-500 - Administrator - Disabled) *** (S-1-5-21-1225493163-4127186220-2738876131-1001 - Administrator - Enabled) => C:\Users\*** Gast (S-1-5-21-1225493163-4127186220-2738876131-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1225493163-4127186220-2738876131-1003 - Limited - Enabled) ==================== Faulty Device Manager Devices ============= Name: Standard OpenHCD USB-Hostcontroller Description: Standard OpenHCD USB-Hostcontroller Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard-USB-Hostcontroller) Service: usbohci Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (04/03/2015 00:38:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: CCC.exe, Version: 3.5.0.0, Zeitstempel: 0x4f8350e0 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17278, Zeitstempel: 0x53eebf2e Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000000606c ID des fehlerhaften Prozesses: 0x12ec Startzeit der fehlerhaften Anwendung: 0xCCC.exe0 Pfad der fehlerhaften Anwendung: CCC.exe1 Pfad des fehlerhaften Moduls: CCC.exe2 Berichtskennung: CCC.exe3 Vollständiger Name des fehlerhaften Pakets: CCC.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: CCC.exe5 Error: (04/03/2015 00:38:39 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: CCC.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.ObjectDisposedException Stapel: bei System.Threading.TimerQueueTimer.Change(UInt32, UInt32) bei ATI.ACE.CCC.Implementation.CCC_Main.CCCNewThreadBegin(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Threading.ThreadHelper.ThreadStart(System.Object) Error: (04/02/2015 09:12:18 PM) (Source: Avira Service Host) (EventID: 0) (User: ) Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message) bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey() bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start() bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView) bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid) bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid) bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason) bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription) bei S... Error: (04/02/2015 09:11:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (04/02/2015 09:11:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (04/02/2015 09:11:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (04/02/2015 09:11:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (04/02/2015 09:09:47 PM) (Source: SideBySide) (EventID: 79) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1". Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert. Error: (04/02/2015 08:56:52 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 86c Startzeit: 01d06d6e29da7017 Endzeit: 4294967295 Anwendungspfad: C:\WINDOWS\Explorer.EXE Berichts-ID: 72c2038b-d967-11e4-bee8-b888e3fdb262 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (04/02/2015 08:44:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm explorer.exe, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: a74 Startzeit: 01d06d745ab85841 Endzeit: 109 Anwendungspfad: C:\Windows\explorer.exe Berichts-ID: 4554999f-d968-11e4-bee8-b888e3fdb262 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: System errors: ============= Error: (04/02/2015 09:11:34 PM) (Source: DCOM) (EventID: 10010) (User: Chrissi) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (04/02/2015 09:11:34 PM) (Source: DCOM) (EventID: 10010) (User: Chrissi) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4 Error: (04/02/2015 09:11:29 PM) (Source: DCOM) (EventID: 10010) (User: Chrissi) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 Error: (04/02/2015 09:11:29 PM) (Source: DCOM) (EventID: 10010) (User: Chrissi) Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4 Error: (04/02/2015 09:11:19 PM) (Source: DCOM) (EventID: 10016) (User: Chrissi) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Chrissi***S-1-5-21-1225493163-4127186220-2738876131-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (04/02/2015 09:11:19 PM) (Source: DCOM) (EventID: 10016) (User: Chrissi) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Chrissi***S-1-5-21-1225493163-4127186220-2738876131-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (04/02/2015 09:11:19 PM) (Source: DCOM) (EventID: 10016) (User: Chrissi) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Chrissi***S-1-5-21-1225493163-4127186220-2738876131-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (04/02/2015 09:11:19 PM) (Source: DCOM) (EventID: 10016) (User: Chrissi) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Chrissi***S-1-5-21-1225493163-4127186220-2738876131-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (04/02/2015 09:09:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%14001 Error: (04/02/2015 09:09:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: %%31 Microsoft Office Sessions: ========================= Error: (04/03/2015 00:38:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: CCC.exe3.5.0.04f8350e0KERNELBASE.dll6.3.9600.1727853eebf2ee0434352000000000000606c12ec01d06dfa39ec8438C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeC:\WINDOWS\system32\KERNELBASE.dll9d20b354-d9ed-11e4-bee9-b888e3fdb262 Error: (04/03/2015 00:38:39 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: CCC.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.ObjectDisposedException Stapel: bei System.Threading.TimerQueueTimer.Change(UInt32, UInt32) bei ATI.ACE.CCC.Implementation.CCC_Main.CCCNewThreadBegin(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Threading.ThreadHelper.ThreadStart(System.Object) Error: (04/02/2015 09:12:18 PM) (Source: Avira Service Host) (EventID: 0) (User: ) Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message) bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey() bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start() bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView) bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid) bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid) bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason) bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription) bei S... Error: (04/02/2015 09:11:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141 Error: (04/02/2015 09:11:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (04/02/2015 09:11:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141 Error: (04/02/2015 09:11:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Chrissi) Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141 Error: (04/02/2015 09:09:47 PM) (Source: SideBySide) (EventID: 79) (User: ) Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNameC:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe Error: (04/02/2015 08:56:52 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Explorer.EXE6.3.9600.1728486c01d06d6e29da70174294967295C:\WINDOWS\Explorer.EXE72c2038b-d967-11e4-bee8-b888e3fdb262 Error: (04/02/2015 08:44:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: explorer.exe6.3.9600.17284a7401d06d745ab85841109C:\Windows\explorer.exe4554999f-d968-11e4-bee8-b888e3fdb262 ==================== Memory info =========================== Processor: AMD A6-4400M APU with Radeon(tm) HD Graphics Percentage of memory in use: 38% Total physical RAM: 5595.02 MB Available physical RAM: 3451.63 MB Total Pagefile: 6555.02 MB Available Pagefile: 4093.73 MB Total Virtual: 131072 MB Available Virtual: 131071.77 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:905.48 GB) (Free:688.38 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 3945EBAC) Partition: GPT Partition Type. ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2015-04-03 13:09:01 Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000001d ST1000LM024_HN-M101MBB rev.2AR10002 931,51GB Running: us73qz2e.exe; Driver: C:\Users\***\AppData\Local\Temp\kwldqpod.sys ---- User code sections - GMER 2.1 ---- .text C:\WINDOWS\system32\atiesrxx.exe[956] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffc50f3169a 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atiesrxx.exe[956] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffc50f316a2 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atiesrxx.exe[956] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffc50f3181a 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atiesrxx.exe[956] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffc50f31832 4 bytes [F3, 50, FC, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1916] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffc50f3169a 4 bytes [F3, 50, FC, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1916] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffc50f316a2 4 bytes [F3, 50, FC, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1916] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffc50f3181a 4 bytes [F3, 50, FC, 7F] .text C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe[1916] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffc50f31832 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atieclxx.exe[5720] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffc50f3169a 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atieclxx.exe[5720] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffc50f316a2 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atieclxx.exe[5720] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffc50f3181a 4 bytes [F3, 50, FC, 7F] .text C:\WINDOWS\system32\atieclxx.exe[5720] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffc50f31832 4 bytes [F3, 50, FC, 7F] .text C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe[5820] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194 00007ffc491f1f6a 4 bytes [1F, 49, FC, 7F] .text C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe[5820] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218 00007ffc491f1f82 4 bytes [1F, 49, FC, 7F] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[3288] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194 00007ffc491f1f6a 4 bytes [1F, 49, FC, 7F] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[3288] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218 00007ffc491f1f82 4 bytes [1F, 49, FC, 7F] ---- Threads - GMER 2.1 ---- Thread C:\WINDOWS\system32\csrss.exe [2344:5696] fffff96000942b90 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code ---- EOF - GMER 2.1 ---- Vielen Dank schonmal |
03.04.2015, 13:19 | #2 |
/// the machine /// TB-Ausbilder | Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam hi,
__________________Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
04.04.2015, 08:59 | #3 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.09.1.1004 www.malwarebytes.org Database version: main: v2015.04.03.06 rootkit: v2015.03.31.01 Windows 8.1 x64 NTFS Internet Explorer 11.0.9600.17690 *** :: *** [administrator] 03.04.2015 20:00:41 mbar-log-2015-04-03 (20-00-41).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 352301 Time elapsed: 24 minute(s), 5 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) Code:
ATTFilter 09:51:23.0770 0x186c TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 09:51:23.0770 0x186c UEFI system 09:51:30.0536 0x186c ============================================================ 09:51:30.0536 0x186c Current date / time: 2015/04/04 09:51:30.0536 09:51:30.0536 0x186c SystemInfo: 09:51:30.0536 0x186c 09:51:30.0536 0x186c OS Version: 6.3.9600 ServicePack: 0.0 09:51:30.0536 0x186c Product type: Workstation 09:51:30.0536 0x186c ComputerName: *** 09:51:30.0536 0x186c UserName: *** 09:51:30.0536 0x186c Windows directory: C:\WINDOWS 09:51:30.0536 0x186c System windows directory: C:\WINDOWS 09:51:30.0536 0x186c Running under WOW64 09:51:30.0536 0x186c Processor architecture: Intel x64 09:51:30.0536 0x186c Number of processors: 2 09:51:30.0536 0x186c Page size: 0x1000 09:51:30.0536 0x186c Boot type: Normal boot 09:51:30.0536 0x186c ============================================================ 09:51:31.0160 0x186c KLMD registered as C:\WINDOWS\system32\drivers\57550157.sys 09:51:32.0504 0x186c System UUID: {81100D59-1053-E149-AB2F-EDEFD8DDB0CB} 09:51:33.0801 0x186c Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:51:33.0832 0x186c ============================================================ 09:51:33.0832 0x186c \Device\Harddisk0\DR0: 09:51:33.0832 0x186c GPT partitions: 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {7BFE4082-DDE1-4600-A269-D26AD43A3905}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xFA000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {AAA4C7C2-0823-413E-AB89-159746FFEF2F}, Name: EFI system partition, StartLBA 0xFA800, BlocksNum 0x96000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {7044C041-AF79-475F-896E-8109A400CC66}, Name: Microsoft reserved partition, StartLBA 0x190800, BlocksNum 0x40000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {E488B6D0-F2E5-4DC3-B83A-B27E073B431D}, Name: Basic data partition, StartLBA 0x1D0800, BlocksNum 0x712F5000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {4A46F92A-379E-42F9-AC28-840E6437FDA0}, Name: , StartLBA 0x714C5800, BlocksNum 0xAF000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {86C9B8C7-4FFC-4DF2-A339-0664C764CFF4}, Name: Basic data partition, StartLBA 0x71574800, BlocksNum 0x2F92000 09:51:33.0832 0x186c \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {EA61EA87-5B76-48FC-4173-636C65706975}, Name: Basic data partition, StartLBA 0x74506800, BlocksNum 0x200000 09:51:33.0832 0x186c MBR partitions: 09:51:33.0832 0x186c ============================================================ 09:51:33.0864 0x186c C: <-> \Device\Harddisk0\DR0\Partition4 09:51:33.0864 0x186c ============================================================ 09:51:33.0864 0x186c Initialize success 09:51:33.0864 0x186c ============================================================ 09:52:18.0779 0x19b0 ============================================================ 09:52:18.0779 0x19b0 Scan started 09:52:18.0779 0x19b0 Mode: Manual; SigCheck; TDLFS; 09:52:18.0779 0x19b0 ============================================================ 09:52:18.0779 0x19b0 KSN ping started 09:52:21.0304 0x19b0 KSN ping finished: true 09:52:25.0745 0x19b0 ================ Scan system memory ======================== 09:52:25.0745 0x19b0 System memory - ok 09:52:25.0745 0x19b0 ================ Scan services ============================= 09:52:26.0385 0x19b0 [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys 09:52:26.0870 0x19b0 1394ohci - ok 09:52:26.0917 0x19b0 [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys 09:52:26.0948 0x19b0 3ware - ok 09:52:27.0120 0x19b0 [ 9539F7917B4B6D92C90F0FAA6B86C605, B4C284E8EECC2E7025053A3320EFDC9F47BCA9828853AD2A805DB826CA4AC27E ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys 09:52:27.0167 0x19b0 ACPI - ok 09:52:27.0214 0x19b0 [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys 09:52:27.0245 0x19b0 acpiex - ok 09:52:27.0276 0x19b0 [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys 09:52:27.0354 0x19b0 acpipagr - ok 09:52:27.0417 0x19b0 [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys 09:52:27.0667 0x19b0 AcpiPmi - ok 09:52:27.0714 0x19b0 [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys 09:52:27.0792 0x19b0 acpitime - ok 09:52:28.0042 0x19b0 [ 835CE0647E4E9F01BEB26201DA6705B4, C90CBED7E066ECE2F380CE84B95EAD0E120C02720DB31483BDF0E7EDF7FB4EE1 ] AdobeActiveFileMonitor11.0 C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe 09:52:28.0073 0x19b0 AdobeActiveFileMonitor11.0 - ok 09:52:28.0151 0x19b0 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 09:52:28.0198 0x19b0 AdobeARMservice - ok 09:52:28.0276 0x19b0 [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS 09:52:28.0354 0x19b0 ADP80XX - ok 09:52:28.0417 0x19b0 [ 0F17D49BE041B7EFF1D33BF1414E7AC6, F8B536B60903814DF88DAF535753288537EF0993E42AA4E734EDA8D68B24C7AB ] AeLookupSvc C:\WINDOWS\System32\aelupsvc.dll 09:52:28.0557 0x19b0 AeLookupSvc - ok 09:52:28.0651 0x19b0 [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD C:\WINDOWS\system32\drivers\afd.sys 09:52:28.0917 0x19b0 AFD - ok 09:52:29.0010 0x19b0 [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440 C:\WINDOWS\system32\drivers\agp440.sys 09:52:29.0057 0x19b0 agp440 - ok 09:52:29.0135 0x19b0 [ F0CB6DB513CAC393D04A0FCE0A59E1BF, E6EE159D0E6B1F666946B1FE421874044E89BB2EB60A521BAA111A1229FA7B2D ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys 09:52:29.0260 0x19b0 ahcache - ok 09:52:29.0370 0x19b0 [ A91D8E1E433EFB32551BCE69037E1CE7, 41DFDD5B56918D19D09DFB3E4B07460AA85647A8647ABBBB906158D8D6653290 ] ALG C:\WINDOWS\System32\alg.exe 09:52:29.0479 0x19b0 ALG - ok 09:52:29.0573 0x19b0 [ FED8F396537A5E4FA58E6C8BA8070081, 0A14B143BB8C0AE0AA56A2197DFC5F7BDC43F0693F3A66E69C04043737AD11C1 ] AMD External Events Utility C:\WINDOWS\system32\atiesrxx.exe 09:52:29.0682 0x19b0 AMD External Events Utility - ok 09:52:29.0729 0x19b0 [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys 09:52:29.0823 0x19b0 AmdK8 - ok 09:52:30.0573 0x19b0 [ EB3F3FDC7D0EC927A4AB31F9F6235A7C, B10087C9C277065926884FA8D18A300C54B8FFDCE08A31EF4828AF2AC2685791 ] amdkmdag C:\WINDOWS\system32\DRIVERS\atikmdag.sys 09:52:31.0229 0x19b0 amdkmdag - ok 09:52:31.0370 0x19b0 [ 160159231941801A458FEF8A73D494AC, E014C68232D5FA2216AD36B2BF0D3F51C821B8D0E7513F2F33DD2591F945E5C4 ] amdkmdap C:\WINDOWS\system32\DRIVERS\atikmpag.sys 09:52:31.0479 0x19b0 amdkmdap - ok 09:52:31.0526 0x19b0 [ 02CF5AD93538CCE63EB09364EDD3DCF9, A50EBC874966DDA8D209F102148BBD3C6BD5E0CB0DB23D22A99AC3AD3AACE17A ] amdkmpfd C:\WINDOWS\system32\drivers\amdkmpfd.sys 09:52:31.0589 0x19b0 amdkmpfd - ok 09:52:31.0651 0x19b0 [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys 09:52:31.0729 0x19b0 AmdPPM - ok 09:52:31.0760 0x19b0 [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys 09:52:31.0776 0x19b0 amdsata - ok 09:52:31.0854 0x19b0 [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys 09:52:31.0885 0x19b0 amdsbs - ok 09:52:31.0932 0x19b0 [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys 09:52:31.0964 0x19b0 amdxata - ok 09:52:32.0026 0x19b0 [ E907C9355E822799B0A7D06110CE683A, DD309C74942DC7A2ADF886767D2B8AD46C265193BD3D6469DB173799CFFE1CED ] amd_sata C:\WINDOWS\system32\drivers\amd_sata.sys 09:52:32.0042 0x19b0 amd_sata - ok 09:52:32.0104 0x19b0 [ 15FD758D7E1B9887262D7101509AE892, BFFCFF1AF2182E4DF71928C2683D26818576C3844244D3945D45012B09CE49F9 ] amd_xata C:\WINDOWS\system32\drivers\amd_xata.sys 09:52:32.0135 0x19b0 amd_xata - ok 09:52:32.0260 0x19b0 [ 624D29E2D70F83147A79043FD0024D1D, 8B9D4692529155893E3E73E2CF1B0A36354C7032C9524FDCBC5D57562F7F0342 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 09:52:32.0354 0x19b0 AntiVirSchedulerService - ok 09:52:32.0432 0x19b0 [ 624D29E2D70F83147A79043FD0024D1D, 8B9D4692529155893E3E73E2CF1B0A36354C7032C9524FDCBC5D57562F7F0342 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 09:52:32.0495 0x19b0 AntiVirService - ok 09:52:32.0557 0x19b0 [ 04951A9A937CBE28A2D3FEEA360B6D1F, D8AAF000BE4FE4B203DC2EB2A64F780A542E5238CE3F9952FD03277379B11529 ] AppID C:\WINDOWS\system32\drivers\appid.sys 09:52:32.0729 0x19b0 AppID - ok 09:52:32.0807 0x19b0 [ C0DC3F58214A227980AEB091CFD2F973, 0C3E8453C9F65ADA3E74C38C0E3AC3E0CBFD807B827097046265B38839E151E3 ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll 09:52:32.0901 0x19b0 AppIDSvc - ok 09:52:32.0995 0x19b0 [ 034ED41F13D9C1845C1E081F05B640DB, E4E17BA0B22C464DE60A6BF68D4D035D1B838DE4F0361029DED1AE00503E135C ] Appinfo C:\WINDOWS\System32\appinfo.dll 09:52:33.0089 0x19b0 Appinfo - ok 09:52:33.0198 0x19b0 [ CB12C47647D8BDAFAA94C0856B14128B, 5590C98095357C92563EF94800107D3611AA6ECA1A70BE463C03B279E618A6C4 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll 09:52:33.0354 0x19b0 AppReadiness - ok 09:52:33.0479 0x19b0 [ F7529BD3FFAC9C33D15F6DE3B7353B03, 8EF0A84C9687A246B60939A326E498121039E9CC617A7ABBA933EDD327F3467E ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll 09:52:33.0604 0x19b0 AppXSvc - ok 09:52:33.0682 0x19b0 [ 44695679881DEB85CAD7C249B151066E, A44413ACA911DDB5757DE9F9ECC3968979C47617CF9DF81B24E7ECDE7E0D54BC ] APXACC C:\WINDOWS\system32\DRIVERS\appexDrv.sys 09:52:33.0758 0x19b0 APXACC - ok 09:52:33.0983 0x19b0 [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys 09:52:34.0014 0x19b0 arcsas - ok 09:52:34.0092 0x19b0 [ 3DB7721F06BC2FEDB25029EA23AB27DA, 221861148C66FE53E4D6EE49C6E656479AB5804A2D348A280A1CD8093E8AB788 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 09:52:34.0186 0x19b0 AsyncMac - ok 09:52:34.0201 0x19b0 [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi C:\WINDOWS\system32\drivers\atapi.sys 09:52:34.0232 0x19b0 atapi - ok 09:52:34.0422 0x19b0 [ 6C29641627ADBBEF5766048A698E1830, 877179A6F3F086F9669588B16776C15DB1CFC8007EC92ADCB61CE83BF605AC04 ] AtherosSvc C:\Program Files (x86)\Bluetooth Suite\AdminService.exe 09:52:34.0446 0x19b0 AtherosSvc - detected UnsignedFile.Multi.Generic ( 1 ) 09:52:36.0950 0x19b0 Detect skipped due to KSN trusted 09:52:36.0950 0x19b0 AtherosSvc - ok 09:52:37.0293 0x19b0 [ 2C7676F892E88FD190F08D98048C7C6C, 44C13C103F61DA4D1A3823D37344F8C9465A611A9560808CE928925FB69604F7 ] athr C:\WINDOWS\system32\DRIVERS\athw8x.sys 09:52:37.0621 0x19b0 athr - ok 09:52:37.0715 0x19b0 [ 87DAD8D354E312DB16636DC71EB39E5E, 904C874799BF30F06BFC725A59040C6E1B7D176011DA41D1ACBE4CAB20369671 ] AtiHDAudioService C:\WINDOWS\system32\drivers\AtihdW86.sys 09:52:37.0825 0x19b0 AtiHDAudioService - ok 09:52:37.0919 0x19b0 [ 8779FDAE68BC948B0FE152E758CC8DA7, 13070C2073F8E7546B48AE9CF54067B9BB75DFCD98F2987B90FFAD20D40D54CF ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll 09:52:38.0059 0x19b0 AudioEndpointBuilder - ok 09:52:38.0153 0x19b0 [ 61EA45A645854FE81D8A924E2D93DFFE, 34F79532297F609CA93C380B68BB8B7B0F027F9C8F4FB8E02A9A43EA3D155F1B ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll 09:52:38.0293 0x19b0 Audiosrv - ok 09:52:38.0356 0x19b0 [ 00BF66D168E1A7AA7E1C9F458BBA0B34, 3D3C42E87B3649819EED685D93417D61EB84FE39B3F4D4943721AE74026DE11B ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys 09:52:38.0403 0x19b0 avgntflt - ok 09:52:38.0450 0x19b0 [ 055D318220DD4593F2A8C8FF83707D36, 93566931D019D4D4C35C3E2E4E9BAF87BEF863E1B40B2B03ED87EF5C28F908DE ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys 09:52:38.0481 0x19b0 avipbb - ok 09:52:38.0653 0x19b0 [ 523EBA6B6124EC416FF35A37BB47C30A, D2C545BB78E91ECCD3FFACFB524D03DFD5E277871A2500164F3602445A8A86FA ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe 09:52:38.0700 0x19b0 Avira.OE.ServiceHost - ok 09:52:38.0762 0x19b0 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys 09:52:38.0793 0x19b0 avkmgr - ok 09:52:38.0856 0x19b0 [ 96E8CAF20FC4B6C31CAD7816A801EB78, E4870DB8FFBDCFEE98449338D0BDBF2DD0B5FEC75514E41C11A882BE6EB16833 ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll 09:52:38.0965 0x19b0 AxInstSV - ok 09:52:39.0043 0x19b0 [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys 09:52:39.0106 0x19b0 b06bdrv - ok 09:52:39.0168 0x19b0 [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys 09:52:39.0309 0x19b0 BasicDisplay - ok 09:52:39.0418 0x19b0 [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys 09:52:39.0543 0x19b0 BasicRender - ok 09:52:39.0590 0x19b0 [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys 09:52:39.0621 0x19b0 bcmfn2 - ok 09:52:39.0684 0x19b0 [ E07C80468D0C599BFF01D9D4EC7AEDC3, F675F455924DEC3FF69AD816DFEB6E74C804AEC3D3BFF7515953DB9D79C9B2D0 ] BDESVC C:\WINDOWS\System32\bdesvc.dll 09:52:39.0793 0x19b0 BDESVC - ok 09:52:39.0887 0x19b0 [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep C:\WINDOWS\system32\drivers\Beep.sys 09:52:39.0981 0x19b0 Beep - ok 09:52:40.0059 0x19b0 [ 20FB137ADDE1255F15F265A7BD9579BE, 87B4D5C91EFEAD987AAC3491A4360F82824C46AFF958B6F4CAED7C12224EF159 ] BFE C:\WINDOWS\System32\bfe.dll 09:52:40.0184 0x19b0 BFE - ok 09:52:40.0278 0x19b0 [ 15225081966C785A9192782401643FD4, E2BA0C8D044556FDD9DD7A25F7F71553DE7A2924E78F9284413C2AC46F0BF4EB ] BITS C:\WINDOWS\System32\qmgr.dll 09:52:40.0434 0x19b0 BITS - ok 09:52:40.0481 0x19b0 [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys 09:52:40.0684 0x19b0 bowser - ok 09:52:40.0715 0x19b0 [ E325BCD68EC0CF2E2EDD0AB7CC17C698, 4DEDEF91F6BD1CC8DBE118AC28CA6BD874449A053B9CDE9FFEB1C7B98501D938 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll 09:52:40.0793 0x19b0 BrokerInfrastructure - ok 09:52:40.0840 0x19b0 [ 041A999E4FF9A7CDBE67357751881FB8, 356C52637EA715D6FA2B65BD311C9BF1635A582023434902EC2DE4A2448961F8 ] Browser C:\WINDOWS\System32\browser.dll 09:52:41.0059 0x19b0 Browser - ok 09:52:41.0121 0x19b0 [ AF7DEA6A0E93AF8517A310D189B656BE, 008FE5102EE6B73A8D9AFC2B0E563C6A3567167380FCEDC538278240D2AE1FD4 ] BTATH_BUS C:\WINDOWS\system32\drivers\btath_bus.sys 09:52:41.0137 0x19b0 BTATH_BUS - ok 09:52:41.0153 0x19b0 BTATH_LWFLT - ok 09:52:41.0246 0x19b0 [ 566FF49996D0F4EC24C62A72684DA2E1, BE94288E41599ECFDB894DFA48DA33D510DA594A6994A4777959FCA994A0E463 ] BtFilter C:\WINDOWS\system32\DRIVERS\btfilter.sys 09:52:41.0262 0x19b0 Suspicious file ( Forged ): C:\WINDOWS\system32\DRIVERS\btfilter.sys. Real md5: 566FF49996D0F4EC24C62A72684DA2E1, sha256: BE94288E41599ECFDB894DFA48DA33D510DA594A6994A4777959FCA994A0E463, fake md5: 5F50356CEF95AA88C2905166C85D2768, fake sha256: 7E2454BE5290A6CDA6E9E7A4C690CFD945E7485A56E483112CEBEE46A878125B 09:52:41.0278 0x19b0 BtFilter - detected ForgedFile.Multi.Generic ( 1 ) 09:52:43.0887 0x19b0 BtFilter ( ForgedFile.Multi.Generic ) - warning 09:52:46.0388 0x19b0 [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 09:52:46.0450 0x19b0 BthAvrcpTg - ok 09:52:46.0512 0x19b0 [ 131F1C8573E7BFB41C54FBF5309CCD94, DAFE51E3BADBD82A33B580F212B2D6520A120877C23F6D675521FEA2F4BA5A1F ] BthEnum C:\WINDOWS\System32\drivers\BthEnum.sys 09:52:46.0716 0x19b0 BthEnum - ok 09:52:46.0762 0x19b0 [ 746B9F94214915AECDE4B7FEA5FF9664, EA2877D49DB4B7B9CE61653D63E8776DFF1CBCCAB12C14DB1D20DA44B8F06357 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys 09:52:46.0825 0x19b0 BthHFEnum - ok 09:52:46.0887 0x19b0 [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys 09:52:46.0966 0x19b0 bthhfhid - ok 09:52:47.0122 0x19b0 [ D30C67473A2E229662D21F27EAA9AAA5, D009C4836B0DFE963D8E3DEEDE611068838F2BBCAB146E6D70692FAB838E11F1 ] BthLEEnum C:\WINDOWS\System32\drivers\BthLEEnum.sys 09:52:47.0216 0x19b0 BthLEEnum - ok 09:52:47.0278 0x19b0 [ 07E33226AD218A2A162662A05CAFB52F, 0AC3D8B79EDA6DA232FA4E1CAF6592420A9EDE96350D1F0504C2434261684F0B ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys 09:52:47.0356 0x19b0 BTHMODEM - ok 09:52:47.0435 0x19b0 [ 25BB93167DEF270188072603F92A1EF5, CE4637CE4B63420E218F53CAF89A8C85D036B879B80456FEF3C7C395590E26BB ] BthPan C:\WINDOWS\System32\drivers\bthpan.sys 09:52:47.0575 0x19b0 BthPan - ok 09:52:48.0028 0x19b0 [ 97B9076611291AE4C4C107BC915BD026, 0A77873AAF1ADB76CAB98A84D2242781E34E2699632E45EB92ED7DB20B2BE0C1 ] BTHPORT C:\WINDOWS\System32\Drivers\BTHport.sys 09:52:48.0169 0x19b0 BTHPORT - ok 09:52:48.0231 0x19b0 [ E5E48FEED73D463175EAB1542495191C, 0A8182F5BA7B694AB1DD3680F1194E4A568FE40DBA4BFDFF2EA09BAD045FFB29 ] bthserv C:\WINDOWS\system32\bthserv.dll 09:52:48.0294 0x19b0 bthserv - ok 09:52:48.0419 0x19b0 [ 23E75BED9076F856B36F5F934BBD5795, CCEB72B788522B7D52A6C07646005EBC68F9599D3714ECACF3A194CA47A1BE85 ] BTHUSB C:\WINDOWS\System32\Drivers\BTHUSB.sys 09:52:48.0481 0x19b0 BTHUSB - ok 09:52:48.0528 0x19b0 [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys 09:52:48.0669 0x19b0 cdfs - ok 09:52:48.0747 0x19b0 [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys 09:52:48.0778 0x19b0 cdrom - ok 09:52:48.0825 0x19b0 [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] CertPropSvc C:\WINDOWS\System32\certprop.dll 09:52:48.0950 0x19b0 CertPropSvc - ok 09:52:48.0981 0x19b0 [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass C:\WINDOWS\System32\drivers\circlass.sys 09:52:49.0028 0x19b0 circlass - ok 09:52:49.0059 0x19b0 [ 179A41249055D5F039F1B6703F3B6D2B, 886CF715D9E85DB5C9B991EBCB9B12E27AA0EEE52528E222C80CA5B5B0A7AF52 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys 09:52:49.0122 0x19b0 CLFS - ok 09:52:49.0934 0x19b0 [ 880A6DAC6E03871B37A782155D189A53, 93659BB67236F5EBC317FD73879EB79EFB195728A2C0BC997881D3622C6CF981 ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe 09:52:50.0232 0x19b0 ClickToRunSvc - ok 09:52:50.0342 0x19b0 [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys 09:52:50.0467 0x19b0 CmBatt - ok 09:52:50.0576 0x19b0 [ 3930E508DDA46C1FF68FD963F350AA0A, BF63F9C7AB30E2A8199D65EDD6DCBB797C93A4A0B972373643FBE1C38BCFA697 ] CNG C:\WINDOWS\system32\Drivers\cng.sys 09:52:50.0623 0x19b0 CNG - ok 09:52:50.0701 0x19b0 [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus C:\WINDOWS\System32\drivers\CompositeBus.sys 09:52:50.0748 0x19b0 CompositeBus - ok 09:52:50.0764 0x19b0 COMSysApp - ok 09:52:50.0795 0x19b0 [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv C:\WINDOWS\system32\drivers\condrv.sys 09:52:50.0904 0x19b0 condrv - ok 09:52:50.0982 0x19b0 [ 0EFE4B5884A8032617826A4D76F80969, 083D296CC623C83D36A97AEE343ADF819B17E490F931DBE4D161BD1E8C289E02 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll 09:52:51.0092 0x19b0 CryptSvc - ok 09:52:51.0123 0x19b0 [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam C:\WINDOWS\system32\drivers\dam.sys 09:52:51.0154 0x19b0 dam - ok 09:52:51.0248 0x19b0 [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 09:52:51.0435 0x19b0 DcomLaunch - ok 09:52:51.0498 0x19b0 [ D249C3A58A4FCF755EF4C94F7047E015, 68C044CE2DB93FB502F85F6E081EA164F6E6DCBA6B3EE2A5CBDA122065E522F8 ] defragsvc C:\WINDOWS\System32\defragsvc.dll 09:52:51.0609 0x19b0 defragsvc - ok 09:52:51.0672 0x19b0 [ 8F387C2C99EE09C6E2AC316205F86A17, EC9E8AE72A21992AA118964E17090BA4503EB051273AD18185C95172F57328CE ] DeviceAssociationService C:\WINDOWS\system32\das.dll 09:52:51.0813 0x19b0 DeviceAssociationService - ok 09:52:51.0906 0x19b0 [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll 09:52:52.0016 0x19b0 DeviceInstall - ok 09:52:52.0047 0x19b0 [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys 09:52:52.0156 0x19b0 Dfsc - ok 09:52:52.0188 0x19b0 [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys 09:52:52.0219 0x19b0 dg_ssudbus - ok 09:52:52.0281 0x19b0 [ 05DE04005CE0D84D0E6AD21CAEB369C6, E6704A2A685BCFD560796D7C328F8E53DF0793DBDA590598A492D9070D109298 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll 09:52:52.0422 0x19b0 Dhcp - ok 09:52:52.0484 0x19b0 [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk C:\WINDOWS\system32\drivers\disk.sys 09:52:52.0531 0x19b0 disk - ok 09:52:52.0563 0x19b0 [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys 09:52:52.0688 0x19b0 dmvsc - ok 09:52:52.0719 0x19b0 [ FE7656474448BE6A6C68E5C9BEB7CA94, 8B9F04CAA29A6EEFCA3D1E7BAFE340D5CCA8AF665474E69B1DF7E2A518B83A89 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 09:52:52.0859 0x19b0 Dnscache - ok 09:52:52.0906 0x19b0 [ 50288EA079BB520C2B8C8A154202D518, 8916A9180CA009D124FFDFB4CCF5FDFEF7FA2FD37CBCD49FAD4C68E051B4734D ] dot3svc C:\WINDOWS\System32\dot3svc.dll 09:52:53.0000 0x19b0 dot3svc - ok 09:52:53.0047 0x19b0 [ 281BEE07BA97E3E98D12A822D923D0D8, 6EB482B2D4D6048D145C3738B2B6FA27A90B5EA53E9167447820F9981B004E63 ] DPS C:\WINDOWS\system32\dps.dll 09:52:53.0172 0x19b0 DPS - ok 09:52:53.0219 0x19b0 [ DDC11A202207C0400CBE07315B8FDE5E, 3ED0CA3A714582D92001BA3BFF78BE082F4DC8021298D5A2632F3B2B0A1C09DC ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 09:52:53.0250 0x19b0 drmkaud - ok 09:52:53.0297 0x19b0 [ 5B074F14F5DD6418F46EE4CA2DEB7EA8, B8223D73C3DE123759101F7D5D45C60BD12B221F09D349575A1044CE3F43CBC5 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll 09:52:53.0375 0x19b0 DsmSvc - ok 09:52:53.0500 0x19b0 [ 313DCE665B57000B18CB26C6B6A10DFE, 6C332D4AD13A316C192321AB7E7597E66AF8E1688101FFD851E06C52128DBA52 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys 09:52:53.0609 0x19b0 DXGKrnl - ok 09:52:53.0641 0x19b0 [ 6073537F250B45E1CB2A02E97F0FE1B2, 653F3F2F2019168EDF225944A88AFDBF8393B62AA076BD19980691778F3DB67D ] Eaphost C:\WINDOWS\System32\eapsvc.dll 09:52:53.0703 0x19b0 Eaphost - ok 09:52:53.0922 0x19b0 [ E8A3102296B412EBE14801733474816B, 5B88E0A8DE37D09E6A8E86347E7F69BACF9C87B2C053A92518DE60852728BDEC ] Easy Launcher C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe 09:52:54.0000 0x19b0 Easy Launcher - ok 09:52:54.0219 0x19b0 [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys 09:52:54.0453 0x19b0 ebdrv - ok 09:52:54.0532 0x19b0 [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] EFS C:\WINDOWS\System32\lsass.exe 09:52:54.0578 0x19b0 EFS - ok 09:52:54.0656 0x19b0 [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys 09:52:54.0703 0x19b0 EhStorClass - ok 09:52:54.0719 0x19b0 [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys 09:52:54.0750 0x19b0 EhStorTcgDrv - ok 09:52:54.0766 0x19b0 [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys 09:52:54.0813 0x19b0 ErrDev - ok 09:52:54.0875 0x19b0 [ 030CE75B7D8F75FAA7BA1EC6FD0EB5A3, 5264734F0572FAEDCCB008221C9982CCB7922C4FFC358605424EA413CDCDAE99 ] EventSystem C:\WINDOWS\system32\es.dll 09:52:54.0969 0x19b0 EventSystem - ok 09:52:55.0016 0x19b0 [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat C:\WINDOWS\system32\drivers\exfat.sys 09:52:55.0078 0x19b0 exfat - ok 09:52:55.0172 0x19b0 [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys 09:52:55.0203 0x19b0 fastfat - ok 09:52:55.0297 0x19b0 [ 2BC8532ABF2B3756B78FA1DA54147DDE, DF65EE2AB0255A2CF3221085A6BE7C37E3DB6BFEED3BCADCDD69BB1049F6DCB1 ] Fax C:\WINDOWS\system32\fxssvc.exe 09:52:55.0656 0x19b0 Fax - ok 09:52:55.0672 0x19b0 [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc C:\WINDOWS\System32\drivers\fdc.sys 09:52:55.0719 0x19b0 fdc - ok 09:52:55.0735 0x19b0 [ DC1A78BCCCB7EE53D6FD3BD615A8E222, EE16B6853185AAE779D7135035983938009901658F76A8856AAC12EBA15BB34E ] fdPHost C:\WINDOWS\system32\fdPHost.dll 09:52:55.0797 0x19b0 fdPHost - ok 09:52:55.0813 0x19b0 [ E5AD448F2DC84B1CF387FA7F2A3D1936, BBB29C79A085C503F5EFFB5144596D5DEC48A4EB34A049A4E7B38B27F6D92E0A ] FDResPub C:\WINDOWS\system32\fdrespub.dll 09:52:55.0875 0x19b0 FDResPub - ok 09:52:55.0922 0x19b0 [ 0046E0BD031213D37123876B0D0FA61C, A4FE17D56F0BAFB70D0D421ED9D1B6E50AF8ADAA4B59328A41AEC5B4C068A3CB ] fhsvc C:\WINDOWS\system32\fhsvc.dll 09:52:56.0000 0x19b0 fhsvc - ok 09:52:56.0047 0x19b0 [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys 09:52:56.0078 0x19b0 FileInfo - ok 09:52:56.0109 0x19b0 [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys 09:52:56.0141 0x19b0 Filetrace - ok 09:52:56.0172 0x19b0 [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys 09:52:56.0188 0x19b0 flpydisk - ok 09:52:56.0250 0x19b0 [ 6592D192E2823C043EDBC010E7774053, C025A0EC5517DC3BD5D6656DC0F0F19021FB3D2EE90EC6194E1BD74E638EBBDC ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 09:52:56.0281 0x19b0 FltMgr - ok 09:52:56.0375 0x19b0 [ 3FA6DC6B29717E32E211C1FD821F2C75, E467F3775427C93CC2B87327B0A45669631A5FC460C558F6796BA26002A8BBFC ] FontCache C:\WINDOWS\system32\FntCache.dll 09:52:56.0641 0x19b0 FontCache - ok 09:52:56.0828 0x19b0 [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 09:52:56.0859 0x19b0 FontCache3.0.0.0 - ok 09:52:56.0938 0x19b0 [ 35005534E600E993A90B036E4E599F2B, DA56FA3776FBD3D50276CB7410E0CB6F137DD8FCA84C0F3FEF8B1FEA5F6CA592 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys 09:52:57.0000 0x19b0 FsDepends - ok 09:52:57.0050 0x19b0 [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 09:52:57.0078 0x19b0 Fs_Rec - ok 09:52:57.0156 0x19b0 [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys 09:52:57.0203 0x19b0 fvevol - ok 09:52:57.0250 0x19b0 [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM C:\WINDOWS\System32\drivers\fxppm.sys 09:52:57.0328 0x19b0 FxPPM - ok 09:52:57.0359 0x19b0 [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx C:\WINDOWS\system32\drivers\gagp30kx.sys 09:52:57.0390 0x19b0 gagp30kx - ok 09:52:57.0422 0x19b0 [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys 09:52:57.0484 0x19b0 gencounter - ok 09:52:57.0531 0x19b0 [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys 09:52:57.0577 0x19b0 GPIOClx0101 - ok 09:52:57.0721 0x19b0 [ 69DB09F0263C637DA8568D404842466A, D042194266978AAD31E04DAF7018CD50754077212DC74A4D8AFF6BFEE80CDD20 ] gpsvc C:\WINDOWS\System32\gpsvc.dll 09:52:57.0879 0x19b0 gpsvc - ok 09:52:57.0947 0x19b0 [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys 09:52:58.0061 0x19b0 HDAudBus - ok 09:52:58.0117 0x19b0 [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys 09:52:58.0203 0x19b0 HidBatt - ok 09:52:58.0227 0x19b0 [ 1EA1B4FABB8CC348E73CA90DBA22E104, 5C18C6BD499272F216DD4626B5E8D38181AEAC9AD917FBEB614A75B70467B258 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys 09:52:58.0258 0x19b0 HidBth - ok 09:52:58.0289 0x19b0 [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys 09:52:58.0305 0x19b0 hidi2c - ok 09:52:58.0321 0x19b0 [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys 09:52:58.0352 0x19b0 HidIr - ok 09:52:58.0383 0x19b0 [ 449A20A674AA3FAA7F0DD4E33EE2DC20, 28B9BDA306456E8640C355718DE3477537B0FAF8C37F633C709129AAB64D9873 ] hidserv C:\WINDOWS\system32\hidserv.dll 09:52:58.0414 0x19b0 hidserv - ok 09:52:58.0446 0x19b0 [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys 09:52:58.0571 0x19b0 HidUsb - ok 09:52:58.0602 0x19b0 [ 7BF3ADCBD021D4F4A84CF40EB49C71B5, 5758A51FD2EBE67E6DBE3A298D714D351910F9E01C428D0C1359457C9242B298 ] hkmsvc C:\WINDOWS\system32\kmsvc.dll 09:52:58.0649 0x19b0 hkmsvc - ok 09:52:58.0711 0x19b0 [ 6CD9C3819BE8C0A3DACC82AE5D3C4F18, 46BF4A968E506DE17CA401401D716B444CDC10A5C60EB081890DD4B886AEDF5F ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll 09:52:58.0821 0x19b0 HomeGroupListener - ok 09:52:58.0867 0x19b0 [ 1A4DA1D6287B99033D144B436C23B656, D4D1EEB372E61512EA36A33F095E68C225B8E6C72CC57ED8BD00533F88012F40 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll 09:52:58.0977 0x19b0 HomeGroupProvider - ok 09:52:59.0024 0x19b0 [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys 09:52:59.0071 0x19b0 HpSAMD - ok 09:52:59.0149 0x19b0 [ 9DDCA7F18983C5410DEFF79F819DF93C, CE97B4440377BFC5CA81BB600C3BD1DD9FB3951CA1EB70735F5E2050EBB74223 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys 09:52:59.0211 0x19b0 HTTP - ok 09:52:59.0289 0x19b0 [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys 09:52:59.0321 0x19b0 hwpolicy - ok 09:52:59.0352 0x19b0 [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys 09:52:59.0414 0x19b0 hyperkbd - ok 09:52:59.0461 0x19b0 [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo C:\WINDOWS\system32\DRIVERS\HyperVideo.sys 09:52:59.0524 0x19b0 HyperVideo - ok 09:52:59.0586 0x19b0 [ 84CFC5EFA97D0C965EDE1D56F116A541, 0155EA62BF07D99D98D1C9B6559C8E3301B016A20D03DF1EF64B2FAB8C37403B ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys 09:52:59.0649 0x19b0 i8042prt - ok 09:52:59.0680 0x19b0 [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 09:52:59.0696 0x19b0 iaLPSSi_GPIO - ok 09:52:59.0758 0x19b0 [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys 09:52:59.0774 0x19b0 iaLPSSi_I2C - ok 09:52:59.0836 0x19b0 [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys 09:52:59.0883 0x19b0 iaStorAV - ok 09:52:59.0930 0x19b0 [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys 09:52:59.0992 0x19b0 iaStorV - ok 09:53:00.0008 0x19b0 IEEtwCollectorService - ok 09:53:00.0102 0x19b0 [ DEA76F90F9777E3427D70E380222B23B, B917BA423896A12E45623E3D494CA03317A6FC612CA433C62C897524DC3E756B ] IKEEXT C:\WINDOWS\System32\ikeext.dll 09:53:00.0196 0x19b0 IKEEXT - ok 09:53:00.0446 0x19b0 [ 5C20DBF6A00AF50C7CB74DB233E03AF0, 1AB043E8F08857D6A08D4EF8613C8B2ECB85364BAC0D485443D3ADDA8E6072AC ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys 09:53:00.0696 0x19b0 IntcAzAudAddService - ok 09:53:00.0742 0x19b0 [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide C:\WINDOWS\system32\drivers\intelide.sys 09:53:00.0742 0x19b0 intelide - ok 09:53:00.0789 0x19b0 [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys 09:53:00.0821 0x19b0 intelpep - ok 09:53:00.0867 0x19b0 [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys 09:53:00.0930 0x19b0 intelppm - ok 09:53:00.0961 0x19b0 [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 09:53:00.0993 0x19b0 IpFilterDriver - ok 09:53:01.0086 0x19b0 [ ACFEE9487693C2BD573DFCA71D98E17C, A347FD476147CD3568EEE6993B46AFC05A66A4269094CA51572D0FD013FCB535 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll 09:53:01.0211 0x19b0 iphlpsvc - ok 09:53:01.0258 0x19b0 [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys 09:53:01.0492 0x19b0 IPMIDRV - ok 09:53:01.0539 0x19b0 [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys 09:53:02.0120 0x19b0 IPNAT - ok 09:53:02.0182 0x19b0 [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys 09:53:02.0260 0x19b0 IRENUM - ok 09:53:02.0338 0x19b0 [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys 09:53:02.0370 0x19b0 isapnp - ok 09:53:02.0438 0x19b0 [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys 09:53:02.0478 0x19b0 iScsiPrt - ok 09:53:02.0522 0x19b0 [ 8BE92376799B6B44D543E8D07CDCF885, 425B8BB1BAF62F735B3CB5A002E6055879F02E7207E55942BFD37F1784F5F368 ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys 09:53:02.0566 0x19b0 kbdclass - ok 09:53:02.0602 0x19b0 [ FB6E47E569D4872ABEB506BE03A45FBA, 5C4056CADA8F67587A119D9AE2A0EFAB30387CF6298F4019FF68AC92E2F6F54B ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys 09:53:02.0682 0x19b0 kbdhid - ok 09:53:02.0736 0x19b0 [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic C:\WINDOWS\system32\DRIVERS\kdnic.sys 09:53:02.0809 0x19b0 kdnic - ok 09:53:02.0840 0x19b0 [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] KeyIso C:\WINDOWS\system32\lsass.exe 09:53:02.0856 0x19b0 KeyIso - ok 09:53:02.0934 0x19b0 [ ADDECBCC777665BD113BED437E602AB0, B6283475A1219CE44E9F683DD3BEB8C42DA0943297E5C4699B22176AD8A6A7ED ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys 09:53:02.0981 0x19b0 KSecDD - ok 09:53:03.0059 0x19b0 [ 15C8C65CEA018C02EA0F648448C491C5, DF909704D22D891BE439B2E3D8386EA659444F91DC92AABFF9766446AEE5EBC0 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys 09:53:03.0090 0x19b0 KSecPkg - ok 09:53:03.0153 0x19b0 [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys 09:53:03.0215 0x19b0 ksthunk - ok 09:53:03.0309 0x19b0 [ 32B1A8351160F307A8C66BCB0F94A9C2, 52F1DEC2BBD4D5DDBB85ED20B99D96BBA7EB83304D76F183A11FDAFDA364E873 ] KtmRm C:\WINDOWS\system32\msdtckrm.dll 09:53:03.0371 0x19b0 KtmRm - ok 09:53:03.0528 0x19b0 [ 793EACA6BAE9F481C2059BCB3743EB4A, 2624905C6B6A1227BD1CAC7D4FE55A5F6543E1278DAB31EC553748472D180D1D ] LanmanServer C:\WINDOWS\system32\srvsvc.dll 09:53:03.0700 0x19b0 LanmanServer - ok 09:53:03.0778 0x19b0 [ D0D9C2ECA4D03A8F06DCD91236B90C98, E2D1144DC8040EA5FEB0602A20BA4CB920B4BC86AD5AD05FC0DF7D74DC95DC66 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll 09:53:03.0903 0x19b0 LanmanWorkstation - ok 09:53:03.0981 0x19b0 [ 626D19F1771E1AE72208AE9A8F3082F7, 78FDB64545ED2EAE9F51C08120E21D2C3285208F6846BD8BBA08CAA839E7A0C4 ] lfsvc C:\WINDOWS\System32\GeofenceMonitorService.dll 09:53:04.0090 0x19b0 lfsvc - ok 09:53:04.0137 0x19b0 [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio C:\WINDOWS\system32\DRIVERS\lltdio.sys 09:53:04.0200 0x19b0 lltdio - ok 09:53:04.0246 0x19b0 [ 00E070FC0C673311AFD4B068D1242780, 50B0E0E625361145332C849709498FF444E46578DCAD2536E6D0289E0125580F ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll 09:53:04.0309 0x19b0 lltdsvc - ok 09:53:04.0356 0x19b0 [ D113FAD71A5E67AA94B32A0F8828D265, 08DDB4BBDB570C59926DBF5E27FCF46DCDF8B8212BB9251E97837E0504516FB3 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll 09:53:04.0434 0x19b0 lmhosts - ok 09:53:04.0543 0x19b0 [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys 09:53:04.0575 0x19b0 LSI_SAS - ok 09:53:04.0590 0x19b0 [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2 C:\WINDOWS\system32\drivers\lsi_sas2.sys 09:53:04.0621 0x19b0 LSI_SAS2 - ok 09:53:04.0668 0x19b0 [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3 C:\WINDOWS\system32\drivers\lsi_sas3.sys 09:53:04.0700 0x19b0 LSI_SAS3 - ok 09:53:04.0731 0x19b0 [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys 09:53:04.0746 0x19b0 LSI_SSS - ok 09:53:04.0825 0x19b0 [ 8EBB271E4588D835784A3FF7E80076A8, A508BE95F6F5063A76F4C8726D9425BB1F00DE803EFE73A0BE145DD9AB82FF0A ] LSM C:\WINDOWS\System32\lsm.dll 09:53:04.0965 0x19b0 LSM - ok 09:53:05.0043 0x19b0 [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv C:\WINDOWS\system32\drivers\luafv.sys 09:53:05.0090 0x19b0 luafv - ok 09:53:05.0153 0x19b0 [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas C:\WINDOWS\system32\drivers\megasas.sys 09:53:05.0184 0x19b0 megasas - ok 09:53:05.0231 0x19b0 [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr C:\WINDOWS\system32\drivers\megasr.sys 09:53:05.0278 0x19b0 megasr - ok 09:53:05.0356 0x19b0 [ BA7E071E855D4C502916164A31B05D4D, 11B250AA98EAAB4A15A8796CABAFCFC20B8E049513BF66FFAA0F6C2BEED958A5 ] MHIKEY10 C:\WINDOWS\System32\Drivers\MHIKEY10x64.sys 09:53:05.0434 0x19b0 MHIKEY10 - ok 09:53:05.0481 0x19b0 [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] MMCSS C:\WINDOWS\system32\mmcss.dll 09:53:05.0575 0x19b0 MMCSS - ok 09:53:05.0653 0x19b0 [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem C:\WINDOWS\system32\drivers\modem.sys 09:53:05.0700 0x19b0 Modem - ok 09:53:05.0746 0x19b0 [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor C:\WINDOWS\System32\drivers\monitor.sys 09:53:05.0840 0x19b0 monitor - ok 09:53:05.0887 0x19b0 [ CEAC6D40FE887CE8406C2393CF97DE06, 34E76908B802764FF0D7AB3AF89BE77BD35B44787983343FAD89891891C0A045 ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys 09:53:05.0933 0x19b0 mouclass - ok 09:53:06.0008 0x19b0 [ 02D98BF804084E9A0D69D1C69B02CCA9, EC5BC5D87043DFFD035FD4DD27B3D94E03119063519E4151BCC3522B613E2D7F ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys 09:53:06.0055 0x19b0 mouhid - ok 09:53:06.0102 0x19b0 [ 515549560D481138E6E21AF7C6998E56, C7E4B38D8CCAF15B9BDA63C8C8209F6193AD220DA02E1264F1B687AACD8F409F ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys 09:53:06.0133 0x19b0 mountmgr - ok 09:53:06.0165 0x19b0 [ F170510BE94CF45E3C6274578F6204B2, 344C3DDE1D622607CA2ABECB2C47CB0166D2D258BD94A7960C45A5ADBB640566 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys 09:53:06.0227 0x19b0 mpsdrv - ok 09:53:06.0321 0x19b0 [ D186C5844393252147BE934F3871DB7A, 30160F8268B9F46E82C5CB536867E0CF280DC98074A481595072E3320200E343 ] MpsSvc C:\WINDOWS\system32\mpssvc.dll 09:53:06.0399 0x19b0 MpsSvc - ok 09:53:06.0454 0x19b0 [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys 09:53:06.0532 0x19b0 MRxDAV - ok 09:53:06.0588 0x19b0 [ 7A1A3F213CDB3363D179D5014272025D, 6756F5B7D9FBF6839DB1FF4E94EA45B5499D7DF925E75581C96FBBA4BE131542 ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 09:53:06.0686 0x19b0 mrxsmb - ok 09:53:06.0754 0x19b0 [ 3E28B99198B514DFEB152EACF913025E, 6C1D8353DCD5F811F39C0C3CB5DF3D2457F0D17EE80FB06196AA169E3D19E9B2 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys 09:53:06.0848 0x19b0 mrxsmb10 - ok 09:53:06.0905 0x19b0 [ C910E5D18958914A66F0E45689D0B40A, AD7C91DD8A60A511E580DD56BACC97F85075A539E7C5D95040A8F870A621DAF4 ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys 09:53:07.0008 0x19b0 mrxsmb20 - ok 09:53:07.0071 0x19b0 [ E0927EFA25D473367C3341B9F5969779, B77A162BD3334557623674373D8EC2BE7CC0B359DF06304E467ABFFEE0530271 ] MsBridge C:\WINDOWS\system32\DRIVERS\bridge.sys 09:53:07.0273 0x19b0 MsBridge - ok 09:53:07.0305 0x19b0 [ A082C17D14D0790E27D064EA4B138AE1, 9A565ED885782D9D5135C8399C11C356DBF9EBF3B8EB4B4504BD2604AD0B45E6 ] MSDTC C:\WINDOWS\System32\msdtc.exe 09:53:07.0383 0x19b0 MSDTC - ok 09:53:07.0430 0x19b0 [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 09:53:07.0477 0x19b0 Msfs - ok 09:53:07.0508 0x19b0 [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys 09:53:07.0523 0x19b0 msgpiowin32 - ok 09:53:07.0555 0x19b0 [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys 09:53:07.0602 0x19b0 mshidkmdf - ok 09:53:07.0617 0x19b0 [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys 09:53:07.0664 0x19b0 mshidumdf - ok 09:53:07.0680 0x19b0 [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys 09:53:07.0695 0x19b0 msisadrv - ok 09:53:07.0742 0x19b0 [ 810F8A0A0680662BB0CE44D0E2CEF90C, 5631B07911B7EF378CB1583A480A3C5715E59A5488B33A528F4D7A2F849B9113 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll 09:53:07.0773 0x19b0 MSiSCSI - ok 09:53:07.0773 0x19b0 msiserver - ok 09:53:07.0805 0x19b0 [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 09:53:07.0852 0x19b0 MSKSSRV - ok 09:53:07.0898 0x19b0 [ 375E44168F2DFB91A68B8A3F619C5A7C, AC243E02E9A39D0B4DE9571F196941700EE6EB5E94F5B0BA8994FB551E73A7A8 ] MsLldp C:\WINDOWS\system32\DRIVERS\mslldp.sys 09:53:07.0945 0x19b0 MsLldp - ok 09:53:07.0945 0x19b0 [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 09:53:07.0977 0x19b0 MSPCLOCK - ok 09:53:07.0977 0x19b0 [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 09:53:08.0008 0x19b0 MSPQM - ok 09:53:08.0055 0x19b0 [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys 09:53:08.0102 0x19b0 MsRPC - ok 09:53:08.0143 0x19b0 [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys 09:53:08.0163 0x19b0 mssmbios - ok 09:53:08.0226 0x19b0 [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys 09:53:08.0272 0x19b0 MSTEE - ok 09:53:08.0304 0x19b0 [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys 09:53:08.0351 0x19b0 MTConfig - ok 09:53:08.0382 0x19b0 [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup C:\WINDOWS\system32\Drivers\mup.sys 09:53:08.0413 0x19b0 Mup - ok 09:53:08.0429 0x19b0 [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys 09:53:08.0444 0x19b0 mvumis - ok 09:53:08.0507 0x19b0 [ 41A45D2A75494EABF2806EA051E00376, EB2497561C8E33A4297C044604C717FF854C7F046882A9E4A400AE7679BF5467 ] napagent C:\WINDOWS\system32\qagentRT.dll 09:53:08.0569 0x19b0 napagent - ok 09:53:08.0662 0x19b0 [ 26ACA481FAFEC59FE311D719E3027BBA, 16A24CCA95A38BDFE970580159F6ACAA13FF1B74CF2290B1B020D909F90D3347 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys 09:53:08.0771 0x19b0 NativeWifiP - ok 09:53:08.0818 0x19b0 [ 71E3C0100AA19D11373CCEB2F51A6008, 58FBF35F5FE19BEABE483C11E9996BE93D76721C8C34465350FA98B465CA3672 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll 09:53:08.0880 0x19b0 NcaSvc - ok 09:53:08.0896 0x19b0 [ 51DF09CAB2CAC64FEE3E371D9028ED01, 9B81604D0D0359AF8F54FED6DA7116FFD2F40407895028EAD99FF1D7CFDC2D14 ] NcbService C:\WINDOWS\System32\ncbservice.dll 09:53:09.0021 0x19b0 NcbService - ok 09:53:09.0068 0x19b0 [ 2586C4C167499210DCBF3ECFD8CCE210, D8129FEDE9918BF4FB0057CC58700D4E08457060E810B9CC25CA0F598506ADB8 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll 09:53:09.0146 0x19b0 NcdAutoSetup - ok 09:53:09.0255 0x19b0 [ E4B4BE2D7750849C07589DA0B0AABA01, BB5AA727BA018A94B5DE2C4E0B594DD2E7A2B3457885446EE568F3A1E18AB3B0 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys 09:53:09.0318 0x19b0 NDIS - ok 09:53:09.0349 0x19b0 [ C6BB12BC35D1637CA17AE16D3A4725EB, 01C1D9FA738886A195166F88207EEB6715A1DE0608978ED6C5DC738AF5C02513 ] NdisCap C:\WINDOWS\system32\DRIVERS\ndiscap.sys 09:53:09.0427 0x19b0 NdisCap - ok 09:53:09.0474 0x19b0 [ B1AA3B19A2E596A59224F893E01A5A75, E08696CA5E087E51AC3E64D4FB8490EEADD612DDF30C9A94DD1BD1BA124B71B7 ] NdisImPlatform C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys 09:53:09.0583 0x19b0 NdisImPlatform - ok 09:53:09.0646 0x19b0 [ 9423421E735BD5394351E0C47C76BB92, 763E5D06F896C0EF8AD52515464F28BA85DB7A1560E451857AC9AA68FAFCBC66 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 09:53:09.0693 0x19b0 NdisTapi - ok 09:53:09.0740 0x19b0 [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys 09:53:09.0771 0x19b0 Ndisuio - ok 09:53:09.0818 0x19b0 [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 09:53:09.0880 0x19b0 NdisVirtualBus - ok 09:53:09.0912 0x19b0 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys 09:53:09.0974 0x19b0 NdisWan - ok 09:53:09.0990 0x19b0 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys 09:53:10.0037 0x19b0 NdisWanLegacy - ok 09:53:10.0068 0x19b0 [ A5BD69A8812FA79D1A487691DD3FB244, 67B5EDE101943E0E8B8041DB2353D20C8B9F2D253E77964761CFE8F136C0BBC7 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 09:53:10.0162 0x19b0 NDProxy - ok 09:53:10.0240 0x19b0 [ 5A072F0B90C29C5233D78BE33EF5ED78, B32ED76A674B1FC743361FB7BBD4C915A78B14132AB056AADD445D5995AD4F32 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys 09:53:10.0318 0x19b0 Ndu - ok 09:53:10.0365 0x19b0 [ A83D67D347A684F10B7D3019C8A6380C, 2B86832967981C8C786BF24C1CF8E13E01745ACE3333CF5C821DD93D623B96E4 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys 09:53:10.0458 0x19b0 NetBIOS - ok 09:53:10.0505 0x19b0 [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 09:53:10.0599 0x19b0 NetBT - ok 09:53:10.0630 0x19b0 [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] Netlogon C:\WINDOWS\system32\lsass.exe 09:53:10.0646 0x19b0 Netlogon - ok 09:53:10.0740 0x19b0 [ B7AD851A21FEBA3BA214972627614207, 29605320CCC3DAAD062CAECF0009DACBC2F6D28ED4E8AF7CE76132129F5572A0 ] Netman C:\WINDOWS\System32\netman.dll 09:53:10.0787 0x19b0 Netman - ok 09:53:10.0880 0x19b0 [ F0F0A372C2EF6358399C4936F91B6131, CE596C71EB4D1A5E104D3148F2D0D8789882C59FD198DCF33CCAC7A08B50E4EE ] netprofm C:\WINDOWS\System32\netprofmsvc.dll 09:53:10.0974 0x19b0 netprofm - ok 09:53:11.0052 0x19b0 [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 09:53:11.0083 0x19b0 NetTcpPortSharing - ok 09:53:11.0130 0x19b0 [ 70414DB660BFBB7BD58FCE8EA4364E1B, 6DFB3897CD55E22BA1EDF0AE672F4D7A6A1F512F8A0A26AF106765E6B1CF65AC ] netvsc C:\WINDOWS\system32\DRIVERS\netvsc63.sys 09:53:11.0177 0x19b0 netvsc - ok 09:53:11.0224 0x19b0 [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc C:\WINDOWS\System32\nlasvc.dll 09:53:11.0333 0x19b0 NlaSvc - ok 09:53:11.0396 0x19b0 [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 09:53:11.0443 0x19b0 Npfs - ok 09:53:11.0490 0x19b0 [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys 09:53:11.0583 0x19b0 npsvctrig - ok 09:53:11.0630 0x19b0 [ 6E2271ED0C3E95B8E29F3752B91B9E84, 44026AD9757EA82967D7F7578455802FAD7FE0057EAC088E0AE207C15F594B86 ] nsi C:\WINDOWS\system32\nsisvc.dll 09:53:11.0677 0x19b0 nsi - ok 09:53:11.0693 0x19b0 [ E490B459978CB87779E84C761D22B827, 1E5CA38626E41618E4CA16DD0C70EB2FA86E986F0CF21A749BDE2A17015DEEC6 ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys 09:53:11.0724 0x19b0 nsiproxy - ok 09:53:11.0833 0x19b0 [ 038C77D577900EE39410662478BB0D50, A33AAFD5750245C17A47EC71F3C6EAD2E0925CAD34C65AB3E6CEE44756C668E6 ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 09:53:11.0943 0x19b0 Ntfs - ok 09:53:12.0021 0x19b0 [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null C:\WINDOWS\system32\drivers\Null.sys 09:53:12.0099 0x19b0 Null - ok 09:53:12.0146 0x19b0 [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys 09:53:12.0193 0x19b0 nvraid - ok 09:53:12.0208 0x19b0 [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys 09:53:12.0255 0x19b0 nvstor - ok 09:53:12.0271 0x19b0 [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp C:\WINDOWS\system32\drivers\nv_agp.sys 09:53:12.0287 0x19b0 nv_agp - ok 09:53:12.0365 0x19b0 [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 09:53:12.0396 0x19b0 ose - ok 09:53:12.0458 0x19b0 [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll 09:53:12.0599 0x19b0 p2pimsvc - ok 09:53:12.0646 0x19b0 [ 2A57A937BC5B1B2D6AFE6A8C5925F50B, 00D84EFED5A7129AAD86945940030474795905C32D65CBD5B1A3EBADCED8F873 ] p2psvc C:\WINDOWS\system32\p2psvc.dll 09:53:12.0755 0x19b0 p2psvc - ok 09:53:12.0787 0x19b0 [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport C:\WINDOWS\System32\drivers\parport.sys 09:53:12.0833 0x19b0 Parport - ok 09:53:12.0865 0x19b0 [ EF0C1749C9A8CEE9A457473D433CC00F, A5FDAB5AD47471640D697C6CFBA6C67730878ABBA47D394EAA47C9733EDCE1F3 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys 09:53:12.0896 0x19b0 partmgr - ok 09:53:12.0943 0x19b0 [ 9A5309EF92F39346CFD5A4C2C3D1BFAD, 5908E0C9562F9CB24784491BD9AE7983A33A6BDF81AFA0A08045518A0C9BB2B1 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll 09:53:13.0052 0x19b0 PcaSvc - ok 09:53:13.0224 0x19b0 [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci C:\WINDOWS\system32\drivers\pci.sys 09:53:13.0271 0x19b0 pci - ok 09:53:13.0333 0x19b0 [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide C:\WINDOWS\system32\drivers\pciide.sys 09:53:13.0380 0x19b0 pciide - ok 09:53:13.0427 0x19b0 [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys 09:53:13.0458 0x19b0 pcmcia - ok 09:53:13.0490 0x19b0 [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw C:\WINDOWS\system32\drivers\pcw.sys 09:53:13.0505 0x19b0 pcw - ok 09:53:13.0552 0x19b0 [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc C:\WINDOWS\system32\drivers\pdc.sys 09:53:13.0583 0x19b0 pdc - ok 09:53:13.0708 0x19b0 [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys 09:53:13.0818 0x19b0 PEAUTH - ok 09:53:14.0880 0x19b0 [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe 09:53:14.0974 0x19b0 PerfHost - ok 09:53:15.0130 0x19b0 [ 928061178CD9856CA6B67FFFCE6BA766, 71DE3C7CA7F83EAAA550CD8A68FB67DE042B0AE51BFACB1ECB8852D502E11F50 ] pla C:\WINDOWS\system32\pla.dll 09:53:15.0240 0x19b0 pla - ok 09:53:15.0287 0x19b0 [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll 09:53:15.0318 0x19b0 PlugPlay - ok 09:53:15.0396 0x19b0 [ 045EB4F260606A03BE340D09DEAF3BA4, 6F34B8D414F7F69F4388F2F8A86E0F3AD179E423126990AF3E1EC4DCCB8E7693 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll 09:53:15.0443 0x19b0 PNRPAutoReg - ok 09:53:15.0505 0x19b0 [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll 09:53:15.0552 0x19b0 PNRPsvc - ok 09:53:15.0630 0x19b0 [ C16097D77A232A288D65F299E2E01105, 5CE4B44B06FD26569C0F92FF1D3991D0128D8444AE7BC9EBEF5A33811D721BE8 ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll 09:53:15.0708 0x19b0 PolicyAgent - ok 09:53:15.0755 0x19b0 [ 00E08B30E7F7C13ECE2CDF4F46A77311, 1807C0A64C1794E572C86730816C01DCF4D8F773ADE9CAEA3AC0658F7BD71A4E ] Power C:\WINDOWS\system32\umpo.dll 09:53:15.0849 0x19b0 Power - ok 09:53:15.0927 0x19b0 [ E075CC071022BD4E9BE7C024717C0E0A, BE65A8C1082AE8DF8C37CA06B2BCC521478AC153EA7388B03F7FAE3913920E75 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys 09:53:16.0005 0x19b0 PptpMiniport - ok 09:53:16.0349 0x19b0 [ 3C96A45CA3403A276B0F045C448EC27B, C0011DB8C5A85817CAF815CC0095EE2C1CDD5964DCD8EAF4C35A2495D6A873CC ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll 09:53:16.0552 0x19b0 PrintNotify - ok 09:53:16.0630 0x19b0 [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor C:\WINDOWS\System32\drivers\processr.sys 09:53:16.0693 0x19b0 Processor - ok 09:53:16.0755 0x19b0 [ 19424364D8C03B990C4281BE53963FD0, 958FC8436E6B754858E20BC48B0D4B269991E8CA94C15C2761BF04ED52591907 ] ProfSvc C:\WINDOWS\system32\profsvc.dll 09:53:16.0865 0x19b0 ProfSvc - ok 09:53:16.0943 0x19b0 [ 8528BB05E4D4E25945F78B00B2555FB7, FF8E0D4580F93CD348080967F52FE6C2C68B56DAEACAE2EAEF04E19412A953AE ] Psched C:\WINDOWS\system32\DRIVERS\pacer.sys 09:53:17.0037 0x19b0 Psched - ok 09:53:17.0084 0x19b0 [ 07D57B890DD5693A6AB660CBAE8F91B4, 934895A41C116056E22FE3298418332A9F4280F96E96EEE06C977A4925395674 ] PxHlpa64 C:\WINDOWS\system32\Drivers\PxHlpa64.sys 09:53:17.0133 0x19b0 PxHlpa64 - ok 09:53:17.0193 0x19b0 [ AF90BB44C99D6820BE52C9BBAA523283, 9772D9CC1666959EC8EE4ED740A5179473CE4F38762109F1123DD68010D20EA1 ] QWAVE C:\WINDOWS\system32\qwave.dll 09:53:17.0287 0x19b0 QWAVE - ok 09:53:17.0318 0x19b0 [ 3FB466684609A4329858CF2EBD62E0FD, CFC8FBAB1436948F9D34CE6A2D6DE2F86F3E93E50B86851CED979C8CCE609798 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys 09:53:17.0396 0x19b0 QWAVEdrv - ok 09:53:17.0428 0x19b0 [ 194ED3C117525613E701FF257882303E, F9D771B573078C6335F352812E24918CB79529BAE2262117E8E0DD4C57AA64C1 ] RadioHIDMini C:\WINDOWS\System32\drivers\RadioHIDMini.sys 09:53:17.0474 0x19b0 RadioHIDMini - ok 09:53:17.0521 0x19b0 [ 2C56F0EE27E4EF70CA4B4983D3638905, AFFDD686886CE982424B644D9168D61C6F86A5244FF97BC644DF75B321E415E5 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 09:53:17.0552 0x19b0 RasAcd - ok 09:53:17.0624 0x19b0 [ 674A4702E4E144E8710ED1A2EC6DD049, 613A921101A6815C9185D5EF3E251A592604E56FADE945BB7E256885CAD473BC ] RasAgileVpn C:\WINDOWS\system32\DRIVERS\AgileVpn.sys 09:53:17.0696 0x19b0 RasAgileVpn - ok 09:53:17.0752 0x19b0 [ 5F061AC45266841A2860C1858ED863B8, 9E0D52BAC8A50225C32D0397C35350601B996443E2481C808CC59D3B0763FEF0 ] RasAuto C:\WINDOWS\System32\rasauto.dll 09:53:17.0827 0x19b0 RasAuto - ok 09:53:17.0859 0x19b0 [ BBB6272B7F46C4640A8CDB8A70C3450F, 4266C3ABD0D1D0219F715EA0F155744F7C1E3A7B722BE863831B57AE785419A2 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 09:53:17.0890 0x19b0 Rasl2tp - ok 09:53:17.0952 0x19b0 [ 5C7B86EE33505E36026AFAAB62DA6364, 903BB1A355AC746BF09C2A7C87B068168648DB79DEF39AB1DC710B6A7A5F6556 ] RasMan C:\WINDOWS\System32\rasmans.dll 09:53:18.0093 0x19b0 RasMan - ok 09:53:18.0108 0x19b0 [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 09:53:18.0140 0x19b0 RasPppoe - ok 09:53:18.0171 0x19b0 [ 2B0F1677CDD08967005F34488559BC6F, FFF168EBD171C0B85A448AD1A04F66534E889AE1DC128F68EA3F35D5996C8D39 ] RasSstp C:\WINDOWS\system32\DRIVERS\rassstp.sys 09:53:18.0202 0x19b0 RasSstp - ok 09:53:18.0249 0x19b0 [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 09:53:18.0436 0x19b0 rdbss - ok 09:53:18.0468 0x19b0 [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys 09:53:18.0546 0x19b0 rdpbus - ok 09:53:18.0593 0x19b0 [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys 09:53:18.0718 0x19b0 RDPDR - ok 09:53:18.0765 0x19b0 [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys 09:53:18.0780 0x19b0 RdpVideoMiniport - ok 09:53:18.0843 0x19b0 [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys 09:53:18.0874 0x19b0 rdyboost - ok 09:53:18.0999 0x19b0 [ E515A287C8FAE901EB8FB42F168E14F2, 9AE8D608587713FD18BB728BADD402C86FFF06A67359B22ED9431705522BC310 ] ReFS C:\WINDOWS\system32\drivers\ReFS.sys 09:53:19.0093 0x19b0 ReFS - ok 09:53:19.0140 0x19b0 [ BFFB40FBE6D2C3469F8D06EE5E4934AB, 5B6763F973A740DCD53CEA75156926457BED8B075965033C484877DDA8B97F39 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 09:53:19.0186 0x19b0 RemoteAccess - ok 09:53:19.0249 0x19b0 [ 4DCCABE03D06955ED61BABBD8EF9F30F, 531CD60315AAF283B73E0F6CF77D4DE093B809E73C44D2AC43B7247500B3485E ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 09:53:19.0343 0x19b0 RemoteRegistry - ok 09:53:19.0436 0x19b0 [ 0527EF6E23B9FAB37DDCBC479C6CFA28, C004CE600074AC434F8B24A3383F8C0ACFA5476D9E3B1493B40911C78B028D64 ] RFCOMM C:\WINDOWS\System32\drivers\rfcomm.sys 09:53:19.0546 0x19b0 RFCOMM - ok 09:53:19.0608 0x19b0 [ D894CBD7DA753C881EE8D5E33B583225, DA4472A85F10A3DF8CE969F731E67FE7C75EE6095908AB8AC2C44851DC5A3F8B ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll 09:53:19.0655 0x19b0 RpcEptMapper - ok 09:53:19.0718 0x19b0 [ 5CAE8F47B31D5CFC322B5B898C19E0FE, FDB5F0B6EA36403E031D9147AB0519011FAAD3AC8190DE5B1F17FB5472D79D47 ] RpcLocator C:\WINDOWS\system32\locator.exe 09:53:19.0733 0x19b0 RpcLocator - ok 09:53:19.0843 0x19b0 [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] RpcSs C:\WINDOWS\system32\rpcss.dll 09:53:19.0890 0x19b0 RpcSs - ok 09:53:19.0937 0x19b0 [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr C:\WINDOWS\system32\DRIVERS\rspndr.sys 09:53:20.0015 0x19b0 rspndr - ok 09:53:20.0077 0x19b0 [ 8EB6DCEB7473C232D8BC9A886E3183AC, D81B089443306AD9D89F59DBC5F9C2F5B6A86112B4AB59316B97EE7D8B97D2FA ] RSUSBVSTOR C:\WINDOWS\System32\Drivers\RtsUVStor.sys 09:53:20.0124 0x19b0 RSUSBVSTOR - ok 09:53:20.0171 0x19b0 [ 19764658C1468C2C0CEF133D28414A6B, 87AD4056F6C67052433A366B200B75613148B69B9B9D502AD926A7F7F037B8DE ] RTL8168 C:\WINDOWS\system32\DRIVERS\Rt630x64.sys 09:53:20.0218 0x19b0 RTL8168 - ok 09:53:20.0280 0x19b0 [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys 09:53:20.0343 0x19b0 s3cap - ok 09:53:20.0405 0x19b0 [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] SamSs C:\WINDOWS\system32\lsass.exe 09:53:20.0436 0x19b0 SamSs - ok 09:53:20.0515 0x19b0 [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys 09:53:20.0593 0x19b0 sbp2port - ok 09:53:20.0655 0x19b0 [ 47C497FA4DDEA908633CAA60CEBE6805, 4DF5742D4C99D3F7B6A5671AEDB1E5E47D3399D36B28BA19C105FA604D8D5A1C ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll 09:53:20.0749 0x19b0 SCardSvr - ok 09:53:20.0812 0x19b0 [ E76C4E98302AE39CC6FA5D20FC8B5438, B6B6B59CF427515087689285797F4A5763103440EBE5D87A61FA74F80F895BD0 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll 09:53:20.0905 0x19b0 ScDeviceEnum - ok 09:53:20.0955 0x19b0 [ ABD0237B15DBD2B4695F4B7D734A58F7, D6831921F0CD3E03CBF1CA3ED5824EE0C75127842D12D4E897E74EC72B0792EB ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys 09:53:20.0979 0x19b0 scfilter - ok 09:53:21.0104 0x19b0 [ D3AE5DB16EAF913860EC28654CE00E6B, AD76B6044F7247C6E86F6DCB7CFD6B25BCA2B9F09A97A419F043A999E66726A2 ] Schedule C:\WINDOWS\system32\schedsvc.dll 09:53:21.0260 0x19b0 Schedule - ok 09:53:21.0354 0x19b0 [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll 09:53:21.0401 0x19b0 SCPolicySvc - ok 09:53:21.0479 0x19b0 [ 7B7C482CF48E6EE33664340D1A78E6FE, CE5077C4B0372F4F9F02B0B37AE58C0DAEFCA9D242065731A23F072506430575 ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys 09:53:21.0526 0x19b0 sdbus - ok 09:53:21.0729 0x19b0 [ 95AA9E165C7DE1B64A11E8B18E91E499, 505BB51F358EAE5835071A89069530DFDA99E9C5220EA6A648842C15E74E4907 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe 09:53:21.0807 0x19b0 SDScannerService - ok 09:53:21.0838 0x19b0 [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys 09:53:21.0869 0x19b0 sdstor - ok 09:53:21.0947 0x19b0 [ D31398D4BB4907B517B6E784C2100C4A, 36BDB2BFAC2C0ADF8C6DF6D1511ECF43C8F6ED7D4D76244DC5232AD97BA5E9C9 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe 09:53:21.0994 0x19b0 SDUpdateService - ok 09:53:22.0057 0x19b0 [ 6AE8E702D1027A9627DDE2B77BB9992B, 5EA68E2A487D252A68DB0861E7FAFA69956D266CBAA5A1D77751F7E6BD4169B7 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe 09:53:22.0088 0x19b0 SDWSCService - ok 09:53:22.0182 0x19b0 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\WINDOWS\system32\drivers\secdrv.sys 09:53:22.0244 0x19b0 secdrv - ok 09:53:22.0291 0x19b0 [ C49009F897BA4F2F4F31043663AA1485, 48C8BE1E3A4F150662AD012AF4E0357ABA792AD1147AB90EFF6CB2630E2501B6 ] seclogon C:\WINDOWS\system32\seclogon.dll 09:53:22.0354 0x19b0 seclogon - ok 09:53:22.0416 0x19b0 [ A88882E64BDC1D8E8D6E727B71CCCC53, 12D2235F54D0CEEED8AA268C17CDE44020269F4FEFC70CE957DBBF99AF7F553D ] SENS C:\WINDOWS\System32\sens.dll 09:53:22.0479 0x19b0 SENS - ok 09:53:22.0526 0x19b0 [ E66A7C8CE7ED22DED6DF1CA479FB4790, ADEB076F131E7A8C3AD96022B09BB33EB9AB26C9C831503B8C6960AA763B8975 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll 09:53:22.0651 0x19b0 SensrSvc - ok 09:53:22.0713 0x19b0 [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys 09:53:22.0760 0x19b0 SerCx - ok 09:53:22.0838 0x19b0 [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys 09:53:22.0932 0x19b0 SerCx2 - ok 09:53:22.0963 0x19b0 [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys 09:53:22.0994 0x19b0 Serenum - ok 09:53:23.0026 0x19b0 [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial C:\WINDOWS\System32\drivers\serial.sys 09:53:23.0057 0x19b0 Serial - ok 09:53:23.0088 0x19b0 [ 0BD2B65DCE756FDE95A2E5CCCBF7705D, F13FAFEC8FCF3E796196562717C433CE359A74A3E5876AB070647C717AF74028 ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys 09:53:23.0104 0x19b0 sermouse - ok 09:53:23.0229 0x19b0 [ D5C3776CBD8BC307DCCA3FD4CE667A37, 98E4253B770C25914C91A6148E2EA15ED0EF37ADCB042A47252DBA135972BF74 ] SessionEnv C:\WINDOWS\system32\sessenv.dll 09:53:23.0322 0x19b0 SessionEnv - ok 09:53:23.0385 0x19b0 [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys 09:53:23.0447 0x19b0 sfloppy - ok 09:53:23.0526 0x19b0 [ F4414F57DF2CECB8FC969AA43A6B0D50, AD09A6E1294721507DD6BE82B91F2EEB0FF0151B9BC14A75840CD657DBFDECEC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 09:53:23.0697 0x19b0 SharedAccess - ok 09:53:23.0807 0x19b0 [ 0D190D8B4B20446BE6299AC734DFADF1, 6551095971F99820BBFC5FED8FAB9591A3F8ABFA0F027887F3B71B79325FF6D9 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 09:53:23.0901 0x19b0 ShellHWDetection - ok 09:53:23.0916 0x19b0 [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys 09:53:23.0932 0x19b0 SiSRaid2 - ok 09:53:23.0979 0x19b0 [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys 09:53:23.0994 0x19b0 SiSRaid4 - ok 09:53:24.0073 0x19b0 [ 587ACA15210D1B01FBF272E07A08F91A, 1F3C13C218C5EA329C6E33E4AE7CFE88DAD59DA40F59FDE09D733AFD2E489000 ] smphost C:\WINDOWS\System32\smphost.dll 09:53:24.0197 0x19b0 smphost - ok 09:53:24.0276 0x19b0 [ 49EEB92DE930B8566EF615D600781DB4, 0B7C929D24FAFC34F95BB4AA77DCBA29DDD8F1977EB42713B64228677D1FBFD3 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe 09:53:24.0338 0x19b0 SNMPTRAP - ok 09:53:24.0541 0x19b0 [ 240C5C3793206725AA05665851E8C214, 96ADFB85EB1623EB00C251C1C6A1F441A1795F0EBFD10B17DD1CA58E3AE8A90D ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys 09:53:24.0588 0x19b0 spaceport - ok 09:53:24.0651 0x19b0 [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys 09:53:24.0682 0x19b0 SpbCx - ok 09:53:24.0776 0x19b0 [ 42FEA9E0BA9761D9E65A4F167D91515B, 9A34CE83F3ACD50608671BDABE5E475F8E0C8335D3B8B7B3D7E84B2A319FA29F ] Spooler C:\WINDOWS\System32\spoolsv.exe 09:53:24.0932 0x19b0 Spooler - ok 09:53:25.0354 0x19b0 [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc C:\WINDOWS\system32\sppsvc.exe 09:53:25.0713 0x19b0 sppsvc - ok 09:53:25.0776 0x19b0 [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv C:\WINDOWS\system32\DRIVERS\srv.sys 09:53:25.0994 0x19b0 srv - ok 09:53:26.0072 0x19b0 [ 5BED3AB69797C8786EF70AEA8C33748B, 0474EE6C43D437CBA9848BCF25D1341B122D7E9F371A0FF3C62C83D14B2CB095 ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys 09:53:26.0166 0x19b0 srv2 - ok 09:53:26.0229 0x19b0 [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys 09:53:26.0338 0x19b0 srvnet - ok 09:53:26.0385 0x19b0 [ BB9ED3EDD8E85008215A7250D325A72E, D3404E31B7706B25CDEA7CB4260C343B5F090E8CCB9A5FA203B0F94A9112F1B3 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 09:53:26.0479 0x19b0 SSDPSRV - ok 09:53:26.0541 0x19b0 [ 3911418AFDE10EA6823B7799E4815524, A73517C4C1271E666B2B3A747756070098E923742B41572AA16573170440AA07 ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll 09:53:26.0619 0x19b0 SstpSvc - ok 09:53:26.0698 0x19b0 [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys 09:53:26.0729 0x19b0 ssudmdm - ok 09:53:26.0807 0x19b0 [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys 09:53:26.0854 0x19b0 stexstor - ok 09:53:26.0947 0x19b0 [ D638904FE86A5FE542A1BA13A9D68E5C, 89A956F932316BC50DD99B54BAF4E2809DCAA084DBB04CB84D11E5470BEAF251 ] stisvc C:\WINDOWS\System32\wiaservc.dll 09:53:27.0135 0x19b0 stisvc - ok 09:53:27.0182 0x19b0 [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci C:\WINDOWS\system32\drivers\storahci.sys 09:53:27.0229 0x19b0 storahci - ok 09:53:27.0260 0x19b0 [ 7A08CEE1535F5A448215634C5EA74E50, 41529CDC08A3956F8FE9D5759B147E2E56E3305149EA415EB200249F7CD32094 ] storflt C:\WINDOWS\system32\DRIVERS\vmstorfl.sys 09:53:27.0291 0x19b0 storflt - ok 09:53:27.0338 0x19b0 [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys 09:53:27.0354 0x19b0 stornvme - ok 09:53:27.0416 0x19b0 [ 3118058E3D07021A55324A943C6D722B, 0B255DF1977DADD2B9766EEEA814B464F0ABFA34D6439F3C453083850C121F16 ] StorSvc C:\WINDOWS\system32\storsvc.dll 09:53:27.0510 0x19b0 StorSvc - ok 09:53:27.0541 0x19b0 [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys 09:53:27.0572 0x19b0 storvsc - ok 09:53:27.0635 0x19b0 [ D8E1AE075AB3E8AD56F69C44AA978596, CAFF5116DE7F0EEFFEBE38724BCEE7D11B44153AD35EE43E314C56D5E210758A ] svsvc C:\WINDOWS\system32\svsvc.dll 09:53:27.0713 0x19b0 svsvc - ok 09:53:27.0745 0x19b0 [ 84E0F5D41C138C5CC975137A2A98F6D3, 1E36CED05E4F4365C2AB020CAF920E3959995D7F89F3FABD7B2FB05985F85F38 ] swenum C:\WINDOWS\System32\drivers\swenum.sys 09:53:27.0760 0x19b0 swenum - ok 09:53:27.0822 0x19b0 [ 850EBB87584484DC16F917E7B6F4A304, C253D1DFFCDFB018432063602FB01DBCBDDD6E03458E5C366AABD4670F114B0C ] swprv C:\WINDOWS\System32\swprv.dll 09:53:27.0979 0x19b0 swprv - ok 09:53:28.0073 0x19b0 SWUpdateService - ok 09:53:28.0276 0x19b0 [ 3DA26652B12E9AB43FD04976AC6DFD33, DEFE220D86197949E97342FE3487CD6A07DD2FFAF6D17A7C65419C2C1B9D1AB5 ] SysMain C:\WINDOWS\system32\sysmain.dll 09:53:28.0369 0x19b0 SysMain - ok 09:53:28.0416 0x19b0 [ FD4EA8E9232ADD51DC31C295DDEF2768, 3EA40D7376AB5AA5DA2BCF4745C79F7BF819363466967ECC3CD15ADECBFD7244 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll 09:53:28.0479 0x19b0 SystemEventsBroker - ok 09:53:28.0526 0x19b0 [ BA6DD39266A5E15515C8C14DA2DA3E5C, 5BC917BA4E7281A67CC6CEF2F4D1972DF04DECBEFB6DED0B08FFBD06E15D4B4F ] TabletInputService C:\WINDOWS\System32\TabSvc.dll 09:53:28.0635 0x19b0 TabletInputService - ok 09:53:28.0713 0x19b0 [ B517410F157693043DACA21B19B258A6, 2224EECEB575CEA811036C43BB5B0A408DE5F59BC97235AB948968E4C3E438F2 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 09:53:28.0932 0x19b0 TapiSrv - ok 09:53:29.0198 0x19b0 [ CCB3A2BB60FE5073F2DEA63FE83CF8FE, 02982136236DD595D8974E6645A008D663B4DD3BC3824721E4DE4377B97887C7 ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys 09:53:29.0307 0x19b0 Tcpip - ok 09:53:29.0479 0x19b0 [ CCB3A2BB60FE5073F2DEA63FE83CF8FE, 02982136236DD595D8974E6645A008D663B4DD3BC3824721E4DE4377B97887C7 ] TCPIP6 C:\WINDOWS\system32\DRIVERS\tcpip.sys 09:53:29.0604 0x19b0 TCPIP6 - ok 09:53:29.0666 0x19b0 [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys 09:53:29.0760 0x19b0 tcpipreg - ok 09:53:29.0807 0x19b0 [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys 09:53:29.0854 0x19b0 tdx - ok 09:53:29.0932 0x19b0 [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys 09:53:29.0963 0x19b0 terminpt - ok 09:53:30.0088 0x19b0 [ 3D748E5558FD9A9F03182CB2330698DC, 70B2069AB7912EB49AB3ABD18D4B42CB94AC99CA6DE3F63F4888B8EAAC78AAA2 ] TermService C:\WINDOWS\System32\termsrv.dll 09:53:30.0182 0x19b0 TermService - ok 09:53:30.0276 0x19b0 [ 05FBE1F7C13E87AF7A414CDF288B1F62, 24079E1A6B2E33A1A8E76A77F73473B93DD6B379E44C982CE50D6CEED9747838 ] Themes C:\WINDOWS\system32\themeservice.dll 09:53:30.0354 0x19b0 Themes - ok 09:53:30.0432 0x19b0 [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] THREADORDER C:\WINDOWS\system32\mmcss.dll 09:53:30.0479 0x19b0 THREADORDER - ok 09:53:30.0541 0x19b0 [ 347A3E49CE18402305B8119A6EC7CFEB, 6768B20EE577880B0353FE84B980D4A18D323929A63FAE41F7A55123BBFC8DBA ] TimeBroker C:\WINDOWS\System32\TimeBrokerServer.dll 09:53:30.0619 0x19b0 TimeBroker - ok 09:53:30.0729 0x19b0 [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM C:\WINDOWS\system32\drivers\tpm.sys 09:53:30.0776 0x19b0 TPM - ok 09:53:30.0838 0x19b0 [ C97E14BB6A196B0554D6EB67D8818175, C00588C94988F10507F84584DFA4C0A43B8648AD1AD35E9BAE14CDD21FCF7B90 ] TrkWks C:\WINDOWS\System32\trkwks.dll 09:53:30.0898 0x19b0 TrkWks - ok 09:53:30.0989 0x19b0 [ 887CC44830D3F367CAD17A0CA7CCA5C8, D4022A76433A11FD66D0F41A1EB4D6893BC5B22317E7E9E021739109EB493B44 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe 09:53:31.0239 0x19b0 TrustedInstaller - ok 09:53:31.0286 0x19b0 [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys 09:53:31.0364 0x19b0 TsUsbFlt - ok 09:53:31.0442 0x19b0 [ E0088068DCE2EE82897027DDB8E05254, FA9C201D3C885DAD2ABE6A23343EDCC83CFB342EFF9E3005FA50B1D88B21D203 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys 09:53:31.0505 0x19b0 TsUsbGD - ok 09:53:31.0552 0x19b0 [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel C:\WINDOWS\system32\DRIVERS\tunnel.sys 09:53:31.0583 0x19b0 tunnel - ok 09:53:31.0630 0x19b0 [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35 C:\WINDOWS\system32\drivers\uagp35.sys 09:53:31.0645 0x19b0 uagp35 - ok 09:53:31.0724 0x19b0 [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys 09:53:31.0755 0x19b0 UASPStor - ok 09:53:31.0864 0x19b0 [ B034A41891A36457B994307DFA772293, CA5E6500764A9777AE0E15B2AFB6F05982C90F01374E3F6DDC6DF3852282C66B ] UCX01000 C:\WINDOWS\System32\drivers\ucx01000.sys 09:53:31.0911 0x19b0 UCX01000 - ok 09:53:31.0958 0x19b0 [ 1EC649F112896FAE33250F0B97AC5D0B, 0C0A1C2C7615DEB298AD3073340FD1BF91FEBE611F133E3B48D994A6EAA8369F ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys 09:53:32.0005 0x19b0 udfs - ok 09:53:32.0036 0x19b0 [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys 09:53:32.0067 0x19b0 UEFI - ok 09:53:32.0145 0x19b0 [ 320878AFECDBBD61BBE98624A6CAAC08, 15C090EA32A24D976B5FCB1373B1281DCC2295C075299C814345D694AEB47CB9 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe 09:53:32.0255 0x19b0 UI0Detect - ok 09:53:32.0364 0x19b0 [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx C:\WINDOWS\system32\drivers\uliagpkx.sys 09:53:32.0395 0x19b0 uliagpkx - ok 09:53:32.0442 0x19b0 [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus C:\WINDOWS\System32\drivers\umbus.sys 09:53:32.0505 0x19b0 umbus - ok 09:53:32.0536 0x19b0 [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass C:\WINDOWS\System32\drivers\umpass.sys 09:53:32.0598 0x19b0 UmPass - ok 09:53:32.0645 0x19b0 [ E3DDF7D43E05784FAA5E042605EEE528, 8E20E880FAB09AF4FF5C438BF9EAE9970D46C05167870110869B744E498FD761 ] UmRdpService C:\WINDOWS\System32\umrdp.dll 09:53:32.0692 0x19b0 UmRdpService - ok 09:53:32.0755 0x19b0 [ 4A2FFDAC45F317E17DF642C7160EB633, F1AB762912FAA5F469F322407DA37C91556086C42D1643AD27516C12A84F74D0 ] upnphost C:\WINDOWS\System32\upnphost.dll 09:53:32.0833 0x19b0 upnphost - ok 09:53:32.0880 0x19b0 [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys 09:53:32.0911 0x19b0 usbccgp - ok 09:53:32.0958 0x19b0 [ B3D6457D841A0CAEF4C52D88621715F2, CBDD76A8A28379B107B1FB530757B477B8AB74CD01F9F3CEDC7B1BA0C6E5A990 ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys 09:53:33.0083 0x19b0 usbcir - ok 09:53:33.0130 0x19b0 [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys 09:53:33.0177 0x19b0 usbehci - ok 09:53:33.0255 0x19b0 [ 4875DC63E548812C75D4FDEF84970C89, 6A29306BAB6F95F0384E16533A9588A654A6E3CFC35D55A4CEB2B14EF34EEE19 ] usbfilter C:\WINDOWS\system32\DRIVERS\usbfilter.sys 09:53:33.0286 0x19b0 usbfilter - ok 09:53:33.0411 0x19b0 [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys 09:53:33.0458 0x19b0 usbhub - ok 09:53:33.0630 0x19b0 [ 65392F3F3F65E4C6CC82A0F4F8A0B051, C11B662A28D95820717DFFC6B76DBB755E4876009A2342E5E3992DE32D6BFF61 ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys 09:53:33.0677 0x19b0 USBHUB3 - ok 09:53:33.0755 0x19b0 [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys 09:53:34.0005 0x19b0 usbohci - ok 09:53:34.0067 0x19b0 [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys 09:53:34.0161 0x19b0 usbprint - ok 09:53:34.0239 0x19b0 [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS 09:53:34.0286 0x19b0 USBSTOR - ok 09:53:34.0333 0x19b0 [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys 09:53:34.0395 0x19b0 usbuhci - ok 09:53:34.0473 0x19b0 [ 18F744E8CCEB2670040EBAF7AD77B8C6, C5E2DF4EA0D946B4DA67DE29FA9D0F079DED35EC59B98E532C4C2D5F8E86DA0A ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys 09:53:34.0536 0x19b0 usbvideo - ok 09:53:34.0692 0x19b0 [ 48430B0313FC1CFE3D2400553F1A93CD, 92994DE6B131E904AFF2C9C4FBB4E6B0D58525A1539763327373DA18C9F08193 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS 09:53:34.0755 0x19b0 USBXHCI - ok 09:53:34.0802 0x19b0 [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] VaultSvc C:\WINDOWS\system32\lsass.exe 09:53:34.0848 0x19b0 VaultSvc - ok 09:53:34.0895 0x19b0 [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys 09:53:34.0927 0x19b0 vdrvroot - ok 09:53:35.0083 0x19b0 [ E3EF58D4123B5AA29C8E19825AF84A5E, FB1046722BC643E955DBC3B1459DBF2A6D575EBA2BCF7B20A0FA51E3993835E2 ] vds C:\WINDOWS\System32\vds.exe 09:53:35.0223 0x19b0 vds - ok 09:53:35.0270 0x19b0 [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys 09:53:35.0317 0x19b0 VerifierExt - ok 09:53:35.0411 0x19b0 [ 52E483A3701A5A61A75A06993720347D, 689E812755E485DF6960D1E049740FBAFB812467D23B673DCAA40C03FEBB544F ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys 09:53:35.0458 0x19b0 vhdmp - ok 09:53:35.0520 0x19b0 [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide C:\WINDOWS\system32\drivers\viaide.sys 09:53:35.0552 0x19b0 viaide - ok 09:53:35.0599 0x19b0 [ C6305BDFC4F7CE51F72BB072C03D4ACE, 73E62869CA3104F48CC3B0C45E69CE9BF4F8D7D06E29C2F049B9347ABB50554D ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys 09:53:35.0645 0x19b0 vmbus - ok 09:53:35.0677 0x19b0 [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys 09:53:35.0692 0x19b0 VMBusHID - ok 09:53:35.0755 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll 09:53:35.0802 0x19b0 vmicguestinterface - ok 09:53:35.0817 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicheartbeat C:\WINDOWS\System32\ICSvc.dll 09:53:35.0848 0x19b0 vmicheartbeat - ok 09:53:35.0880 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll 09:53:35.0911 0x19b0 vmickvpexchange - ok 09:53:35.0958 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicrdv C:\WINDOWS\System32\ICSvc.dll 09:53:36.0005 0x19b0 vmicrdv - ok 09:53:36.0052 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicshutdown C:\WINDOWS\System32\ICSvc.dll 09:53:36.0083 0x19b0 vmicshutdown - ok 09:53:36.0114 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmictimesync C:\WINDOWS\System32\ICSvc.dll 09:53:36.0161 0x19b0 vmictimesync - ok 09:53:36.0177 0x19b0 [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicvss C:\WINDOWS\System32\ICSvc.dll 09:53:36.0223 0x19b0 vmicvss - ok 09:53:36.0255 0x19b0 [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys 09:53:36.0286 0x19b0 volmgr - ok 09:53:36.0317 0x19b0 [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys 09:53:36.0380 0x19b0 volmgrx - ok 09:53:36.0583 0x19b0 [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys 09:53:36.0630 0x19b0 volsnap - ok 09:53:36.0677 0x19b0 [ 01355C98B5C3ED1EC446743CDA848FCE, B9FCF558C20E05DD0F53FFB70BBEF873EA57801E13A16701E636128D625C4B67 ] vpci C:\WINDOWS\System32\drivers\vpci.sys 09:53:36.0708 0x19b0 vpci - ok 09:53:36.0755 0x19b0 [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys 09:53:36.0802 0x19b0 vsmraid - ok 09:53:36.0942 0x19b0 [ E369C59F2C0852DDD090C07E0DDE0051, 4FAC94458EAAEED4F84A86FBAB8FBB332D0AF85BD528E63C0C058A2DA8E3011D ] VSS C:\WINDOWS\system32\vssvc.exe 09:53:37.0052 0x19b0 VSS - ok 09:53:37.0114 0x19b0 [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys 09:53:37.0161 0x19b0 VSTXRAID - ok 09:53:37.0270 0x19b0 [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys 09:53:37.0380 0x19b0 vwifibus - ok 09:53:37.0458 0x19b0 [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt C:\WINDOWS\system32\DRIVERS\vwififlt.sys 09:53:37.0520 0x19b0 vwififlt - ok 09:53:37.0567 0x19b0 [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp C:\WINDOWS\system32\DRIVERS\vwifimp.sys 09:53:37.0598 0x19b0 vwifimp - ok 09:53:37.0661 0x19b0 [ 7599E582CA3A6AAA95A18FFE1172D339, A0410778FBBC4302EA91CF24B944427410B4706535F1192504D4F34C3ED4503E ] W32Time C:\WINDOWS\system32\w32time.dll 09:53:37.0723 0x19b0 W32Time - ok 09:53:37.0755 0x19b0 [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys 09:53:37.0786 0x19b0 WacomPen - ok 09:53:37.0817 0x19b0 [ AFCD4054D61BD708B82991348ED1C763, EBDAC0E218F1DFC405DB3C8A2F014D20A17B0690EA381C750BED5C2AFCDFEBE3 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 09:53:37.0848 0x19b0 Wanarp - ok 09:53:37.0848 0x19b0 [ AFCD4054D61BD708B82991348ED1C763, EBDAC0E218F1DFC405DB3C8A2F014D20A17B0690EA381C750BED5C2AFCDFEBE3 ] Wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys 09:53:37.0880 0x19b0 Wanarpv6 - ok 09:53:38.0036 0x19b0 [ 61692DB39AD3DF2F29392D68EAA7BB93, 854D4B9C7DD1676968598ED973500650ECEC02C420E44C0B3957C24F073AA5FB ] wbengine C:\WINDOWS\system32\wbengine.exe 09:53:38.0177 0x19b0 wbengine - ok 09:53:38.0255 0x19b0 [ 3BC1D1D56637A32CD91C8AE08E2484AA, 9EE1BD3FB0D289E25F3DDD0D8F67DC1C701A6B1D5418FADF348D0E642B1DEBEB ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll 09:53:38.0380 0x19b0 WbioSrvc - ok 09:53:38.0442 0x19b0 [ A07CFC4B593D15B6BF06813C3B5B33BF, B57BD918E2AFF9943B51A24B95E0C4D3482B4DF73C0E2421E8CC67C2BC7A4C70 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll 09:53:38.0552 0x19b0 Wcmsvc - ok 09:53:38.0645 0x19b0 [ D2726823DF7E19F213F4805A9D6D145F, A7F582C99918D204264D3B374F70D75984BDA5805203041E3DECB8153D16E102 ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll 09:53:38.0786 0x19b0 wcncsvc - ok 09:53:38.0833 0x19b0 [ 846C02A8B48CBD921A3D6AB521AA0DC4, B07573A774A6C65D24E5718DC25DF378270EB5B40221CA5A53B21D47838381D3 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll 09:53:38.0911 0x19b0 WcsPlugInService - ok 09:53:38.0958 0x19b0 [ 0359607177E5E9F6041136CC0A5CB0B6, 16687BE2639648CF46E8768BA1798030472C525612C629BF134D053240E2195B ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys 09:53:38.0989 0x19b0 WdBoot - ok 09:53:39.0083 0x19b0 [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys 09:53:39.0145 0x19b0 Wdf01000 - ok 09:53:39.0223 0x19b0 [ DE8D12B4C3F55FA2C5E9774314F6C58A, C3E835DC066A94E1431BCDC90D7EA27AAC6F82826F4A5527B37D865241D7A366 ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys 09:53:39.0270 0x19b0 WdFilter - ok 09:53:39.0317 0x19b0 [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll 09:53:39.0395 0x19b0 WdiServiceHost - ok 09:53:39.0411 0x19b0 [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll 09:53:39.0442 0x19b0 WdiSystemHost - ok 09:53:39.0473 0x19b0 [ 4AD874CDC812EC156265E451B6B09DAB, 6E3E05B8301841425E9BB0D54B35EF386B78EEB307B5A6153FD1F366D30F23FA ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys 09:53:39.0505 0x19b0 WdNisDrv - ok 09:53:39.0630 0x19b0 WdNisSvc - ok 09:53:39.0677 0x19b0 [ 91B18D7A1702ED589E67C6C81052B955, 5D1DA8B86106A28E50BBCCB36527CC130D41201F5BE1D3DC5F1D6F7ECCF807BA ] WebClient C:\WINDOWS\System32\webclnt.dll 09:53:39.0755 0x19b0 WebClient - ok 09:53:39.0849 0x19b0 [ 3274312F263882B51B964329FAF49734, 99A020377ACF0762BE5ECD2D68EB5E1497B9D59963247E725F7F96FB5DF41FAD ] Wecsvc C:\WINDOWS\system32\wecsvc.dll 09:53:39.0927 0x19b0 Wecsvc - ok 09:53:39.0958 0x19b0 [ 7CDD84E0023A0C5C230B06A7965EC65E, 6EC7DC18C76D66CF9A893C3DD20F9BE3ADD76546F9A9BA42CE4F24854709F9D9 ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll 09:53:39.0989 0x19b0 WEPHOSTSVC - ok 09:53:40.0020 0x19b0 [ 959534ACF085C137D2D094384EF89C45, D029F440789FE170A1C46217C6DE6D78DC0188A5CF33FCCC17FA65D3BC80C2B7 ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll 09:53:40.0098 0x19b0 wercplsupport - ok 09:53:40.0130 0x19b0 [ 82BCCF5FBE47AC9E8CBA2020994DFB3F, EA96C6BD98A701B465D0780EC10BDA92E45FE636D60C1385813AA3B456D8B931 ] WerSvc C:\WINDOWS\System32\WerSvc.dll 09:53:40.0192 0x19b0 WerSvc - ok 09:53:40.0239 0x19b0 [ BFBE1C5F57FE7A885673A1962D5532B7, F0BD05B257108699FE6AB32EF11F927C31932F27062A705B3FEFA4F5B4C0D8C3 ] WFPLWFS C:\WINDOWS\system32\DRIVERS\wfplwfs.sys 09:53:40.0270 0x19b0 WFPLWFS - ok 09:53:40.0349 0x19b0 [ E06AFE2F94BA7CFA2FE4FD2A449E60E2, 99A81E16366E9E77905D873B0246E4C11B383FE1E99E0E1D9A07FAD4E52EA9E4 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll 09:53:40.0364 0x19b0 WiaRpc - ok 09:53:40.0411 0x19b0 [ 867BCC69ED9C31C501465EB0E8BA9DFA, 678B7FF4D4E8624514301956CDA7FB451159BBFC83FF2E4E5E7DADAE3C7AB2EC ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys 09:53:40.0458 0x19b0 WIMMount - ok 09:53:40.0473 0x19b0 WinDefend - ok 09:53:40.0598 0x19b0 [ DD079EC8F44DCA3A176B345C6ADEFB66, 6CD9371B83EA23D2181891FAE1DB285BC111A78C35F374E57666ED09860C91A9 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll 09:53:40.0692 0x19b0 WinHttpAutoProxySvc - ok 09:53:40.0770 0x19b0 [ 9DB490F3E823C5C3C070644B96CB9D59, 81937D0B331E43C7C61514E60B3AD51370C5201F7B4D12F8534840D91EDC32DD ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 09:53:40.0817 0x19b0 Winmgmt - ok 09:53:41.0005 0x19b0 [ 9CE162EB9057CF079736F4DD00FC0D6C, 412C34557866D2A3B3CDAFA5A03B87C01AACF75E349802E511098B20137028D9 ] WinRM C:\WINDOWS\system32\WsmSvc.dll 09:53:41.0239 0x19b0 WinRM - ok 09:53:41.0317 0x19b0 [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb C:\WINDOWS\system32\DRIVERS\WinUsb.sys 09:53:41.0364 0x19b0 WinUsb - ok 09:53:41.0458 0x19b0 [ 3F5EF31C6AA204B099EE76497DF80A26, CBE648A4E7E1D98A3D8C72582C1CB3C2FD2329EAA24EE4DCAD271AAA6F4D82CE ] WlanSvc C:\WINDOWS\System32\wlansvc.dll 09:53:41.0536 0x19b0 WlanSvc - ok 09:53:41.0708 0x19b0 [ 5F56C0DE776C7AE43AF749845BFAA1EF, 837993C5853B7E682C7FB8401B7F5D951FFD15E5659EBB1B01DC3F5719ACEE19 ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll 09:53:41.0833 0x19b0 wlidsvc - ok 09:53:41.0864 0x19b0 [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys 09:53:41.0895 0x19b0 WmiAcpi - ok 09:53:41.0942 0x19b0 [ 7AFAC828F52D62F304A911EC32F42EEE, 4EDCF4149069413A166169F2E23F7505F47B39B7EC319E1EF6D2C46CD140AA24 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe 09:53:42.0052 0x19b0 wmiApSrv - ok 09:53:42.0099 0x19b0 WMPNetworkSvc - ok 09:53:42.0177 0x19b0 [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof C:\WINDOWS\system32\drivers\Wof.sys 09:53:42.0223 0x19b0 Wof - ok 09:53:42.0364 0x19b0 [ 61BF52E9FFAB27A0B6D621BE26088373, 81291D52C381360E69D51E7DEB05CFAC651A7E9EF781CA23062C0583D0C94708 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll 09:53:42.0505 0x19b0 workfolderssvc - ok 09:53:42.0552 0x19b0 [ 182561A14F2E93E81E66FE3700D17A5A, FB9A06058A8BCCEDCDC5BF8899D9B2FBA5752C262C5FC6D2B8338884F3303D12 ] wpcfltr C:\WINDOWS\system32\DRIVERS\wpcfltr.sys 09:53:42.0567 0x19b0 wpcfltr - ok 09:53:42.0614 0x19b0 [ 4E6A0F60DA7EF050D3D26417CD4D24E9, E6B3BFB007B641D41F8532ED086F92CB3D86E210023DBFAA9AD8152A9FD33CCA ] WPCSvc C:\WINDOWS\System32\wpcsvc.dll 09:53:42.0677 0x19b0 WPCSvc - ok 09:53:42.0739 0x19b0 [ 618A19EB31ECA7B7F2AA0207BAF598A5, CB18CF9B781EAB3D775F8201F294A7135E058D6C963D2CC759DCA14D95EED538 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll 09:53:42.0864 0x19b0 WPDBusEnum - ok 09:53:42.0942 0x19b0 [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys 09:53:42.0973 0x19b0 WpdUpFltr - ok 09:53:43.0052 0x19b0 [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys 09:53:43.0130 0x19b0 ws2ifsl - ok 09:53:43.0177 0x19b0 [ 9654DE19551093CD73874281E1573C94, 5E3513EC0CB180D90904BE8970AB64A4434279E8C467AE2CF693254E47B1D11E ] wscsvc C:\WINDOWS\System32\wscsvc.dll 09:53:43.0270 0x19b0 wscsvc - ok 09:53:43.0286 0x19b0 WSearch - ok 09:53:43.0583 0x19b0 [ 95B6670E6933E1DEE19686C55BE709A0, 4B9EB8F1712B7959A71F6DA445D29BD09B25EEFC6B30D736EFE30163D79B233E ] WSService C:\WINDOWS\System32\WSService.dll 09:53:43.0864 0x19b0 WSService - ok 09:53:44.0114 0x19b0 [ DCD090318EC800CF6275C6835900B0C6, 9E72762EEE46CC0606B909850E6D22E9C8E5C88E82F7C974B2B7C1E5160BEBA7 ] wuauserv C:\WINDOWS\system32\wuaueng.dll 09:53:44.0427 0x19b0 wuauserv - ok 09:53:44.0552 0x19b0 [ D537815E450A149752C15868392AD1F3, 8788CE493349299DB36E409C8CC3C6EA08301FA492C95D9D556E00BC13A05F13 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys 09:53:44.0677 0x19b0 WudfPf - ok 09:53:44.0724 0x19b0 [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFRd C:\WINDOWS\System32\drivers\WUDFRd.sys 09:53:44.0755 0x19b0 WUDFRd - ok 09:53:44.0786 0x19b0 [ 9CDC2059A23E3C9B57696178508777E7, B680A2E2EDA5C8C6A547E7D9B2F2F8E6407C3EA0A01B82A4B88D48A27913A597 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll 09:53:44.0880 0x19b0 wudfsvc - ok 09:53:44.0895 0x19b0 [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 09:53:44.0927 0x19b0 WUDFWpdFs - ok 09:53:44.0958 0x19b0 [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdMtp C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 09:53:44.0973 0x19b0 WUDFWpdMtp - ok 09:53:45.0067 0x19b0 [ 2FA9794CA36147756F3FDFD6CA29B46F, 4B86DC38C2411C281686E9A4E64DA6FB2992E39391371F78E012D6D8BB85123F ] WwanSvc C:\WINDOWS\System32\wwansvc.dll 09:53:45.0161 0x19b0 WwanSvc - ok 09:53:45.0380 0x19b0 [ 86B8B1F5C1189D68B07666784BE882FE, 0DD8C627F3DDBDB61B1910540C465C0D62C9F8D84C7CBB6C80782DB02D535AF0 ] ZAtheros Bt and Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe 09:53:45.0395 0x19b0 ZAtheros Bt and Wlan Coex Agent - detected UnsignedFile.Multi.Generic ( 1 ) 09:53:47.0880 0x19b0 Detect skipped due to KSN trusted 09:53:47.0880 0x19b0 ZAtheros Bt and Wlan Coex Agent - ok 09:53:47.0927 0x19b0 ================ Scan global =============================== 09:53:48.0067 0x19b0 [ C89780A6F58D113C28A96D85D1261DC5, 185114F33A60916C7904E4A0F278CA43258454343E614F01F0DAFA98BAC981B1 ] C:\WINDOWS\system32\basesrv.dll 09:53:48.0130 0x19b0 [ 00DD4D2ACC2E72155A8AAA82018BEC0D, 9D7CA68B4A81240477FCC85A3CC11EF986093F9D6228A6C5AC608EDAD664068C ] C:\WINDOWS\system32\winsrv.dll 09:53:48.0192 0x19b0 [ 9C1833ABD62876856836C5AE55C7CE86, 0A21E2C8B2FF3B0438C86DA7151A548F9C6F5C62CD402CBBEDB435994C8508F1 ] C:\WINDOWS\system32\sxssrv.dll 09:53:48.0255 0x19b0 [ 067CB90C277DB4A737D5DEABA3055972, C681BF013170F2D92A3FC4D783FC3F200CDC0C8173373B7ECC27FCF32A03CCBD ] C:\WINDOWS\system32\services.exe 09:53:48.0270 0x19b0 [ Global ] - ok 09:53:48.0270 0x19b0 ================ Scan MBR ================================== 09:53:48.0302 0x19b0 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0 09:53:48.0646 0x19b0 \Device\Harddisk0\DR0 - ok 09:53:48.0646 0x19b0 ================ Scan VBR ================================== 09:53:48.0661 0x19b0 [ 27DE17922B0368C44A5E1847CE4AD00E ] \Device\Harddisk0\DR0\Partition1 09:53:48.0755 0x19b0 \Device\Harddisk0\DR0\Partition1 - ok 09:53:48.0786 0x19b0 [ D12E4D1F90B42C128BE2EA6CF3B717A4 ] \Device\Harddisk0\DR0\Partition2 09:53:48.0880 0x19b0 \Device\Harddisk0\DR0\Partition2 - ok 09:53:48.0911 0x19b0 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3 09:53:48.0927 0x19b0 \Device\Harddisk0\DR0\Partition3 - ok 09:53:48.0942 0x19b0 [ 043029679A04A3FDE52C1A857BAD95DC ] \Device\Harddisk0\DR0\Partition4 09:53:49.0130 0x19b0 \Device\Harddisk0\DR0\Partition4 - ok 09:53:49.0192 0x19b0 [ E7058516BFEF7B2B68AD1FDFDED35BD9 ] \Device\Harddisk0\DR0\Partition5 09:53:49.0286 0x19b0 \Device\Harddisk0\DR0\Partition5 - ok 09:53:49.0317 0x19b0 [ 54B330420963454BF86CBD0D50C4FD20 ] \Device\Harddisk0\DR0\Partition6 09:53:49.0411 0x19b0 \Device\Harddisk0\DR0\Partition6 - ok 09:53:49.0458 0x19b0 [ 8ED414F0E8FB852C2D5954FF4DD5D86F ] \Device\Harddisk0\DR0\Partition7 09:53:49.0489 0x19b0 \Device\Harddisk0\DR0\Partition7 - ok 09:53:49.0489 0x19b0 ================ Scan generic autorun ====================== 09:53:50.0459 0x19b0 [ 6947FF3D8868225600913BE99A653A59, 7FDC4A4BFE7473D8EE281A362C37DCFB6E3DB7E5136E225117ECB7F60580CD77 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 09:53:51.0021 0x19b0 RtHDVCpl - ok 09:53:51.0271 0x19b0 [ 320681DF28D82CDCA7E3EED0846625DB, 7F709ADFB0FE36BEC857A928E9CB29BB5B6C0BAD98824D0302C7BB7185100CB9 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe 09:53:51.0303 0x19b0 AdobeAAMUpdater-1.0 - ok 09:53:51.0459 0x19b0 [ 690EB331346D7ADFDA18E50042DEA4B4, 0C219D7A5FCD4E0252C815373E67F843DBD7356FAE7AB836C451068B51438FE7 ] C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:53:51.0490 0x19b0 Classic Start Menu - ok 09:53:51.0709 0x19b0 [ 28CC78243A2EF270473BD479D63286CF, 905BB2FA35E6180DB98111653D3E288E0DFD8653193B01177EFF2290F20F4C0F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 09:53:51.0756 0x19b0 StartCCC - ok 09:53:51.0881 0x19b0 [ A40C1E6F1DFAA74AE3CB7483B30E4468, 393088629523382B6281EBC89AC52EF71AF36A703ECC46C608B9A4DD9BDC742A ] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe 09:53:51.0912 0x19b0 Adobe Reader Speed Launcher - ok 09:53:52.0053 0x19b0 [ 048EA4B978851788E9F5E8E4F081DF7A, EB62719AC0DCC18FF056F2CD84438BF14B61E38F0619617C81961C6257BDFCEC ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 09:53:52.0147 0x19b0 Adobe ARM - ok 09:53:52.0326 0x19b0 [ 69B388D8F3085411D00F875FF5CBCAF6, 22F6DCF1E6D1DD28793CCDFE9FC33E737180BB3C5C65BE3BFA9C2522B6B6F66B ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 09:53:52.0366 0x19b0 avgnt - ok 09:53:52.0697 0x19b0 [ 09E9425AD8C61664A37ED84B8B58BDCF, CCDB11BA663E9751315A9A164225621BFB20170977AFE2B5543BF49D90DDF002 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe 09:53:52.0876 0x19b0 SDTray - ok 09:53:53.0079 0x19b0 [ 5B6E8E09BE6401A7E022F52FDFCB2FF8, 471C556CF9405BBB380A8CEFE945C126B954B7C94F79CC72441B51F80141FC5E ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 09:53:53.0126 0x19b0 SunJavaUpdateSched - ok 09:53:53.0235 0x19b0 [ BF739971EC9B05DAFEC793767B632BA9, 3C2AD01C5842936E0BE81E872F4551A7243189B618FDBEF42B748011B604A65B ] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe 09:53:53.0267 0x19b0 KiesTrayAgent - ok 09:53:53.0501 0x19b0 [ 22283306E9A33D4EB10F8B6C7499C30E, F527A3ED9816EE5C5A191A26A7D29A2CAFAB7DA3BAA3295FE0E8A2D44F0F5F45 ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe 09:53:53.0517 0x19b0 Avira Systray - ok 09:53:53.0861 0x19b0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe 09:53:53.0939 0x19b0 Google Update - ok 09:53:54.0032 0x19b0 [ 8CFAFCD10B661D5770A32111EB4CD266, 7B4B4EEDA5F77BF1D24C35EBD4B14B4FCBE6B424C47E41CCAE9718345554E283 ] C:\Program Files (x86)\Samsung\Kies\Kies.exe 09:53:54.0111 0x19b0 KiesPreload - ok 09:53:54.0111 0x19b0 Waiting for KSN requests completion. In queue: 13 09:53:55.0126 0x19b0 Waiting for KSN requests completion. In queue: 13 09:53:56.0140 0x19b0 Waiting for KSN requests completion. In queue: 13 09:53:57.0234 0x19b0 AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.8.652 ), 0x40000 ( disabled : updated ) 09:53:57.0281 0x19b0 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.6.305.0 ), 0x60100 ( disabled : updated ) 09:53:57.0374 0x19b0 Win FW state via NFP2: enabled 09:53:59.0750 0x19b0 ============================================================ 09:53:59.0750 0x19b0 Scan finished 09:53:59.0750 0x19b0 ============================================================ 09:53:59.0765 0x0bb8 Detected object count: 1 09:53:59.0765 0x0bb8 Actual detected object count: 1 09:54:28.0627 0x0bb8 BtFilter ( ForgedFile.Multi.Generic ) - skipped by user 09:54:28.0631 0x0bb8 BtFilter ( ForgedFile.Multi.Generic ) - User select action: Skip 09:55:56.0021 0x1b4c Deinitialize success |
04.04.2015, 19:54 | #4 |
/// the machine /// TB-Ausbilder | Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.04.2015, 18:11 | #5 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam Chrome geht jetzt nicht mehr - ist das normal? Da kommt die Fehlermeldung "Klasse nicht registriert". Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 05.04.2015 Suchlauf-Zeit: 13:52:05 Logdatei: mbam.txt Administrator: Ja Version: 2.01.4.1018 Malware Datenbank: v2015.04.05.01 Rootkit Datenbank: v2015.03.31.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: *** Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 349623 Verstrichene Zeit: 23 Min, 0 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 1 PUP.Optional.DigitalSites.A, HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\SOFTWARE\DSiteProducts, In Quarantäne, [b3424622305afb3bf3e170d40df858a8], Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 1 PUP.Optional.Updater.A, C:\Users\***\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [2acb1256602a9f97e1328514e1229868], Dateien: 2 PUP.Optional.Updater.A, C:\Users\***\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [2acb1256602a9f97e1328514e1229868], PUP.Optional.Updater.A, C:\Users\***\AppData\Roaming\DSite\UpdateProc\TTL.DAT, In Quarantäne, [2acb1256602a9f97e1328514e1229868], Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) Code:
ATTFilter # AdwCleaner v4.200 - Bericht erstellt 05/04/2015 um 16:10:47 # Aktualisiert 29/03/2015 von Xplode # Datenbank : 2015-03-29.1 [Server] # Betriebssystem : Windows 8.1 (x64) # Benutzername : *** - *** # Gestarted von : C:\Users\***\Desktop\AdwCleaner_4.200.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\~0 Ordner Gelöscht : C:\ProgramData\simplitec Ordner Gelöscht : C:\Users\***\AppData\Local\PackageAware Ordner Gelöscht : C:\Users\***\AppData\Roaming\DSite Ordner Gelöscht : C:\Users\***\AppData\Roaming\simplitec Ordner Gelöscht : C:\Users\***\Documents\Updater ***** [ Geplante Tasks ] ***** Task Gelöscht : DSite ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D971CE01-3BCC-4E8A-B574-7A40BDEDA0F8} Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Smart PC Solutions Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17416 -\\ Google Chrome v ************************* AdwCleaner[R0].txt - [4864 Bytes] - [05/04/2015 16:08:36] AdwCleaner[S0].txt - [4487 Bytes] - [05/04/2015 16:10:47] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4546 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.5.1 (04.02.2015:1) OS: Windows 8.1 x64 Ran by *** on 05.04.2015 at 16:18:39,19 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05.04.2015 at 16:22:56,99 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
06.04.2015, 10:44 | #6 |
/// the machine /// TB-Ausbilder | Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam Revo Uninstaller - Download - Filepony damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de Dann bitte ein frisches FRST log.
__________________ --> Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam |
06.04.2015, 15:44 | #7 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam 1. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015 Ran by *** (administrator) on *** on 06-04-2015 16:31:56 Running from C:\Users\***\Desktop Loaded Profiles: *** (Available profiles: ***) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe (Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe Geändert von minnie_me (06.04.2015 um 16:15 Uhr) |
06.04.2015, 15:56 | #8 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-12] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-04-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] ( (Atheros Communications)) HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\...\MountPoints2: {f40816fc-5781-11e3-bebe-b888e3fdb262} - "E:\LGAutoRun.exe" HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-1225493163-4127186220-2738876131-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> DefaultScope {CFAA2CD5-5AA6-405A-A7FD-92AB2F3C3A18} URL = SearchScopes: HKU\S-1-5-21-1225493163-4127186220-2738876131-1001 -> {CFAA2CD5-5AA6-405A-A7FD-92AB2F3C3A18} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-04-02] (Microsoft Corporation) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-09] (Oracle Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-02] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-09] (Oracle Corporation) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-11] (Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-04-02] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-11] (Oracle Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Geändert von minnie_me (06.04.2015 um 16:15 Uhr) |
06.04.2015, 16:00 | #9 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter FireFox: ======== FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-01-09] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-01-09] (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\windows\SysWOW64\npDeployJava1.dll [2013-09-11] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-09-11] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-10-16] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin HKU\S-1-5-21-1225493163-4127186220-2738876131-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File Chrome: ======= CHR Profile: C:\Users\***\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-06] CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-06] CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-06] CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-06] CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06] CHR Extension: (Google Sheets) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-06] CHR Extension: (Avira Browser Safety) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-04-06] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-06] CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-06] CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-06] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-04-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-04-02] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [322176 2014-06-17] (Windows (R) Win 7 DDK provider) [File not signed] R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation) R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2014-10-21] (Samsung Electronics CO., LTD.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.) S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-04-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-04-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-01-06] (Avira Operations GmbH & Co. KG) S3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [599752 2014-06-17] () [File not signed] S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation) S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation) R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) Geändert von minnie_me (06.04.2015 um 16:16 Uhr) |
06.04.2015, 16:19 | #10 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-06 16:28 - 2015-04-06 16:28 - 00002271 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-04-06 16:28 - 2015-04-06 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-04-06 16:27 - 2015-04-06 16:32 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-04-06 16:27 - 2015-04-06 16:32 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-04-06 16:27 - 2015-04-06 16:27 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-04-06 16:27 - 2015-04-06 16:27 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-04-06 16:26 - 2015-04-06 16:27 - 00000000 ____D () C:\Users\***\AppData\Local\Deployment 2015-04-06 16:19 - 2015-04-06 16:19 - 00001284 _____ () C:\Users\***\Desktop\Revo Uninstaller.lnk 2015-04-06 16:19 - 2015-04-06 16:19 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2015-04-06 16:18 - 2015-04-06 16:18 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\***\Downloads\revosetup95.exe 2015-04-05 16:22 - 2015-04-05 19:08 - 00000684 _____ () C:\Users\***\Desktop\JRT.txt 2015-04-05 16:18 - 2015-04-05 16:18 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-***-Windows-8.1-(64-bit).dat 2015-04-05 16:18 - 2015-04-05 16:18 - 00000000 ____D () C:\RegBackup 2015-04-05 16:16 - 2015-04-05 16:16 - 00004672 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt 2015-04-05 16:08 - 2015-04-05 16:10 - 00000000 ____D () C:\AdwCleaner 2015-04-05 16:07 - 2015-04-05 16:07 - 02690981 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe 2015-04-05 16:03 - 2015-04-05 19:05 - 00001629 _____ () C:\Users\***\Desktop\mbam.txt 2015-04-05 16:03 - 2015-04-05 16:03 - 02208768 _____ () C:\Users\***\Desktop\AdwCleaner_4.200.exe 2015-04-05 15:37 - 2015-04-05 15:38 - 00000324 ____N () C:\WINDOWS\DtcInstall.log 2015-04-05 15:24 - 2015-04-05 15:38 - 00000000 ___SD () C:\WINDOWS\system32\GWX 2015-04-05 15:24 - 2015-04-05 15:24 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX 2015-04-05 13:53 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-04-05 13:53 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-04-05 13:53 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2015-04-05 13:53 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2015-04-05 13:53 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2015-04-05 13:53 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll 2015-04-05 13:53 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll 2015-04-05 13:53 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2015-04-05 13:53 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2015-04-05 13:53 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe 2015-04-05 13:53 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe 2015-04-05 13:52 - 2015-02-07 01:09 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2015-04-05 13:51 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2015-04-05 13:51 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2015-04-05 13:50 - 2015-04-05 13:50 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-04-05 13:50 - 2015-04-05 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-04-05 13:50 - 2015-04-05 13:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-04-05 13:50 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-04-05 13:50 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-04-05 13:50 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll 2015-04-05 13:50 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll 2015-04-05 13:49 - 2015-04-05 13:49 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\***\Downloads\mbam-setup-2.1.4.1018.exe 2015-04-05 13:49 - 2015-03-11 00:08 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2015-04-05 13:49 - 2015-03-11 00:08 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-04-05 13:49 - 2015-03-11 00:08 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2015-04-05 13:49 - 2015-03-11 00:08 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-04-05 13:49 - 2015-03-11 00:08 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-04-05 13:48 - 2015-03-11 04:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2015-04-05 13:48 - 2015-03-11 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2015-04-05 13:48 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-04-05 13:48 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-04-05 13:48 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2015-04-05 13:48 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2015-04-05 13:47 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-04-05 13:47 - 2015-01-30 05:01 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys 2015-04-05 13:47 - 2015-01-30 05:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys 2015-04-05 13:47 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-04-05 13:47 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-04-05 13:47 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2015-04-05 13:47 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2015-04-05 13:47 - 2014-12-13 23:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls 2015-04-05 13:47 - 2014-12-13 23:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls 2015-04-05 13:47 - 2014-10-29 04:46 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2015-04-05 13:47 - 2014-10-29 04:45 - 01198080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2015-04-05 13:47 - 2014-10-29 04:34 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2015-04-05 13:47 - 2014-10-29 04:34 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe 2015-04-05 13:47 - 2014-10-29 04:03 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe 2015-04-05 13:47 - 2014-10-29 03:13 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-04-05 13:47 - 2014-10-29 02:55 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-04-05 13:46 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2015-04-05 13:46 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2015-04-05 13:46 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2015-04-05 13:46 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2015-04-05 13:46 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll 2015-04-05 13:46 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll 2015-04-05 13:46 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll 2015-04-05 13:46 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll 2015-04-05 13:46 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll 2015-04-05 13:46 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-04-05 13:46 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-04-05 13:46 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll 2015-04-05 13:46 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll 2015-04-05 13:46 - 2014-10-29 03:28 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll 2015-04-04 14:31 - 2014-10-29 04:08 - 18822656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-04-04 14:30 - 2014-10-29 06:03 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2015-04-04 14:30 - 2014-10-29 04:19 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-04-04 14:30 - 2014-10-29 03:45 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-04-04 14:30 - 2014-10-29 03:33 - 15157760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-04-04 14:30 - 2014-10-29 03:17 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2015-04-04 14:30 - 2014-10-29 03:10 - 02344960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2015-04-04 14:30 - 2014-10-29 02:52 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2015-04-04 14:30 - 2014-10-29 02:51 - 01554432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2015-04-04 14:30 - 2014-10-29 02:45 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2015-04-04 14:29 - 2014-10-29 05:59 - 03460472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2015-04-04 14:29 - 2014-10-29 05:59 - 00014144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swenum.sys 2015-04-04 14:29 - 2014-10-29 03:43 - 07075328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll 2015-04-04 14:29 - 2014-10-29 03:40 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2015-04-04 14:29 - 2014-10-29 03:16 - 05267968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll 2015-04-04 14:29 - 2014-10-29 03:02 - 14354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-04-04 14:29 - 2014-10-29 02:54 - 07784960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-04-04 14:29 - 2014-10-29 02:50 - 12749824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-04-04 14:29 - 2014-10-29 02:46 - 09530368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2015-04-04 14:29 - 2014-10-29 02:43 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2015-04-04 14:29 - 2014-10-29 02:38 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2015-04-04 14:29 - 2014-10-29 02:37 - 06386176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2015-04-04 14:29 - 2014-10-29 02:33 - 06213632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2015-04-04 14:29 - 2014-10-07 08:45 - 03307112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2015-04-04 14:28 - 2014-10-29 06:00 - 02314952 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2015-04-04 14:28 - 2014-10-29 06:00 - 02229168 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2015-04-04 14:28 - 2014-10-29 05:59 - 02529856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2015-04-04 14:28 - 2014-10-29 05:57 - 03138720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2015-04-04 14:28 - 2014-10-29 05:57 - 03118096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2015-04-04 14:28 - 2014-10-29 05:57 - 01286048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2015-04-04 14:28 - 2014-10-29 05:55 - 02174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2015-04-04 14:28 - 2014-10-29 05:52 - 02334080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-04-04 14:28 - 2014-10-29 05:13 - 01901240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2015-04-04 14:28 - 2014-10-29 05:11 - 02689392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL 2015-04-04 14:28 - 2014-10-29 05:07 - 02324208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-04-04 14:28 - 2014-10-29 04:59 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-04-04 14:28 - 2014-10-29 04:29 - 04483072 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2015-04-04 14:28 - 2014-10-29 04:24 - 04418560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2015-04-04 14:28 - 2014-10-29 04:10 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-04-04 14:28 - 2014-10-29 03:56 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2015-04-04 14:28 - 2014-10-29 03:51 - 00941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll 2015-04-04 14:28 - 2014-10-29 03:45 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe 2015-04-04 14:28 - 2014-10-29 03:39 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll Code:
ATTFilter 2015-04-04 14:28 - 2014-10-29 03:38 - 04690432 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2015-04-04 14:28 - 2014-10-29 03:35 - 04709888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2015-04-04 14:28 - 2014-10-29 03:35 - 03256320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2015-04-04 14:28 - 2014-10-29 03:28 - 03820544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2015-04-04 14:28 - 2014-10-29 03:26 - 03561984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2015-04-04 14:28 - 2014-10-29 03:24 - 02464768 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2015-04-04 14:28 - 2014-10-29 03:22 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2015-04-04 14:28 - 2014-10-29 03:12 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2015-04-04 14:28 - 2014-10-29 03:09 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-04-04 14:28 - 2014-10-29 03:08 - 02608640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2015-04-04 14:28 - 2014-10-29 03:08 - 02542080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-04-04 14:28 - 2014-10-29 03:05 - 03273216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2015-04-04 14:28 - 2014-10-29 03:03 - 04067840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2015-04-04 14:28 - 2014-10-29 02:52 - 02554880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2015-04-04 14:28 - 2014-10-29 02:48 - 03056128 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2015-04-04 14:28 - 2014-10-29 02:46 - 01919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2015-04-04 14:28 - 2014-10-29 02:42 - 01922560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2015-04-04 14:28 - 2014-10-29 02:39 - 02814464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2015-04-04 14:28 - 2014-10-07 05:44 - 02890296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2015-04-04 14:27 - 2014-10-29 06:10 - 01816008 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2015-04-04 14:27 - 2014-10-29 05:58 - 00014528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys 2015-04-04 14:27 - 2014-10-29 05:57 - 02745160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2015-04-04 14:27 - 2014-10-29 05:55 - 01660528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2015-04-04 14:27 - 2014-10-29 05:52 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2015-04-04 14:27 - 2014-10-29 05:52 - 01518504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-04-04 14:27 - 2014-10-29 05:52 - 01509688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-04-04 14:27 - 2014-10-29 05:52 - 01288096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2015-04-04 14:27 - 2014-10-29 05:52 - 01165744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2015-04-04 14:27 - 2014-10-29 05:51 - 01310912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-04-04 14:27 - 2014-10-29 05:12 - 01946144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2015-04-04 14:27 - 2014-10-29 05:12 - 01907384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2015-04-04 14:27 - 2014-10-29 05:11 - 02528760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2015-04-04 14:27 - 2014-10-29 05:11 - 01024200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2015-04-04 14:27 - 2014-10-29 05:10 - 01564464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2015-04-04 14:27 - 2014-10-29 04:25 - 00785920 _____ (Microsoft Corporation) C:\WINDOWS\system32\blackbox.dll 2015-04-04 14:27 - 2014-10-29 04:00 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-04-04 14:27 - 2014-10-29 03:57 - 02924032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll 2015-04-04 14:27 - 2014-10-29 03:47 - 02072064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2015-04-04 14:27 - 2014-10-29 03:44 - 02984448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2015-04-04 14:27 - 2014-10-29 03:42 - 01999872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2015-04-04 14:27 - 2014-10-29 03:31 - 02941952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2015-04-04 14:27 - 2014-10-29 03:17 - 01360896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2015-04-04 14:27 - 2014-10-29 03:11 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2015-04-04 14:27 - 2014-10-29 03:08 - 02174976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2015-04-04 14:27 - 2014-10-29 03:08 - 01822720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll 2015-04-04 14:27 - 2014-10-29 03:03 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2015-04-04 14:27 - 2014-10-29 03:03 - 02487296 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2015-04-04 14:27 - 2014-10-29 02:59 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-04-04 14:27 - 2014-10-29 02:52 - 02170368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2015-04-04 14:27 - 2014-10-29 02:52 - 01275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2015-04-04 14:27 - 2014-10-29 02:50 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2015-04-04 14:27 - 2014-10-29 02:46 - 01348096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-04-04 14:27 - 2014-10-29 02:35 - 01668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2015-04-04 14:27 - 2014-10-15 10:32 - 02025792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-04-04 14:27 - 2014-09-25 05:42 - 00373568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2015-04-04 14:26 - 2014-10-29 05:57 - 02450216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL 2015-04-04 14:26 - 2014-10-29 05:55 - 01543768 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2015-04-04 14:26 - 2014-10-29 05:11 - 02447104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL 2015-04-04 14:26 - 2014-10-29 05:10 - 01209624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2015-04-04 14:26 - 2014-10-29 05:07 - 01321192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-04-04 14:26 - 2014-10-29 04:17 - 02003456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe 2015-04-04 14:26 - 2014-10-29 03:55 - 01697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2015-04-04 14:26 - 2014-10-29 03:24 - 02364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll 2015-04-04 14:26 - 2014-10-29 03:23 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2015-04-04 14:26 - 2014-10-29 03:22 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2015-04-04 14:26 - 2014-10-29 03:22 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2015-04-04 14:26 - 2014-10-29 03:21 - 01250816 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-04-04 14:26 - 2014-10-29 03:18 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-04-04 14:26 - 2014-10-29 03:14 - 03553280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2015-04-04 14:26 - 2014-10-29 03:10 - 02469888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2015-04-04 14:26 - 2014-10-29 03:08 - 01560576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2015-04-04 14:26 - 2014-10-29 02:52 - 01461248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll 2015-04-04 14:26 - 2014-10-29 02:50 - 01482752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2015-04-04 14:26 - 2014-10-29 02:45 - 01725952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2015-04-04 14:26 - 2014-10-29 02:42 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-04-04 14:26 - 2014-10-29 02:39 - 01000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2015-04-04 14:26 - 2014-10-29 02:34 - 01544192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2015-04-04 12:47 - 2014-10-29 05:52 - 01064720 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmv2clt.dll 2015-04-04 12:47 - 2014-10-29 05:52 - 00952384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2015-04-04 12:47 - 2014-10-29 05:07 - 01115104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2015-04-04 12:47 - 2014-10-29 05:07 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2015-04-04 12:47 - 2014-10-29 04:28 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll 2015-04-04 12:47 - 2014-10-29 04:08 - 01540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll 2015-04-04 12:47 - 2014-10-29 03:00 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-04-04 12:47 - 2014-10-29 02:56 - 01337344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-04-04 12:47 - 2014-10-29 02:56 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-04-04 12:47 - 2014-10-29 02:47 - 02090496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2015-04-04 12:47 - 2014-10-29 02:41 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2015-04-04 12:47 - 2014-10-29 02:41 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2015-04-04 12:46 - 2014-10-29 06:00 - 01385216 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-04-04 12:46 - 2014-10-29 05:57 - 01576312 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2015-04-04 12:46 - 2014-10-29 05:55 - 01133200 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2015-04-04 12:46 - 2014-10-29 05:52 - 00988544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2015-04-04 12:46 - 2014-10-29 05:52 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2015-04-04 12:46 - 2014-10-29 05:52 - 00850656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2015-04-04 12:46 - 2014-10-29 05:52 - 00821696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2015-04-04 12:46 - 2014-10-29 05:18 - 00016504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psapi.dll 2015-04-04 12:46 - 2014-10-29 05:10 - 01178104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2015-04-04 12:46 - 2014-10-29 05:07 - 00857384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2015-04-04 12:46 - 2014-10-29 05:07 - 00785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2015-04-04 12:46 - 2014-10-29 05:05 - 00890128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmv2clt.dll 2015-04-04 12:46 - 2014-10-29 04:50 - 01192960 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2015-04-04 12:46 - 2014-10-29 04:31 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceqp40.dll 2015-04-04 12:46 - 2014-10-29 03:56 - 01526784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll 2015-04-04 12:46 - 2014-10-29 03:53 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2015-04-04 12:46 - 2014-10-29 03:50 - 01289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll 2015-04-04 12:46 - 2014-10-29 03:48 - 01080832 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll 2015-04-04 12:46 - 2014-10-29 03:45 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\blackbox.dll 2015-04-04 12:46 - 2014-10-29 03:43 - 00933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2015-04-04 12:46 - 2014-10-29 03:42 - 03724800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe 2015-04-04 12:46 - 2014-10-29 03:37 - 01563136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe 2015-04-04 12:46 - 2014-10-29 03:34 - 01114624 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2015-04-04 12:46 - 2014-10-29 03:33 - 01056768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2015-04-04 12:46 - 2014-10-29 03:32 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2015-04-04 12:46 - 2014-10-29 03:32 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2015-04-04 12:46 - 2014-10-29 03:27 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2015-04-04 12:46 - 2014-10-29 03:25 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-04-04 12:46 - 2014-10-29 03:25 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll 2015-04-04 12:46 - 2014-10-29 03:20 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2015-04-04 12:46 - 2014-10-29 03:19 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2015-04-04 12:46 - 2014-10-29 03:17 - 01402368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2015-04-04 12:46 - 2014-10-29 03:16 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2015-04-04 12:46 - 2014-10-29 03:09 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2015-04-04 12:46 - 2014-10-29 03:07 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2015-04-04 12:46 - 2014-10-29 03:06 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2015-04-04 12:46 - 2014-10-29 03:04 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-04-04 12:46 - 2014-10-29 03:03 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2015-04-04 12:46 - 2014-10-29 03:01 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2015-04-04 12:46 - 2014-10-29 02:59 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2015-04-04 12:46 - 2014-10-29 02:59 - 01021440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-04-04 12:46 - 2014-10-29 02:56 - 01248256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2015-04-04 12:46 - 2014-10-29 02:56 - 01001984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2015-04-04 12:46 - 2014-10-29 02:52 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-04-04 12:46 - 2014-10-29 02:46 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-04-04 12:46 - 2014-10-29 02:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-04-04 12:46 - 2014-10-29 02:40 - 02104832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2015-04-04 12:46 - 2014-10-29 02:38 - 01262080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2015-04-04 12:46 - 2014-10-29 02:36 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-04-04 12:46 - 2014-10-29 02:33 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2015-04-04 12:45 - 2014-10-29 06:04 - 00105872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2015-04-04 12:45 - 2014-10-29 05:57 - 01210176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2015-04-04 12:45 - 2014-10-29 05:52 - 00634768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-04-04 12:45 - 2014-10-29 05:52 - 00580024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll 2015-04-04 12:45 - 2014-10-29 05:11 - 01037656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2015-04-04 12:45 - 2014-10-29 05:10 - 01287112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2015-04-04 12:45 - 2014-10-29 05:07 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2015-04-04 12:45 - 2014-10-29 05:07 - 00705008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2015-04-04 12:45 - 2014-10-29 05:07 - 00700328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2015-04-04 12:45 - 2014-10-29 04:43 - 00685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched20.dll 2015-04-04 12:45 - 2014-10-29 04:29 - 01246720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ogldrv.dll 2015-04-04 12:45 - 2014-10-29 04:07 - 06692352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2015-04-04 12:45 - 2014-10-29 04:03 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2015-04-04 12:45 - 2014-10-29 03:56 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2015-04-04 12:45 - 2014-10-29 03:53 - 00881152 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe 2015-04-04 12:45 - 2014-10-29 03:49 - 00742400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceqp40.dll 2015-04-04 12:45 - 2014-10-29 03:48 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2015-04-04 12:45 - 2014-10-29 03:43 - 01092608 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll 2015-04-04 12:45 - 2014-10-29 03:34 - 01037824 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2015-04-04 12:45 - 2014-10-29 03:24 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2015-04-04 12:45 - 2014-10-29 03:18 - 01050624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll 2015-04-04 12:45 - 2014-10-29 03:17 - 00829952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll 2015-04-04 12:45 - 2014-10-29 03:14 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2015-04-04 12:45 - 2014-10-29 03:08 - 01478144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2015-04-04 12:45 - 2014-10-29 03:07 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-04-04 12:45 - 2014-10-29 03:01 - 00843776 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2015-04-04 12:45 - 2014-10-29 02:59 - 01636864 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll 2015-04-04 12:45 - 2014-10-29 02:59 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2015-04-04 12:45 - 2014-10-29 02:53 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2015-04-04 12:45 - 2014-10-29 02:52 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2015-04-04 12:45 - 2014-10-29 02:52 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2015-04-04 12:45 - 2014-10-29 02:52 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2015-04-04 12:45 - 2014-10-29 02:48 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-04-04 12:45 - 2014-10-29 02:46 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll 2015-04-04 12:45 - 2014-10-29 02:42 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2015-04-04 12:45 - 2014-10-29 02:37 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-04-04 12:44 - 2014-10-29 06:00 - 01540696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-04-04 12:44 - 2014-10-29 05:52 - 00734448 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2015-04-04 12:44 - 2014-10-29 05:18 - 00848568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2015-04-04 12:44 - 2014-10-29 05:07 - 00584120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2015-04-04 12:44 - 2014-10-29 05:07 - 00551064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-04-04 12:44 - 2014-10-29 04:56 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2015-04-04 12:44 - 2014-10-29 04:26 - 00771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll Code:
ATTFilter 2015-04-04 12:44 - 2014-10-29 03:47 - 01096192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ogldrv.dll 2015-04-04 12:44 - 2014-10-29 03:46 - 01497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2015-04-04 12:44 - 2014-10-29 03:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2015-04-04 12:44 - 2014-10-29 03:39 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2015-04-04 12:44 - 2014-10-29 03:37 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll 2015-04-04 12:44 - 2014-10-29 03:30 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2015-04-04 12:44 - 2014-10-29 03:19 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll 2015-04-04 12:44 - 2014-10-29 03:14 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2015-04-04 12:44 - 2014-10-29 03:12 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll 2015-04-04 12:44 - 2014-10-29 03:10 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-04-04 12:44 - 2014-10-29 03:09 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll 2015-04-04 12:44 - 2014-10-29 03:08 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2015-04-04 12:44 - 2014-10-29 03:07 - 01396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll 2015-04-04 12:44 - 2014-10-29 03:07 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2015-04-04 12:44 - 2014-10-29 03:04 - 00868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2015-04-04 12:44 - 2014-10-29 03:03 - 00740352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2015-04-04 12:44 - 2014-10-29 02:56 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2015-04-04 12:44 - 2014-10-29 02:56 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2015-04-04 12:44 - 2014-10-29 02:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2015-04-04 12:44 - 2014-10-29 02:48 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2015-04-04 12:44 - 2014-10-29 02:45 - 00918016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2015-04-04 12:44 - 2014-10-29 02:40 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2015-04-04 12:44 - 2014-10-29 02:35 - 00772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll 2015-04-04 12:44 - 2014-10-29 02:31 - 00626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-04-04 12:43 - 2014-10-29 06:09 - 01950280 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll 2015-04-04 12:43 - 2014-10-29 06:09 - 01239576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2015-04-04 12:43 - 2014-10-29 06:00 - 00740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2015-04-04 12:43 - 2014-10-29 05:57 - 01552704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-04-04 12:43 - 2014-10-29 05:57 - 00643064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-04-04 12:43 - 2014-10-29 05:55 - 01063432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2015-04-04 12:43 - 2014-10-29 05:55 - 00730824 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll 2015-04-04 12:43 - 2014-10-29 05:18 - 01782912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll 2015-04-04 12:43 - 2014-10-29 05:18 - 01103768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2015-04-04 12:43 - 2014-10-29 05:07 - 00482360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmdev.dll 2015-04-04 12:43 - 2014-10-29 04:48 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe 2015-04-04 12:43 - 2014-10-29 04:22 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2015-04-04 12:43 - 2014-10-29 04:11 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2015-04-04 12:43 - 2014-10-29 04:08 - 00858624 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll 2015-04-04 12:43 - 2014-10-29 04:08 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2015-04-04 12:43 - 2014-10-29 04:08 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmnet.dll 2015-04-04 12:43 - 2014-10-29 04:04 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\WavDest.dll 2015-04-04 12:43 - 2014-10-29 03:59 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched20.dll 2015-04-04 12:43 - 2014-10-29 03:53 - 01065984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll 2015-04-04 12:43 - 2014-10-29 03:45 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll 2015-04-04 12:43 - 2014-10-29 03:42 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.dll 2015-04-04 12:43 - 2014-10-29 03:40 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll 2015-04-04 12:43 - 2014-10-29 03:39 - 01571328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2015-04-04 12:43 - 2014-10-29 03:36 - 01008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2015-04-04 12:43 - 2014-10-29 03:36 - 00609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll 2015-04-04 12:43 - 2014-10-29 03:30 - 06465536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2015-04-04 12:43 - 2014-10-29 03:29 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2015-04-04 12:43 - 2014-10-29 03:24 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2015-04-04 12:43 - 2014-10-29 03:14 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll 2015-04-04 12:43 - 2014-10-29 03:14 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2015-04-04 12:43 - 2014-10-29 03:12 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2015-04-04 12:43 - 2014-10-29 03:11 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll 2015-04-04 12:43 - 2014-10-29 03:09 - 00873984 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll 2015-04-04 12:43 - 2014-10-29 03:09 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2015-04-04 12:43 - 2014-10-29 03:07 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2015-04-04 12:43 - 2014-10-29 03:01 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll 2015-04-04 12:43 - 2014-10-29 03:00 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll 2015-04-04 12:43 - 2014-10-29 02:59 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2015-04-04 12:43 - 2014-10-29 02:58 - 00926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2015-04-04 12:43 - 2014-10-29 02:55 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll 2015-04-04 12:43 - 2014-10-29 02:52 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2015-04-04 12:43 - 2014-10-29 02:52 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2015-04-04 12:43 - 2014-10-29 02:51 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2015-04-04 12:43 - 2014-10-29 02:48 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2015-04-04 12:43 - 2014-10-29 02:42 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2015-04-04 12:43 - 2014-10-29 02:41 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2015-04-04 12:43 - 2014-10-29 02:36 - 00955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-04-04 12:43 - 2014-10-29 02:35 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2015-04-04 12:43 - 2014-10-29 02:30 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll 2015-04-04 12:43 - 2014-07-04 23:29 - 00478528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-04-04 10:01 - 2014-10-29 05:52 - 00497936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-04-04 10:01 - 2014-10-29 04:27 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx.dll 2015-04-04 10:01 - 2014-10-29 03:32 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll 2015-04-04 10:01 - 2014-10-29 03:26 - 00838656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2015-04-04 10:01 - 2014-10-29 03:23 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2015-04-04 10:01 - 2014-10-29 03:12 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2015-04-04 10:01 - 2014-10-29 03:05 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-04-04 10:01 - 2014-10-29 03:04 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2015-04-04 10:01 - 2014-10-29 02:45 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2015-04-04 10:01 - 2014-10-29 02:32 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2015-04-04 10:00 - 2014-10-29 06:00 - 00544408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2015-04-04 10:00 - 2014-10-29 06:00 - 00379568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2015-04-04 10:00 - 2014-10-29 05:57 - 00557832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL 2015-04-04 10:00 - 2014-10-29 05:52 - 00444728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll 2015-04-04 10:00 - 2014-10-29 05:52 - 00405456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2015-04-04 10:00 - 2014-10-29 05:12 - 00616704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2015-04-04 10:00 - 2014-10-29 05:11 - 00914648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL 2015-04-04 10:00 - 2014-10-29 05:10 - 00492232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-04-04 10:00 - 2014-10-29 05:07 - 00409040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2015-04-04 10:00 - 2014-10-29 04:48 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll 2015-04-04 10:00 - 2014-10-29 04:36 - 00546304 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcese40.dll 2015-04-04 10:00 - 2014-10-29 04:33 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.dll 2015-04-04 10:00 - 2014-10-29 04:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70804.dll 2015-04-04 10:00 - 2014-10-29 04:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70404.dll 2015-04-04 10:00 - 2014-10-29 04:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7001E.dll 2015-04-04 10:00 - 2014-10-29 04:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll 2015-04-04 10:00 - 2014-10-29 04:29 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll 2015-04-04 10:00 - 2014-10-29 04:09 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll 2015-04-04 10:00 - 2014-10-29 04:06 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll 2015-04-04 10:00 - 2014-10-29 04:03 - 00832000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe 2015-04-04 10:00 - 2014-10-29 03:59 - 00670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll 2015-04-04 10:00 - 2014-10-29 03:50 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.dll 2015-04-04 10:00 - 2014-10-29 03:47 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpssvcs.dll 2015-04-04 10:00 - 2014-10-29 03:35 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2015-04-04 10:00 - 2014-10-29 03:32 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmnet.dll 2015-04-04 10:00 - 2014-10-29 03:31 - 01278464 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2015-04-04 10:00 - 2014-10-29 03:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2015-04-04 10:00 - 2014-10-29 03:27 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2015-04-04 10:00 - 2014-10-29 03:21 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2015-04-04 10:00 - 2014-10-29 03:12 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll 2015-04-04 10:00 - 2014-10-29 03:12 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll 2015-04-04 10:00 - 2014-10-29 03:10 - 00516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll 2015-04-04 10:00 - 2014-10-29 03:09 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-04-04 10:00 - 2014-10-29 03:09 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-04-04 10:00 - 2014-10-29 03:06 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2015-04-04 10:00 - 2014-10-29 03:00 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2015-04-04 10:00 - 2014-10-29 02:59 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2015-04-04 10:00 - 2014-10-29 02:59 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll 2015-04-04 10:00 - 2014-10-29 02:56 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2015-04-04 10:00 - 2014-10-29 02:52 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2015-04-04 10:00 - 2014-10-29 02:51 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll 2015-04-04 10:00 - 2014-10-29 02:50 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2015-04-04 10:00 - 2014-10-29 02:48 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll 2015-04-04 10:00 - 2014-10-29 02:47 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2015-04-04 10:00 - 2014-10-29 02:47 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2015-04-04 10:00 - 2014-10-29 02:45 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll 2015-04-04 10:00 - 2014-10-29 02:45 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2015-04-04 10:00 - 2014-10-29 02:43 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-04-04 10:00 - 2014-10-29 02:43 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2015-04-04 10:00 - 2014-10-29 02:42 - 01207808 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll 2015-04-04 10:00 - 2014-10-29 02:35 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll 2015-04-04 10:00 - 2014-10-29 02:35 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll 2015-04-04 09:59 - 2014-10-29 06:09 - 01309744 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2015-04-04 09:59 - 2014-10-29 06:03 - 00435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2015-04-04 09:59 - 2014-10-29 05:57 - 01150208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL 2015-04-04 09:59 - 2014-10-29 05:57 - 00389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-04-04 09:59 - 2014-10-29 05:55 - 00426120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2015-04-04 09:59 - 2014-10-29 05:53 - 00411128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2015-04-04 09:59 - 2014-10-29 05:52 - 00356936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2015-04-04 09:59 - 2014-10-29 05:12 - 00430176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2015-04-04 09:59 - 2014-10-29 05:11 - 00492704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL 2015-04-04 09:59 - 2014-10-29 05:11 - 00488064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll 2015-04-04 09:59 - 2014-10-29 05:10 - 00569128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll 2015-04-04 09:59 - 2014-10-29 05:07 - 00399752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-04-04 09:59 - 2014-10-29 05:07 - 00331048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll 2015-04-04 09:59 - 2014-10-29 04:44 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2015-04-04 09:59 - 2014-10-29 04:42 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll 2015-04-04 09:59 - 2014-10-29 04:40 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll 2015-04-04 09:59 - 2014-10-29 04:33 - 07558144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll 2015-04-04 09:59 - 2014-10-29 04:27 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll 2015-04-04 09:59 - 2014-10-29 04:18 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe 2015-04-04 09:59 - 2014-10-29 04:07 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2015-04-04 09:59 - 2014-10-29 04:05 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll 2015-04-04 09:59 - 2014-10-29 04:03 - 02334720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll 2015-04-04 09:59 - 2014-10-29 04:00 - 00652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll 2015-04-04 09:59 - 2014-10-29 03:59 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll 2015-04-04 09:59 - 2014-10-29 03:57 - 01479168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2015-04-04 09:59 - 2014-10-29 03:57 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2015-04-04 09:59 - 2014-10-29 03:53 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcese40.dll 2015-04-04 09:59 - 2014-10-29 03:51 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2015-04-04 09:59 - 2014-10-29 03:49 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll 2015-04-04 09:59 - 2014-10-29 03:47 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll 2015-04-04 09:59 - 2014-10-29 03:46 - 01001472 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2015-04-04 09:59 - 2014-10-29 03:36 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2015-04-04 09:59 - 2014-10-29 03:36 - 01252864 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2015-04-04 09:59 - 2014-10-29 03:36 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2015-04-04 09:59 - 2014-10-29 03:36 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll 2015-04-04 09:59 - 2014-10-29 03:32 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll 2015-04-04 09:59 - 2014-10-29 03:31 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll 2015-04-04 09:59 - 2014-10-29 03:25 - 01058816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll 2015-04-04 09:59 - 2014-10-29 03:24 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2015-04-04 09:59 - 2014-10-29 03:24 - 00902144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2015-04-04 09:59 - 2014-10-29 03:22 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2015-04-04 09:59 - 2014-10-29 03:21 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll 2015-04-04 09:59 - 2014-10-29 03:21 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2015-04-04 09:59 - 2014-10-29 03:19 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2015-04-04 09:59 - 2014-10-29 03:17 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2015-04-04 09:59 - 2014-10-29 03:16 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc.dll 2015-04-04 09:59 - 2014-10-29 03:16 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_isv.dll 2015-04-04 09:59 - 2014-10-29 03:16 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2015-04-04 09:59 - 2014-10-29 03:11 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll 2015-04-04 09:59 - 2014-10-29 03:10 - 00442880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll 2015-04-04 09:59 - 2014-10-29 03:07 - 01197056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2015-04-04 09:59 - 2014-10-29 03:07 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2015-04-04 09:59 - 2014-10-29 03:06 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2015-04-04 09:59 - 2014-10-29 03:04 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2015-04-04 09:59 - 2014-10-29 03:03 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2015-04-04 09:59 - 2014-10-29 03:02 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2015-04-04 09:59 - 2014-10-29 03:02 - 00695296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2015-04-04 09:59 - 2014-10-29 03:01 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2015-04-04 09:59 - 2014-10-29 02:54 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll 2015-04-04 09:59 - 2014-10-29 02:52 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll 2015-04-04 09:59 - 2014-10-29 02:44 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-04-04 09:59 - 2014-10-29 02:43 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2015-04-04 09:59 - 2014-10-29 02:42 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2015-04-04 09:59 - 2014-10-07 08:44 - 00533824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2015-04-04 09:58 - 2014-10-29 06:10 - 00430728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2015-04-04 09:58 - 2014-10-29 05:59 - 00498496 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2015-04-04 09:58 - 2014-10-29 05:57 - 00662120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.exe 2015-04-04 09:58 - 2014-10-29 05:54 - 00685408 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2015-04-04 09:58 - 2014-10-29 05:52 - 00020160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll 2015-04-04 09:58 - 2014-10-29 05:15 - 00340288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2015-04-04 09:58 - 2014-10-29 05:12 - 00403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2015-04-04 09:58 - 2014-10-29 05:10 - 00367248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2015-04-04 09:58 - 2014-10-29 05:06 - 00507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2015-04-04 09:58 - 2014-10-29 04:31 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll 2015-04-04 09:58 - 2014-10-29 04:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartCardSimulator.dll 2015-04-04 09:58 - 2014-10-29 04:25 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdohlp.dll 2015-04-04 09:58 - 2014-10-29 04:18 - 04616704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001d.dll 2015-04-04 09:58 - 2014-10-29 04:17 - 04621312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0414.dll 2015-04-04 09:58 - 2014-10-29 04:17 - 04620288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0816.dll 2015-04-04 09:58 - 2014-10-29 04:16 - 04621312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0010.dll 2015-04-04 09:58 - 2014-10-29 04:16 - 04616704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0416.dll 2015-04-04 09:58 - 2014-10-29 04:11 - 00435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll 2015-04-04 09:58 - 2014-10-29 04:08 - 00390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\difxapi.dll 2015-04-04 09:58 - 2014-10-29 04:06 - 01313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe 2015-04-04 09:58 - 2014-10-29 04:06 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL 2015-04-04 09:58 - 2014-10-29 04:00 - 01861632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2015-04-04 09:58 - 2014-10-29 04:00 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll 2015-04-04 09:58 - 2014-10-29 03:57 - 02592256 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll 2015-04-04 09:58 - 2014-10-29 03:57 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll 2015-04-04 09:58 - 2014-10-29 03:56 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll 2015-04-04 09:58 - 2014-10-29 03:54 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscp.dll 2015-04-04 09:58 - 2014-10-29 03:54 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2015-04-04 09:58 - 2014-10-29 03:53 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2015-04-04 09:58 - 2014-10-29 03:52 - 02829312 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2015-04-04 09:58 - 2014-10-29 03:52 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2015-04-04 09:58 - 2014-10-29 03:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70804.dll 2015-04-04 09:58 - 2014-10-29 03:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70404.dll 2015-04-04 09:58 - 2014-10-29 03:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7001E.dll 2015-04-04 09:58 - 2014-10-29 03:48 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll 2015-04-04 09:58 - 2014-10-29 03:47 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe 2015-04-04 09:58 - 2014-10-29 03:45 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2015-04-04 09:58 - 2014-10-29 03:33 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2015-04-04 09:58 - 2014-10-29 03:30 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2015-04-04 09:58 - 2014-10-29 03:29 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll 2015-04-04 09:58 - 2014-10-29 03:28 - 02213888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll 2015-04-04 09:58 - 2014-10-29 03:20 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll 2015-04-04 09:58 - 2014-10-29 03:20 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll 2015-04-04 09:58 - 2014-10-29 03:20 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2015-04-04 09:58 - 2014-10-29 03:19 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2015-04-04 09:58 - 2014-10-29 03:18 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll 2015-04-04 09:58 - 2014-10-29 03:17 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll 2015-04-04 09:58 - 2014-10-29 03:16 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_isv.exe 2015-04-04 09:58 - 2014-10-29 03:07 - 00594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll 2015-04-04 09:58 - 2014-10-29 03:05 - 00534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-04-04 09:58 - 2014-10-29 03:03 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2015-04-04 09:58 - 2014-10-29 03:01 - 00706048 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2015-04-04 09:58 - 2014-10-29 02:58 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2015-04-04 09:58 - 2014-10-29 02:57 - 01065472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10.dll 2015-04-04 09:58 - 2014-10-29 02:56 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2015-04-04 09:58 - 2014-10-29 02:55 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll 2015-04-04 09:58 - 2014-10-29 02:52 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-04-04 09:58 - 2014-10-29 02:52 - 00544256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll 2015-04-04 09:58 - 2014-10-29 02:51 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2015-04-04 09:58 - 2014-10-29 02:51 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll 2015-04-04 09:58 - 2014-10-29 02:50 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2015-04-04 09:58 - 2014-10-29 02:48 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll 2015-04-04 09:58 - 2014-10-29 02:48 - 00454144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2015-04-04 09:58 - 2014-10-29 02:47 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll 2015-04-04 09:58 - 2014-10-29 02:47 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2015-04-04 09:58 - 2014-10-29 02:47 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll Code:
ATTFilter 2015-04-04 09:58 - 2014-10-29 02:46 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-04-04 09:58 - 2014-10-29 02:42 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll 2015-04-04 09:58 - 2014-10-29 02:39 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2015-04-04 09:58 - 2014-10-29 02:37 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-04-04 09:58 - 2014-10-08 09:33 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2015-04-04 09:57 - 2014-10-29 06:04 - 00397192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2015-04-04 09:57 - 2014-10-29 06:04 - 00324864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2015-04-04 09:57 - 2014-10-29 05:57 - 00725672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll 2015-04-04 09:57 - 2014-10-29 05:10 - 00547992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2015-04-04 09:57 - 2014-10-29 05:07 - 00320256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2015-04-04 09:57 - 2014-10-29 04:25 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll 2015-04-04 09:57 - 2014-10-29 04:24 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax 2015-04-04 09:57 - 2014-10-29 04:20 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnp.dll 2015-04-04 09:57 - 2014-10-29 04:18 - 06259712 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll 2015-04-04 09:57 - 2014-10-29 04:18 - 02140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0007.dll 2015-04-04 09:57 - 2014-10-29 04:17 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000d.dll 2015-04-04 09:57 - 2014-10-29 04:16 - 00546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2015-04-04 09:57 - 2014-10-29 04:11 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2015-04-04 09:57 - 2014-10-29 04:11 - 00478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx 2015-04-04 09:57 - 2014-10-29 04:08 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll 2015-04-04 09:57 - 2014-10-29 04:06 - 02902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll 2015-04-04 09:57 - 2014-10-29 04:01 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-04-04 09:57 - 2014-10-29 03:59 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructure.dll 2015-04-04 09:57 - 2014-10-29 03:56 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr 2015-04-04 09:57 - 2014-10-29 03:52 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2015-04-04 09:57 - 2014-10-29 03:52 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll 2015-04-04 09:57 - 2014-10-29 03:49 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe 2015-04-04 09:57 - 2014-10-29 03:48 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsmsnap.dll 2015-04-04 09:57 - 2014-10-29 03:44 - 00872960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll 2015-04-04 09:57 - 2014-10-29 03:43 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2015-04-04 09:57 - 2014-10-29 03:42 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2015-04-04 09:57 - 2014-10-29 03:42 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2015-04-04 09:57 - 2014-10-29 03:41 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2015-04-04 09:57 - 2014-10-29 03:36 - 00943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe 2015-04-04 09:57 - 2014-10-29 03:34 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll 2015-04-04 09:57 - 2014-10-29 03:30 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2015-04-04 09:57 - 2014-10-29 03:30 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2015-04-04 09:57 - 2014-10-29 03:30 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2015-04-04 09:57 - 2014-10-29 03:29 - 02848768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll 2015-04-04 09:57 - 2014-10-29 03:29 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2015-04-04 09:57 - 2014-10-29 03:27 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2015-04-04 09:57 - 2014-10-29 03:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\livessp.dll 2015-04-04 09:57 - 2014-10-29 03:22 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll 2015-04-04 09:57 - 2014-10-29 03:22 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx 2015-04-04 09:57 - 2014-10-29 03:20 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2015-04-04 09:57 - 2014-10-29 03:19 - 02714624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2015-04-04 09:57 - 2014-10-29 03:16 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2015-04-04 09:57 - 2014-10-29 03:15 - 00809472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2015-04-04 09:57 - 2014-10-29 03:15 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate.exe 2015-04-04 09:57 - 2014-10-29 03:12 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll 2015-04-04 09:57 - 2014-10-29 03:10 - 00516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll 2015-04-04 09:57 - 2014-10-29 03:07 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2015-04-04 09:57 - 2014-10-29 03:06 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2015-04-04 09:57 - 2014-10-29 03:04 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll 2015-04-04 09:57 - 2014-10-29 03:03 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2015-04-04 09:57 - 2014-10-29 03:01 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2015-04-04 09:57 - 2014-10-29 02:59 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2015-04-04 09:57 - 2014-10-29 02:58 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2015-04-04 09:57 - 2014-10-29 02:58 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2015-04-04 09:57 - 2014-10-29 02:57 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll 2015-04-04 09:57 - 2014-10-29 02:57 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_isv.dll 2015-04-04 09:57 - 2014-10-29 02:57 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2015-04-04 09:57 - 2014-10-29 02:55 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll 2015-04-04 09:57 - 2014-10-29 02:53 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll 2015-04-04 09:57 - 2014-10-29 02:53 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-04-04 09:57 - 2014-10-29 02:53 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2015-04-04 09:57 - 2014-10-29 02:51 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll 2015-04-04 09:57 - 2014-10-29 02:51 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-04-04 09:57 - 2014-10-29 02:50 - 00624128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2015-04-04 09:57 - 2014-10-29 02:45 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2015-04-04 09:57 - 2014-10-29 02:44 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2015-04-04 09:57 - 2014-10-29 02:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provsvc.dll 2015-04-04 09:57 - 2014-10-29 02:39 - 00454144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll 2015-04-04 09:57 - 2014-10-29 02:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll 2015-04-04 09:57 - 2014-10-29 02:35 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2015-04-04 09:57 - 2014-10-08 09:32 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-04-04 09:56 - 2014-10-29 05:59 - 00520536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-04-04 09:56 - 2014-10-29 05:18 - 00320736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2015-04-04 09:56 - 2014-10-29 04:45 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\glmf32.dll 2015-04-04 09:56 - 2014-10-29 04:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msls31.dll 2015-04-04 09:56 - 2014-10-29 04:44 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2015-04-04 09:56 - 2014-10-29 04:37 - 02329088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0404.dll 2015-04-04 09:56 - 2014-10-29 04:34 - 03438592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0804.dll 2015-04-04 09:56 - 2014-10-29 04:31 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax 2015-04-04 09:56 - 2014-10-29 04:28 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll 2015-04-04 09:56 - 2014-10-29 04:26 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2015-04-04 09:56 - 2014-10-29 04:25 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2015-04-04 09:56 - 2014-10-29 04:23 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offfilt.dll 2015-04-04 09:56 - 2014-10-29 04:21 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll 2015-04-04 09:56 - 2014-10-29 04:19 - 09732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll 2015-04-04 09:56 - 2014-10-29 04:18 - 02403328 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000c.dll 2015-04-04 09:56 - 2014-10-29 03:58 - 01040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2015-04-04 09:56 - 2014-10-29 03:54 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe 2015-04-04 09:56 - 2014-10-29 03:54 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll 2015-04-04 09:56 - 2014-10-29 03:52 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll 2015-04-04 09:56 - 2014-10-29 03:51 - 07331840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll 2015-04-04 09:56 - 2014-10-29 03:46 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll 2015-04-04 09:56 - 2014-10-29 03:41 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnp.dll 2015-04-04 09:56 - 2014-10-29 03:38 - 04945920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll 2015-04-04 09:56 - 2014-10-29 03:34 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx 2015-04-04 09:56 - 2014-10-29 03:31 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2015-04-04 09:56 - 2014-10-29 03:30 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2015-04-04 09:56 - 2014-10-29 03:30 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll 2015-04-04 09:56 - 2014-10-29 03:26 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2015-04-04 09:56 - 2014-10-29 03:26 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-04-04 09:56 - 2014-10-29 03:23 - 01826304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2015-04-04 09:56 - 2014-10-29 03:22 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2015-04-04 09:56 - 2014-10-29 03:21 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscp.dll 2015-04-04 09:56 - 2014-10-29 03:21 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll 2015-04-04 09:56 - 2014-10-29 03:18 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2015-04-04 09:56 - 2014-10-29 03:18 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll 2015-04-04 09:56 - 2014-10-29 03:17 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsmsnap.dll 2015-04-04 09:56 - 2014-10-29 03:16 - 01242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10.dll 2015-04-04 09:56 - 2014-10-29 03:15 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll 2015-04-04 09:56 - 2014-10-29 03:11 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll 2015-04-04 09:56 - 2014-10-29 03:09 - 00633344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll 2015-04-04 09:56 - 2014-10-29 03:06 - 01086976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2015-04-04 09:56 - 2014-10-29 03:06 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2015-04-04 09:56 - 2014-10-29 03:06 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll 2015-04-04 09:56 - 2014-10-29 03:04 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll 2015-04-04 09:56 - 2014-10-29 03:04 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2015-04-04 09:56 - 2014-10-29 03:03 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2015-04-04 09:56 - 2014-10-29 03:01 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll 2015-04-04 09:56 - 2014-10-29 03:00 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll 2015-04-04 09:56 - 2014-10-29 03:00 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2015-04-04 09:56 - 2014-10-29 02:59 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2015-04-04 09:56 - 2014-10-29 02:59 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxApplicabilityEngine.dll 2015-04-04 09:56 - 2014-10-29 02:58 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2015-04-04 09:56 - 2014-10-29 02:57 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_isv.exe 2015-04-04 09:56 - 2014-10-29 02:57 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate.exe 2015-04-04 09:56 - 2014-10-29 02:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-04-04 09:56 - 2014-10-29 02:56 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2015-04-04 09:56 - 2014-10-29 02:55 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll 2015-04-04 09:56 - 2014-10-29 02:54 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-04-04 09:56 - 2014-10-29 02:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-04-04 09:56 - 2014-10-29 02:47 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2015-04-04 09:56 - 2014-10-29 02:42 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2015-04-04 09:56 - 2014-10-29 02:42 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll 2015-04-04 09:55 - 2014-10-29 05:57 - 00295432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL 2015-04-04 09:55 - 2014-10-29 05:57 - 00256744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2015-04-04 09:55 - 2014-10-29 05:55 - 00359496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll 2015-04-04 09:55 - 2014-10-29 05:52 - 00311448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2015-04-04 09:55 - 2014-10-29 05:51 - 00363080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2015-04-04 09:55 - 2014-10-29 05:51 - 00360992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2015-04-04 09:55 - 2014-10-29 05:15 - 00245296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2015-04-04 09:55 - 2014-10-29 05:11 - 00463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL 2015-04-04 09:55 - 2014-10-29 05:06 - 00800008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll 2015-04-04 09:55 - 2014-10-29 04:24 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\WmpDui.dll 2015-04-04 09:55 - 2014-10-29 04:16 - 03235840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0039.dll 2015-04-04 09:55 - 2014-10-29 04:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0026.dll 2015-04-04 09:55 - 2014-10-29 04:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0024.dll 2015-04-04 09:55 - 2014-10-29 04:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001b.dll 2015-04-04 09:55 - 2014-10-29 04:15 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0002.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02075136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0027.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0c1a.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData081a.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001a.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0018.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000f.dll 2015-04-04 09:55 - 2014-10-29 04:14 - 02073600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0003.dll 2015-04-04 09:55 - 2014-10-29 04:12 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2015-04-04 09:55 - 2014-10-29 04:04 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\filemgmt.dll 2015-04-04 09:55 - 2014-10-29 04:01 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroleui.dll 2015-04-04 09:55 - 2014-10-29 03:59 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2015-04-04 09:55 - 2014-10-29 03:56 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDSp.dll 2015-04-04 09:55 - 2014-10-29 03:55 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx 2015-04-04 09:55 - 2014-10-29 03:54 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll 2015-04-04 09:55 - 2014-10-29 03:50 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdri.dll 2015-04-04 09:55 - 2014-10-29 03:49 - 00478720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll 2015-04-04 09:55 - 2014-10-29 03:47 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll 2015-04-04 09:55 - 2014-10-29 03:44 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2015-04-04 09:55 - 2014-10-29 03:43 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax 2015-04-04 09:55 - 2014-10-29 03:38 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSE.dll 2015-04-04 09:55 - 2014-10-29 03:34 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2015-04-04 09:55 - 2014-10-29 03:33 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll 2015-04-04 09:55 - 2014-10-29 03:33 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll 2015-04-04 09:55 - 2014-10-29 03:32 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll 2015-04-04 09:55 - 2014-10-29 03:29 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2015-04-04 09:55 - 2014-10-29 03:24 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr 2015-04-04 09:55 - 2014-10-29 03:23 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2015-04-04 09:55 - 2014-10-29 03:23 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll 2015-04-04 09:55 - 2014-10-29 03:22 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdelta.dll 2015-04-04 09:55 - 2014-10-29 03:21 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe 2015-04-04 09:55 - 2014-10-29 03:21 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2015-04-04 09:55 - 2014-10-29 03:19 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll 2015-04-04 09:55 - 2014-10-29 03:17 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe 2015-04-04 09:55 - 2014-10-29 03:16 - 00795136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2015-04-04 09:55 - 2014-10-29 03:14 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2015-04-04 09:55 - 2014-10-29 03:13 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll 2015-04-04 09:55 - 2014-10-29 03:13 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-04-04 09:55 - 2014-10-29 03:09 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll 2015-04-04 09:55 - 2014-10-29 03:09 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2015-04-04 09:55 - 2014-10-29 03:05 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2015-04-04 09:55 - 2014-10-29 02:58 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll 2015-04-04 09:55 - 2014-10-29 02:55 - 00887808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim700.dll 2015-04-04 09:55 - 2014-10-29 02:55 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll 2015-04-04 09:55 - 2014-10-29 02:55 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll 2015-04-04 09:55 - 2014-10-29 02:54 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-04-04 09:55 - 2014-10-29 02:52 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll 2015-04-04 09:55 - 2014-10-29 02:50 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe 2015-04-04 09:55 - 2014-10-29 02:50 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2015-04-04 09:55 - 2014-10-29 02:47 - 00527872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2015-04-04 09:55 - 2014-10-29 02:40 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2015-04-04 09:55 - 2014-10-15 10:32 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2015-04-04 09:54 - 2014-10-29 05:59 - 00415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2015-04-04 09:54 - 2014-10-29 05:59 - 00230816 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll 2015-04-04 09:54 - 2014-10-29 05:53 - 00687496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll 2015-04-04 09:54 - 2014-10-29 05:52 - 00225696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2015-04-04 09:54 - 2014-10-29 05:15 - 00340848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2015-04-04 09:54 - 2014-10-29 05:15 - 00089856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2015-04-04 09:54 - 2014-10-29 05:11 - 00245296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL 2015-04-04 09:54 - 2014-10-29 05:07 - 00336680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2015-04-04 09:54 - 2014-10-29 05:07 - 00202440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2015-04-04 09:54 - 2014-10-29 05:05 - 00321248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2015-04-04 09:54 - 2014-10-29 04:49 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp60.dll 2015-04-04 09:54 - 2014-10-29 04:27 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskraid.exe 2015-04-04 09:54 - 2014-10-29 04:26 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll 2015-04-04 09:54 - 2014-10-29 04:22 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll 2015-04-04 09:54 - 2014-10-29 04:21 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2015-04-04 09:54 - 2014-10-29 04:19 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL 2015-04-04 09:54 - 2014-10-29 04:17 - 03231232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004b.dll 2015-04-04 09:54 - 2014-10-29 04:17 - 01926144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0022.dll 2015-04-04 09:54 - 2014-10-29 04:16 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004a.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004e.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0049.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0047.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0046.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0020.dll 2015-04-04 09:54 - 2014-10-29 04:15 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData002a.dll 2015-04-04 09:54 - 2014-10-29 04:14 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData004c.dll 2015-04-04 09:54 - 2014-10-29 04:14 - 03209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0045.dll 2015-04-04 09:54 - 2014-10-29 04:14 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData003e.dll 2015-04-04 09:54 - 2014-10-29 04:14 - 01904640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0021.dll 2015-04-04 09:54 - 2014-10-29 04:04 - 00612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IasMigPlugin.dll 2015-04-04 09:54 - 2014-10-29 04:03 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2015-04-04 09:54 - 2014-10-29 04:02 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizards.dll 2015-04-04 09:54 - 2014-10-29 04:01 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2015-04-04 09:54 - 2014-10-29 04:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msls31.dll 2015-04-04 09:54 - 2014-10-29 03:58 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll 2015-04-04 09:54 - 2014-10-29 03:57 - 01431552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxpTaskSync.dll 2015-04-04 09:54 - 2014-10-29 03:56 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2015-04-04 09:54 - 2014-10-29 03:52 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netdiagfx.dll 2015-04-04 09:54 - 2014-10-29 03:49 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll 2015-04-04 09:54 - 2014-10-29 03:49 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax 2015-04-04 09:54 - 2014-10-29 03:47 - 01041920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe 2015-04-04 09:54 - 2014-10-29 03:46 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdv.dll 2015-04-04 09:54 - 2014-10-29 03:46 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfdvdec.dll 2015-04-04 09:54 - 2014-10-29 03:45 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdohlp.dll 2015-04-04 09:54 - 2014-10-29 03:45 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmmgrtn.dll 2015-04-04 09:54 - 2014-10-29 03:43 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2015-04-04 09:54 - 2014-10-29 03:43 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offfilt.dll 2015-04-04 09:54 - 2014-10-29 03:42 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2015-04-04 09:54 - 2014-10-29 03:40 - 02036224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0007.dll 2015-04-04 09:54 - 2014-10-29 03:38 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2015-04-04 09:54 - 2014-10-29 03:34 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll 2015-04-04 09:54 - 2014-10-29 03:29 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll 2015-04-04 09:54 - 2014-10-29 03:29 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2015-04-04 09:54 - 2014-10-29 03:27 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll 2015-04-04 09:54 - 2014-10-29 03:27 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-04-04 09:54 - 2014-10-29 03:26 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2015-04-04 09:54 - 2014-10-29 03:25 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructure.dll 2015-04-04 09:54 - 2014-10-29 03:22 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-04-04 09:54 - 2014-10-29 03:21 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe 2015-04-04 09:54 - 2014-10-29 03:20 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsecsnp.dll 2015-04-04 09:54 - 2014-10-29 03:20 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2015-04-04 09:54 - 2014-10-29 03:20 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2015-04-04 09:54 - 2014-10-29 03:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll 2015-04-04 09:54 - 2014-10-29 03:17 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-04-04 09:54 - 2014-10-29 03:14 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2015-04-04 09:54 - 2014-10-29 03:07 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll 2015-04-04 09:54 - 2014-10-29 03:05 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll 2015-04-04 09:54 - 2014-10-29 03:05 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2015-04-04 09:54 - 2014-10-29 03:03 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll Geändert von minnie_me (06.04.2015 um 16:17 Uhr) |
06.04.2015, 16:22 | #11 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter 2015-04-04 09:54 - 2014-10-29 03:00 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll 2015-04-04 09:54 - 2014-10-29 02:59 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2015-04-04 09:54 - 2014-10-29 02:58 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll 2015-04-04 09:54 - 2014-10-29 02:55 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll 2015-04-04 09:54 - 2014-10-29 02:54 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll 2015-04-04 09:54 - 2014-10-29 02:54 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll 2015-04-04 09:54 - 2014-10-29 02:53 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2015-04-04 09:54 - 2014-10-29 02:52 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2015-04-04 09:54 - 2014-10-29 02:49 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll 2015-04-04 09:54 - 2014-10-29 02:47 - 00628224 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-04-04 09:54 - 2014-10-29 02:44 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll 2015-04-04 09:53 - 2014-10-29 04:27 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdv.dll 2015-04-04 09:53 - 2014-10-29 04:27 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfdvdec.dll 2015-04-04 09:53 - 2014-10-29 04:18 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscandui.dll 2015-04-04 09:53 - 2014-10-29 04:11 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll 2015-04-04 09:53 - 2014-10-29 04:04 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2015-04-04 09:53 - 2014-10-29 04:00 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glmf32.dll 2015-04-04 09:53 - 2014-10-29 03:49 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmime.dll 2015-04-04 09:53 - 2014-10-29 03:39 - 09604608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll 2015-04-04 09:53 - 2014-10-29 03:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll 2015-04-04 09:53 - 2014-10-29 03:25 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll 2015-04-04 09:53 - 2014-10-29 03:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2015-04-04 09:53 - 2014-10-29 03:20 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-04-04 09:53 - 2014-10-29 03:19 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1core.dll 2015-04-04 09:53 - 2014-10-29 03:19 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10core.dll 2015-04-04 09:53 - 2014-10-29 03:18 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL 2015-04-04 09:53 - 2014-10-29 03:14 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp_isv.exe 2015-04-04 09:53 - 2014-10-29 03:10 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll 2015-04-04 09:53 - 2014-10-29 03:08 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll 2015-04-04 09:53 - 2014-10-29 03:06 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2015-04-04 09:53 - 2014-10-29 03:03 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2015-04-04 09:53 - 2014-10-29 02:56 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll 2015-04-04 09:53 - 2014-10-29 02:43 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll 2015-04-04 09:53 - 2014-10-15 10:32 - 00337728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2015-04-04 09:52 - 2014-10-29 06:04 - 00217912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2015-04-04 09:52 - 2014-10-29 05:12 - 00416760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-04-04 09:52 - 2014-10-29 04:18 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll 2015-04-04 09:52 - 2014-10-29 03:44 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll 2015-04-04 09:52 - 2014-10-29 03:43 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL 2015-04-04 09:52 - 2014-10-29 03:43 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2015-04-04 09:52 - 2014-10-29 03:39 - 04531712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0416.dll 2015-04-04 09:52 - 2014-10-29 03:21 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe 2015-04-04 09:52 - 2014-10-29 03:17 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll 2015-04-04 09:52 - 2014-10-29 03:14 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp.exe 2015-04-04 09:52 - 2014-10-29 02:59 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll 2015-04-04 09:52 - 2014-10-29 02:58 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2015-04-04 09:52 - 2014-10-29 02:57 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll 2015-04-04 09:52 - 2014-10-29 02:53 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-04-04 09:52 - 2014-10-29 02:49 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2015-04-04 09:52 - 2014-10-29 02:49 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2015-04-04 09:52 - 2014-10-29 02:43 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll 2015-04-04 09:52 - 2014-10-29 02:43 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll 2015-04-04 09:51 - 2014-10-29 05:58 - 01797944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2015-04-04 09:51 - 2014-10-29 05:57 - 01913128 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplaySwitch.exe 2015-04-04 09:51 - 2014-10-29 04:24 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL 2015-04-04 09:51 - 2014-10-29 03:54 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim.dll 2015-04-04 09:51 - 2014-10-29 03:53 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2015-04-04 09:51 - 2014-10-29 03:39 - 04530688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001d.dll 2015-04-04 09:51 - 2014-10-29 03:39 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscandui.dll 2015-04-04 09:51 - 2014-10-29 03:38 - 04530688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0010.dll 2015-04-04 09:51 - 2014-10-29 03:38 - 04530176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0414.dll 2015-04-04 09:51 - 2014-10-29 03:38 - 04529664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0816.dll 2015-04-04 09:51 - 2014-10-29 03:25 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2015-04-04 09:51 - 2014-10-29 03:24 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Geolocation.dll 2015-04-04 09:51 - 2014-10-29 03:22 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll 2015-04-04 09:51 - 2014-10-29 03:22 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll 2015-04-04 09:51 - 2014-10-29 03:01 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdelta.dll 2015-04-04 09:51 - 2014-10-29 02:35 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2015-04-04 09:50 - 2014-10-29 05:52 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2015-04-04 09:50 - 2014-10-29 05:07 - 00260800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2015-04-04 09:50 - 2014-10-29 04:29 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll 2015-04-04 09:50 - 2014-10-29 04:16 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll 2015-04-04 09:50 - 2014-10-29 04:01 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll 2015-04-04 09:50 - 2014-10-29 03:39 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL 2015-04-04 09:50 - 2014-10-29 03:38 - 02387456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000d.dll 2015-04-04 09:50 - 2014-10-29 03:28 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe 2015-04-04 09:50 - 2014-10-29 03:17 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll 2015-04-04 09:50 - 2014-10-29 03:12 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2015-04-04 09:50 - 2014-10-29 03:04 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2015-04-04 09:50 - 2014-10-29 02:57 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll 2015-04-04 09:50 - 2014-10-29 02:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll 2015-04-04 09:50 - 2014-10-29 02:52 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2015-04-04 09:50 - 2014-10-29 02:51 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2015-04-04 09:50 - 2014-09-27 06:59 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-04-04 09:49 - 2014-10-29 04:30 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsClassExtension.dll 2015-04-03 20:25 - 2014-10-29 05:57 - 00339312 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll 2015-04-03 20:25 - 2014-10-29 05:11 - 00191104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2015-04-03 20:25 - 2014-10-29 05:10 - 00276816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll 2015-04-03 20:25 - 2014-10-29 05:05 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2015-04-03 20:25 - 2014-10-29 04:41 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2015-04-03 20:25 - 2014-10-29 04:27 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll 2015-04-03 20:25 - 2014-10-29 04:01 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2015-04-03 20:25 - 2014-10-29 03:52 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsecsnp.dll 2015-04-03 20:25 - 2014-10-29 03:20 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll 2015-04-03 20:25 - 2014-10-29 03:03 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll 2015-04-03 20:24 - 2014-10-29 06:09 - 00294880 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2015-04-03 20:24 - 2014-10-29 05:57 - 00271152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2015-04-03 20:24 - 2014-10-29 05:57 - 00217432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2015-04-03 20:24 - 2014-10-29 05:57 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraSettingsUIHost.exe 2015-04-03 20:24 - 2014-10-29 05:57 - 00027360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsRemoveDevice.exe 2015-04-03 20:24 - 2014-10-29 05:55 - 00305192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll 2015-04-03 20:24 - 2014-10-29 05:15 - 00192096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2015-04-03 20:24 - 2014-10-29 05:13 - 00185880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll 2015-04-03 20:24 - 2014-10-29 05:07 - 00019096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksuser.dll 2015-04-03 20:24 - 2014-10-29 04:56 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2015-04-03 20:24 - 2014-10-29 04:42 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll 2015-04-03 20:24 - 2014-10-29 04:32 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceoledb40.dll 2015-04-03 20:24 - 2014-10-29 04:27 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdspa.dll 2015-04-03 20:24 - 2014-10-29 03:48 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe 2015-04-03 20:24 - 2014-10-29 03:45 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll 2015-04-03 20:24 - 2014-10-29 03:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2015-04-03 20:24 - 2014-10-29 03:43 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll 2015-04-03 20:24 - 2014-10-29 03:41 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll 2015-04-03 20:24 - 2014-10-29 03:38 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000c.dll 2015-04-03 20:24 - 2014-10-29 03:29 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2015-04-03 20:24 - 2014-10-29 03:28 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll 2015-04-03 20:24 - 2014-10-29 03:27 - 00763392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2015-04-03 20:24 - 2014-10-29 03:23 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2015-04-03 20:24 - 2014-10-29 03:21 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2015-04-03 20:24 - 2014-10-29 03:17 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll 2015-04-03 20:24 - 2014-10-29 03:16 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authfwcfg.dll 2015-04-03 20:24 - 2014-10-29 03:12 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll 2015-04-03 20:24 - 2014-10-29 03:12 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2015-04-03 20:24 - 2014-10-29 03:10 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2015-04-03 20:24 - 2014-10-29 02:56 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe 2015-04-03 20:24 - 2014-10-29 02:56 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp.exe 2015-04-03 20:24 - 2014-10-29 02:56 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll 2015-04-03 20:24 - 2014-10-29 02:55 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2015-04-03 20:24 - 2014-10-29 02:52 - 01024512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll 2015-04-03 20:24 - 2014-10-29 02:50 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallControlPanel.dll 2015-04-03 20:24 - 2014-10-29 02:44 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll 2015-04-03 20:24 - 2014-10-29 02:41 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2015-04-03 20:24 - 2014-08-26 05:30 - 00354112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2015-04-03 20:22 - 2014-10-29 06:09 - 00315576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll 2015-04-03 20:22 - 2014-10-29 05:57 - 00629576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL 2015-04-03 20:22 - 2014-10-29 04:36 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\prncache.dll 2015-04-03 20:22 - 2014-10-29 04:16 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdapi.dll 2015-04-03 20:22 - 2014-10-29 04:11 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgprint.dll 2015-04-03 20:22 - 2014-10-29 04:10 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2015-04-03 20:22 - 2014-10-29 04:09 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdsvc.dll 2015-04-03 20:22 - 2014-10-29 04:04 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\devmgr.dll 2015-04-03 20:22 - 2014-10-29 04:02 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\localsec.dll 2015-04-03 20:22 - 2014-10-29 03:58 - 00423424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll 2015-04-03 20:22 - 2014-10-29 03:31 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netjoin.dll 2015-04-03 20:22 - 2014-10-29 03:29 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devmgr.dll 2015-04-03 20:22 - 2014-10-29 03:27 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizards.dll 2015-04-03 20:22 - 2014-10-29 03:27 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll 2015-04-03 20:22 - 2014-10-29 03:20 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll 2015-04-03 20:22 - 2014-10-29 03:04 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netjoin.dll 2015-04-03 20:22 - 2014-10-29 03:00 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1core.dll 2015-04-03 20:22 - 2014-10-29 02:58 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2015-04-03 20:22 - 2014-10-29 02:42 - 00865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallControlPanel.dll 2015-04-03 20:20 - 2014-10-29 02:44 - 00561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2015-04-03 20:18 - 2014-10-29 03:49 - 00771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2015-04-03 20:15 - 2014-10-29 03:25 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe 2015-04-03 20:14 - 2014-10-29 05:10 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll 2015-04-03 20:12 - 2014-10-29 04:33 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data001E.dll 2015-04-03 20:11 - 2014-10-29 04:20 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\QAGENTRT.DLL 2015-04-03 20:11 - 2014-10-29 03:23 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDSp.dll 2015-04-03 20:11 - 2014-10-29 03:16 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmmgrtn.dll 2015-04-03 20:11 - 2014-10-29 03:04 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2015-04-03 20:11 - 2014-10-29 02:49 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2015-04-03 20:11 - 2014-10-29 02:41 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2015-04-03 20:10 - 2014-10-29 03:53 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0404.dll 2015-04-03 20:10 - 2014-10-29 03:52 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldp.dll 2015-04-03 20:10 - 2014-10-29 03:46 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmvdspa.dll 2015-04-03 20:10 - 2014-10-29 03:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WmpDui.dll 2015-04-03 20:10 - 2014-10-29 03:24 - 01389056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxpTaskSync.dll 2015-04-03 20:10 - 2014-10-29 03:21 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll 2015-04-03 20:10 - 2014-10-29 03:21 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2015-04-03 20:10 - 2014-10-29 03:01 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2015-04-03 20:10 - 2014-10-29 02:59 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2015-04-03 20:09 - 2014-10-29 05:10 - 01906872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplaySwitch.exe 2015-04-03 20:09 - 2014-10-29 03:19 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2015-04-03 20:09 - 2014-10-29 03:13 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll 2015-04-03 20:09 - 2014-10-29 02:57 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll 2015-04-03 20:09 - 2014-10-29 02:52 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.SpeechSynthesis.dll 2015-04-03 20:08 - 2014-10-29 05:51 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2015-04-03 20:08 - 2014-10-29 04:26 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2015-04-03 20:08 - 2014-10-29 04:04 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll 2015-04-03 20:08 - 2014-10-29 03:34 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll 2015-04-03 20:08 - 2014-10-29 03:28 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2015-04-03 20:08 - 2014-10-29 03:10 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2015-04-03 20:08 - 2014-10-29 02:48 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2015-04-03 20:08 - 2014-10-29 02:46 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll 2015-04-03 20:07 - 2014-10-29 05:57 - 00767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2015-04-03 20:07 - 2014-10-29 03:46 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskraid.exe 2015-04-03 20:07 - 2014-10-29 03:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll 2015-04-03 20:07 - 2014-10-29 03:35 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2015-04-03 20:07 - 2014-10-29 03:24 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2015-04-03 20:07 - 2014-10-29 03:04 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll 2015-04-03 20:07 - 2014-10-29 02:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2015-04-03 20:07 - 2014-10-29 02:54 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2015-04-03 20:07 - 2014-10-29 02:53 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll 2015-04-03 20:07 - 2014-10-29 02:45 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.dll 2015-04-03 20:06 - 2014-10-29 03:52 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0804.dll 2015-04-03 20:06 - 2014-10-29 03:16 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoeacct.dll 2015-04-03 20:06 - 2014-10-29 02:44 - 00732672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll 2015-04-03 20:05 - 2014-10-29 04:46 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys 2015-04-03 20:05 - 2014-10-29 04:41 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2015-04-03 20:05 - 2014-10-29 04:12 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll 2015-04-03 20:05 - 2014-10-29 04:08 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdprint.dll 2015-04-03 20:05 - 2014-10-29 03:53 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll 2015-04-03 20:05 - 2014-10-29 03:28 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2015-04-03 20:05 - 2014-10-29 02:59 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-04-03 20:05 - 2014-10-29 02:49 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll 2015-04-03 20:05 - 2014-10-29 02:43 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll 2015-04-03 20:05 - 2014-10-29 02:30 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2015-04-03 20:04 - 2014-10-29 04:35 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldp.dll 2015-04-03 20:04 - 2014-10-29 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll 2015-04-03 20:04 - 2014-10-29 04:00 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched32.dll 2015-04-03 20:04 - 2014-10-29 03:28 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll 2015-04-03 20:04 - 2014-10-29 03:20 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll 2015-04-03 20:04 - 2014-10-29 03:05 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll 2015-04-03 20:04 - 2014-10-29 03:00 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll 2015-04-03 20:04 - 2014-10-29 02:46 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2015-04-03 20:03 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0c1a.dll 2015-04-03 20:03 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001b.dll 2015-04-03 20:03 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0018.dll 2015-04-03 20:03 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0003.dll 2015-04-03 20:03 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0002.dll 2015-04-03 20:02 - 2014-10-29 06:09 - 00214360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2015-04-03 20:02 - 2014-10-29 05:51 - 00179736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2015-04-03 20:02 - 2014-10-29 05:10 - 00272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll 2015-04-03 20:02 - 2014-10-29 04:45 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2015-04-03 20:02 - 2014-10-29 04:45 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll 2015-04-03 20:02 - 2014-10-29 04:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\migflt.dll 2015-04-03 20:02 - 2014-10-29 04:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssha.dll 2015-04-03 20:02 - 2014-10-29 04:00 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2015-04-03 20:02 - 2014-10-29 03:57 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll 2015-04-03 20:02 - 2014-10-29 03:57 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2015-04-03 20:02 - 2014-10-29 03:52 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll 2015-04-03 20:02 - 2014-10-29 03:48 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\connect.dll 2015-04-03 20:02 - 2014-10-29 03:38 - 02012160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0026.dll 2015-04-03 20:02 - 2014-10-29 03:38 - 02012160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000f.dll 2015-04-03 20:02 - 2014-10-29 03:37 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsnap.dll 2015-04-03 20:02 - 2014-10-29 03:36 - 01999360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0027.dll 2015-04-03 20:02 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData081a.dll 2015-04-03 20:02 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0024.dll 2015-04-03 20:02 - 2014-10-29 03:36 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001a.dll 2015-04-03 20:02 - 2014-10-29 03:30 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll 2015-04-03 20:02 - 2014-10-29 03:28 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll 2015-04-03 20:02 - 2014-10-29 03:27 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2015-04-03 20:02 - 2014-10-29 03:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll 2015-04-03 20:02 - 2014-10-29 03:17 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2015-04-03 20:02 - 2014-10-29 03:12 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2015-04-03 20:02 - 2014-10-29 03:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe 2015-04-03 20:02 - 2014-10-29 03:05 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2015-04-03 20:02 - 2014-10-29 03:05 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll 2015-04-03 20:02 - 2014-10-29 03:04 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2015-04-03 20:02 - 2014-10-29 03:00 - 00200192 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll 2015-04-03 20:02 - 2014-10-29 02:59 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10core.dll 2015-04-03 20:02 - 2014-10-29 02:59 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll 2015-04-03 20:02 - 2014-10-29 02:57 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authfwcfg.dll 2015-04-03 20:02 - 2014-10-29 02:56 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2015-04-03 20:02 - 2014-10-29 02:54 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2015-04-03 20:02 - 2014-10-29 02:54 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPMONTR.DLL 2015-04-03 20:02 - 2014-10-29 02:53 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_8.dll 2015-04-03 20:02 - 2014-10-29 02:53 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll 2015-04-03 20:02 - 2014-10-29 02:53 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2015-04-03 20:02 - 2014-10-29 02:38 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2015-04-03 20:02 - 2014-10-08 11:24 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-04-03 20:01 - 2014-10-29 06:09 - 00233448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe 2015-04-03 20:01 - 2014-10-29 05:57 - 00034568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe 2015-04-03 20:01 - 2014-10-29 05:57 - 00029408 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerHost.exe 2015-04-03 20:01 - 2014-10-29 05:57 - 00018584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SlideToShutDown.exe 2015-04-03 20:01 - 2014-10-29 04:40 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll 2015-04-03 20:01 - 2014-10-29 04:26 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpresult.exe 2015-04-03 20:01 - 2014-10-29 04:00 - 03814400 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll 2015-04-03 20:01 - 2014-10-29 03:56 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mblctr.exe 2015-04-03 20:01 - 2014-10-29 03:46 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsnt.dll 2015-04-03 20:01 - 2014-10-29 03:37 - 03149824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0039.dll 2015-04-03 20:01 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004c.dll 2015-04-03 20:01 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004b.dll 2015-04-03 20:01 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0047.dll 2015-04-03 20:01 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0020.dll 2015-04-03 20:01 - 2014-10-29 03:25 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe 2015-04-03 20:01 - 2014-10-29 03:12 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll 2015-04-03 20:01 - 2014-10-29 02:41 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe 2015-04-03 20:00 - 2015-04-05 13:50 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-04-03 20:00 - 2014-10-29 06:04 - 00181816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe 2015-04-03 20:00 - 2014-10-29 06:04 - 00136912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll 2015-04-03 20:00 - 2014-10-29 05:57 - 00216920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe 2015-04-03 20:00 - 2014-10-29 05:52 - 00244272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-04-03 20:00 - 2014-10-29 05:52 - 00161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll 2015-04-03 20:00 - 2014-10-29 05:18 - 00241168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll 2015-04-03 20:00 - 2014-10-29 05:11 - 00187488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2015-04-03 20:00 - 2014-10-29 04:41 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll 2015-04-03 20:00 - 2014-10-29 04:31 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cewmdm.dll 2015-04-03 20:00 - 2014-10-29 04:31 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncMetastore.dll 2015-04-03 20:00 - 2014-10-29 04:27 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll 2015-04-03 20:00 - 2014-10-29 04:22 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll 2015-04-03 20:00 - 2014-10-29 04:21 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2015-04-03 20:00 - 2014-10-29 04:20 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2015-04-03 20:00 - 2014-10-29 04:18 - 01609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0000.dll 2015-04-03 20:00 - 2014-10-29 04:13 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll 2015-04-03 20:00 - 2014-10-29 04:05 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll 2015-04-03 20:00 - 2014-10-29 04:03 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpdui.dll 2015-04-03 20:00 - 2014-10-29 04:02 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmontr.dll 2015-04-03 20:00 - 2014-10-29 03:50 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceoledb40.dll 2015-04-03 20:00 - 2014-10-29 03:49 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cewmdm.dll 2015-04-03 20:00 - 2014-10-29 03:47 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2015-04-03 20:00 - 2014-10-29 03:46 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe 2015-04-03 20:00 - 2014-10-29 03:46 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll 2015-04-03 20:00 - 2014-10-29 03:40 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshipsec.dll 2015-04-03 20:00 - 2014-10-29 03:37 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData002a.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004e.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData004a.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0049.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0046.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0045.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData003e.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0022.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0021.dll 2015-04-03 20:00 - 2014-10-29 03:36 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbeio.dll 2015-04-03 20:00 - 2014-10-29 03:34 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll 2015-04-03 20:00 - 2014-10-29 03:29 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IasMigPlugin.dll 2015-04-03 20:00 - 2014-10-29 03:28 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2015-04-03 20:00 - 2014-10-29 03:27 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmontr.dll 2015-04-03 20:00 - 2014-10-29 03:22 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-04-03 20:00 - 2014-10-29 03:21 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2015-04-03 20:00 - 2014-10-29 03:18 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2015-04-03 20:00 - 2014-10-29 03:16 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2015-04-03 20:00 - 2014-10-29 03:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2015-04-03 20:00 - 2014-10-29 03:11 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-04-03 20:00 - 2014-10-29 03:11 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtckrm.dll 2015-04-03 20:00 - 2014-10-29 03:10 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv 2015-04-03 20:00 - 2014-10-29 03:08 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecsvc.dll 2015-04-03 20:00 - 2014-10-29 03:04 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll 2015-04-03 20:00 - 2014-10-29 03:03 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2015-04-03 20:00 - 2014-10-29 03:02 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Geolocation.dll 2015-04-03 20:00 - 2014-10-29 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-04-03 20:00 - 2014-10-29 02:56 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll 2015-04-03 20:00 - 2014-10-29 02:55 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2015-04-03 20:00 - 2014-10-29 02:54 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2015-04-03 20:00 - 2014-10-29 02:54 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceTypes.dll 2015-04-03 20:00 - 2014-10-29 02:53 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2015-04-03 20:00 - 2014-10-29 02:53 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll 2015-04-03 20:00 - 2014-10-29 02:52 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll 2015-04-03 20:00 - 2014-10-29 02:51 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll 2015-04-03 20:00 - 2014-10-29 02:50 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll Code:
ATTFilter 2015-04-03 20:00 - 2014-10-29 02:44 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2015-04-03 20:00 - 2014-10-29 02:43 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll 2015-04-03 20:00 - 2014-10-29 02:43 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll 2015-04-03 20:00 - 2014-10-29 02:35 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2015-04-03 19:59 - 2015-04-05 16:01 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-04-03 19:59 - 2015-04-03 20:24 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-04-03 19:59 - 2014-10-29 06:00 - 00297512 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll 2015-04-03 19:59 - 2014-10-29 06:00 - 00142000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxva2.dll 2015-04-03 19:59 - 2014-10-29 05:57 - 00447256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2015-04-03 19:59 - 2014-10-29 05:51 - 00159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL 2015-04-03 19:59 - 2014-10-29 05:18 - 00164264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2015-04-03 19:59 - 2014-10-29 05:15 - 00154392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll 2015-04-03 19:59 - 2014-10-29 05:15 - 00119800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll 2015-04-03 19:59 - 2014-10-29 05:12 - 00241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll 2015-04-03 19:59 - 2014-10-29 05:11 - 00190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe 2015-04-03 19:59 - 2014-10-29 05:07 - 00134280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll 2015-04-03 19:59 - 2014-10-29 04:42 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll 2015-04-03 19:59 - 2014-10-29 04:41 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2015-04-03 19:59 - 2014-10-29 04:35 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll 2015-04-03 19:59 - 2014-10-29 04:33 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll 2015-04-03 19:59 - 2014-10-29 04:29 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe 2015-04-03 19:59 - 2014-10-29 04:28 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe 2015-04-03 19:59 - 2014-10-29 04:28 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll 2015-04-03 19:59 - 2014-10-29 04:27 - 00354816 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsnt.dll 2015-04-03 19:59 - 2014-10-29 04:27 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll 2015-04-03 19:59 - 2014-10-29 04:25 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2015-04-03 19:59 - 2014-10-29 04:22 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\recimg.exe 2015-04-03 19:59 - 2014-10-29 04:19 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquoui.dll 2015-04-03 19:59 - 2014-10-29 04:12 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2015-04-03 19:59 - 2014-10-29 04:11 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SnippingTool.exe 2015-04-03 19:59 - 2014-10-29 04:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceSyncProvider.dll 2015-04-03 19:59 - 2014-10-29 04:09 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax 2015-04-03 19:59 - 2014-10-29 04:06 - 02134528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsCpl.dll 2015-04-03 19:59 - 2014-10-29 04:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax 2015-04-03 19:59 - 2014-10-29 04:01 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl 2015-04-03 19:59 - 2014-10-29 04:00 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll 2015-04-03 19:59 - 2014-10-29 03:59 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe 2015-04-03 19:59 - 2014-10-29 03:58 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL 2015-04-03 19:59 - 2014-10-29 03:58 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrdc.dll 2015-04-03 19:59 - 2014-10-29 03:57 - 01047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagCpl.dll 2015-04-03 19:59 - 2014-10-29 03:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOVER.exe 2015-04-03 19:59 - 2014-10-29 03:57 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll 2015-04-03 19:59 - 2014-10-29 03:57 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2015-04-03 19:59 - 2014-10-29 03:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcjt32.dll 2015-04-03 19:59 - 2014-10-29 03:55 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll 2015-04-03 19:59 - 2014-10-29 03:54 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll 2015-04-03 19:59 - 2014-10-29 03:52 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll 2015-04-03 19:59 - 2014-10-29 03:51 - 00782848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data001E.dll 2015-04-03 19:59 - 2014-10-29 03:51 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2015-04-03 19:59 - 2014-10-29 03:51 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll 2015-04-03 19:59 - 2014-10-29 03:49 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL 2015-04-03 19:59 - 2014-10-29 03:49 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2015-04-03 19:59 - 2014-10-29 03:49 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncMetastore.dll 2015-04-03 19:59 - 2014-10-29 03:48 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2015-04-03 19:59 - 2014-10-29 03:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll 2015-04-03 19:59 - 2014-10-29 03:46 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll 2015-04-03 19:59 - 2014-10-29 03:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll 2015-04-03 19:59 - 2014-10-29 03:46 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskmgr.dll 2015-04-03 19:59 - 2014-10-29 03:45 - 00879104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2015-04-03 19:59 - 2014-10-29 03:45 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vault.dll 2015-04-03 19:59 - 2014-10-29 03:45 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSSVC.exe 2015-04-03 19:59 - 2014-10-29 03:45 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll 2015-04-03 19:59 - 2014-10-29 03:45 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpresult.exe 2015-04-03 19:59 - 2014-10-29 03:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll 2015-04-03 19:59 - 2014-10-29 03:41 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll 2015-04-03 19:59 - 2014-10-29 03:40 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2015-04-03 19:59 - 2014-10-29 03:38 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll 2015-04-03 19:59 - 2014-10-29 03:34 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdlgs.dll 2015-04-03 19:59 - 2014-10-29 03:31 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdprint.dll 2015-04-03 19:59 - 2014-10-29 03:29 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll 2015-04-03 19:59 - 2014-10-29 03:29 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll 2015-04-03 19:59 - 2014-10-29 03:28 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpdui.dll 2015-04-03 19:59 - 2014-10-29 03:26 - 03788288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll 2015-04-03 19:59 - 2014-10-29 03:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2015-04-03 19:59 - 2014-10-29 03:26 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\provthrd.dll 2015-04-03 19:59 - 2014-10-29 03:25 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mibincodec.dll 2015-04-03 19:59 - 2014-10-29 03:24 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll 2015-04-03 19:59 - 2014-10-29 03:22 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sstpsvc.dll 2015-04-03 19:59 - 2014-10-29 03:20 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netdiagfx.dll 2015-04-03 19:59 - 2014-10-29 03:19 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll 2015-04-03 19:59 - 2014-10-29 03:19 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2015-04-03 19:59 - 2014-10-29 03:18 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2015-04-03 19:59 - 2014-10-29 03:18 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IDStore.dll 2015-04-03 19:59 - 2014-10-29 03:17 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2015-04-03 19:59 - 2014-10-29 03:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll 2015-04-03 19:59 - 2014-10-29 03:10 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_8.dll 2015-04-03 19:59 - 2014-10-29 03:10 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbeio.dll 2015-04-03 19:59 - 2014-10-29 03:05 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll 2015-04-03 19:59 - 2014-10-29 03:05 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll 2015-04-03 19:59 - 2014-10-29 03:04 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2015-04-03 19:59 - 2014-10-29 03:00 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2015-04-03 19:59 - 2014-10-29 03:00 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdscore.dll 2015-04-03 19:59 - 2014-10-29 03:00 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll 2015-04-03 19:59 - 2014-10-29 02:59 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2015-04-03 19:59 - 2014-10-29 02:58 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2015-04-03 19:59 - 2014-10-29 02:57 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2015-04-03 19:59 - 2014-10-29 02:54 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll 2015-04-03 19:59 - 2014-10-29 02:53 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2015-04-03 19:59 - 2014-10-29 02:53 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll 2015-04-03 19:59 - 2014-10-29 02:49 - 00831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll 2015-04-03 19:59 - 2014-10-29 02:47 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll 2015-04-03 19:59 - 2014-10-29 02:45 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll 2015-04-03 19:59 - 2014-10-29 02:44 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2015-04-03 19:59 - 2014-10-29 02:44 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2015-04-03 19:59 - 2014-10-29 02:43 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPMONTR.DLL 2015-04-03 19:59 - 2014-10-29 02:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2015-04-03 19:59 - 2014-10-29 02:42 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.SpeechSynthesis.dll 2015-04-03 19:59 - 2014-10-29 02:39 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2015-04-03 19:59 - 2014-10-29 02:38 - 01232896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll 2015-04-03 19:58 - 2015-04-03 20:24 - 00000000 ____D () C:\Users\***\Desktop\mbar 2015-04-03 19:58 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-04-03 19:58 - 2014-10-29 06:09 - 00145144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll 2015-04-03 19:58 - 2014-10-29 06:09 - 00017560 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll 2015-04-03 19:58 - 2014-10-29 06:04 - 00196264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll 2015-04-03 19:58 - 2014-10-29 05:57 - 00022208 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.exe 2015-04-03 19:58 - 2014-10-29 05:55 - 00278392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe 2015-04-03 19:58 - 2014-10-29 05:52 - 00132232 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2015-04-03 19:58 - 2014-10-29 05:18 - 00348048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifier.dll 2015-04-03 19:58 - 2014-10-29 05:11 - 00184888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL 2015-04-03 19:58 - 2014-10-29 05:11 - 00183832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL 2015-04-03 19:58 - 2014-10-29 05:07 - 00136840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll 2015-04-03 19:58 - 2014-10-29 04:42 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll 2015-04-03 19:58 - 2014-10-29 04:26 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll 2015-04-03 19:58 - 2014-10-29 04:18 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsadmin.exe 2015-04-03 19:58 - 2014-10-29 04:17 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\itircl.dll 2015-04-03 19:58 - 2014-10-29 04:13 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\scansetting.dll 2015-04-03 19:58 - 2014-10-29 04:12 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll 2015-04-03 19:58 - 2014-10-29 04:04 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp60.dll 2015-04-03 19:58 - 2014-10-29 04:04 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2015-04-03 19:58 - 2014-10-29 03:58 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe 2015-04-03 19:58 - 2014-10-29 03:58 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll 2015-04-03 19:58 - 2014-10-29 03:57 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2015-04-03 19:58 - 2014-10-29 03:53 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\shwebsvc.dll 2015-04-03 19:58 - 2014-10-29 03:51 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmstyle.dll 2015-04-03 19:58 - 2014-10-29 03:47 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskpart.exe 2015-04-03 19:58 - 2014-10-29 03:46 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msnetobj.dll 2015-04-03 19:58 - 2014-10-29 03:42 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll 2015-04-03 19:58 - 2014-10-29 03:38 - 01548800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0000.dll 2015-04-03 19:58 - 2014-10-29 03:38 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itircl.dll 2015-04-03 19:58 - 2014-10-29 03:35 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scansetting.dll 2015-04-03 19:58 - 2014-10-29 03:28 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\localsec.dll 2015-04-03 19:58 - 2014-10-29 03:28 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadefui.dll 2015-04-03 19:58 - 2014-10-29 03:28 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\audiodev.dll 2015-04-03 19:58 - 2014-10-29 03:26 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll 2015-04-03 19:58 - 2014-10-29 03:26 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll 2015-04-03 19:58 - 2014-10-29 03:25 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-04-03 19:58 - 2014-10-29 03:24 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe 2015-04-03 19:58 - 2014-10-29 03:22 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe 2015-04-03 19:58 - 2014-10-29 03:21 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll 2015-04-03 19:58 - 2014-10-29 03:21 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll 2015-04-03 19:58 - 2014-10-29 03:20 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll 2015-04-03 19:58 - 2014-10-29 03:19 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmitomi.dll 2015-04-03 19:58 - 2014-10-29 03:16 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll 2015-04-03 19:58 - 2014-10-29 03:14 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2015-04-03 19:58 - 2014-10-29 03:12 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll 2015-04-03 19:58 - 2014-10-29 03:06 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2015-04-03 19:58 - 2014-10-29 03:05 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll 2015-04-03 19:58 - 2014-10-29 03:02 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2015-04-03 19:58 - 2014-10-29 03:01 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2015-04-03 19:58 - 2014-10-29 02:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll 2015-04-03 19:58 - 2014-10-29 02:58 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IDStore.dll 2015-04-03 19:58 - 2014-10-29 02:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll 2015-04-03 19:58 - 2014-10-29 02:57 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll 2015-04-03 19:58 - 2014-10-29 02:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2015-04-03 19:58 - 2014-10-29 02:57 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2015-04-03 19:58 - 2014-10-29 02:55 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2015-04-03 19:58 - 2014-10-29 02:54 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll 2015-04-03 19:58 - 2014-10-29 02:53 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv 2015-04-03 19:58 - 2014-10-29 02:51 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsCfg.dll 2015-04-03 19:58 - 2014-10-29 02:51 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll 2015-04-03 19:58 - 2014-10-29 02:47 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-04-03 19:58 - 2014-10-29 02:45 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll 2015-04-03 19:58 - 2014-10-29 02:43 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll 2015-04-03 19:57 - 2015-04-03 19:57 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\***\Desktop\tdsskiller.exe 2015-04-03 19:57 - 2014-10-29 06:09 - 00371304 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.dll 2015-04-03 19:57 - 2014-10-29 06:09 - 00155456 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll 2015-04-03 19:57 - 2014-10-29 06:04 - 00120384 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2015-04-03 19:57 - 2014-10-29 05:57 - 00250488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL 2015-04-03 19:57 - 2014-10-29 05:57 - 00248408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL 2015-04-03 19:57 - 2014-10-29 05:12 - 00116696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxva2.dll 2015-04-03 19:57 - 2014-10-29 05:11 - 00275280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL 2015-04-03 19:57 - 2014-10-29 05:11 - 00274256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL 2015-04-03 19:57 - 2014-10-29 05:06 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2015-04-03 19:57 - 2014-10-29 04:44 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SPInf.dll 2015-04-03 19:57 - 2014-10-29 04:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnetlib.dll 2015-04-03 19:57 - 2014-10-29 04:41 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\drt.dll 2015-04-03 19:57 - 2014-10-29 04:41 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2015-04-03 19:57 - 2014-10-29 04:37 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfui.dll 2015-04-03 19:57 - 2014-10-29 04:36 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll 2015-04-03 19:57 - 2014-10-29 04:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll 2015-04-03 19:57 - 2014-10-29 04:32 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll 2015-04-03 19:57 - 2014-10-29 04:29 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmusic.dll 2015-04-03 19:57 - 2014-10-29 04:27 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPSTAT.EXE 2015-04-03 19:57 - 2014-10-29 04:27 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiageng.dll 2015-04-03 19:57 - 2014-10-29 04:27 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.WorkplaceSettings.dll 2015-04-03 19:57 - 2014-10-29 04:25 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2015-04-03 19:57 - 2014-10-29 04:23 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll 2015-04-03 19:57 - 2014-10-29 04:23 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\elshyph.dll 2015-04-03 19:57 - 2014-10-29 04:19 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe 2015-04-03 19:57 - 2014-10-29 04:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditcse.dll 2015-04-03 19:57 - 2014-10-29 04:19 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\softkbd.dll 2015-04-03 19:57 - 2014-10-29 04:17 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll 2015-04-03 19:57 - 2014-10-29 04:17 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncProviders.dll 2015-04-03 19:57 - 2014-10-29 04:14 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll 2015-04-03 19:57 - 2014-10-29 04:09 - 00601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe 2015-04-03 19:57 - 2014-10-29 04:03 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll 2015-04-03 19:57 - 2014-10-29 04:02 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe 2015-04-03 19:57 - 2014-10-29 04:00 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlhtml.dll 2015-04-03 19:57 - 2014-10-29 03:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\QAGENT.DLL 2015-04-03 19:57 - 2014-10-29 03:56 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWiaCompat.dll 2015-04-03 19:57 - 2014-10-29 03:55 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2015-04-03 19:57 - 2014-10-29 03:54 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfui.dll 2015-04-03 19:57 - 2014-10-29 03:52 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2015-04-03 19:57 - 2014-10-29 03:51 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdListen.dll 2015-04-03 19:57 - 2014-10-29 03:50 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2015-04-03 19:57 - 2014-10-29 03:46 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll 2015-04-03 19:57 - 2014-10-29 03:46 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssha.dll 2015-04-03 19:57 - 2014-10-29 03:46 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiageng.dll 2015-04-03 19:57 - 2014-10-29 03:41 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2015-04-03 19:57 - 2014-10-29 03:40 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe 2015-04-03 19:57 - 2014-10-29 03:40 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquoui.dll 2015-04-03 19:57 - 2014-10-29 03:40 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softkbd.dll 2015-04-03 19:57 - 2014-10-29 03:39 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2015-04-03 19:57 - 2014-10-29 03:35 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll 2015-04-03 19:57 - 2014-10-29 03:34 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\difxapi.dll 2015-04-03 19:57 - 2014-10-29 03:32 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe 2015-04-03 19:57 - 2014-10-29 03:32 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax 2015-04-03 19:57 - 2014-10-29 03:30 - 02118144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsCpl.dll 2015-04-03 19:57 - 2014-10-29 03:28 - 00812032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll 2015-04-03 19:57 - 2014-10-29 03:28 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsquery.dll 2015-04-03 19:57 - 2014-10-29 03:27 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll 2015-04-03 19:57 - 2014-10-29 03:26 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2015-04-03 19:57 - 2014-10-29 03:25 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrdc.dll 2015-04-03 19:57 - 2014-10-29 03:25 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2015-04-03 19:57 - 2014-10-29 03:23 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2015-04-03 19:57 - 2014-10-29 03:21 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll 2015-04-03 19:57 - 2014-10-29 03:20 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shwebsvc.dll 2015-04-03 19:57 - 2014-10-29 03:20 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2015-04-03 19:57 - 2014-10-29 03:19 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll 2015-04-03 19:57 - 2014-10-29 03:18 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fundisc.dll 2015-04-03 19:57 - 2014-10-29 03:17 - 01296896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\connect.dll 2015-04-03 19:57 - 2014-10-29 03:16 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll 2015-04-03 19:57 - 2014-10-29 03:16 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msnetobj.dll 2015-04-03 19:57 - 2014-10-29 03:12 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll 2015-04-03 19:57 - 2014-10-29 03:11 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2015-04-03 19:57 - 2014-10-29 03:04 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll 2015-04-03 19:57 - 2014-10-29 03:03 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provthrd.dll 2015-04-03 19:57 - 2014-10-29 03:03 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringStation.dll 2015-04-03 19:57 - 2014-10-29 03:02 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2015-04-03 19:57 - 2014-10-29 03:02 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mibincodec.dll 2015-04-03 19:57 - 2014-10-29 03:01 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll 2015-04-03 19:57 - 2014-10-29 03:00 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2015-04-03 19:57 - 2014-10-29 02:59 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll 2015-04-03 19:57 - 2014-10-29 02:59 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmitomi.dll 2015-04-03 19:57 - 2014-10-29 02:58 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll 2015-04-03 19:57 - 2014-10-29 02:55 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2015-04-03 19:57 - 2014-10-29 02:54 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll 2015-04-03 19:57 - 2014-10-29 02:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AltTab.dll 2015-04-03 19:57 - 2014-10-29 02:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2015-04-03 19:57 - 2014-10-29 02:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceTypes.dll 2015-04-03 19:57 - 2014-10-29 02:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll 2015-04-03 19:57 - 2014-10-29 02:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2015-04-03 19:57 - 2014-10-29 02:39 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll 2015-04-03 19:57 - 2014-10-29 02:37 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe 2015-04-03 19:56 - 2014-10-29 06:04 - 00153336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2015-04-03 19:56 - 2014-10-29 06:00 - 00210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll 2015-04-03 19:56 - 2014-10-29 06:00 - 00125504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2015-04-03 19:56 - 2014-10-29 05:59 - 00105944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll 2015-04-03 19:56 - 2014-10-29 05:57 - 00299048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL 2015-04-03 19:56 - 2014-10-29 05:57 - 00246832 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL 2015-04-03 19:56 - 2014-10-29 05:18 - 00127552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll 2015-04-03 19:56 - 2014-10-29 05:18 - 00120352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabinet.dll 2015-04-03 19:56 - 2014-10-29 05:15 - 00115672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2015-04-03 19:56 - 2014-10-29 05:12 - 00087224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll 2015-04-03 19:56 - 2014-10-29 05:11 - 00229248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL 2015-04-03 19:56 - 2014-10-29 04:45 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2015-04-03 19:56 - 2014-10-29 04:34 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsdyn.dll 2015-04-03 19:56 - 2014-10-29 04:33 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll 2015-04-03 19:56 - 2014-10-29 04:32 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcecompact40.dll 2015-04-03 19:56 - 2014-10-29 04:31 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax 2015-04-03 19:56 - 2014-10-29 04:31 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cca.dll 2015-04-03 19:56 - 2014-10-29 04:27 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mycomput.dll 2015-04-03 19:56 - 2014-10-29 04:27 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgr.exe 2015-04-03 19:56 - 2014-10-29 04:27 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax 2015-04-03 19:56 - 2014-10-29 04:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax 2015-04-03 19:56 - 2014-10-29 04:23 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll 2015-04-03 19:56 - 2014-10-29 04:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2015-04-03 19:56 - 2014-10-29 04:18 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2015-04-03 19:56 - 2014-10-29 04:18 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll 2015-04-03 19:56 - 2014-10-29 04:16 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2015-04-03 19:56 - 2014-10-29 04:16 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2015-04-03 19:56 - 2014-10-29 04:12 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll 2015-04-03 19:56 - 2014-10-29 04:10 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsprop.dll 2015-04-03 19:56 - 2014-10-29 04:08 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl 2015-04-03 19:56 - 2014-10-29 04:08 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll 2015-04-03 19:56 - 2014-10-29 04:07 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\els.dll 2015-04-03 19:56 - 2014-10-29 04:06 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssadmin.exe 2015-04-03 19:56 - 2014-10-29 04:04 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadefui.dll 2015-04-03 19:56 - 2014-10-29 04:03 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsquery.dll 2015-04-03 19:56 - 2014-10-29 04:02 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2015-04-03 19:56 - 2014-10-29 04:00 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2015-04-03 19:56 - 2014-10-29 03:57 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll 2015-04-03 19:56 - 2014-10-29 03:57 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drt.dll 2015-04-03 19:56 - 2014-10-29 03:57 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWMDRM.dll 2015-04-03 19:56 - 2014-10-29 03:52 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll 2015-04-03 19:56 - 2014-10-29 03:51 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2015-04-03 19:56 - 2014-10-29 03:51 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll 2015-04-03 19:56 - 2014-10-29 03:50 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2015-04-03 19:56 - 2014-10-29 03:49 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2015-04-03 19:56 - 2014-10-29 03:49 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe 2015-04-03 19:56 - 2014-10-29 03:49 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgrsvr.exe 2015-04-03 19:56 - 2014-10-29 03:49 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmttpmvscmgrsvr.exe 2015-04-03 19:56 - 2014-10-29 03:48 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmusic.dll 2015-04-03 19:56 - 2014-10-29 03:46 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll 2015-04-03 19:56 - 2014-10-29 03:45 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll 2015-04-03 19:56 - 2014-10-29 03:43 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll 2015-04-03 19:56 - 2014-10-29 03:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssText3d.scr 2015-04-03 19:56 - 2014-10-29 03:39 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsadmin.exe 2015-04-03 19:56 - 2014-10-29 03:38 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2015-04-03 19:56 - 2014-10-29 03:38 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe 2015-04-03 19:56 - 2014-10-29 03:38 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe 2015-04-03 19:56 - 2014-10-29 03:38 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncProviders.dll 2015-04-03 19:56 - 2014-10-29 03:37 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2015-04-03 19:56 - 2014-10-29 03:34 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eudcedit.exe 2015-04-03 19:56 - 2014-10-29 03:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsprop.dll 2015-04-03 19:56 - 2014-10-29 03:32 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceSyncProvider.dll 2015-04-03 19:56 - 2014-10-29 03:31 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl 2015-04-03 19:56 - 2014-10-29 03:30 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll 2015-04-03 19:56 - 2014-10-29 03:30 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\els.dll 2015-04-03 19:56 - 2014-10-29 03:28 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe 2015-04-03 19:56 - 2014-10-29 03:27 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll 2015-04-03 19:56 - 2014-10-29 03:27 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax 2015-04-03 19:56 - 2014-10-29 03:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2015-04-03 19:56 - 2014-10-29 03:26 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2015-04-03 19:56 - 2014-10-29 03:25 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll 2015-04-03 19:56 - 2014-10-29 03:21 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dps.dll 2015-04-03 19:56 - 2014-10-29 03:21 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll 2015-04-03 19:56 - 2014-10-29 03:20 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2015-04-03 19:56 - 2014-10-29 03:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2015-04-03 19:56 - 2014-10-29 03:19 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2015-04-03 19:56 - 2014-10-29 03:19 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2015-04-03 19:56 - 2014-10-29 03:19 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2015-04-03 19:56 - 2014-10-29 03:19 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\txflog.dll 2015-04-03 19:56 - 2014-10-29 03:16 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll 2015-04-03 19:56 - 2014-10-29 03:16 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll 2015-04-03 19:56 - 2014-10-29 03:12 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll 2015-04-03 19:56 - 2014-10-29 03:10 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxclu.dll 2015-04-03 19:56 - 2014-10-29 03:10 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll 2015-04-03 19:56 - 2014-10-29 03:08 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL 2015-04-03 19:56 - 2014-10-29 03:08 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2015-04-03 19:56 - 2014-10-29 03:07 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-04-03 19:56 - 2014-10-29 03:06 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll 2015-04-03 19:56 - 2014-10-29 03:04 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll 2015-04-03 19:56 - 2014-10-29 03:03 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll 2015-04-03 19:56 - 2014-10-29 03:03 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll 2015-04-03 19:56 - 2014-10-29 03:03 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll 2015-04-03 19:56 - 2014-10-29 03:00 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2015-04-03 19:56 - 2014-10-29 02:58 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2015-04-03 19:56 - 2014-10-29 02:58 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fundisc.dll 2015-04-03 19:56 - 2014-10-29 02:57 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfapi.dll 2015-04-03 19:56 - 2014-10-29 02:57 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll 2015-04-03 19:56 - 2014-10-29 02:57 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll 2015-04-03 19:56 - 2014-10-29 02:52 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2015-04-03 19:56 - 2014-10-29 02:51 - 03317248 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll |
06.04.2015, 16:24 | #12 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter 2015-04-03 19:56 - 2014-10-29 02:45 - 01197568 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll 2015-04-03 19:56 - 2014-10-29 02:37 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll 2015-04-03 19:56 - 2014-10-29 02:35 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2015-04-03 19:56 - 2014-10-29 02:35 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2015-04-03 19:56 - 2014-10-29 02:31 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe 2015-04-03 19:55 - 2015-04-03 19:55 - 16502728 _____ (Malwarebytes Corp.) C:\Users\***\Desktop\mbar-1.09.1.1004.exe 2015-04-03 19:55 - 2014-10-29 06:10 - 00177688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2015-04-03 19:55 - 2014-10-29 06:10 - 00089344 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe 2015-04-03 19:55 - 2014-10-29 06:04 - 00135304 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2015-04-03 19:55 - 2014-10-29 05:57 - 00203504 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL 2015-04-03 19:55 - 2014-10-29 05:57 - 00111024 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe 2015-04-03 19:55 - 2014-10-29 05:55 - 00019264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe 2015-04-03 19:55 - 2014-10-29 05:52 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2015-04-03 19:55 - 2014-10-29 05:52 - 00126056 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll 2015-04-03 19:55 - 2014-10-29 05:18 - 00148728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2015-04-03 19:55 - 2014-10-29 05:15 - 00098152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2015-04-03 19:55 - 2014-10-29 05:12 - 00102728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2015-04-03 19:55 - 2014-10-29 05:05 - 00120864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL 2015-04-03 19:55 - 2014-10-29 04:48 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll 2015-04-03 19:55 - 2014-10-29 04:46 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2015-04-03 19:55 - 2014-10-29 04:46 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys 2015-04-03 19:55 - 2014-10-29 04:41 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldpc.dll 2015-04-03 19:55 - 2014-10-29 04:37 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll 2015-04-03 19:55 - 2014-10-29 04:36 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll 2015-04-03 19:55 - 2014-10-29 04:34 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2015-04-03 19:55 - 2014-10-29 04:34 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rgb9rast.dll 2015-04-03 19:55 - 2014-10-29 04:33 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2015-04-03 19:55 - 2014-10-29 04:32 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\amstream.dll 2015-04-03 19:55 - 2014-10-29 04:30 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll 2015-04-03 19:55 - 2014-10-29 04:29 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll 2015-04-03 19:55 - 2014-10-29 04:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll 2015-04-03 19:55 - 2014-10-29 04:26 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax 2015-04-03 19:55 - 2014-10-29 04:24 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll 2015-04-03 19:55 - 2014-10-29 04:24 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax 2015-04-03 19:55 - 2014-10-29 04:23 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr 2015-04-03 19:55 - 2014-10-29 04:22 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2015-04-03 19:55 - 2014-10-29 04:19 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2015-04-03 19:55 - 2014-10-29 04:09 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll 2015-04-03 19:55 - 2014-10-29 04:07 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll 2015-04-03 19:55 - 2014-10-29 04:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercpl.dll 2015-04-03 19:55 - 2014-10-29 03:59 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe 2015-04-03 19:55 - 2014-10-29 03:59 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll 2015-04-03 19:55 - 2014-10-29 03:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnetlib.dll 2015-04-03 19:55 - 2014-10-29 03:55 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll 2015-04-03 19:55 - 2014-10-29 03:54 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll 2015-04-03 19:55 - 2014-10-29 03:53 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll 2015-04-03 19:55 - 2014-10-29 03:51 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2015-04-03 19:55 - 2014-10-29 03:49 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSTPager.ax 2015-04-03 19:55 - 2014-10-29 03:49 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amstream.dll 2015-04-03 19:55 - 2014-10-29 03:46 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2015-04-03 19:55 - 2014-10-29 03:46 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll 2015-04-03 19:55 - 2014-10-29 03:41 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll 2015-04-03 19:55 - 2014-10-29 03:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2015-04-03 19:55 - 2014-10-29 03:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olethk32.dll 2015-04-03 19:55 - 2014-10-29 03:39 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll 2015-04-03 19:55 - 2014-10-29 03:38 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll 2015-04-03 19:55 - 2014-10-29 03:34 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe 2015-04-03 19:55 - 2014-10-29 03:31 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl 2015-04-03 19:55 - 2014-10-29 03:29 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll 2015-04-03 19:55 - 2014-10-29 03:27 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercpl.dll 2015-04-03 19:55 - 2014-10-29 03:26 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimofcodec.dll 2015-04-03 19:55 - 2014-10-29 03:25 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlhtml.dll 2015-04-03 19:55 - 2014-10-29 03:21 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll 2015-04-03 19:55 - 2014-10-29 03:21 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2015-04-03 19:55 - 2014-10-29 03:20 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll 2015-04-03 19:55 - 2014-10-29 03:20 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll 2015-04-03 19:55 - 2014-10-29 03:20 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll 2015-04-03 19:55 - 2014-10-29 03:19 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2015-04-03 19:55 - 2014-10-29 03:16 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vault.dll 2015-04-03 19:55 - 2014-10-29 03:16 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2015-04-03 19:55 - 2014-10-29 03:16 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtstocom.exe 2015-04-03 19:55 - 2014-10-29 03:15 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll 2015-04-03 19:55 - 2014-10-29 03:13 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll 2015-04-03 19:55 - 2014-10-29 03:06 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll 2015-04-03 19:55 - 2014-10-29 03:03 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll 2015-04-03 19:55 - 2014-10-29 03:03 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe 2015-04-03 19:55 - 2014-10-29 03:00 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll 2015-04-03 19:55 - 2014-10-29 02:58 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txflog.dll 2015-04-03 19:55 - 2014-10-29 02:57 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtstocom.exe 2015-04-03 19:55 - 2014-10-29 02:55 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll 2015-04-03 19:55 - 2014-10-29 02:55 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll 2015-04-03 19:55 - 2014-10-29 02:55 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll 2015-04-03 19:55 - 2014-10-29 02:54 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2015-04-03 19:55 - 2014-10-29 02:52 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2015-04-03 19:55 - 2014-10-29 02:45 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstask.dll 2015-04-03 19:55 - 2014-10-29 02:44 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll 2015-04-03 19:55 - 2014-10-29 02:35 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2015-04-03 19:54 - 2014-10-29 06:04 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll 2015-04-03 19:54 - 2014-10-29 05:11 - 00099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2015-04-03 19:54 - 2014-10-29 05:10 - 00094464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe 2015-04-03 19:54 - 2014-10-29 05:09 - 00017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe 2015-04-03 19:54 - 2014-10-29 05:07 - 00081008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2015-04-03 19:54 - 2014-10-29 04:39 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtfwd.dll 2015-04-03 19:54 - 2014-10-29 04:34 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fms.dll 2015-04-03 19:54 - 2014-10-29 04:17 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe 2015-04-03 19:54 - 2014-10-29 04:17 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\fde.dll 2015-04-03 19:54 - 2014-10-29 04:11 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdlgs.dll 2015-04-03 19:54 - 2014-10-29 04:09 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll 2015-04-03 19:54 - 2014-10-29 04:08 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll 2015-04-03 19:54 - 2014-10-29 04:06 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll 2015-04-03 19:54 - 2014-10-29 04:03 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpw32.dll 2015-04-03 19:54 - 2014-10-29 04:03 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SoundRecorder.exe 2015-04-03 19:54 - 2014-10-29 04:01 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll 2015-04-03 19:54 - 2014-10-29 03:57 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll 2015-04-03 19:54 - 2014-10-29 03:56 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll 2015-04-03 19:54 - 2014-10-29 03:55 - 00142848 _____ () C:\WINDOWS\system32\OEMLicense.dll 2015-04-03 19:54 - 2014-10-29 03:51 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oledlg.dll 2015-04-03 19:54 - 2014-10-29 03:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcompos.dll 2015-04-03 19:54 - 2014-10-29 03:50 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcecompact40.dll 2015-04-03 19:54 - 2014-10-29 03:50 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx 2015-04-03 19:54 - 2014-10-29 03:49 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll 2015-04-03 19:54 - 2014-10-29 03:49 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cca.dll 2015-04-03 19:54 - 2014-10-29 03:48 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll 2015-04-03 19:54 - 2014-10-29 03:47 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassvcs.dll 2015-04-03 19:54 - 2014-10-29 03:46 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mycomput.dll 2015-04-03 19:54 - 2014-10-29 03:46 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Kswdmcap.ax 2015-04-03 19:54 - 2014-10-29 03:45 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPSTAT.EXE 2015-04-03 19:54 - 2014-10-29 03:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mpeg2Data.ax 2015-04-03 19:54 - 2014-10-29 03:45 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDvbNP.ax 2015-04-03 19:54 - 2014-10-29 03:44 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll 2015-04-03 19:54 - 2014-10-29 03:43 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elshyph.dll 2015-04-03 19:54 - 2014-10-29 03:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advpack.dll 2015-04-03 19:54 - 2014-10-29 03:38 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmgp.dll 2015-04-03 19:54 - 2014-10-29 03:38 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fde.dll 2015-04-03 19:54 - 2014-10-29 03:32 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll 2015-04-03 19:54 - 2014-10-29 03:31 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll 2015-04-03 19:54 - 2014-10-29 03:26 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll 2015-04-03 19:54 - 2014-10-29 03:26 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QAGENT.DLL 2015-04-03 19:54 - 2014-10-29 03:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceWiaCompat.dll 2015-04-03 19:54 - 2014-10-29 03:23 - 00107008 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2015-04-03 19:54 - 2014-10-29 03:21 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2015-04-03 19:54 - 2014-10-29 03:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll 2015-04-03 19:54 - 2014-10-29 03:21 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdprov.dll 2015-04-03 19:54 - 2014-10-29 03:17 - 00303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll 2015-04-03 19:54 - 2014-10-29 03:14 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2015-04-03 19:54 - 2014-10-29 03:14 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll 2015-04-03 19:54 - 2014-10-29 03:05 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2015-04-03 19:54 - 2014-10-29 03:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhst3g.exe 2015-04-03 19:54 - 2014-10-29 02:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidcom.dll 2015-04-03 19:54 - 2014-10-29 02:59 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comrepl.dll 2015-04-03 19:54 - 2014-10-29 02:58 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1.dll 2015-04-03 19:54 - 2014-10-29 02:58 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2015-04-03 19:54 - 2014-10-29 02:55 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsAuth.dll 2015-04-03 19:54 - 2014-10-29 02:49 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll 2015-04-03 19:54 - 2014-10-29 02:46 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2015-04-03 19:54 - 2014-10-29 02:46 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll 2015-04-03 19:54 - 2014-10-29 02:43 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll 2015-04-03 19:54 - 2014-10-29 02:41 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl 2015-04-03 19:54 - 2014-10-29 02:30 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2015-04-03 19:53 - 2014-10-29 06:04 - 00224600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll 2015-04-03 19:53 - 2014-10-29 05:57 - 00089816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll 2015-04-03 19:53 - 2014-10-29 05:52 - 00090880 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2015-04-03 19:53 - 2014-10-29 05:15 - 00165728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll 2015-04-03 19:53 - 2014-10-29 05:07 - 00089816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll 2015-04-03 19:53 - 2014-10-29 04:33 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2015-04-03 19:53 - 2014-10-29 04:22 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\advpack.dll 2015-04-03 19:53 - 2014-10-29 04:22 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll 2015-04-03 19:53 - 2014-10-29 04:21 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax 2015-04-03 19:53 - 2014-10-29 04:20 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\desk.cpl 2015-04-03 19:53 - 2014-10-29 04:17 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe 2015-04-03 19:53 - 2014-10-29 04:13 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll 2015-04-03 19:53 - 2014-10-29 04:07 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl 2015-04-03 19:53 - 2014-10-29 04:06 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll 2015-04-03 19:53 - 2014-10-29 04:04 - 00546304 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll 2015-04-03 19:53 - 2014-10-29 04:03 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll 2015-04-03 19:53 - 2014-10-29 03:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radardt.dll 2015-04-03 19:53 - 2014-10-29 03:57 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll 2015-04-03 19:53 - 2014-10-29 03:53 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll 2015-04-03 19:53 - 2014-10-29 03:51 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmscript.dll 2015-04-03 19:53 - 2014-10-29 03:51 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2015-04-03 19:53 - 2014-10-29 03:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avifil32.dll 2015-04-03 19:53 - 2014-10-29 03:43 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll 2015-04-03 19:53 - 2014-10-29 03:43 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2015-04-03 19:53 - 2014-10-29 03:31 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2015-04-03 19:53 - 2014-10-29 03:31 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagprv.dll 2015-04-03 19:53 - 2014-10-29 03:31 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll 2015-04-03 19:53 - 2014-10-29 03:30 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll 2015-04-03 19:53 - 2014-10-29 03:28 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpw32.dll 2015-04-03 19:53 - 2014-10-29 03:27 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptuiwizard.dll 2015-04-03 19:53 - 2014-10-29 03:27 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2015-04-03 19:53 - 2014-10-29 03:27 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.dll 2015-04-03 19:53 - 2014-10-29 03:25 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL 2015-04-03 19:53 - 2014-10-29 03:24 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceWMDRM.dll 2015-04-03 19:53 - 2014-10-29 03:22 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rekeywiz.exe 2015-04-03 19:53 - 2014-10-29 03:22 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShServiceObj.dll 2015-04-03 19:53 - 2014-10-29 03:21 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\trkwks.dll 2015-04-03 19:53 - 2014-10-29 03:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll 2015-04-03 19:53 - 2014-10-29 03:20 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll 2015-04-03 19:53 - 2014-10-29 03:19 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll 2015-04-03 19:53 - 2014-10-29 03:10 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2015-04-03 19:53 - 2014-10-29 03:05 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loadperf.dll 2015-04-03 19:53 - 2014-10-29 03:04 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe 2015-04-03 19:53 - 2014-10-29 02:59 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2015-04-03 19:53 - 2014-10-29 02:59 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2015-04-03 19:53 - 2014-10-29 02:55 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2015-04-03 19:53 - 2014-10-29 02:47 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll 2015-04-03 19:53 - 2014-10-29 02:45 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfapi.dll 2015-04-03 19:53 - 2014-10-29 02:44 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll 2015-04-03 19:52 - 2014-10-29 05:06 - 00074824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2015-04-03 19:52 - 2014-10-29 04:45 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2015-04-03 19:52 - 2014-10-29 04:33 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2015-04-03 19:52 - 2014-10-29 04:06 - 00113664 _____ (Microsoft) C:\WINDOWS\system32\SMBHelperClass.dll 2015-04-03 19:52 - 2014-10-29 03:54 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanHC.dll 2015-04-03 19:52 - 2014-10-29 03:51 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll 2015-04-03 19:52 - 2014-10-29 03:44 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2015-04-03 19:52 - 2014-10-29 03:09 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafupnp.dll 2015-04-03 19:52 - 2014-10-29 03:06 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2015-04-03 19:52 - 2014-10-29 03:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll 2015-04-03 19:52 - 2014-10-29 02:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll 2015-04-03 19:52 - 2014-10-29 02:51 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll 2015-04-03 19:52 - 2014-10-29 02:42 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl 2015-04-03 14:31 - 2014-10-29 03:47 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2015-04-03 14:30 - 2014-10-29 06:09 - 00191032 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2015-04-03 14:30 - 2014-10-29 06:04 - 00093000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll 2015-04-03 14:30 - 2014-10-29 05:57 - 00116696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2015-04-03 14:30 - 2014-10-29 05:53 - 00080528 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2015-04-03 14:30 - 2014-10-29 05:52 - 00100672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2015-04-03 14:30 - 2014-10-29 05:15 - 00156992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll 2015-04-03 14:30 - 2014-10-29 05:11 - 00076912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll 2015-04-03 14:30 - 2014-10-29 04:32 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\avifil32.dll 2015-04-03 14:30 - 2014-10-29 04:29 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll 2015-04-03 14:30 - 2014-10-29 04:28 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2015-04-03 14:30 - 2014-10-29 04:27 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2015-04-03 14:30 - 2014-10-29 04:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll 2015-04-03 14:30 - 2014-10-29 04:25 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe 2015-04-03 14:30 - 2014-10-29 04:22 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2015-04-03 14:30 - 2014-10-29 04:19 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsigd.dll 2015-04-03 14:30 - 2014-10-29 04:17 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmgp.dll 2015-04-03 14:30 - 2014-10-29 04:17 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfhcdiscovery.dll 2015-04-03 14:30 - 2014-10-29 04:17 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll 2015-04-03 14:30 - 2014-10-29 04:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfetw.dll 2015-04-03 14:30 - 2014-10-29 04:10 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll 2015-04-03 14:30 - 2014-10-29 04:08 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagprv.dll 2015-04-03 14:30 - 2014-10-29 04:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndishc.dll 2015-04-03 14:30 - 2014-10-29 04:04 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe 2015-04-03 14:30 - 2014-10-29 04:03 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SSShim.dll 2015-04-03 14:30 - 2014-10-29 04:01 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnshc.dll 2015-04-03 14:30 - 2014-10-29 03:58 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL 2015-04-03 14:30 - 2014-10-29 03:57 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldpc.dll 2015-04-03 14:30 - 2014-10-29 03:55 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe 2015-04-03 14:30 - 2014-10-29 03:54 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll 2015-04-03 14:30 - 2014-10-29 03:53 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prncache.dll 2015-04-03 14:30 - 2014-10-29 03:52 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrahc.dll 2015-04-03 14:30 - 2014-10-29 03:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvfw32.dll 2015-04-03 14:30 - 2014-10-29 03:51 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2015-04-03 14:30 - 2014-10-29 03:48 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifier.exe 2015-04-03 14:30 - 2014-10-29 03:48 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll 2015-04-03 14:30 - 2014-10-29 03:46 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccp32.dll 2015-04-03 14:30 - 2014-10-29 03:45 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsuiext.dll 2015-04-03 14:30 - 2014-10-29 03:43 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll 2015-04-03 14:30 - 2014-10-29 03:43 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bdaplgin.ax 2015-04-03 14:30 - 2014-10-29 03:41 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.dll 2015-04-03 14:30 - 2014-10-29 03:41 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kstvtune.ax 2015-04-03 14:30 - 2014-10-29 03:40 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll 2015-04-03 14:30 - 2014-10-29 03:38 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe 2015-04-03 14:30 - 2014-10-29 03:32 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll 2015-04-03 14:30 - 2014-10-29 03:29 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll 2015-04-03 14:30 - 2014-10-29 03:28 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotepg.dll 2015-04-03 14:30 - 2014-10-29 03:27 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll 2015-04-03 14:30 - 2014-10-29 03:27 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll 2015-04-03 14:30 - 2014-10-29 03:26 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll 2015-04-03 14:30 - 2014-10-29 03:25 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll 2015-04-03 14:30 - 2014-10-29 03:22 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2015-04-03 14:30 - 2014-10-29 03:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll 2015-04-03 14:30 - 2014-10-29 03:20 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2015-04-03 14:30 - 2014-10-29 03:19 - 00092672 _____ (Microsoft) C:\WINDOWS\system32\VaultRoaming.dll 2015-04-03 14:30 - 2014-10-29 03:17 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl 2015-04-03 14:30 - 2014-10-29 03:17 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll 2015-04-03 14:30 - 2014-10-29 03:16 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll 2015-04-03 14:30 - 2014-10-29 03:15 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsuiext.dll 2015-04-03 14:30 - 2014-10-29 03:14 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapsvc.dll 2015-04-03 14:30 - 2014-10-29 03:12 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2015-04-03 14:30 - 2014-10-29 03:10 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll 2015-04-03 14:30 - 2014-10-29 03:07 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unregmp2.exe 2015-04-03 14:30 - 2014-10-29 03:05 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll 2015-04-03 14:30 - 2014-10-29 03:03 - 00968192 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll 2015-04-03 14:30 - 2014-10-29 03:00 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll 2015-04-03 14:30 - 2014-10-29 02:57 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll 2015-04-03 14:30 - 2014-10-29 02:57 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll 2015-04-03 14:30 - 2014-10-29 02:56 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2015-04-03 14:30 - 2014-10-29 02:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AepRoam.dll 2015-04-03 14:30 - 2014-10-29 02:53 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll 2015-04-03 14:30 - 2014-10-29 02:51 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl 2015-04-03 14:30 - 2014-10-29 02:48 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll 2015-04-03 14:30 - 2014-10-29 02:40 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2015-04-03 14:29 - 2014-10-29 06:10 - 00084184 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe 2015-04-03 14:29 - 2014-10-29 06:04 - 00197832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssenh.dll 2015-04-03 14:29 - 2014-10-29 06:04 - 00097608 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll 2015-04-03 14:29 - 2014-10-29 06:03 - 00196928 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2015-04-03 14:29 - 2014-10-29 05:59 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2015-04-03 14:29 - 2014-10-29 05:57 - 00098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2015-04-03 14:29 - 2014-10-29 05:52 - 00101736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfAACEnc.dll 2015-04-03 14:29 - 2014-10-29 05:18 - 00255136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll 2015-04-03 14:29 - 2014-10-29 05:15 - 00168256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2015-04-03 14:29 - 2014-10-29 05:15 - 00099104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptxml.dll 2015-04-03 14:29 - 2014-10-29 05:15 - 00073840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll 2015-04-03 14:29 - 2014-10-29 05:15 - 00051608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll 2015-04-03 14:29 - 2014-10-29 05:07 - 00110512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2015-04-03 14:29 - 2014-10-29 05:07 - 00018040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll 2015-04-03 14:29 - 2014-10-29 05:06 - 00090368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfAACEnc.dll 2015-04-03 14:29 - 2014-10-29 04:45 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2015-04-03 14:29 - 2014-10-29 04:45 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2015-04-03 14:29 - 2014-10-29 04:44 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolss.dll 2015-04-03 14:29 - 2014-10-29 04:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmapi.dll 2015-04-03 14:29 - 2014-10-29 04:42 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll 2015-04-03 14:29 - 2014-10-29 04:41 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll 2015-04-03 14:29 - 2014-10-29 04:40 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2015-04-03 14:29 - 2014-10-29 04:31 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe 2015-04-03 14:29 - 2014-10-29 04:31 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx 2015-04-03 14:29 - 2014-10-29 04:31 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll 2015-04-03 14:29 - 2014-10-29 04:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll 2015-04-03 14:29 - 2014-10-29 04:27 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll 2015-04-03 14:29 - 2014-10-29 04:26 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax 2015-04-03 14:29 - 2014-10-29 04:26 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2015-04-03 14:29 - 2014-10-29 04:25 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll 2015-04-03 14:29 - 2014-10-29 04:24 - 00788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr 2015-04-03 14:29 - 2014-10-29 04:24 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fphc.dll 2015-04-03 14:29 - 2014-10-29 04:24 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2015-04-03 14:29 - 2014-10-29 04:23 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll 2015-04-03 14:29 - 2014-10-29 04:20 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2015-04-03 14:29 - 2014-10-29 04:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3ui.dll 2015-04-03 14:29 - 2014-10-29 04:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll 2015-04-03 14:29 - 2014-10-29 04:19 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinMsoIrmProtector.dll 2015-04-03 14:29 - 2014-10-29 04:19 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinOpcIrmProtector.dll 2015-04-03 14:29 - 2014-10-29 04:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SNTSearch.dll 2015-04-03 14:29 - 2014-10-29 04:17 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdart.dll 2015-04-03 14:29 - 2014-10-29 04:17 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\correngine.dll 2015-04-03 14:29 - 2014-10-29 04:17 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\playlistfolder.dll 2015-04-03 14:29 - 2014-10-29 04:16 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\eudcedit.exe 2015-04-03 14:29 - 2014-10-29 04:16 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconfig.exe 2015-04-03 14:29 - 2014-10-29 04:12 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceStatus.dll 2015-04-03 14:29 - 2014-10-29 04:12 - 00096256 _____ () C:\WINDOWS\system32\BthpanContextHandler.dll 2015-04-03 14:29 - 2014-10-29 04:09 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll 2015-04-03 14:29 - 2014-10-29 04:07 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorShell.dll 2015-04-03 14:29 - 2014-10-29 04:06 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe 2015-04-03 14:29 - 2014-10-29 04:05 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\systeminfo.exe 2015-04-03 14:29 - 2014-10-29 04:04 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll 2015-04-03 14:29 - 2014-10-29 04:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll 2015-04-03 14:29 - 2014-10-29 04:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SPInf.dll 2015-04-03 14:29 - 2014-10-29 04:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2015-04-03 14:29 - 2014-10-29 03:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll 2015-04-03 14:29 - 2014-10-29 03:59 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll 2015-04-03 14:29 - 2014-10-29 03:58 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2015-04-03 14:29 - 2014-10-29 03:58 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2015-04-03 14:29 - 2014-10-29 03:57 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.dll 2015-04-03 14:29 - 2014-10-29 03:57 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\raserver.exe 2015-04-03 14:29 - 2014-10-29 03:57 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssdpapi.dll 2015-04-03 14:29 - 2014-10-29 03:56 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiashext.dll 2015-04-03 14:29 - 2014-10-29 03:56 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlandlg.dll 2015-04-03 14:29 - 2014-10-29 03:56 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtfwd.dll 2015-04-03 14:29 - 2014-10-29 03:56 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2015-04-03 14:29 - 2014-10-29 03:55 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\rekeywiz.exe 2015-04-03 14:29 - 2014-10-29 03:54 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll 2015-04-03 14:29 - 2014-10-29 03:53 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2015-04-03 14:29 - 2014-10-29 03:53 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winethc.dll 2015-04-03 14:29 - 2014-10-29 03:52 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fms.dll 2015-04-03 14:29 - 2014-10-29 03:51 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsdmo.dll 2015-04-03 14:29 - 2014-10-29 03:51 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\logagent.exe 2015-04-03 14:29 - 2014-10-29 03:46 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2015-04-03 14:29 - 2014-10-29 03:46 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2015-04-03 14:29 - 2014-10-29 03:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksxbar.ax 2015-04-03 14:29 - 2014-10-29 03:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll 2015-04-03 14:29 - 2014-10-29 03:41 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\modemui.dll 2015-04-03 14:29 - 2014-10-29 03:40 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\desk.cpl 2015-04-03 14:29 - 2014-10-29 03:40 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinMsoIrmProtector.dll 2015-04-03 14:29 - 2014-10-29 03:40 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinOpcIrmProtector.dll 2015-04-03 14:29 - 2014-10-29 03:39 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsigd.dll 2015-04-03 14:29 - 2014-10-29 03:39 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll 2015-04-03 14:29 - 2014-10-29 03:38 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdart.dll 2015-04-03 14:29 - 2014-10-29 03:34 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dccw.exe 2015-04-03 14:29 - 2014-10-29 03:34 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceStatus.dll 2015-04-03 14:29 - 2014-10-29 03:34 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll 2015-04-03 14:29 - 2014-10-29 03:32 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe 2015-04-03 14:29 - 2014-10-29 03:30 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssadmin.exe 2015-04-03 14:29 - 2014-10-29 03:30 - 00085504 _____ (Microsoft) C:\WINDOWS\SysWOW64\SMBHelperClass.dll 2015-04-03 14:29 - 2014-10-29 03:29 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll 2015-04-03 14:29 - 2014-10-29 03:29 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systeminfo.exe 2015-04-03 14:29 - 2014-10-29 03:28 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe 2015-04-03 14:29 - 2014-10-29 03:27 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2015-04-03 14:29 - 2014-10-29 03:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll 2015-04-03 14:29 - 2014-10-29 03:26 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll 2015-04-03 14:29 - 2014-10-29 03:26 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\uexfat.dll 2015-04-03 14:29 - 2014-10-29 03:26 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecapi.dll 2015-04-03 14:29 - 2014-10-29 03:26 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeservice.dll Code:
ATTFilter 2015-04-03 14:29 - 2014-10-29 03:25 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2015-04-03 14:29 - 2014-10-29 03:25 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecutil.exe 2015-04-03 14:29 - 2014-10-29 03:24 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiashext.dll 2015-04-03 14:29 - 2014-10-29 03:24 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll 2015-04-03 14:29 - 2014-10-29 03:24 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raserver.exe 2015-04-03 14:29 - 2014-10-29 03:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll 2015-04-03 14:29 - 2014-10-29 03:21 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\alg.exe 2015-04-03 14:29 - 2014-10-29 03:21 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdi.dll 2015-04-03 14:29 - 2014-10-29 03:21 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll 2015-04-03 14:29 - 2014-10-29 03:21 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll 2015-04-03 14:29 - 2014-10-29 03:21 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.dll 2015-04-03 14:29 - 2014-10-29 03:21 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\threadpoolwinrt.dll 2015-04-03 14:29 - 2014-10-29 03:20 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSXP32.dll 2015-04-03 14:29 - 2014-10-29 03:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\prvdmofcomp.dll 2015-04-03 14:29 - 2014-10-29 03:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ELSCore.dll 2015-04-03 14:29 - 2014-10-29 03:19 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll 2015-04-03 14:29 - 2014-10-29 03:18 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1.dll 2015-04-03 14:29 - 2014-10-29 03:18 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2015-04-03 14:29 - 2014-10-29 03:15 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll 2015-04-03 14:29 - 2014-10-29 03:11 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll 2015-04-03 14:29 - 2014-10-29 03:09 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll 2015-04-03 14:29 - 2014-10-29 03:04 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll 2015-04-03 14:29 - 2014-10-29 03:04 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uexfat.dll 2015-04-03 14:29 - 2014-10-29 03:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll 2015-04-03 14:29 - 2014-10-29 03:03 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimofcodec.dll 2015-04-03 14:29 - 2014-10-29 03:03 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll 2015-04-03 14:29 - 2014-10-29 03:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ELSCore.dll 2015-04-03 14:29 - 2014-10-29 02:59 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2015-04-03 14:29 - 2014-10-29 02:58 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll 2015-04-03 14:29 - 2014-10-29 02:56 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2015-04-03 14:29 - 2014-10-29 02:56 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll 2015-04-03 14:29 - 2014-10-29 02:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSAppXHelper.dll 2015-04-03 14:29 - 2014-10-29 02:55 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUX.dll 2015-04-03 14:29 - 2014-10-29 02:54 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-04-03 14:29 - 2014-10-29 02:54 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2015-04-03 14:29 - 2014-10-29 02:53 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll 2015-04-03 14:29 - 2014-10-29 02:51 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceElementSource.dll 2015-04-03 14:29 - 2014-10-29 02:46 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2015-04-03 14:29 - 2014-10-29 02:45 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2015-04-03 14:29 - 2014-10-29 02:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2015-04-03 14:29 - 2014-10-29 02:43 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceClassExtension.dll 2015-04-03 14:29 - 2014-10-29 02:34 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll 2015-04-03 14:29 - 2014-10-15 10:32 - 00088896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2015-04-03 14:28 - 2014-10-29 06:09 - 00277368 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll 2015-04-03 14:28 - 2014-10-29 06:04 - 00122912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp.dll 2015-04-03 14:28 - 2014-10-29 06:00 - 00030472 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogHost.exe 2015-04-03 14:28 - 2014-10-29 05:55 - 00076432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessionmsg.exe 2015-04-03 14:28 - 2014-10-29 05:52 - 00106384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll 2015-04-03 14:28 - 2014-10-29 05:51 - 00070288 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll 2015-04-03 14:28 - 2014-10-29 05:15 - 00096032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsp.dll 2015-04-03 14:28 - 2014-10-29 05:15 - 00074352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll 2015-04-03 14:28 - 2014-10-29 05:10 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2015-04-03 14:28 - 2014-10-29 05:05 - 00052152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll 2015-04-03 14:28 - 2014-10-29 04:45 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2015-04-03 14:28 - 2014-10-29 04:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys 2015-04-03 14:28 - 2014-10-29 04:45 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rassstp.sys 2015-04-03 14:28 - 2014-10-29 04:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc_os.dll 2015-04-03 14:28 - 2014-10-29 04:44 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll 2015-04-03 14:28 - 2014-10-29 04:36 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2015-04-03 14:28 - 2014-10-29 04:35 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPolEng.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp_isv.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasdatastore.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprovisionsp.dll 2015-04-03 14:28 - 2014-10-29 04:34 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsigd.dll 2015-04-03 14:28 - 2014-10-29 04:33 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsdmo.dll 2015-04-03 14:28 - 2014-10-29 04:33 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbceip.dll 2015-04-03 14:28 - 2014-10-29 04:33 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oledlg.dll 2015-04-03 14:28 - 2014-10-29 04:33 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\KMSVC.DLL 2015-04-03 14:28 - 2014-10-29 04:32 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\g711codc.ax 2015-04-03 14:28 - 2014-10-29 04:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gacinstall.dll 2015-04-03 14:28 - 2014-10-29 04:30 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Syncreg.dll 2015-04-03 14:28 - 2014-10-29 04:29 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.exe 2015-04-03 14:28 - 2014-10-29 04:27 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2015-04-03 14:28 - 2014-10-29 04:27 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2015-04-03 14:28 - 2014-10-29 04:27 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll 2015-04-03 14:28 - 2014-10-29 04:26 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2015-04-03 14:28 - 2014-10-29 04:26 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll 2015-04-03 14:28 - 2014-10-29 04:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\QUTIL.DLL 2015-04-03 14:28 - 2014-10-29 04:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll 2015-04-03 14:28 - 2014-10-29 04:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbisurf.ax 2015-04-03 14:28 - 2014-10-29 04:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll 2015-04-03 14:28 - 2014-10-29 04:25 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr 2015-04-03 14:28 - 2014-10-29 04:25 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\iashlpr.dll 2015-04-03 14:28 - 2014-10-29 04:25 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\QCLIPROV.DLL 2015-04-03 14:28 - 2014-10-29 04:24 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr 2015-04-03 14:28 - 2014-10-29 04:24 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2015-04-03 14:28 - 2014-10-29 04:23 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll 2015-04-03 14:28 - 2014-10-29 04:23 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\scripto.dll 2015-04-03 14:28 - 2014-10-29 04:22 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\igdDiag.dll 2015-04-03 14:28 - 2014-10-29 04:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshipsec.dll 2015-04-03 14:28 - 2014-10-29 04:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll 2015-04-03 14:28 - 2014-10-29 04:18 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll 2015-04-03 14:28 - 2014-10-29 04:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiMigPlugin.dll 2015-04-03 14:28 - 2014-10-29 04:17 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2015-04-03 14:28 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe 2015-04-03 14:28 - 2014-10-29 04:17 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccu32.dll 2015-04-03 14:28 - 2014-10-29 04:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccr32.dll 2015-04-03 14:28 - 2014-10-29 04:17 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3hc.dll 2015-04-03 14:28 - 2014-10-29 04:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersGPExt.dll 2015-04-03 14:28 - 2014-10-29 04:13 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Query.dll 2015-04-03 14:28 - 2014-10-29 04:12 - 00660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dccw.exe 2015-04-03 14:28 - 2014-10-29 04:12 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAPI.dll 2015-04-03 14:28 - 2014-10-29 04:12 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WABSyncProvider.dll 2015-04-03 14:28 - 2014-10-29 04:11 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll 2015-04-03 14:28 - 2014-10-29 04:11 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\profprov.dll 2015-04-03 14:28 - 2014-10-29 04:10 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsockhc.dll 2015-04-03 14:28 - 2014-10-29 04:09 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttune.exe 2015-04-03 14:28 - 2014-10-29 04:09 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2015-04-03 14:28 - 2014-10-29 04:06 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll 2015-04-03 14:28 - 2014-10-29 04:05 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiascanprofiles.dll 2015-04-03 14:28 - 2014-10-29 04:05 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\getmac.exe 2015-04-03 14:28 - 2014-10-29 04:04 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe 2015-04-03 14:28 - 2014-10-29 04:04 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe 2015-04-03 14:28 - 2014-10-29 04:02 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe 2015-04-03 14:28 - 2014-10-29 04:00 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syncui.dll 2015-04-03 14:28 - 2014-10-29 03:59 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdadiag.dll 2015-04-03 14:28 - 2014-10-29 03:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkitemfactory.dll 2015-04-03 14:28 - 2014-10-29 03:58 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2015-04-03 14:28 - 2014-10-29 03:56 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll 2015-04-03 14:28 - 2014-10-29 03:52 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll 2015-04-03 14:28 - 2014-10-29 03:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\L2SecHC.dll 2015-04-03 14:28 - 2014-10-29 03:52 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp_isv.dll 2015-04-03 14:28 - 2014-10-29 03:52 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp.dll 2015-04-03 14:28 - 2014-10-29 03:52 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPolEng.dll 2015-04-03 14:28 - 2014-10-29 03:50 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\g711codc.ax 2015-04-03 14:28 - 2014-10-29 03:49 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx 2015-04-03 14:28 - 2014-10-29 03:48 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Syncreg.dll 2015-04-03 14:28 - 2014-10-29 03:47 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\charmap.exe 2015-04-03 14:28 - 2014-10-29 03:46 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll 2015-04-03 14:28 - 2014-10-29 03:45 - 01678336 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkexplorer.dll 2015-04-03 14:28 - 2014-10-29 03:45 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll 2015-04-03 14:28 - 2014-10-29 03:44 - 01152000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2015-04-03 14:28 - 2014-10-29 03:44 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Bubbles.scr 2015-04-03 14:28 - 2014-10-29 03:44 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mystify.scr 2015-04-03 14:28 - 2014-10-29 03:44 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Ribbons.scr 2015-04-03 14:28 - 2014-10-29 03:43 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fphc.dll 2015-04-03 14:28 - 2014-10-29 03:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scripto.dll 2015-04-03 14:28 - 2014-10-29 03:38 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2015-04-03 14:28 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe 2015-04-03 14:28 - 2014-10-29 03:38 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstp.exe 2015-04-03 14:28 - 2014-10-29 03:38 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccr32.dll 2015-04-03 14:28 - 2014-10-29 03:37 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccu32.dll 2015-04-03 14:28 - 2014-10-29 03:35 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WABSyncProvider.dll 2015-04-03 14:28 - 2014-10-29 03:34 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2015-04-03 14:28 - 2014-10-29 03:32 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttune.exe 2015-04-03 14:28 - 2014-10-29 03:32 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll 2015-04-03 14:28 - 2014-10-29 03:31 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll 2015-04-03 14:28 - 2014-10-29 03:30 - 00605696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorui.dll 2015-04-03 14:28 - 2014-10-29 03:30 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndishc.dll 2015-04-03 14:28 - 2014-10-29 03:29 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingFolder.dll 2015-04-03 14:28 - 2014-10-29 03:29 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getmac.exe 2015-04-03 14:28 - 2014-10-29 03:28 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe 2015-04-03 14:28 - 2014-10-29 03:28 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll 2015-04-03 14:28 - 2014-10-29 03:28 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli.dll 2015-04-03 14:28 - 2014-10-29 03:27 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mi.dll 2015-04-03 14:28 - 2014-10-29 03:27 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll 2015-04-03 14:28 - 2014-10-29 03:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\xcopy.exe 2015-04-03 14:28 - 2014-10-29 03:26 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll 2015-04-03 14:28 - 2014-10-29 03:26 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll 2015-04-03 14:28 - 2014-10-29 03:25 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2015-04-03 14:28 - 2014-10-29 03:25 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL 2015-04-03 14:28 - 2014-10-29 03:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2015-04-03 14:28 - 2014-10-29 03:23 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlandlg.dll 2015-04-03 14:28 - 2014-10-29 03:22 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmInit.exe 2015-04-03 14:28 - 2014-10-29 03:21 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\korwbrkr.dll 2015-04-03 14:28 - 2014-10-29 03:21 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\nduprov.dll 2015-04-03 14:28 - 2014-10-29 03:21 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll 2015-04-03 14:28 - 2014-10-29 03:19 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logagent.exe 2015-04-03 14:28 - 2014-10-29 03:19 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll 2015-04-03 14:28 - 2014-10-29 03:17 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll 2015-04-03 14:28 - 2014-10-29 03:17 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAPQEC.DLL 2015-04-03 14:28 - 2014-10-29 03:17 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll 2015-04-03 14:28 - 2014-10-29 03:16 - 01669632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkexplorer.dll 2015-04-03 14:28 - 2014-10-29 03:15 - 01129984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2015-04-03 14:28 - 2014-10-29 03:15 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll 2015-04-03 14:28 - 2014-10-29 03:06 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll 2015-04-03 14:28 - 2014-10-29 03:05 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samcli.dll 2015-04-03 14:28 - 2014-10-29 03:04 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mi.dll 2015-04-03 14:28 - 2014-10-29 03:04 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdsapi.dll 2015-04-03 14:28 - 2014-10-29 03:04 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll 2015-04-03 14:28 - 2014-10-29 03:04 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xcopy.exe 2015-04-03 14:28 - 2014-10-29 03:03 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll 2015-04-03 14:28 - 2014-10-29 03:02 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-04-03 14:28 - 2014-10-29 03:00 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\korwbrkr.dll 2015-04-03 14:28 - 2014-10-29 03:00 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdi.dll 2015-04-03 14:28 - 2014-10-29 03:00 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll 2015-04-03 14:28 - 2014-10-29 03:00 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll 2015-04-03 14:28 - 2014-10-29 02:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colbact.dll 2015-04-03 14:28 - 2014-10-29 02:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prvdmofcomp.dll 2015-04-03 14:28 - 2014-10-29 02:58 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingHost.exe 2015-04-03 14:28 - 2014-10-29 02:57 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll 2015-04-03 14:28 - 2014-10-29 02:57 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidfdp.dll 2015-04-03 14:28 - 2014-10-29 02:57 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2015-04-03 14:28 - 2014-10-29 02:54 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WfHC.dll 2015-04-03 14:28 - 2014-10-29 02:51 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2015-04-03 14:28 - 2014-10-29 02:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl 2015-04-03 14:28 - 2014-10-29 02:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eqossnap.dll 2015-04-03 14:28 - 2014-10-29 02:46 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-04-03 14:28 - 2014-10-29 02:46 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll 2015-04-03 14:28 - 2014-10-29 02:44 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll 2015-04-03 14:28 - 2014-10-29 02:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-04-03 14:28 - 2014-10-29 02:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-04-03 14:28 - 2014-10-29 02:37 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2015-04-03 14:28 - 2014-10-12 10:53 - 00054592 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll 2015-04-03 14:28 - 2014-10-07 08:44 - 00102208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2015-04-03 14:28 - 2014-08-08 18:55 - 00172344 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll 2015-04-03 14:27 - 2014-10-29 06:04 - 00149240 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll 2015-04-03 14:27 - 2014-10-29 06:04 - 00124992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptxml.dll 2015-04-03 14:27 - 2014-10-29 06:04 - 00086744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll 2015-04-03 14:27 - 2014-10-29 05:56 - 00089368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2015-04-03 14:27 - 2014-10-29 05:55 - 00067656 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcRtRemote.dll 2015-04-03 14:27 - 2014-10-29 05:55 - 00064040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32.dll 2015-04-03 14:27 - 2014-10-29 05:52 - 00022208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll 2015-04-03 14:27 - 2014-10-29 05:15 - 00110512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll 2015-04-03 14:27 - 2014-10-29 05:15 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll 2015-04-03 14:27 - 2014-10-29 05:15 - 00021696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsrole.dll 2015-04-03 14:27 - 2014-10-29 05:10 - 00052664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wtsapi32.dll 2015-04-03 14:27 - 2014-10-29 05:10 - 00052664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcRtRemote.dll 2015-04-03 14:27 - 2014-10-29 05:06 - 00080016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll 2015-04-03 14:27 - 2014-10-29 04:47 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys 2015-04-03 14:27 - 2014-10-29 04:45 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2015-04-03 14:27 - 2014-10-29 04:44 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdadiag.dll 2015-04-03 14:27 - 2014-10-29 04:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmiv2.dll 2015-04-03 14:27 - 2014-10-29 04:42 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\makecab.exe 2015-04-03 14:27 - 2014-10-29 04:37 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2015-04-03 14:27 - 2014-10-29 04:34 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll 2015-04-03 14:27 - 2014-10-29 04:34 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll 2015-04-03 14:27 - 2014-10-29 04:34 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2015-04-03 14:27 - 2014-10-29 04:34 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmloader.dll 2015-04-03 14:27 - 2014-10-29 04:33 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmsynth.dll 2015-04-03 14:27 - 2014-10-29 04:31 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll 2015-04-03 14:27 - 2014-10-29 04:30 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll 2015-04-03 14:27 - 2014-10-29 04:27 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\loghours.dll 2015-04-03 14:27 - 2014-10-29 04:27 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssec.dll 2015-04-03 14:27 - 2014-10-29 04:26 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll 2015-04-03 14:27 - 2014-10-29 04:19 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mydocs.dll 2015-04-03 14:27 - 2014-10-29 04:19 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2015-04-03 14:27 - 2014-10-29 04:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ustprov.dll 2015-04-03 14:27 - 2014-10-29 04:18 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll 2015-04-03 14:27 - 2014-10-29 04:17 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstp.exe 2015-04-03 14:27 - 2014-10-29 04:17 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2nacp.dll 2015-04-03 14:27 - 2014-10-29 04:13 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConnectedAccountState.dll 2015-04-03 14:27 - 2014-10-29 04:13 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2015-04-03 14:27 - 2014-10-29 04:12 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe 2015-04-03 14:27 - 2014-10-29 04:10 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll 2015-04-03 14:27 - 2014-10-29 04:10 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshext.dll 2015-04-03 14:27 - 2014-10-29 04:10 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\frprov.dll 2015-04-03 14:27 - 2014-10-29 04:09 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe 2015-04-03 14:27 - 2014-10-29 04:09 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll 2015-04-03 14:27 - 2014-10-29 04:09 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp 2015-04-03 14:27 - 2014-10-29 04:06 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorui.dll 2015-04-03 14:27 - 2014-10-29 04:05 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dsui.dll 2015-04-03 14:27 - 2014-10-29 04:04 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\driverquery.exe 2015-04-03 14:27 - 2014-10-29 04:04 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2015-04-03 14:27 - 2014-10-29 04:03 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe 2015-04-03 14:27 - 2014-10-29 04:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2015-04-03 14:27 - 2014-10-29 04:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc_os.dll 2015-04-03 14:27 - 2014-10-29 03:59 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe 2015-04-03 14:27 - 2014-10-29 03:59 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciavi32.dll 2015-04-03 14:27 - 2014-10-29 03:58 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\makecab.exe 2015-04-03 14:27 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdmat.dll 2015-04-03 14:27 - 2014-10-29 03:58 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlfilter.dll 2015-04-03 14:27 - 2014-10-29 03:57 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmInit.exe 2015-04-03 14:27 - 2014-10-29 03:57 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.dll 2015-04-03 14:27 - 2014-10-29 03:56 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2015-04-03 14:27 - 2014-10-29 03:54 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2015-04-03 14:27 - 2014-10-29 03:54 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll 2015-04-03 14:27 - 2014-10-29 03:54 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll 2015-04-03 14:27 - 2014-10-29 03:53 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2015-04-03 14:27 - 2014-10-29 03:53 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutil.exe 2015-04-03 14:27 - 2014-10-29 03:52 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitagent.exe 2015-04-03 14:27 - 2014-10-29 03:52 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSROUTE.dll 2015-04-03 14:27 - 2014-10-29 03:52 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-04-03 14:27 - 2014-10-29 03:51 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbceip.dll 2015-04-03 14:27 - 2014-10-29 03:51 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olecli32.dll 2015-04-03 14:27 - 2014-10-29 03:51 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasdatastore.dll 2015-04-03 14:27 - 2014-10-29 03:51 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprovisionsp.dll 2015-04-03 14:27 - 2014-10-29 03:51 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2015-04-03 14:27 - 2014-10-29 03:50 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll 2015-04-03 14:27 - 2014-10-29 03:50 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmsynth.dll 2015-04-03 14:27 - 2014-10-29 03:47 - 00186368 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm 2015-04-03 14:27 - 2014-10-29 03:47 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bootcfg.exe 2015-04-03 14:27 - 2014-10-29 03:46 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loghours.dll 2015-04-03 14:27 - 2014-10-29 03:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll 2015-04-03 14:27 - 2014-10-29 03:46 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssec.dll 2015-04-03 14:27 - 2014-10-29 03:45 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iashlpr.dll 2015-04-03 14:27 - 2014-10-29 03:45 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbui.dll 2015-04-03 14:27 - 2014-10-29 03:45 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbisurf.ax 2015-04-03 14:27 - 2014-10-29 03:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll 2015-04-03 14:27 - 2014-10-29 03:44 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3cfg.dll 2015-04-03 14:27 - 2014-10-29 03:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2015-04-03 14:27 - 2014-10-29 03:42 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll 2015-04-03 14:27 - 2014-10-29 03:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Storprop.dll 2015-04-03 14:27 - 2014-10-29 03:40 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlib.dll 2015-04-03 14:27 - 2014-10-29 03:39 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll 2015-04-03 14:27 - 2014-10-29 03:39 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiMigPlugin.dll 2015-04-03 14:27 - 2014-10-29 03:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ustprov.dll 2015-04-03 14:27 - 2014-10-29 03:38 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfhcdiscovery.dll 2015-04-03 14:27 - 2014-10-29 03:38 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll 2015-04-03 14:27 - 2014-10-29 03:38 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DfsShlEx.dll 2015-04-03 14:27 - 2014-10-29 03:38 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3hc.dll 2015-04-03 14:27 - 2014-10-29 03:38 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\playlistfolder.dll 2015-04-03 14:27 - 2014-10-29 03:35 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Query.dll 2015-04-03 14:27 - 2014-10-29 03:35 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConnectedAccountState.dll 2015-04-03 14:27 - 2014-10-29 03:34 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAPI.dll 2015-04-03 14:27 - 2014-10-29 03:33 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshext.dll 2015-04-03 14:27 - 2014-10-29 03:33 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsockhc.dll 2015-04-03 14:27 - 2014-10-29 03:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\frprov.dll 2015-04-03 14:27 - 2014-10-29 03:30 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2015-04-03 14:27 - 2014-10-29 03:30 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll 2015-04-03 14:27 - 2014-10-29 03:30 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiascanprofiles.dll 2015-04-03 14:27 - 2014-10-29 03:29 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dsui.dll 2015-04-03 14:27 - 2014-10-29 03:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe 2015-04-03 14:27 - 2014-10-29 03:29 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\driverquery.exe 2015-04-03 14:27 - 2014-10-29 03:28 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2015-04-03 14:27 - 2014-10-29 03:27 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll 2015-04-03 14:27 - 2014-10-29 03:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe 2015-04-03 14:27 - 2014-10-29 03:26 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\racpldlg.dll 2015-04-03 14:27 - 2014-10-29 03:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll 2015-04-03 14:27 - 2014-10-29 03:26 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2015-04-03 14:27 - 2014-10-29 03:25 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2015-04-03 14:27 - 2014-10-29 03:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkitemfactory.dll 2015-04-03 14:27 - 2014-10-29 03:22 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlgpclnt.dll 2015-04-03 14:27 - 2014-10-29 03:20 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\L2SecHC.dll 2015-04-03 14:27 - 2014-10-29 03:20 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll 2015-04-03 14:27 - 2014-10-29 03:20 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll 2015-04-03 14:27 - 2014-10-29 03:19 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\pautoenr.dll 2015-04-03 14:27 - 2014-10-29 03:18 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2015-04-03 14:27 - 2014-10-29 03:18 - 00184832 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe 2015-04-03 14:27 - 2014-10-29 03:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll 2015-04-03 14:27 - 2014-10-29 03:17 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2015-04-03 14:27 - 2014-10-29 03:17 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpowmi.dll 2015-04-03 14:27 - 2014-10-29 03:16 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2015-04-03 14:27 - 2014-10-29 03:16 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pnrphc.dll 2015-04-03 14:27 - 2014-10-29 03:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll 2015-04-03 14:27 - 2014-10-29 03:13 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwcfg.dll 2015-04-03 14:27 - 2014-10-29 03:12 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceConnectApi.dll 2015-04-03 14:27 - 2014-10-29 03:11 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHCPQEC.DLL 2015-04-03 14:27 - 2014-10-29 03:10 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2015-04-03 14:27 - 2014-10-29 03:05 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2015-04-03 14:27 - 2014-10-29 03:05 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll 2015-04-03 14:27 - 2014-10-29 03:05 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe 2015-04-03 14:27 - 2014-10-29 03:04 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eqossnap.dll 2015-04-03 14:27 - 2014-10-29 03:04 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net.exe 2015-04-03 14:27 - 2014-10-29 03:04 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll 2015-04-03 14:27 - 2014-10-29 03:03 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe 2015-04-03 14:27 - 2014-10-29 03:03 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecapi.dll 2015-04-03 14:27 - 2014-10-29 03:03 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll 2015-04-03 14:27 - 2014-10-29 03:02 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll 2015-04-03 14:27 - 2014-10-29 03:02 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecutil.exe 2015-04-03 14:27 - 2014-10-29 03:01 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll 2015-04-03 14:27 - 2014-10-29 03:01 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlgpclnt.dll 2015-04-03 14:27 - 2014-10-29 03:00 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.dll 2015-04-03 14:27 - 2014-10-29 03:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\threadpoolwinrt.dll 2015-04-03 14:27 - 2014-10-29 03:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll 2015-04-03 14:27 - 2014-10-29 02:58 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EAPQEC.DLL 2015-04-03 14:27 - 2014-10-29 02:58 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll 2015-04-03 14:27 - 2014-10-29 02:55 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2015-04-03 14:27 - 2014-10-29 02:54 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll 2015-04-03 14:27 - 2014-10-29 02:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll 2015-04-03 14:27 - 2014-10-29 02:46 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidfdp.dll 2015-04-03 14:27 - 2014-10-29 02:46 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingHost.exe 2015-04-03 14:27 - 2014-10-29 02:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WfHC.dll 2015-04-03 14:27 - 2014-10-29 02:35 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll 2015-04-03 14:27 - 2014-10-15 10:32 - 00061248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys 2015-04-03 14:27 - 2014-10-07 08:54 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys 2015-04-03 14:26 - 2014-10-29 06:04 - 00044368 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils.dll 2015-04-03 14:26 - 2014-10-29 05:59 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-04-03 14:26 - 2014-10-29 05:57 - 00045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe 2015-04-03 14:26 - 2014-10-29 05:57 - 00038736 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe 2015-04-03 14:26 - 2014-10-29 05:17 - 00033088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe 2015-04-03 14:26 - 2014-10-29 05:15 - 00068168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll 2015-04-03 14:26 - 2014-10-29 05:15 - 00064552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll 2015-04-03 14:26 - 2014-10-29 05:15 - 00035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netutils.dll 2015-04-03 14:26 - 2014-10-29 05:11 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraSettingsUIHost.exe 2015-04-03 14:26 - 2014-10-29 05:10 - 00040816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe 2015-04-03 14:26 - 2014-10-29 05:10 - 00034016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe 2015-04-03 14:26 - 2014-10-29 05:10 - 00030944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountBroker.exe 2015-04-03 14:26 - 2014-10-29 05:10 - 00026304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerHost.exe 2015-04-03 14:26 - 2014-10-29 04:49 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcirt.dll 2015-04-03 14:26 - 2014-10-29 04:45 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncui.dll 2015-04-03 14:26 - 2014-10-29 04:45 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2015-04-03 14:26 - 2014-10-29 04:45 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll 2015-04-03 14:26 - 2014-10-29 04:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2015-04-03 14:26 - 2014-10-29 04:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\radardt.dll 2015-04-03 14:26 - 2014-10-29 04:41 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispdiag.exe 2015-04-03 14:26 - 2014-10-29 04:36 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcshext.dll 2015-04-03 14:26 - 2014-10-29 04:35 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-04-03 14:26 - 2014-10-29 04:35 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToStatusProvider.dll 2015-04-03 14:26 - 2014-10-29 04:33 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsRdpWebAccess.dll 2015-04-03 14:26 - 2014-10-29 04:32 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagschd.dll 2015-04-03 14:26 - 2014-10-29 04:30 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciqtz32.dll 2015-04-03 14:26 - 2014-10-29 04:29 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanHC.dll 2015-04-03 14:26 - 2014-10-29 04:28 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\gcdef.dll 2015-04-03 14:26 - 2014-10-29 04:26 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll 2015-04-03 14:26 - 2014-10-29 04:25 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bidispl.dll 2015-04-03 14:26 - 2014-10-29 04:21 - 01086464 _____ (Microsoft Corporation) C:\WINDOWS\system32\onexui.dll 2015-04-03 14:26 - 2014-10-29 04:18 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\isoburn.exe 2015-04-03 14:26 - 2014-10-29 04:18 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\RegCtrl.dll 2015-04-03 14:26 - 2014-10-29 04:18 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHost.exe 2015-04-03 14:26 - 2014-10-29 04:17 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfsShlEx.dll 2015-04-03 14:26 - 2014-10-29 04:17 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll 2015-04-03 14:26 - 2014-10-29 04:17 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucmhc.dll 2015-04-03 14:26 - 2014-10-29 04:16 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabview.dll 2015-04-03 14:26 - 2014-10-29 04:13 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssoc.dll |
06.04.2015, 16:26 | #13 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter 2015-04-03 14:26 - 2014-10-29 04:12 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2015-04-03 14:26 - 2014-10-29 04:11 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\McxDriv.dll 2015-04-03 14:26 - 2014-10-29 04:11 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll 2015-04-03 14:26 - 2014-10-29 04:11 - 00053248 _____ () C:\WINDOWS\system32\BWContextHandler.dll 2015-04-03 14:26 - 2014-10-29 04:10 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.dll 2015-04-03 14:26 - 2014-10-29 04:07 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MaintenanceUI.dll 2015-04-03 14:26 - 2014-10-29 04:07 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimefilt.dll 2015-04-03 14:26 - 2014-10-29 04:06 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll 2015-04-03 14:26 - 2014-10-29 04:06 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll 2015-04-03 14:26 - 2014-10-29 04:05 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll 2015-04-03 14:26 - 2014-10-29 04:04 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe 2015-04-03 14:26 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll 2015-04-03 14:26 - 2014-10-29 04:03 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2015-04-03 14:26 - 2014-10-29 04:01 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\irftp.exe 2015-04-03 14:26 - 2014-10-29 04:01 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOM.dll 2015-04-03 14:26 - 2014-10-29 04:01 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HelpPaneProxy.dll 2015-04-03 14:26 - 2014-10-29 04:00 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll 2015-04-03 14:26 - 2014-10-29 04:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spfileq.dll 2015-04-03 14:26 - 2014-10-29 04:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows6Compat.dll 2015-04-03 14:26 - 2014-10-29 04:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2015-04-03 14:26 - 2014-10-29 03:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll 2015-04-03 14:26 - 2014-10-29 03:58 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmiv2.dll 2015-04-03 14:26 - 2014-10-29 03:58 - 00085504 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll 2015-04-03 14:26 - 2014-10-29 03:58 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NapiNSP.dll 2015-04-03 14:26 - 2014-10-29 03:58 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2015-04-03 14:26 - 2014-10-29 03:57 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\recovery.dll 2015-04-03 14:26 - 2014-10-29 03:57 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll 2015-04-03 14:26 - 2014-10-29 03:54 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcshext.dll 2015-04-03 14:26 - 2014-10-29 03:54 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avicap32.dll 2015-04-03 14:26 - 2014-10-29 03:52 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdhui.dll 2015-04-03 14:26 - 2014-10-29 03:51 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dxof.dll 2015-04-03 14:26 - 2014-10-29 03:51 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmloader.dll 2015-04-03 14:26 - 2014-10-29 03:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmband.dll 2015-04-03 14:26 - 2014-10-29 03:50 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsRdpWebAccess.dll 2015-04-03 14:26 - 2014-10-29 03:47 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gcdef.dll 2015-04-03 14:26 - 2014-10-29 03:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vfwwdm32.dll 2015-04-03 14:26 - 2014-10-29 03:45 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QUTIL.DLL 2015-04-03 14:26 - 2014-10-29 03:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bidispl.dll 2015-04-03 14:26 - 2014-10-29 03:44 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QCLIPROV.DLL 2015-04-03 14:26 - 2014-10-29 03:42 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2015-04-03 14:26 - 2014-10-29 03:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2015-04-03 14:26 - 2014-10-29 03:41 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onexui.dll 2015-04-03 14:26 - 2014-10-29 03:39 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mydocs.dll 2015-04-03 14:26 - 2014-10-29 03:39 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\isoburn.exe 2015-04-03 14:26 - 2014-10-29 03:39 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2015-04-03 14:26 - 2014-10-29 03:39 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RegCtrl.dll 2015-04-03 14:26 - 2014-10-29 03:39 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHost.exe 2015-04-03 14:26 - 2014-10-29 03:38 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2nacp.dll 2015-04-03 14:26 - 2014-10-29 03:38 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msident.dll 2015-04-03 14:26 - 2014-10-29 03:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwreg.dll 2015-04-03 14:26 - 2014-10-29 03:34 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdminst.dll 2015-04-03 14:26 - 2014-10-29 03:34 - 00054272 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll 2015-04-03 14:26 - 2014-10-29 03:34 - 00046080 _____ () C:\WINDOWS\SysWOW64\BWContextHandler.dll 2015-04-03 14:26 - 2014-10-29 03:33 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uireng.dll 2015-04-03 14:26 - 2014-10-29 03:33 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp 2015-04-03 14:26 - 2014-10-29 03:33 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.dll 2015-04-03 14:26 - 2014-10-29 03:33 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll 2015-04-03 14:26 - 2014-10-29 03:32 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2015-04-03 14:26 - 2014-10-29 03:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keymgr.dll 2015-04-03 14:26 - 2014-10-29 03:29 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe 2015-04-03 14:26 - 2014-10-29 03:29 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll 2015-04-03 14:26 - 2014-10-29 03:28 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2015-04-03 14:26 - 2014-10-29 03:28 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2015-04-03 14:26 - 2014-10-29 03:28 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax 2015-04-03 14:26 - 2014-10-29 03:27 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\system32\elslad.dll 2015-04-03 14:26 - 2014-10-29 03:27 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe 2015-04-03 14:26 - 2014-10-29 03:27 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOM.dll 2015-04-03 14:26 - 2014-10-29 03:27 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\net.exe 2015-04-03 14:26 - 2014-10-29 03:27 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe 2015-04-03 14:26 - 2014-10-29 03:25 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2015-04-03 14:26 - 2014-10-29 03:25 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlfilter.dll 2015-04-03 14:26 - 2014-10-29 03:24 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2015-04-03 14:26 - 2014-10-29 03:23 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netid.dll 2015-04-03 14:26 - 2014-10-29 03:22 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll 2015-04-03 14:26 - 2014-10-29 03:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\luainstall.dll 2015-04-03 14:26 - 2014-10-29 03:21 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.Extensions.dll 2015-04-03 14:26 - 2014-10-29 03:19 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe 2015-04-03 14:26 - 2014-10-29 03:19 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll 2015-04-03 14:26 - 2014-10-29 03:18 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RoamingSecurity.dll 2015-04-03 14:26 - 2014-10-29 03:13 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\umb.dll 2015-04-03 14:26 - 2014-10-29 03:11 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsadu.dll 2015-04-03 14:26 - 2014-10-29 03:05 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2015-04-03 14:26 - 2014-10-29 03:05 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2015-04-03 14:26 - 2014-10-29 03:04 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netsh.exe 2015-04-03 14:26 - 2014-10-29 03:04 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe 2015-04-03 14:26 - 2014-10-29 03:04 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com 2015-04-03 14:26 - 2014-10-29 03:03 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2015-04-03 14:26 - 2014-10-29 03:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll 2015-04-03 14:26 - 2014-10-29 03:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2015-04-03 14:26 - 2014-10-29 03:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.Extensions.dll 2015-04-03 14:26 - 2014-10-29 02:59 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stclient.dll 2015-04-03 14:26 - 2014-10-29 02:58 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-04-03 14:26 - 2014-10-29 02:57 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onex.dll 2015-04-03 14:26 - 2014-10-29 02:56 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwcfg.dll 2015-04-03 14:26 - 2014-10-29 02:54 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DHCPQEC.DLL 2015-04-03 14:26 - 2014-10-29 02:54 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceConnectApi.dll 2015-04-03 14:26 - 2014-10-29 02:51 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrscmd.dll 2015-04-03 14:26 - 2014-10-15 10:32 - 00921920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2015-04-03 14:25 - 2014-10-29 06:11 - 00038792 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe 2015-04-03 14:25 - 2014-10-29 06:04 - 00131648 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe 2015-04-03 14:25 - 2014-10-29 05:52 - 00029408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2015-04-03 14:25 - 2014-10-29 05:11 - 00150776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpps.dll 2015-04-03 14:25 - 2014-10-29 05:10 - 00038184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\utildll.dll 2015-04-03 14:25 - 2014-10-29 05:07 - 00039720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdmo.dll 2015-04-03 14:25 - 2014-10-29 04:44 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\spfileq.dll 2015-04-03 14:25 - 2014-10-29 04:44 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\bderepair.dll 2015-04-03 14:25 - 2014-10-29 04:44 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\cnvfat.dll 2015-04-03 14:25 - 2014-10-29 04:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2015-04-03 14:25 - 2014-10-29 04:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NapiNSP.dll 2015-04-03 14:25 - 2014-10-29 04:37 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll 2015-04-03 14:25 - 2014-10-29 04:36 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll 2015-04-03 14:25 - 2014-10-29 04:36 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll 2015-04-03 14:25 - 2014-10-29 04:35 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3dlg.dll 2015-04-03 14:25 - 2014-10-29 04:34 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2015-04-03 14:25 - 2014-10-29 04:33 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvfw32.dll 2015-04-03 14:25 - 2014-10-29 04:32 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDisplayStatusManager.dll 2015-04-03 14:25 - 2014-10-29 04:28 - 00177152 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm 2015-04-03 14:25 - 2014-10-29 04:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfwwdm32.dll 2015-04-03 14:25 - 2014-10-29 04:23 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe 2015-04-03 14:25 - 2014-10-29 04:12 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwreg.dll 2015-04-03 14:25 - 2014-10-29 04:11 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2015-04-03 14:25 - 2014-10-29 04:11 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\FdDevQuery.dll 2015-04-03 14:25 - 2014-10-29 04:09 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2015-04-03 14:25 - 2014-10-29 04:08 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll 2015-04-03 14:25 - 2014-10-29 04:07 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorPwdMgr.dll 2015-04-03 14:25 - 2014-10-29 04:06 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2015-04-03 14:25 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcirt.dll 2015-04-03 14:25 - 2014-10-29 04:02 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\signdrv.dll 2015-04-03 14:25 - 2014-10-29 03:58 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll 2015-04-03 14:25 - 2014-10-29 03:58 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rrinstaller.exe 2015-04-03 14:25 - 2014-10-29 03:56 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2015-04-03 14:25 - 2014-10-29 03:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwutl.dll 2015-04-03 14:25 - 2014-10-29 03:54 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUTILITY.dll 2015-04-03 14:25 - 2014-10-29 03:51 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2015-04-03 14:25 - 2014-10-29 03:51 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\takeown.exe 2015-04-03 14:25 - 2014-10-29 03:51 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthExt.dll 2015-04-03 14:25 - 2014-10-29 03:49 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciqtz32.dll 2015-04-03 14:25 - 2014-10-29 03:49 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceDisplayStatusManager.dll 2015-04-03 14:25 - 2014-10-29 03:48 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdl32.exe 2015-04-03 14:25 - 2014-10-29 03:47 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\console.dll 2015-04-03 14:25 - 2014-10-29 03:47 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe 2015-04-03 14:25 - 2014-10-29 03:40 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\docprop.dll 2015-04-03 14:25 - 2014-10-29 03:38 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucmhc.dll 2015-04-03 14:25 - 2014-10-29 03:38 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfetw.dll 2015-04-03 14:25 - 2014-10-29 03:37 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabview.dll 2015-04-03 14:25 - 2014-10-29 03:35 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfmon.exe 2015-04-03 14:25 - 2014-10-29 03:34 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shrpubw.exe 2015-04-03 14:25 - 2014-10-29 03:34 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll 2015-04-03 14:25 - 2014-10-29 03:33 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\btpanui.dll 2015-04-03 14:25 - 2014-10-29 03:32 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll 2015-04-03 14:25 - 2014-10-29 03:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceContextHandler.dll 2015-04-03 14:25 - 2014-10-29 03:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimefilt.dll 2015-04-03 14:25 - 2014-10-29 03:27 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HelpPaneProxy.dll 2015-04-03 14:25 - 2014-10-29 03:27 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\signdrv.dll 2015-04-03 14:25 - 2014-10-29 03:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAuthn.exe 2015-04-03 14:25 - 2014-10-29 03:26 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.Fontgroups.dll 2015-04-03 14:25 - 2014-10-29 03:26 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll 2015-04-03 14:25 - 2014-10-29 03:25 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rrinstaller.exe 2015-04-03 14:25 - 2014-10-29 03:22 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2015-04-03 14:25 - 2014-10-29 03:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimtf.dll 2015-04-03 14:25 - 2014-10-29 03:20 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll 2015-04-03 14:25 - 2014-10-29 03:19 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll 2015-04-03 14:25 - 2014-10-29 03:17 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll 2015-04-03 14:25 - 2014-10-29 03:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe 2015-04-03 14:25 - 2014-10-29 03:13 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll 2015-04-03 14:25 - 2014-10-29 03:02 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2015-04-03 14:25 - 2014-10-29 03:01 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2015-04-03 14:25 - 2014-10-29 03:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\luainstall.dll 2015-04-03 14:25 - 2014-10-29 02:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pautoenr.dll 2015-04-03 14:25 - 2014-10-29 02:58 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimtf.dll 2015-04-03 14:25 - 2014-10-29 02:55 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll 2015-04-03 14:24 - 2014-10-29 06:09 - 00044912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2015-04-03 14:24 - 2014-10-29 06:09 - 00028480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2015-04-03 14:24 - 2014-10-29 06:04 - 00080056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll 2015-04-03 14:24 - 2014-10-29 06:04 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll 2015-04-03 14:24 - 2014-10-29 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe 2015-04-03 14:24 - 2014-10-29 05:59 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2015-04-03 14:24 - 2014-10-29 05:57 - 00035664 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll 2015-04-03 14:24 - 2014-10-29 05:57 - 00031968 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordOnWakeSettingFlyout.exe 2015-04-03 14:24 - 2014-10-29 05:57 - 00029960 _____ (Microsoft Corporation) C:\WINDOWS\system32\version.dll 2015-04-03 14:24 - 2014-10-29 05:56 - 00097048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2015-04-03 14:24 - 2014-10-29 05:55 - 00033576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuntimeBroker.exe 2015-04-03 14:24 - 2014-10-29 05:53 - 00095048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll 2015-04-03 14:24 - 2014-10-29 05:51 - 00047024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2015-04-03 14:24 - 2014-10-29 05:12 - 00051096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2015-04-03 14:24 - 2014-10-29 05:11 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll 2015-04-03 14:24 - 2014-10-29 05:10 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PasswordOnWakeSettingFlyout.exe 2015-04-03 14:24 - 2014-10-29 05:10 - 00026304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\version.dll 2015-04-03 14:24 - 2014-10-29 05:07 - 00036136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm 2015-04-03 14:24 - 2014-10-29 05:07 - 00029960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm 2015-04-03 14:24 - 2014-10-29 05:07 - 00028896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm 2015-04-03 14:24 - 2014-10-29 05:07 - 00026816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2015-04-03 14:24 - 2014-10-29 04:46 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll 2015-04-03 14:24 - 2014-10-29 04:44 - 02022912 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll 2015-04-03 14:24 - 2014-10-29 04:44 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciavi32.dll 2015-04-03 14:24 - 2014-10-29 04:42 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2015-04-03 14:24 - 2014-10-29 04:42 - 00082432 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm 2015-04-03 14:24 - 2014-10-29 04:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcbcp.dll 2015-04-03 14:24 - 2014-10-29 04:41 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2015-04-03 14:24 - 2014-10-29 04:40 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2015-04-03 14:24 - 2014-10-29 04:37 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\avicap32.dll 2015-04-03 14:24 - 2014-10-29 04:36 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll 2015-04-03 14:24 - 2014-10-29 04:36 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlaySndSrv.dll 2015-04-03 14:24 - 2014-10-29 04:33 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll 2015-04-03 14:24 - 2014-10-29 04:33 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2015-04-03 14:24 - 2014-10-29 04:33 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxsstore.dll 2015-04-03 14:24 - 2014-10-29 04:33 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dswave.dll 2015-04-03 14:24 - 2014-10-29 04:29 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdchange.exe 2015-04-03 14:24 - 2014-10-29 04:28 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccp32.dll 2015-04-03 14:24 - 2014-10-29 04:27 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll 2015-04-03 14:24 - 2014-10-29 04:27 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsvd.dll 2015-04-03 14:24 - 2014-10-29 04:27 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dtsh.dll 2015-04-03 14:24 - 2014-10-29 04:26 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll 2015-04-03 14:24 - 2014-10-29 04:25 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3cfg.dll 2015-04-03 14:24 - 2014-10-29 04:25 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.dll 2015-04-03 14:24 - 2014-10-29 04:24 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.exe 2015-04-03 14:24 - 2014-10-29 04:21 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimeprovider.dll 2015-04-03 14:24 - 2014-10-29 04:19 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll 2015-04-03 14:24 - 2014-10-29 04:18 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2015-04-03 14:24 - 2014-10-29 04:18 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\ThumbnailExtractionHost.exe 2015-04-03 14:24 - 2014-10-29 04:17 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe 2015-04-03 14:24 - 2014-10-29 04:17 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2015-04-03 14:24 - 2014-10-29 04:17 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\hcproviders.dll 2015-04-03 14:24 - 2014-10-29 04:17 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tvratings.dll 2015-04-03 14:24 - 2014-10-29 04:16 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwsso.dll 2015-04-03 14:24 - 2014-10-29 04:13 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe 2015-04-03 14:24 - 2014-10-29 04:12 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\shrpubw.exe 2015-04-03 14:24 - 2014-10-29 04:11 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll 2015-04-03 14:24 - 2014-10-29 04:11 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\btpanui.dll 2015-04-03 14:24 - 2014-10-29 04:10 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll 2015-04-03 14:24 - 2014-10-29 04:09 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeXmlParser.dll 2015-04-03 14:24 - 2014-10-29 04:09 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceContextHandler.dll 2015-04-03 14:24 - 2014-10-29 04:08 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll 2015-04-03 14:24 - 2014-10-29 04:04 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll 2015-04-03 14:24 - 2014-10-29 04:02 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe 2015-04-03 14:24 - 2014-10-29 04:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2015-04-03 14:24 - 2014-10-29 04:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortServer2003Compat.dll 2015-04-03 14:24 - 2014-10-29 04:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll 2015-04-03 14:24 - 2014-10-29 03:59 - 02013696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll 2015-04-03 14:24 - 2014-10-29 03:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll 2015-04-03 14:24 - 2014-10-29 03:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtffilt.dll 2015-04-03 14:24 - 2014-10-29 03:58 - 00069120 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm 2015-04-03 14:24 - 2014-10-29 03:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmmon32.exe 2015-04-03 14:24 - 2014-10-29 03:57 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2015-04-03 14:24 - 2014-10-29 03:56 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll 2015-04-03 14:24 - 2014-10-29 03:54 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll 2015-04-03 14:24 - 2014-10-29 03:54 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll 2015-04-03 14:24 - 2014-10-29 03:53 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\traffic.dll 2015-04-03 14:24 - 2014-10-29 03:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzSqlExt.dll 2015-04-03 14:24 - 2014-10-29 03:52 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3dlg.dll 2015-04-03 14:24 - 2014-10-29 03:52 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToStatusProvider.dll 2015-04-03 14:24 - 2014-10-29 03:51 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msports.dll 2015-04-03 14:24 - 2014-10-29 03:51 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olesvr32.dll 2015-04-03 14:24 - 2014-10-29 03:48 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl 2015-04-03 14:24 - 2014-10-29 03:48 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll 2015-04-03 14:24 - 2014-10-29 03:48 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whoami.exe 2015-04-03 14:24 - 2014-10-29 03:48 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdchange.exe 2015-04-03 14:24 - 2014-10-29 03:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSTheme.exe 2015-04-03 14:24 - 2014-10-29 03:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll 2015-04-03 14:24 - 2014-10-29 03:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.dll 2015-04-03 14:24 - 2014-10-29 03:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngprovider.dll 2015-04-03 14:24 - 2014-10-29 03:43 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capiprovider.dll 2015-04-03 14:24 - 2014-10-29 03:43 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adprovider.dll 2015-04-03 14:24 - 2014-10-29 03:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredprovider.dll 2015-04-03 14:24 - 2014-10-29 03:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapiprovider.dll 2015-04-03 14:24 - 2014-10-29 03:40 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhsetup.dll 2015-04-03 14:24 - 2014-10-29 03:39 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ThumbnailExtractionHost.exe 2015-04-03 14:24 - 2014-10-29 03:38 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl 2015-04-03 14:24 - 2014-10-29 03:38 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsadu.dll 2015-04-03 14:24 - 2014-10-29 03:38 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hcproviders.dll 2015-04-03 14:24 - 2014-10-29 03:34 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FdDevQuery.dll 2015-04-03 14:24 - 2014-10-29 03:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmonui.dll 2015-04-03 14:24 - 2014-10-29 03:31 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorPwdMgr.dll 2015-04-03 14:24 - 2014-10-29 03:29 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll 2015-04-03 14:24 - 2014-10-29 03:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2015-04-03 14:24 - 2014-10-29 03:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll 2015-04-03 14:24 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll 2015-04-03 14:24 - 2014-10-29 03:26 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll 2015-04-03 14:24 - 2014-10-29 03:26 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe 2015-04-03 14:24 - 2014-10-29 03:25 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll 2015-04-03 14:24 - 2014-10-29 03:24 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll 2015-04-03 14:24 - 2014-10-29 03:22 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll 2015-04-03 14:24 - 2014-10-29 03:21 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Portable.dll 2015-04-03 14:24 - 2014-10-29 03:19 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmbmgr.dll 2015-04-03 14:24 - 2014-10-29 03:14 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\certCredProvider.dll 2015-04-03 14:24 - 2014-10-29 03:14 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityServicePal.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elslad.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrscmd.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hbaapi.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe 2015-04-03 14:24 - 2014-10-29 03:05 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndiscapCfg.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotect.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll 2015-04-03 14:24 - 2014-10-29 03:05 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax 2015-04-03 14:24 - 2014-10-29 03:04 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe 2015-04-03 14:24 - 2014-10-29 03:04 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setx.exe 2015-04-03 14:24 - 2014-10-29 03:03 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.Fontgroups.dll 2015-04-03 14:24 - 2014-10-29 03:03 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe 2015-04-03 14:24 - 2014-10-29 03:02 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanext.exe 2015-04-03 14:24 - 2014-10-29 03:01 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll 2015-04-03 14:24 - 2014-10-29 03:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2015-04-03 14:24 - 2014-10-29 03:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Portable.dll 2015-04-03 14:24 - 2014-10-29 03:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elsTrans.dll 2015-04-03 14:24 - 2014-10-29 02:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll 2015-04-03 14:24 - 2014-10-29 02:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSModuleDiscoveryProvider.dll 2015-04-03 14:24 - 2014-10-29 02:57 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2015-04-03 14:24 - 2014-10-29 02:57 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll 2015-04-03 14:24 - 2014-10-29 02:56 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationProxy.dll 2015-04-03 14:24 - 2014-10-29 02:56 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2015-04-03 14:24 - 2014-10-29 02:53 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2015-04-03 14:24 - 2014-10-29 02:51 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndiscapCfg.dll 2015-04-03 14:24 - 2014-10-29 02:45 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll 2015-04-03 14:24 - 2014-10-29 02:43 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2015-04-03 14:23 - 2014-10-29 06:04 - 00025352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole.dll 2015-04-03 14:23 - 2014-10-29 05:57 - 00027872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2015-04-03 14:23 - 2014-10-29 05:56 - 00061208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys 2015-04-03 14:23 - 2014-10-29 05:56 - 00049944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys 2015-04-03 14:23 - 2014-10-29 05:55 - 00043888 _____ (Microsoft Corporation) C:\WINDOWS\system32\utildll.dll 2015-04-03 14:23 - 2014-10-29 05:52 - 00041880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm 2015-04-03 14:23 - 2014-10-29 05:52 - 00035664 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm 2015-04-03 14:23 - 2014-10-29 05:51 - 00033032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll 2015-04-03 14:23 - 2014-10-29 05:51 - 00031528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptbase.dll 2015-04-03 14:23 - 2014-10-29 05:51 - 00024800 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll 2015-04-03 14:23 - 2014-10-29 05:05 - 00020120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll 2015-04-03 14:23 - 2014-10-29 04:48 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2015-04-03 14:23 - 2014-10-29 04:45 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys 2015-04-03 14:23 - 2014-10-29 04:43 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\repair-bde.exe 2015-04-03 14:23 - 2014-10-29 04:42 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdmat.dll 2015-04-03 14:23 - 2014-10-29 04:42 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\drttransport.dll 2015-04-03 14:23 - 2014-10-29 04:36 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnification.dll 2015-04-03 14:23 - 2014-10-29 04:36 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzSqlExt.dll 2015-04-03 14:23 - 2014-10-29 04:34 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll 2015-04-03 14:23 - 2014-10-29 04:33 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttunesvr.exe 2015-04-03 14:23 - 2014-10-29 04:33 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshcon.dll 2015-04-03 14:23 - 2014-10-29 04:31 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsCtfMonitor.dll 2015-04-03 14:23 - 2014-10-29 04:29 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddodiag.exe 2015-04-03 14:23 - 2014-10-29 04:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSTheme.exe 2015-04-03 14:23 - 2014-10-29 04:27 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dot3Conn.dll 2015-04-03 14:23 - 2014-10-29 04:26 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfg.exe 2015-04-03 14:23 - 2014-10-29 04:22 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll 2015-04-03 14:23 - 2014-10-29 04:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2015-04-03 14:23 - 2014-10-29 04:19 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\joy.cpl 2015-04-03 14:23 - 2014-10-29 04:18 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWGP.dll 2015-04-03 14:23 - 2014-10-29 04:18 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthMtpContextHandler.dll 2015-04-03 14:23 - 2014-10-29 04:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msident.dll 2015-04-03 14:23 - 2014-10-29 04:16 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprnext.dll 2015-04-03 14:23 - 2014-10-29 04:11 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll 2015-04-03 14:23 - 2014-10-29 04:08 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll 2015-04-03 14:23 - 2014-10-29 04:04 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScanProxy.dll 2015-04-03 14:23 - 2014-10-29 04:03 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll 2015-04-03 14:23 - 2014-10-29 04:02 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll 2015-04-03 14:23 - 2014-10-29 04:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAuthn.exe 2015-04-03 14:23 - 2014-10-29 04:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\uicom.dll 2015-04-03 14:23 - 2014-10-29 04:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2015-04-03 14:23 - 2014-10-29 03:59 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsnmp32.dll 2015-04-03 14:23 - 2014-10-29 03:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll 2015-04-03 14:23 - 2014-10-29 03:59 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\htui.dll 2015-04-03 14:23 - 2014-10-29 03:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fc.exe 2015-04-03 14:23 - 2014-10-29 03:58 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drttransport.dll 2015-04-03 14:23 - 2014-10-29 03:58 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com 2015-04-03 14:23 - 2014-10-29 03:57 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp 2015-04-03 14:23 - 2014-10-29 03:53 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlaySndSrv.dll 2015-04-03 14:23 - 2014-10-29 03:52 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmutil.dll 2015-04-03 14:23 - 2014-10-29 03:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\where.exe 2015-04-03 14:23 - 2014-10-29 03:51 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dswave.dll 2015-04-03 14:23 - 2014-10-29 03:50 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttunesvr.exe 2015-04-03 14:23 - 2014-10-29 03:50 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxsstore.dll 2015-04-03 14:23 - 2014-10-29 03:48 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicli.exe 2015-04-03 14:23 - 2014-10-29 03:48 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\forfiles.exe 2015-04-03 14:23 - 2014-10-29 03:48 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.exe 2015-04-03 14:23 - 2014-10-29 03:48 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcreate.exe 2015-04-03 14:23 - 2014-10-29 03:46 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2015-04-03 14:23 - 2014-10-29 03:46 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtsh.dll 2015-04-03 14:23 - 2014-10-29 03:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cipher.exe 2015-04-03 14:23 - 2014-10-29 03:45 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll 2015-04-03 14:23 - 2014-10-29 03:40 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe 2015-04-03 14:23 - 2014-10-29 03:38 - 00212480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cleanmgr.exe 2015-04-03 14:23 - 2014-10-29 03:38 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tvratings.dll 2015-04-03 14:23 - 2014-10-29 03:37 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprnext.dll 2015-04-03 14:23 - 2014-10-29 03:28 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe 2015-04-03 14:23 - 2014-10-29 03:28 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe 2015-04-03 14:23 - 2014-10-29 03:28 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll 2015-04-03 14:23 - 2014-10-29 03:27 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl 2015-04-03 14:23 - 2014-10-29 03:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe 2015-04-03 14:23 - 2014-10-29 03:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com 2015-04-03 14:23 - 2014-10-29 03:27 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com 2015-04-03 14:23 - 2014-10-29 03:26 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSEXT32.dll 2015-04-03 14:23 - 2014-10-29 03:26 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MirrorDrvCompat.dll 2015-04-03 14:23 - 2014-10-29 03:26 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uicom.dll 2015-04-03 14:23 - 2014-10-29 03:26 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll 2015-04-03 14:23 - 2014-10-29 03:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2015-04-03 14:23 - 2014-10-29 03:25 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtffilt.dll 2015-04-03 14:23 - 2014-10-29 03:21 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2015-04-03 14:23 - 2014-10-29 03:21 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\elsTrans.dll 2015-04-03 14:23 - 2014-10-29 03:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsjob.dll 2015-04-03 14:23 - 2014-10-29 03:16 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll 2015-04-03 14:23 - 2014-10-29 03:06 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2015-04-03 14:23 - 2014-10-29 03:05 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll 2015-04-03 14:23 - 2014-10-29 03:05 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll 2015-04-03 14:23 - 2014-10-29 03:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com 2015-04-03 14:23 - 2014-10-29 03:04 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll 2015-04-03 14:23 - 2014-10-29 03:03 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll 2015-04-03 14:23 - 2014-10-29 03:02 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2015-04-03 14:23 - 2014-10-29 03:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll 2015-04-03 14:23 - 2014-10-29 02:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpclnt.dll 2015-04-03 14:23 - 2014-10-29 02:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll 2015-04-03 14:23 - 2014-10-29 02:56 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certCredProvider.dll 2015-04-03 14:23 - 2014-10-29 02:53 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL 2015-04-03 14:23 - 2014-10-29 02:46 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSModuleDiscoveryProvider.dll 2015-04-03 14:23 - 2014-10-07 08:44 - 00069952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2015-04-03 14:22 - 2014-10-29 06:09 - 00033064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll 2015-04-03 14:22 - 2014-10-29 05:52 - 00043888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdmo.dll 2015-04-03 14:22 - 2014-10-29 05:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm 2015-04-03 14:22 - 2014-10-29 05:52 - 00025312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm 2015-04-03 14:22 - 2014-10-29 05:18 - 00029920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll 2015-04-03 14:22 - 2014-10-29 05:07 - 00022720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm 2015-04-03 14:22 - 2014-10-29 05:05 - 00030984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptbase.dll 2015-04-03 14:22 - 2014-10-29 05:05 - 00026304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll 2015-04-03 14:22 - 2014-10-29 04:45 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys 2015-04-03 14:22 - 2014-10-29 04:43 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com 2015-04-03 14:22 - 2014-10-29 04:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\comp.exe 2015-04-03 14:22 - 2014-10-29 04:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fc.exe 2015-04-03 14:22 - 2014-10-29 04:37 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2015-04-03 14:22 - 2014-10-29 04:37 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LldpNotify.dll 2015-04-03 14:22 - 2014-10-29 04:35 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll 2015-04-03 14:22 - 2014-10-29 04:33 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthpanapi.dll 2015-04-03 14:22 - 2014-10-29 04:30 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\RotMgr.dll 2015-04-03 14:22 - 2014-10-29 04:30 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.exe 2015-04-03 14:22 - 2014-10-29 04:28 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll 2015-04-03 14:22 - 2014-10-29 04:27 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2015-04-03 14:22 - 2014-10-29 04:26 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiprop.dll 2015-04-03 14:22 - 2014-10-29 04:25 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe 2015-04-03 14:22 - 2014-10-29 04:24 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2015-04-03 14:22 - 2014-10-29 04:23 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngprovider.dll 2015-04-03 14:22 - 2014-10-29 04:23 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\capiprovider.dll 2015-04-03 14:22 - 2014-10-29 04:23 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\adprovider.dll 2015-04-03 14:22 - 2014-10-29 04:23 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredprovider.dll 2015-04-03 14:22 - 2014-10-29 04:22 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2015-04-03 14:22 - 2014-10-29 04:22 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmps.dll 2015-04-03 14:22 - 2014-10-29 04:22 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapiprovider.dll 2015-04-03 14:22 - 2014-10-29 04:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\docprop.dll 2015-04-03 14:22 - 2014-10-29 04:19 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe 2015-04-03 14:22 - 2014-10-29 04:17 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsDeviceAccessRevocation.dll 2015-04-03 14:22 - 2014-10-29 04:16 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe 2015-04-03 14:22 - 2014-10-29 04:12 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfmon.exe 2015-04-03 14:22 - 2014-10-29 04:11 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uireng.dll 2015-04-03 14:22 - 2014-10-29 04:04 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\srhelper.dll 2015-04-03 14:22 - 2014-10-29 04:03 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetProxyCredential.dll 2015-04-03 14:22 - 2014-10-29 04:02 - 00423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl 2015-04-03 14:22 - 2014-10-29 03:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmpbk32.dll 2015-04-03 14:22 - 2014-10-29 03:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comp.exe 2015-04-03 14:22 - 2014-10-29 03:58 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp 2015-04-03 14:22 - 2014-10-29 03:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcbcp.dll 2015-04-03 14:22 - 2014-10-29 03:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll 2015-04-03 14:22 - 2014-10-29 03:58 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShextAutoplay.exe 2015-04-03 14:22 - 2014-10-29 03:58 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ureg.dll 2015-04-03 14:22 - 2014-10-29 03:57 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expand.exe 2015-04-03 14:22 - 2014-10-29 03:56 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll 2015-04-03 14:22 - 2014-10-29 03:56 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll 2015-04-03 14:22 - 2014-10-29 03:54 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfp.dll 2015-04-03 14:22 - 2014-10-29 03:54 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drtprov.dll 2015-04-03 14:22 - 2014-10-29 03:53 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnification.dll 2015-04-03 14:22 - 2014-10-29 03:52 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2015-04-03 14:22 - 2014-10-29 03:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasphone.exe 2015-04-03 14:22 - 2014-10-29 03:51 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe 2015-04-03 14:22 - 2014-10-29 03:51 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialer.exe 2015-04-03 14:22 - 2014-10-29 03:51 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timeout.exe 2015-04-03 14:22 - 2014-10-29 03:51 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clip.exe 2015-04-03 14:22 - 2014-10-29 03:51 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshcon.dll 2015-04-03 14:22 - 2014-10-29 03:49 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl 2015-04-03 14:22 - 2014-10-29 03:49 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll 2015-04-03 14:22 - 2014-10-29 03:48 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\waitfor.exe 2015-04-03 14:22 - 2014-10-29 03:48 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\choice.exe 2015-04-03 14:22 - 2014-10-29 03:48 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsCtfMonitor.dll 2015-04-03 14:22 - 2014-10-29 03:47 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll 2015-04-03 14:22 - 2014-10-29 03:44 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmcfg32.dll 2015-04-03 14:22 - 2014-10-29 03:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radarrs.dll 2015-04-03 14:22 - 2014-10-29 03:40 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl 2015-04-03 14:22 - 2014-10-29 03:40 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmlog.dll 2015-04-03 14:22 - 2014-10-29 03:39 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWGP.dll 2015-04-03 14:22 - 2014-10-29 03:39 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\napdsnap.dll 2015-04-03 14:22 - 2014-10-29 03:38 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmlua.dll 2015-04-03 14:22 - 2014-10-29 03:38 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runonce.exe 2015-04-03 14:22 - 2014-10-29 03:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcsPlugInService.dll 2015-04-03 14:22 - 2014-10-29 03:34 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll 2015-04-03 14:22 - 2014-10-29 03:29 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2015-04-03 14:22 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatchc.dll 2015-04-03 14:22 - 2014-10-29 03:28 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll 2015-04-03 14:22 - 2014-10-29 03:28 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\scext.dll 2015-04-03 14:22 - 2014-10-29 03:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll 2015-04-03 14:22 - 2014-10-29 03:26 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll 2015-04-03 14:22 - 2014-10-29 03:24 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2015-04-03 14:22 - 2014-10-29 03:23 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.ps.dll 2015-04-03 14:22 - 2014-10-29 03:22 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll 2015-04-03 14:22 - 2014-10-29 03:21 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll 2015-04-03 14:22 - 2014-10-29 03:21 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Display.dll 2015-04-03 14:22 - 2014-10-29 03:21 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll 2015-04-03 14:22 - 2014-10-29 03:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll 2015-04-03 14:22 - 2014-10-29 03:17 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2015-04-03 14:22 - 2014-10-29 03:15 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\FDResPub.dll 2015-04-03 14:22 - 2014-10-29 03:12 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe 2015-04-03 14:22 - 2014-10-29 03:05 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatchc.dll 2015-04-03 14:22 - 2014-10-29 03:05 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sc.exe 2015-04-03 14:22 - 2014-10-29 03:05 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfscli.dll 2015-04-03 14:22 - 2014-10-29 03:05 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32topl.dll 2015-04-03 14:22 - 2014-10-29 03:05 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll 2015-04-03 14:22 - 2014-10-29 03:05 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll 2015-04-03 14:22 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe 2015-04-03 14:22 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe 2015-04-03 14:22 - 2014-10-29 03:04 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll 2015-04-03 14:22 - 2014-10-29 03:03 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MirrorDrvCompat.dll 2015-04-03 14:22 - 2014-10-29 03:03 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypttpmeksvc.dll 2015-04-03 14:22 - 2014-10-29 03:01 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2015-04-03 14:22 - 2014-10-29 03:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxlegih.dll 2015-04-03 14:22 - 2014-10-29 03:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifs.dll 2015-04-03 14:22 - 2014-10-29 03:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxdm.dll 2015-04-03 14:22 - 2014-10-29 02:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2015-04-03 14:22 - 2014-10-29 02:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll 2015-04-03 14:22 - 2014-10-29 02:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetmib1.dll 2015-04-03 14:22 - 2014-10-29 02:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe 2015-04-03 14:22 - 2014-10-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2015-04-03 14:22 - 2014-10-29 02:47 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpclnt.dll 2015-04-03 14:22 - 2014-10-29 02:46 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe 2015-04-03 14:22 - 2014-10-29 02:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll 2015-04-03 14:22 - 2014-10-29 02:35 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll 2015-04-03 14:21 - 2014-10-29 06:09 - 00108864 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootsect.exe 2015-04-03 14:21 - 2014-10-29 06:09 - 00033088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2015-04-03 14:21 - 2014-10-29 05:59 - 00025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\streamci.dll 2015-04-03 14:21 - 2014-10-29 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys 2015-04-03 14:21 - 2014-10-29 04:48 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-04-03 14:21 - 2014-10-29 04:48 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\lmhsvc.dll 2015-04-03 14:21 - 2014-10-29 04:46 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys 2015-04-03 14:21 - 2014-10-29 04:45 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2015-04-03 14:21 - 2014-10-29 04:45 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\shgina.dll 2015-04-03 14:21 - 2014-10-29 04:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll 2015-04-03 14:21 - 2014-10-29 04:44 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmocx.dll 2015-04-03 14:21 - 2014-10-29 04:41 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\expand.exe 2015-04-03 14:21 - 2014-10-29 04:41 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-04-03 14:21 - 2014-10-29 04:40 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll 2015-04-03 14:21 - 2014-10-29 04:39 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2015-04-03 14:21 - 2014-10-29 04:39 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\easconsent.dll 2015-04-03 14:21 - 2014-10-29 04:37 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpsapi.dll 2015-04-03 14:21 - 2014-10-29 04:37 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe 2015-04-03 14:21 - 2014-10-29 04:35 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe 2015-04-03 14:21 - 2014-10-29 04:34 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2015-04-03 14:21 - 2014-10-29 04:34 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll 2015-04-03 14:21 - 2014-10-29 04:33 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe 2015-04-03 14:21 - 2014-10-29 04:30 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll 2015-04-03 14:21 - 2014-10-29 04:29 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe 2015-04-03 14:21 - 2014-10-29 04:29 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\whoami.exe 2015-04-03 14:21 - 2014-10-29 04:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll 2015-04-03 14:21 - 2014-10-29 04:26 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkwudrv.dll 2015-04-03 14:21 - 2014-10-29 04:20 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\modemui.dll 2015-04-03 14:21 - 2014-10-29 04:18 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\napdsnap.dll 2015-04-03 14:21 - 2014-10-29 04:17 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcsPlugInService.dll 2015-04-03 14:21 - 2014-10-29 04:17 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsepno.dll 2015-04-03 14:21 - 2014-10-29 04:16 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2015-04-03 14:21 - 2014-10-29 04:16 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWNet.dll 2015-04-03 14:21 - 2014-10-29 04:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll 2015-04-03 14:21 - 2014-10-29 04:05 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\keymgr.dll 2015-04-03 14:21 - 2014-10-29 04:04 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe 2015-04-03 14:21 - 2014-10-29 04:01 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptuiwizard.dll 2015-04-03 14:21 - 2014-10-29 04:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimgvw.dll 2015-04-03 14:21 - 2014-10-29 03:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe 2015-04-03 14:21 - 2014-10-29 03:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidserv.dll 2015-04-03 14:21 - 2014-10-29 03:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsutil.dll 2015-04-03 14:21 - 2014-10-29 03:58 - 00857088 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSST.dll 2015-04-03 14:21 - 2014-10-29 03:58 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvidc32.dll 2015-04-03 14:21 - 2014-10-29 03:58 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\convert.exe 2015-04-03 14:21 - 2014-10-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com 2015-04-03 14:21 - 2014-10-29 03:57 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll 2015-04-03 14:21 - 2014-10-29 03:57 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serwvdrv.dll 2015-04-03 14:21 - 2014-10-29 03:55 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll 2015-04-03 14:21 - 2014-10-29 03:55 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pid.dll 2015-04-03 14:21 - 2014-10-29 03:54 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv 2015-04-03 14:21 - 2014-10-29 03:52 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscisvif.dll 2015-04-03 14:21 - 2014-10-29 03:49 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PkgMgr.exe 2015-04-03 14:21 - 2014-10-29 03:48 - 01497600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcopy.dll 2015-04-03 14:21 - 2014-10-29 03:46 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmci.dll 2015-04-03 14:21 - 2014-10-29 03:43 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2015-04-03 14:21 - 2014-10-29 03:43 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe 2015-04-03 14:21 - 2014-10-29 03:40 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shutdown.exe 2015-04-03 14:21 - 2014-10-29 03:39 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskmon.dll 2015-04-03 14:21 - 2014-10-29 03:39 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcdProp.dll 2015-04-03 14:21 - 2014-10-29 03:39 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultPrinterProvider.dll 2015-04-03 14:21 - 2014-10-29 03:36 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll 2015-04-03 14:21 - 2014-10-29 03:32 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\unregmp2.exe 2015-04-03 14:21 - 2014-10-29 03:30 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe 2015-04-03 14:21 - 2014-10-29 03:28 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll 2015-04-03 14:21 - 2014-10-29 03:28 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsperf.dll 2015-04-03 14:21 - 2014-10-29 03:27 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\netsh.exe 2015-04-03 14:21 - 2014-10-29 03:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\findstr.exe 2015-04-03 14:21 - 2014-10-29 03:26 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll 2015-04-03 14:21 - 2014-10-29 03:26 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2015-04-03 14:21 - 2014-10-29 03:26 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll 2015-04-03 14:21 - 2014-10-29 03:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShextAutoplay.exe 2015-04-03 14:21 - 2014-10-29 03:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll 2015-04-03 14:21 - 2014-10-29 03:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanext.exe 2015-04-03 14:21 - 2014-10-29 03:21 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifs.dll 2015-04-03 14:21 - 2014-10-29 03:21 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemManufacturers.dll 2015-04-03 14:21 - 2014-10-29 03:21 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll 2015-04-03 14:21 - 2014-10-29 03:20 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2015-04-03 14:21 - 2014-10-29 03:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2015-04-03 14:21 - 2014-10-29 03:18 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2015-04-03 14:21 - 2014-10-29 03:18 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll 2015-04-03 14:21 - 2014-10-29 03:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatcha.dll 2015-04-03 14:21 - 2014-10-29 03:05 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll 2015-04-03 14:21 - 2014-10-29 03:05 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icacls.exe 2015-04-03 14:21 - 2014-10-29 03:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll 2015-04-03 14:21 - 2014-10-29 03:04 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll 2015-04-03 14:21 - 2014-10-29 03:04 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll 2015-04-03 14:21 - 2014-10-29 03:04 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findstr.exe 2015-04-03 14:21 - 2014-10-29 03:04 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll 2015-04-03 14:21 - 2014-10-29 03:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkdsk.exe 2015-04-03 14:21 - 2014-10-29 03:02 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll 2015-04-03 14:21 - 2014-10-29 03:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NETSTAT.EXE 2015-04-03 14:21 - 2014-10-29 03:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsjob.dll 2015-04-03 14:21 - 2014-10-29 03:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Display.dll 2015-04-03 14:21 - 2014-10-29 03:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemManufacturers.dll 2015-04-03 14:21 - 2014-10-29 03:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll 2015-04-03 14:21 - 2014-10-29 02:58 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll 2015-04-03 14:21 - 2014-10-29 02:57 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\datusage.dll 2015-04-03 14:21 - 2014-10-29 02:52 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrs.exe 2015-04-03 14:21 - 2014-10-07 08:54 - 00324928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2015-04-03 14:21 - 2014-10-07 08:54 - 00189248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS 2015-04-03 14:20 - 2014-10-29 06:13 - 00021824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys 2015-04-03 14:20 - 2014-10-29 06:09 - 00033600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2015-04-03 14:20 - 2014-10-29 04:48 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll 2015-04-03 14:20 - 2014-10-29 04:45 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll 2015-04-03 14:20 - 2014-10-29 04:44 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll 2015-04-03 14:20 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com 2015-04-03 14:20 - 2014-10-29 04:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll 2015-04-03 14:20 - 2014-10-29 04:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll 2015-04-03 14:20 - 2014-10-29 04:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\convert.exe 2015-04-03 14:20 - 2014-10-29 04:41 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll 2015-04-03 14:20 - 2014-10-29 04:41 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\serwvdrv.dll 2015-04-03 14:20 - 2014-10-29 04:38 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll 2015-04-03 14:20 - 2014-10-29 04:37 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\drtprov.dll 2015-04-03 14:20 - 2014-10-29 04:37 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsiCofire.dll 2015-04-03 14:20 - 2014-10-29 04:37 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv 2015-04-03 14:20 - 2014-10-29 04:36 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bridgeunattend.exe 2015-04-03 14:20 - 2014-10-29 04:36 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2015-04-03 14:20 - 2014-10-29 04:35 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmib.dll 2015-04-03 14:20 - 2014-10-29 04:27 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe 2015-04-03 14:20 - 2014-10-29 04:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationHost.exe 2015-04-03 14:20 - 2014-10-29 04:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhsetup.dll 2015-04-03 14:20 - 2014-10-29 04:19 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskmon.dll 2015-04-03 14:20 - 2014-10-29 04:19 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmlog.dll 2015-04-03 14:20 - 2014-10-29 04:18 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdProp.dll 2015-04-03 14:20 - 2014-10-29 04:18 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultPrinterProvider.dll 2015-04-03 14:20 - 2014-10-29 04:17 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmlua.dll 2015-04-03 14:20 - 2014-10-29 04:17 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\runonce.exe 2015-04-03 14:20 - 2014-10-29 04:17 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\witnesswmiv2provider.dll 2015-04-03 14:20 - 2014-10-29 04:17 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shpafact.dll 2015-04-03 14:20 - 2014-10-29 04:16 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2015-04-03 14:20 - 2014-10-29 04:10 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmonui.dll 2015-04-03 14:20 - 2014-10-29 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\brdgcfg.dll 2015-04-03 14:20 - 2014-10-29 04:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shgina.dll 2015-04-03 14:20 - 2014-10-29 04:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmutil.dll 2015-04-03 14:20 - 2014-10-29 03:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmocx.dll 2015-04-03 14:20 - 2014-10-29 03:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\replace.exe 2015-04-03 14:20 - 2014-10-29 03:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\doskey.exe 2015-04-03 14:20 - 2014-10-29 03:58 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll 2015-04-03 14:20 - 2014-10-29 03:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnmpntw.dll 2015-04-03 14:20 - 2014-10-29 03:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkntfs.exe 2015-04-03 14:20 - 2014-10-29 03:57 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe 2015-04-03 14:20 - 2014-10-29 03:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmui.dll 2015-04-03 14:20 - 2014-10-29 03:53 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcnsh.dll 2015-04-03 14:20 - 2014-10-29 03:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll 2015-04-03 14:20 - 2014-10-29 03:52 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmib.dll 2015-04-03 14:20 - 2014-10-29 03:52 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe 2015-04-03 14:20 - 2014-10-29 03:51 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetmon.dll 2015-04-03 14:20 - 2014-10-29 03:49 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutilext.dll 2015-04-03 14:20 - 2014-10-29 03:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddodiag.exe 2015-04-03 14:20 - 2014-10-29 03:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shpafact.dll 2015-04-03 14:20 - 2014-10-29 03:37 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2015-04-03 14:20 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hbaapi.dll 2015-04-03 14:20 - 2014-10-29 03:28 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll 2015-04-03 14:20 - 2014-10-29 03:27 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll 2015-04-03 14:20 - 2014-10-29 03:26 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidnsp.dll 2015-04-03 14:20 - 2014-10-29 03:26 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetEvtFwdr.exe 2015-04-03 14:20 - 2014-10-29 03:26 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll 2015-04-03 14:20 - 2014-10-29 03:26 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkdsk.exe 2015-04-03 14:20 - 2014-10-29 03:26 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimgvw.dll 2015-04-03 14:20 - 2014-10-29 03:21 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngcredui.dll 2015-04-03 14:20 - 2014-10-29 03:21 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.RemoteDesktop.dll 2015-04-03 14:20 - 2014-10-29 03:06 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiclnt.dll 2015-04-03 14:20 - 2014-10-29 03:06 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll 2015-04-03 14:20 - 2014-10-29 03:05 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll 2015-04-03 14:20 - 2014-10-29 03:05 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinit.exe 2015-04-03 14:20 - 2014-10-29 03:05 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll 2015-04-03 14:20 - 2014-10-29 03:05 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsperf.dll 2015-04-03 14:20 - 2014-10-29 03:05 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\attrib.exe 2015-04-03 14:20 - 2014-10-29 03:04 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentprf.dll 2015-04-03 14:20 - 2014-10-29 03:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecEdit.exe 2015-04-03 14:20 - 2014-10-29 03:04 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cacls.exe 2015-04-03 14:20 - 2014-10-29 03:03 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll 2015-04-03 14:20 - 2014-10-29 03:00 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngcredui.dll 2015-04-03 14:20 - 2014-10-29 03:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll 2015-04-03 14:20 - 2014-10-29 03:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll 2015-04-03 14:20 - 2014-10-29 02:58 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2015-04-03 14:20 - 2014-10-29 02:57 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrshost.exe 2015-04-03 14:20 - 2014-10-29 02:46 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-04-03 14:20 - 2014-10-29 02:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe 2015-04-03 14:20 - 2014-10-07 08:54 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2015-04-03 14:19 - 2014-10-29 04:49 - 00638976 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2015-04-03 14:19 - 2014-10-29 04:48 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2015-04-03 14:19 - 2014-10-29 04:44 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\efslsaext.dll 2015-04-03 14:19 - 2014-10-29 04:44 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsutil.dll 2015-04-03 14:19 - 2014-10-29 04:44 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmpbk32.dll 2015-04-03 14:19 - 2014-10-29 04:43 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp 2015-04-03 14:19 - 2014-10-29 04:43 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ureg.dll 2015-04-03 14:19 - 2014-10-29 04:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\replace.exe 2015-04-03 14:19 - 2014-10-29 04:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmmon32.exe 2015-04-03 14:19 - 2014-10-29 04:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkntfs.exe 2015-04-03 14:19 - 2014-10-29 04:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\IconCodecService.dll 2015-04-03 14:19 - 2014-10-29 04:41 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp 2015-04-03 14:19 - 2014-10-29 04:41 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlprovi.dll 2015-04-03 14:19 - 2014-10-29 04:40 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\djoin.exe 2015-04-03 14:19 - 2014-10-29 04:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\linkinfo.dll 2015-04-03 14:19 - 2014-10-29 04:36 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll 2015-04-03 14:19 - 2014-10-29 04:36 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll 2015-04-03 14:19 - 2014-10-29 04:36 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\traffic.dll 2015-04-03 14:19 - 2014-10-29 04:34 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmutil.dll 2015-04-03 14:19 - 2014-10-29 04:34 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe 2015-04-03 14:19 - 2014-10-29 04:33 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msports.dll 2015-04-03 14:19 - 2014-10-29 04:33 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MemoryDiagnostic.dll 2015-04-03 14:19 - 2014-10-29 04:33 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetmon.dll 2015-04-03 14:19 - 2014-10-29 04:33 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstask.dll 2015-04-03 14:19 - 2014-10-29 04:30 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdl32.exe 2015-04-03 14:19 - 2014-10-29 04:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll 2015-04-03 14:19 - 2014-10-29 04:30 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfdts.dll 2015-04-03 14:19 - 2014-10-29 04:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapilua.dll 2015-04-03 14:19 - 2014-10-29 04:26 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cipher.exe 2015-04-03 14:19 - 2014-10-29 04:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizard.exe 2015-04-03 14:19 - 2014-10-29 04:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmcfg32.dll 2015-04-03 14:19 - 2014-10-29 04:22 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Storprop.dll 2015-04-03 14:19 - 2014-10-29 04:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskadp.dll 2015-04-03 14:19 - 2014-10-29 04:19 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2015-04-03 14:19 - 2014-10-29 04:19 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\prevhost.exe 2015-04-03 14:19 - 2014-10-29 04:18 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe 2015-04-03 14:19 - 2014-10-29 04:17 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll 2015-04-03 14:19 - 2014-10-29 04:09 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotplug.dll 2015-04-03 14:19 - 2014-10-29 04:08 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DFDWiz.exe 2015-04-03 14:19 - 2014-10-29 04:02 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll 2015-04-03 14:19 - 2014-10-29 04:02 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll 2015-04-03 14:19 - 2014-10-29 04:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\idndl.dll 2015-04-03 14:19 - 2014-10-29 04:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll 2015-04-03 14:19 - 2014-10-29 04:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shunimpl.dll 2015-04-03 14:19 - 2014-10-29 04:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbios.dll 2015-04-03 14:19 - 2014-10-29 03:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll 2015-04-03 14:19 - 2014-10-29 03:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regini.exe 2015-04-03 14:19 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpui.dll 2015-04-03 14:19 - 2014-10-29 03:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sisbkup.dll 2015-04-03 14:19 - 2014-10-29 03:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll 2015-04-03 14:19 - 2014-10-29 03:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\find.exe 2015-04-03 14:19 - 2014-10-29 03:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.exe 2015-04-03 14:19 - 2014-10-29 03:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbtugc.exe 2015-04-03 14:19 - 2014-10-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiltcfg.dll 2015-04-03 14:19 - 2014-10-29 03:57 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syskey.exe 2015-04-03 14:19 - 2014-10-29 03:57 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2015-04-03 14:19 - 2014-10-29 03:57 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2015-04-03 14:19 - 2014-10-29 03:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlprovi.dll 2015-04-03 14:19 - 2014-10-29 03:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capisp.dll 2015-04-03 14:19 - 2014-10-29 03:55 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe 2015-04-03 14:19 - 2014-10-29 03:54 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2015-04-03 14:19 - 2014-10-29 03:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsauth.dll 2015-04-03 14:19 - 2014-10-29 03:54 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\extrac32.exe 2015-04-03 14:19 - 2014-10-29 03:54 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe 2015-04-03 14:19 - 2014-10-29 03:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsunattend.exe 2015-04-03 14:19 - 2014-10-29 03:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ocsetapi.dll 2015-04-03 14:19 - 2014-10-29 03:52 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll 2015-04-03 14:19 - 2014-10-29 03:51 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe 2015-04-03 14:19 - 2014-10-29 03:51 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winusb.dll 2015-04-03 14:19 - 2014-10-29 03:51 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorSvc.dll 2015-04-03 14:19 - 2014-10-29 03:50 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagnhost.exe 2015-04-03 14:19 - 2014-10-29 03:49 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlaninst.dll 2015-04-03 14:19 - 2014-10-29 03:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshelper.dll 2015-04-03 14:19 - 2014-10-29 03:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\napipsec.dll 2015-04-03 14:19 - 2014-10-29 03:44 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontview.exe 2015-04-03 14:19 - 2014-10-29 03:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizard.exe 2015-04-03 14:19 - 2014-10-29 03:40 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskadp.dll 2015-04-03 14:19 - 2014-10-29 03:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\proquota.exe 2015-04-03 14:19 - 2014-10-29 03:39 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe 2015-04-03 14:19 - 2014-10-29 03:39 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdupgrd.exe 2015-04-03 14:19 - 2014-10-29 03:39 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prevhost.exe 2015-04-03 14:19 - 2014-10-29 03:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstplua.dll 2015-04-03 14:19 - 2014-10-29 03:37 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2015-04-03 14:19 - 2014-10-29 03:31 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credwiz.exe 2015-04-03 14:19 - 2014-10-29 03:29 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll 2015-04-03 14:19 - 2014-10-29 03:29 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileAppxStreamingDataSource.dll 2015-04-03 14:19 - 2014-10-29 03:28 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcsubs.dll 2015-04-03 14:19 - 2014-10-29 03:28 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll 2015-04-03 14:19 - 2014-10-29 03:28 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll 2015-04-03 14:19 - 2014-10-29 03:28 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\attrib.exe 2015-04-03 14:19 - 2014-10-29 03:28 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll 2015-04-03 14:19 - 2014-10-29 03:28 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\loadperf.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EventAggregation.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll 2015-04-03 14:19 - 2014-10-29 03:27 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ARP.EXE 2015-04-03 14:19 - 2014-10-29 03:26 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypttpmeksvc.dll 2015-04-03 14:19 - 2014-10-29 03:25 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipsec.dll 2015-04-03 14:19 - 2014-10-29 03:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2015-04-03 14:19 - 2014-10-29 03:21 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe 2015-04-03 14:19 - 2014-10-29 03:21 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll 2015-04-03 14:19 - 2014-10-29 03:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll 2015-04-03 14:19 - 2014-10-29 03:20 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommonPal.dll 2015-04-03 14:19 - 2014-10-29 03:17 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll 2015-04-03 14:19 - 2014-10-29 03:15 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrshost.exe 2015-04-03 14:19 - 2014-10-29 03:06 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lodctr.exe 2015-04-03 14:19 - 2014-10-29 03:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcsubs.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpapi.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotcli.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll 2015-04-03 14:19 - 2014-10-29 03:05 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshqos.dll 2015-04-03 14:19 - 2014-10-29 03:03 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidnsp.dll 2015-04-03 14:19 - 2014-10-29 03:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipconfig.exe 2015-04-03 14:19 - 2014-10-29 03:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 2015-04-03 14:19 - 2014-10-29 03:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll 2015-04-03 14:19 - 2014-10-29 03:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.RemoteDesktop.dll 2015-04-03 14:19 - 2014-10-29 02:58 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPHost.dll 2015-04-03 14:19 - 2014-10-29 02:57 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll 2015-04-03 14:19 - 2014-10-29 02:55 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe 2015-04-03 14:19 - 2014-10-29 02:53 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifmon.dll 2015-04-03 14:19 - 2014-10-29 02:46 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2015-04-03 14:19 - 2014-10-29 02:44 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CheckNetIsolation.exe 2015-04-03 14:19 - 2014-06-21 09:33 - 00212736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys 2015-04-03 14:18 - 2014-10-29 04:45 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\regidle.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsnmp32.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsmproxy.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\htui.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrnr.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmutil.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shunimpl.dll 2015-04-03 14:18 - 2014-10-29 04:44 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2015-04-03 14:18 - 2014-10-29 04:43 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll 2015-04-03 14:18 - 2014-10-29 04:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiltcfg.dll 2015-04-03 14:18 - 2014-10-29 04:43 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\doskey.exe 2015-04-03 14:18 - 2014-10-29 04:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\find.exe 2015-04-03 14:18 - 2014-10-29 04:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\print.exe 2015-04-03 14:18 - 2014-10-29 04:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskcomp.com 2015-04-03 14:18 - 2014-10-29 04:42 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2015-04-03 14:18 - 2014-10-29 04:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll 2015-04-03 14:18 - 2014-10-29 04:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvidc32.dll 2015-04-03 14:18 - 2014-10-29 04:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscacheugc.exe 2015-04-03 14:18 - 2014-10-29 04:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll 2015-04-03 14:18 - 2014-10-29 04:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe 2015-04-03 14:18 - 2014-10-29 04:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wephostsvc.dll 2015-04-03 14:18 - 2014-10-29 04:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutilx.dll 2015-04-03 14:18 - 2014-10-29 04:41 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.dll 2015-04-03 14:18 - 2014-10-29 04:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispex.dll 2015-04-03 14:18 - 2014-10-29 04:41 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2015-04-03 14:18 - 2014-10-29 04:39 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2015-04-03 14:18 - 2014-10-29 04:38 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2015-04-03 14:18 - 2014-10-29 04:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pid.dll 2015-04-03 14:18 - 2014-10-29 04:37 - 15789568 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDORes.dll 2015-04-03 14:18 - 2014-10-29 04:37 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdiasqmmodule.dll 2015-04-03 14:18 - 2014-10-29 04:36 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll 2015-04-03 14:18 - 2014-10-29 04:34 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasphone.exe 2015-04-03 14:18 - 2014-10-29 04:34 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\uniplat.dll 2015-04-03 14:18 - 2014-10-29 04:34 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernelceip.dll 2015-04-03 14:18 - 2014-10-29 04:33 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetVscCoinstall.dll 2015-04-03 14:18 - 2014-10-29 04:33 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagnhost.exe 2015-04-03 14:18 - 2014-10-29 04:32 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CHxReadingStringIME.dll 2015-04-03 14:18 - 2014-10-29 04:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutilext.dll 2015-04-03 14:18 - 2014-10-29 04:31 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe 2015-04-03 14:18 - 2014-10-29 04:30 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2015-04-03 14:18 - 2014-10-29 04:29 - 01502720 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskcopy.dll 2015-04-03 14:18 - 2014-10-29 04:29 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\main.cpl 2015-04-03 14:18 - 2014-10-29 04:29 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\console.dll 2015-04-03 14:18 - 2014-10-29 04:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe 2015-04-03 14:18 - 2014-10-29 04:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll 2015-04-03 14:18 - 2014-10-29 04:26 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthSQM.dll 2015-04-03 14:18 - 2014-10-29 04:25 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\napipsec.dll 2015-04-03 14:18 - 2014-10-29 04:23 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispci.dll 2015-04-03 14:18 - 2014-10-29 04:17 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.cpl 2015-04-03 14:18 - 2014-10-29 04:17 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbctrac.dll 2015-04-03 14:18 - 2014-10-29 04:17 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\aecache.dll 2015-04-03 14:18 - 2014-10-29 04:17 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstplua.dll 2015-04-03 14:18 - 2014-10-29 04:12 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll 2015-04-03 14:18 - 2014-10-29 04:11 - 00212480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdminst.dll 2015-04-03 14:18 - 2014-10-29 04:10 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\srwmi.dll 2015-04-03 14:18 - 2014-10-29 04:09 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanui2.dll 2015-04-03 14:18 - 2014-10-29 04:08 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe 2015-04-03 14:18 - 2014-10-29 04:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll 2015-04-03 14:18 - 2014-10-29 04:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll 2015-04-03 14:18 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2015-04-03 14:18 - 2014-10-29 03:59 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe 2015-04-03 14:18 - 2014-10-29 03:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll 2015-04-03 14:18 - 2014-10-29 03:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vdmdbg.dll 2015-04-03 14:18 - 2014-10-29 03:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clb.dll 2015-04-03 14:18 - 2014-10-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subst.exe 2015-04-03 14:18 - 2014-10-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\print.exe 2015-04-03 14:18 - 2014-10-29 03:58 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll 2015-04-03 14:18 - 2014-10-29 03:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll 2015-04-03 14:18 - 2014-10-29 03:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\midimap.dll 2015-04-03 14:18 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WINSRPC.DLL 2015-04-03 14:18 - 2014-10-29 03:58 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasctrs.dll 2015-04-03 14:18 - 2014-10-29 03:58 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcomp.com 2015-04-03 14:18 - 2014-10-29 03:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\label.exe 2015-04-03 14:18 - 2014-10-29 03:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrle32.dll 2015-04-03 14:18 - 2014-10-29 03:58 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcopy.com 2015-04-03 14:18 - 2014-10-29 03:57 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcacli.dll 2015-04-03 14:18 - 2014-10-29 03:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syssetup.dll 2015-04-03 14:18 - 2014-10-29 03:57 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\panmap.dll 2015-04-03 14:18 - 2014-10-29 03:57 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutilx.dll 2015-04-03 14:18 - 2014-10-29 03:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IconCodecService.dll 2015-04-03 14:18 - 2014-10-29 03:57 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shfolder.dll 2015-04-03 14:18 - 2014-10-29 03:56 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irclass.dll 2015-04-03 14:18 - 2014-10-29 03:54 - 15784448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDORes.dll 2015-04-03 14:18 - 2014-10-29 03:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qmgrprxy.dll 2015-04-03 14:18 - 2014-10-29 03:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmutil.exe 2015-04-03 14:18 - 2014-10-29 03:52 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventvwr.exe 2015-04-03 14:18 - 2014-10-29 03:52 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll 2015-04-03 14:18 - 2014-10-29 03:52 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe 2015-04-03 14:18 - 2014-10-29 03:51 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\at.exe 2015-04-03 14:18 - 2014-10-29 03:51 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe 2015-04-03 14:18 - 2014-10-29 03:51 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uniplat.dll 2015-04-03 14:18 - 2014-10-29 03:51 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2015-04-03 14:18 - 2014-10-29 03:51 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcmonitor.dll 2015-04-03 14:18 - 2014-10-29 03:50 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Apphlpdm.dll 2015-04-03 14:18 - 2014-10-29 03:49 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll 2015-04-03 14:18 - 2014-10-29 03:49 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe 2015-04-03 14:18 - 2014-10-29 03:49 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CHxReadingStringIME.dll 2015-04-03 14:18 - 2014-10-29 03:47 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll 2015-04-03 14:18 - 2014-10-29 03:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultDeviceManager.dll 2015-04-03 14:18 - 2014-10-29 03:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbctrac.dll 2015-04-03 14:18 - 2014-10-29 03:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanui2.dll 2015-04-03 14:18 - 2014-10-29 03:29 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll 2015-04-03 14:18 - 2014-10-29 03:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gptext.dll 2015-04-03 14:18 - 2014-10-29 03:28 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sc.exe 2015-04-03 14:18 - 2014-10-29 03:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfscli.dll 2015-04-03 14:18 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnikeapi.dll 2015-04-03 14:18 - 2014-10-29 03:28 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpapi.dll 2015-04-03 14:18 - 2014-10-29 03:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll 2015-04-03 14:18 - 2014-10-29 03:28 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotcli.dll 2015-04-03 14:18 - 2014-10-29 03:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2015-04-03 14:18 - 2014-10-29 03:27 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatcha.dll 2015-04-03 14:18 - 2014-10-29 03:27 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2015-04-03 14:18 - 2014-10-29 03:27 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2015-04-03 14:18 - 2014-10-29 03:26 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll 2015-04-03 14:18 - 2014-10-29 03:26 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll 2015-04-03 14:18 - 2014-10-29 03:26 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinitext.dll 2015-04-03 14:18 - 2014-10-29 03:25 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tpmcompc.dll 2015-04-03 14:18 - 2014-10-29 03:23 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2015-04-03 14:18 - 2014-10-29 03:22 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-04-03 14:18 - 2014-10-29 03:22 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll 2015-04-03 14:18 - 2014-10-29 03:21 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll 2015-04-03 14:18 - 2014-10-29 03:21 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll 2015-04-03 14:18 - 2014-10-29 03:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeSyncTask.dll 2015-04-03 14:18 - 2014-10-29 03:20 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\NETSTAT.EXE 2015-04-03 14:18 - 2014-10-29 03:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentTask.dll 2015-04-03 14:18 - 2014-10-29 03:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpauto.dll 2015-04-03 14:18 - 2014-10-29 03:11 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll 2015-04-03 14:18 - 2014-10-29 03:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifmon.dll 2015-04-03 14:18 - 2014-10-29 03:05 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll 2015-04-03 14:18 - 2014-10-29 03:05 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll 2015-04-03 14:18 - 2014-10-29 03:05 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schedcli.dll 2015-04-03 14:18 - 2014-10-29 03:05 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE 2015-04-03 14:18 - 2014-10-29 03:05 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll 2015-04-03 14:18 - 2014-10-29 03:05 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\finger.exe 2015-04-03 14:18 - 2014-10-29 03:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pots.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ARP.EXE 2015-04-03 14:18 - 2014-10-29 03:04 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinitext.dll 2015-04-03 14:18 - 2014-10-29 03:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HOSTNAME.EXE 2015-04-03 14:18 - 2014-10-29 03:02 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipsec.dll 2015-04-03 14:18 - 2014-10-29 03:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ROUTE.EXE 2015-04-03 14:18 - 2014-10-29 03:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsExt.dll 2015-04-03 14:18 - 2014-10-29 03:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommonPal.dll 2015-04-03 14:18 - 2014-10-29 02:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxshared.dll 2015-04-03 14:18 - 2014-10-29 02:57 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll 2015-04-03 14:18 - 2014-10-29 02:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll 2015-04-03 14:18 - 2014-10-29 02:56 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nci.dll 2015-04-03 14:18 - 2014-10-29 02:54 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaUacHelper.exe 2015-04-03 14:18 - 2014-10-29 02:50 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe 2015-04-03 14:18 - 2014-10-29 02:48 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slpts.dll 2015-04-03 14:18 - 2014-10-29 02:45 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll 2015-04-03 14:18 - 2014-10-29 02:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaUacHelper.exe 2015-04-03 14:17 - 2014-10-29 04:46 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2015-04-03 14:17 - 2014-10-29 04:45 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2015-04-03 14:17 - 2014-10-29 04:45 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbios.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\idndl.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\blb_ps.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\davhlpr.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sisbkup.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll 2015-04-03 14:17 - 2014-10-29 04:44 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll 2015-04-03 14:17 - 2014-10-29 04:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\osbaseln.dll 2015-04-03 14:17 - 2014-10-29 04:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.exe 2015-04-03 14:17 - 2014-10-29 04:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnmpntw.dll 2015-04-03 14:17 - 2014-10-29 04:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasctrs.dll 2015-04-03 14:17 - 2014-10-29 04:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\label.exe 2015-04-03 14:17 - 2014-10-29 04:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\subst.exe 2015-04-03 14:17 - 2014-10-29 04:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpts.dll 2015-04-03 14:17 - 2014-10-29 04:43 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com 2015-04-03 14:17 - 2014-10-29 04:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrcomp.exe 2015-04-03 14:17 - 2014-10-29 04:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\klist.exe 2015-04-03 14:17 - 2014-10-29 04:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msyuv.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\jnwmon.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINSRPC.DLL 2015-04-03 14:17 - 2014-10-29 04:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcacli.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\midimap.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\umdmxfrm.dll 2015-04-03 14:17 - 2014-10-29 04:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrle32.dll 2015-04-03 14:17 - 2014-10-29 04:41 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmintf.dll 2015-04-03 14:17 - 2014-10-29 04:41 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxpps.dll 2015-04-03 14:17 - 2014-10-29 04:41 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2015-04-03 14:17 - 2014-10-29 04:41 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaPs.dll 2015-04-03 14:17 - 2014-10-29 04:40 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructureps.dll 2015-04-03 14:17 - 2014-10-29 04:40 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx5.dll 2015-04-03 14:17 - 2014-10-29 04:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx6.dll 2015-04-03 14:17 - 2014-10-29 04:39 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksetup.exe 2015-04-03 14:17 - 2014-10-29 04:39 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\icmui.dll 2015-04-03 14:17 - 2014-10-29 04:37 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe 2015-04-03 14:17 - 2014-10-29 04:37 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\VscMgrPS.dll 2015-04-03 14:17 - 2014-10-29 04:36 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\verclsid.exe 2015-04-03 14:17 - 2014-10-29 04:35 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdhui.dll 2015-04-03 14:17 - 2014-10-29 04:34 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UI0Detect.exe 2015-04-03 14:17 - 2014-10-29 04:34 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\at.exe 2015-04-03 14:17 - 2014-10-29 04:34 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEject.exe 2015-04-03 14:17 - 2014-10-29 04:34 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe 2015-04-03 14:17 - 2014-10-29 04:34 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2015-04-03 14:17 - 2014-10-29 04:34 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2015-04-03 14:17 - 2014-10-29 04:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdext.dll 2015-04-03 14:17 - 2014-10-29 04:33 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmdCoinstall.dll 2015-04-03 14:17 - 2014-10-29 04:33 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\takeown.exe 2015-04-03 14:17 - 2014-10-29 04:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winusb.dll |
06.04.2015, 16:28 | #14 |
| Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamCode:
ATTFilter 2015-04-03 14:17 - 2014-10-29 04:32 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll 2015-04-03 14:17 - 2014-10-29 04:29 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshelper.dll 2015-04-03 14:17 - 2014-10-29 04:28 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootcfg.exe 2015-04-03 14:17 - 2014-10-29 04:28 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSMON.dll 2015-04-03 14:17 - 2014-10-29 04:24 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwrun.exe 2015-04-03 14:17 - 2014-10-29 04:23 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\montr_ci.dll 2015-04-03 14:17 - 2014-10-29 04:22 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe 2015-04-03 14:17 - 2014-10-29 04:22 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndproxystub.dll 2015-04-03 14:17 - 2014-10-29 04:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.dll 2015-04-03 14:17 - 2014-10-29 04:20 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdown.exe 2015-04-03 14:17 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabcal.exe 2015-04-03 14:17 - 2014-10-29 04:19 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingWizard.exe 2015-04-03 14:17 - 2014-10-29 04:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultDeviceManager.dll 2015-04-03 14:17 - 2014-10-29 04:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdupgrd.exe 2015-04-03 14:17 - 2014-10-29 04:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\grpconv.exe 2015-04-03 14:17 - 2014-10-29 04:17 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mobsync.exe 2015-04-03 14:17 - 2014-10-29 04:00 - 00594944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dramp.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmcompc.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows61.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Nlsdl.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpxl32.dLL 2015-04-03 14:17 - 2014-10-29 04:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscat32.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browseui.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softpub.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nddeapi.dll 2015-04-03 14:17 - 2014-10-29 04:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssip32.dll 2015-04-03 14:17 - 2014-10-29 03:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lsmproxy.dll 2015-04-03 14:17 - 2014-10-29 03:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsock32.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iyuv_32.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osbaseln.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\umdmxfrm.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe 2015-04-03 14:17 - 2014-10-29 03:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshrm.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwinsat.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\recover.exe 2015-04-03 14:17 - 2014-10-29 03:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll 2015-04-03 14:17 - 2014-10-29 03:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com 2015-04-03 14:17 - 2014-10-29 03:58 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapiperf.dll 2015-04-03 14:17 - 2014-10-29 03:57 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll 2015-04-03 14:17 - 2014-10-29 03:57 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmintf.dll 2015-04-03 14:17 - 2014-10-29 03:57 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll 2015-04-03 14:17 - 2014-10-29 03:57 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe 2015-04-03 14:17 - 2014-10-29 03:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcmsetup.exe 2015-04-03 14:17 - 2014-10-29 03:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll 2015-04-03 14:17 - 2014-10-29 03:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcico.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx5.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructureps.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dispex.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx6.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx7.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx3.dll 2015-04-03 14:17 - 2014-10-29 03:56 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx4.dll 2015-04-03 14:17 - 2014-10-29 03:54 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VscMgrPS.dll 2015-04-03 14:17 - 2014-10-29 03:53 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx2.dll 2015-04-03 14:17 - 2014-10-29 03:53 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verclsid.exe 2015-04-03 14:17 - 2014-10-29 03:52 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.exe 2015-04-03 14:17 - 2014-10-29 03:52 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdext.dll 2015-04-03 14:17 - 2014-10-29 03:52 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiSysprep.dll 2015-04-03 14:17 - 2014-10-29 03:51 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe 2015-04-03 14:17 - 2014-10-29 03:51 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe 2015-04-03 14:17 - 2014-10-29 03:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RmClient.exe 2015-04-03 14:17 - 2014-10-29 03:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serialui.dll 2015-04-03 14:17 - 2014-10-29 03:44 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.exe 2015-04-03 14:17 - 2014-10-29 03:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcaApi.dll 2015-04-03 14:17 - 2014-10-29 03:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe 2015-04-03 14:17 - 2014-10-29 03:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmps.dll 2015-04-03 14:17 - 2014-10-29 03:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndproxystub.dll 2015-04-03 14:17 - 2014-10-29 03:40 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingWizard.exe 2015-04-03 14:17 - 2014-10-29 03:39 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\control.exe 2015-04-03 14:17 - 2014-10-29 03:38 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mobsync.exe 2015-04-03 14:17 - 2014-10-29 03:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grpconv.exe 2015-04-03 14:17 - 2014-10-29 03:38 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDACLSys.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\icacls.exe 2015-04-03 14:17 - 2014-10-29 03:28 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinit.exe 2015-04-03 14:17 - 2014-10-29 03:28 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\PATHPING.EXE 2015-04-03 14:17 - 2014-10-29 03:28 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll 2015-04-03 14:17 - 2014-10-29 03:28 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidle.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe 2015-04-03 14:17 - 2014-10-29 03:27 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentprf.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\setx.exe 2015-04-03 14:17 - 2014-10-29 03:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedcli.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll 2015-04-03 14:17 - 2014-10-29 03:27 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Register-CimProvider.exe 2015-04-03 14:17 - 2014-10-29 03:25 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogonext.dll 2015-04-03 14:17 - 2014-10-29 03:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncuprov.dll 2015-04-03 14:17 - 2014-10-29 03:23 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.ps.dll 2015-04-03 14:17 - 2014-10-29 03:22 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskSchdPS.dll 2015-04-03 14:17 - 2014-10-29 03:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2015-04-03 14:17 - 2014-10-29 03:21 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2015-04-03 14:17 - 2014-10-29 03:21 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragproxy.dll 2015-04-03 14:17 - 2014-10-29 03:21 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHostProxy.dll 2015-04-03 14:17 - 2014-10-29 03:20 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapimig.exe 2015-04-03 14:17 - 2014-10-29 03:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2015-04-03 14:17 - 2014-10-29 03:16 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll 2015-04-03 14:17 - 2014-10-29 03:16 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetmib1.dll 2015-04-03 14:17 - 2014-10-29 03:14 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\nci.dll 2015-04-03 14:17 - 2014-10-29 03:12 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwaninst.dll 2015-04-03 14:17 - 2014-10-29 03:08 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrs.exe 2015-04-03 14:17 - 2014-10-29 03:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL 2015-04-03 14:17 - 2014-10-29 03:05 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unlodctr.exe 2015-04-03 14:17 - 2014-10-29 03:05 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vpnikeapi.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mountvol.exe 2015-04-03 14:17 - 2014-10-29 03:05 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll 2015-04-03 14:17 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whhelper.dll 2015-04-03 14:17 - 2014-10-29 03:04 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Register-CimProvider.exe 2015-04-03 14:17 - 2014-10-29 03:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll 2015-04-03 14:17 - 2014-10-29 03:02 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll 2015-04-03 14:17 - 2014-10-29 03:01 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\slpts.dll 2015-04-03 14:17 - 2014-10-29 03:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvps.dll 2015-04-03 14:17 - 2014-10-29 03:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll 2015-04-03 14:17 - 2014-10-29 02:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschapext.dll 2015-04-03 14:17 - 2014-10-29 02:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2015-04-03 14:17 - 2014-10-29 02:46 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Startupscan.dll 2015-04-03 14:16 - 2014-10-29 04:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\txfw32.dll 2015-04-03 14:16 - 2014-10-29 04:46 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc63.sys 2015-04-03 14:16 - 2014-10-29 04:46 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2015-04-03 14:16 - 2014-10-29 04:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows6Compat.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows61.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensApi.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\browseui.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoWorkplaceN.dll 2015-04-03 14:16 - 2014-10-29 04:45 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\osuninst.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\fthsvc.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortServer2003Compat.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Nlsdl.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\clb.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsock32.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sas.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlS0WndH.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\nddeapi.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput9_1_0.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OskSupport.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched32.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll 2015-04-03 14:16 - 2014-10-29 04:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\comcat.dll 2015-04-03 14:16 - 2014-10-29 04:43 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl 2015-04-03 14:16 - 2014-10-29 04:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll 2015-04-03 14:16 - 2014-10-29 04:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sort.exe 2015-04-03 14:16 - 2014-10-29 04:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll 2015-04-03 14:16 - 2014-10-29 04:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\recover.exe 2015-04-03 14:16 - 2014-10-29 04:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskcopy.com 2015-04-03 14:16 - 2014-10-29 04:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiperf.dll 2015-04-03 14:16 - 2014-10-29 04:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll 2015-04-03 14:16 - 2014-10-29 04:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\acledit.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iyuv_32.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe 2015-04-03 14:16 - 2014-10-29 04:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe 2015-04-03 14:16 - 2014-10-29 04:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsbyuv.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshnetbs.dll 2015-04-03 14:16 - 2014-10-29 04:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbperf.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysclass.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe 2015-04-03 14:16 - 2014-10-29 04:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\syssetup.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshirda.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHostps.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcico.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmcodecdspps.dll 2015-04-03 14:16 - 2014-10-29 04:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shfolder.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sccls.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSChannel.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx7.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx3.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx4.dll 2015-04-03 14:16 - 2014-10-29 04:40 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll 2015-04-03 14:16 - 2014-10-29 04:38 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\capisp.dll 2015-04-03 14:16 - 2014-10-29 04:38 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\nbtstat.exe 2015-04-03 14:16 - 2014-10-29 04:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime 2015-04-03 14:16 - 2014-10-29 04:37 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsauth.dll 2015-04-03 14:16 - 2014-10-29 04:36 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\extrac32.exe 2015-04-03 14:16 - 2014-10-29 04:36 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcnsh.dll 2015-04-03 14:16 - 2014-10-29 04:36 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx2.dll 2015-04-03 14:16 - 2014-10-29 04:35 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofiredm.dll 2015-04-03 14:16 - 2014-10-29 04:34 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.exe 2015-04-03 14:16 - 2014-10-29 04:34 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\where.exe 2015-04-03 14:16 - 2014-10-29 04:34 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\timeout.exe 2015-04-03 14:16 - 2014-10-29 04:34 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\clip.exe 2015-04-03 14:16 - 2014-10-29 04:34 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll 2015-04-03 14:16 - 2014-10-29 04:34 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe 2015-04-03 14:16 - 2014-10-29 04:34 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcmonitor.dll 2015-04-03 14:16 - 2014-10-29 04:34 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\regedt32.exe 2015-04-03 14:16 - 2014-10-29 04:33 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe 2015-04-03 14:16 - 2014-10-29 04:33 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Apphlpdm.dll 2015-04-03 14:16 - 2014-10-29 04:33 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetppui.dll 2015-04-03 14:16 - 2014-10-29 04:33 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe 2015-04-03 14:16 - 2014-10-29 04:33 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\svsvc.dll 2015-04-03 14:16 - 2014-10-29 04:33 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LAPRXY.DLL 2015-04-03 14:16 - 2014-10-29 04:31 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingProxy.dll 2015-04-03 14:16 - 2014-10-29 04:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\forfiles.exe 2015-04-03 14:16 - 2014-10-29 04:30 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcreate.exe 2015-04-03 14:16 - 2014-10-29 04:30 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\choice.exe 2015-04-03 14:16 - 2014-10-29 04:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\waitfor.exe 2015-04-03 14:16 - 2014-10-29 04:29 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\setspn.exe 2015-04-03 14:16 - 2014-10-29 04:29 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll 2015-04-03 14:16 - 2014-10-29 04:27 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmci.dll 2015-04-03 14:16 - 2014-10-29 04:27 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\serialui.dll 2015-04-03 14:16 - 2014-10-29 04:25 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrreg.exe 2015-04-03 14:16 - 2014-10-29 04:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontview.exe 2015-04-03 14:16 - 2014-10-29 04:24 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.exe 2015-04-03 14:16 - 2014-10-29 04:24 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaApi.dll 2015-04-03 14:16 - 2014-10-29 04:22 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\radarrs.dll 2015-04-03 14:16 - 2014-10-29 04:22 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssocPrx.dll 2015-04-03 14:16 - 2014-10-29 04:22 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgwdi.dll 2015-04-03 14:16 - 2014-10-29 04:20 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl 2015-04-03 14:16 - 2014-10-29 04:19 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\control.exe 2015-04-03 14:16 - 2014-10-29 04:19 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MultiDigiMon.exe 2015-04-03 14:16 - 2014-10-29 04:19 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Eap3Host.exe 2015-04-03 14:16 - 2014-10-29 04:18 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdRes.exe 2015-04-03 14:16 - 2014-10-29 04:17 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdSched.exe 2015-04-03 14:16 - 2014-10-29 04:17 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll 2015-04-03 14:16 - 2014-10-29 04:17 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDACLSys.dll 2015-04-03 14:16 - 2014-10-29 04:17 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceElevated.dll 2015-04-03 14:16 - 2014-10-29 04:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gptext.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miguiresource.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensApi.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiwer.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_32.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_32.ax 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OskSupport.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qcx.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qc.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qcx.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qc.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir32_32.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getuname.dll 2015-04-03 14:16 - 2014-10-29 04:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osuninst.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidcrl40.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlS0WndH.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sas.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput9_1_0.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comcat.dll 2015-04-03 14:16 - 2014-10-29 03:59 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxex.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl 2015-04-03 14:16 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe 2015-04-03 14:16 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe 2015-04-03 14:16 - 2014-10-29 03:58 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msyuv.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sort.exe 2015-04-03 14:16 - 2014-10-29 03:58 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsbyuv.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsied.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeDateMUICallback.dll 2015-04-03 14:16 - 2014-10-29 03:58 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acledit.dll 2015-04-03 14:16 - 2014-10-29 03:57 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbperf.dll 2015-04-03 14:16 - 2014-10-29 03:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshirda.dll 2015-04-03 14:16 - 2014-10-29 03:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaPs.dll 2015-04-03 14:16 - 2014-10-29 03:57 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spnet.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSChannel.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHostps.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmcodecdspps.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcji32.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odtext32.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odpdx32.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odfox32.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oddbse32.dll 2015-04-03 14:16 - 2014-10-29 03:56 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odexl32.dll 2015-04-03 14:16 - 2014-10-29 03:55 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime 2015-04-03 14:16 - 2014-10-29 03:54 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secinit.exe 2015-04-03 14:16 - 2014-10-29 03:51 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runas.exe 2015-04-03 14:16 - 2014-10-29 03:51 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdial.exe 2015-04-03 14:16 - 2014-10-29 03:51 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LAPRXY.DLL 2015-04-03 14:16 - 2014-10-29 03:49 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingProxy.dll 2015-04-03 14:16 - 2014-10-29 03:44 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Narrator.exe 2015-04-03 14:16 - 2014-10-29 03:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe 2015-04-03 14:16 - 2014-10-29 03:40 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl 2015-04-03 14:16 - 2014-10-29 03:39 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartScreenSettings.exe 2015-04-03 14:16 - 2014-10-29 03:39 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Fondue.exe 2015-04-03 14:16 - 2014-10-29 03:38 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceElevated.dll 2015-04-03 14:16 - 2014-10-29 03:34 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsui.exe 2015-04-03 14:16 - 2014-10-29 03:32 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2015-04-03 14:16 - 2014-10-29 03:29 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprmsg.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrssrv.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\whhelper.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBthProxy.dll 2015-04-03 14:16 - 2014-10-29 03:28 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2015-04-03 14:16 - 2014-10-29 03:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecEdit.exe 2015-04-03 14:16 - 2014-10-29 03:27 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll 2015-04-03 14:16 - 2014-10-29 03:27 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\PING.EXE 2015-04-03 14:16 - 2014-10-29 03:27 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll 2015-04-03 14:16 - 2014-10-29 03:27 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe 2015-04-03 14:16 - 2014-10-29 03:27 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll 2015-04-03 14:16 - 2014-10-29 03:27 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringIeProvider.dll 2015-04-03 14:16 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe 2015-04-03 14:16 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe 2015-04-03 14:16 - 2014-10-29 03:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll 2015-04-03 14:16 - 2014-10-29 03:26 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\pots.dll 2015-04-03 14:16 - 2014-10-29 03:25 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll 2015-04-03 14:16 - 2014-10-29 03:25 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsext.dll 2015-04-03 14:16 - 2014-10-29 03:21 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll 2015-04-03 14:16 - 2014-10-29 03:21 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipconfig.exe 2015-04-03 14:16 - 2014-10-29 03:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifsproxy.dll 2015-04-03 14:16 - 2014-10-29 03:06 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprext.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprmsg.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PATHPING.EXE 2015-04-03 14:16 - 2014-10-29 03:05 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TRACERT.EXE 2015-04-03 14:16 - 2014-10-29 03:05 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL 2015-04-03 14:16 - 2014-10-29 03:05 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrssrv.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBthProxy.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidle.dll 2015-04-03 14:16 - 2014-10-29 03:05 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2015-04-03 14:16 - 2014-10-29 03:04 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe 2015-04-03 14:16 - 2014-10-29 03:04 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe 2015-04-03 14:16 - 2014-10-29 03:04 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpcsvc.dll 2015-04-03 14:16 - 2014-10-29 03:03 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MRINFO.EXE 2015-04-03 14:16 - 2014-10-29 03:03 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityRtapiPal.dll 2015-04-03 14:16 - 2014-10-29 03:01 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskSchdPS.dll 2015-04-03 14:16 - 2014-10-29 03:01 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vss_ps.dll 2015-04-03 14:16 - 2014-10-29 03:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifsproxy.dll 2015-04-03 14:16 - 2014-10-29 02:55 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CheckNetIsolation.exe 2015-04-03 14:15 - 2014-10-29 05:54 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll 2015-04-03 14:15 - 2014-10-29 05:54 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWWizFwk.dll 2015-04-03 14:15 - 2014-10-29 05:07 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll 2015-04-03 14:15 - 2014-10-29 05:07 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWWizFwk.dll 2015-04-03 14:15 - 2014-10-29 04:48 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll 2015-04-03 14:15 - 2014-10-29 04:48 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Locator.exe 2015-04-03 14:15 - 2014-10-29 04:47 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys 2015-04-03 14:15 - 2014-10-29 04:45 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\miguiresource.dll 2015-04-03 14:15 - 2014-10-29 04:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSchedExe.exe 2015-04-03 14:15 - 2014-10-29 04:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe 2015-04-03 14:15 - 2014-10-29 04:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidcrl40.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiwer.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscat32.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\softpub.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll 2015-04-03 14:15 - 2014-10-29 04:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssip32.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzutil.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\hh.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdkey.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwinsat.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdplay.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeDateMUICallback.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsied.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\help.exe 2015-04-03 14:15 - 2014-10-29 04:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spmpm.dll 2015-04-03 14:15 - 2014-10-29 04:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorcpl.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDOIProxy.dll 2015-04-03 14:15 - 2014-10-29 04:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\syskey.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiUnattend.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonUI.exe 2015-04-03 14:15 - 2014-10-29 04:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe 2015-04-03 14:15 - 2014-10-29 04:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe 2015-04-03 14:15 - 2014-10-29 04:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe 2015-04-03 14:15 - 2014-10-29 04:41 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcmsetup.exe 2015-04-03 14:15 - 2014-10-29 04:41 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\panmap.dll 2015-04-03 14:15 - 2014-10-29 04:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr 2015-04-03 14:15 - 2014-10-29 04:41 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\spnet.dll 2015-04-03 14:15 - 2014-10-29 04:41 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CIRCoInst.dll 2015-04-03 14:15 - 2014-10-29 04:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll 2015-04-03 14:15 - 2014-10-29 04:40 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.proxystub.dll 2015-04-03 14:15 - 2014-10-29 04:40 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-04-03 14:15 - 2014-10-29 04:37 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\secinit.exe 2015-04-03 14:15 - 2014-10-29 04:37 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctfmon.exe 2015-04-03 14:15 - 2014-10-29 04:36 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmutil.exe 2015-04-03 14:15 - 2014-10-29 04:36 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\acproxy.dll 2015-04-03 14:15 - 2014-10-29 04:35 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPutil.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventvwr.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winver.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialer.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofire.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdial.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsavailux.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiSysprep.dll 2015-04-03 14:15 - 2014-10-29 04:34 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\write.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe 2015-04-03 14:15 - 2014-10-29 04:34 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\systray.exe 2015-04-03 14:15 - 2014-10-29 04:33 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\runas.exe 2015-04-03 14:15 - 2014-10-29 04:33 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\InfDefaultInstall.exe 2015-04-03 14:15 - 2014-10-29 04:31 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlaninst.dll 2015-04-03 14:15 - 2014-10-29 04:30 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\sigverif.exe 2015-04-03 14:15 - 2014-10-29 04:30 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\RmClient.exe 2015-04-03 14:15 - 2014-10-29 04:29 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicli.exe 2015-04-03 14:15 - 2014-10-29 04:28 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe 2015-04-03 14:15 - 2014-10-29 04:25 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resmon.exe 2015-04-03 14:15 - 2014-10-29 04:25 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe 2015-04-03 14:15 - 2014-10-29 04:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationNotifications.exe 2015-04-03 14:15 - 2014-10-29 04:23 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerWizardElev.exe 2015-04-03 14:15 - 2014-10-29 04:23 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wowreg32.exe 2015-04-03 14:15 - 2014-10-29 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFCoinstaller.dll 2015-04-03 14:15 - 2014-10-29 04:20 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\proquota.exe 2015-04-03 14:15 - 2014-10-29 04:20 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WallpaperHost.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceProperties.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesRemote.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesProtection.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesPerformance.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesHardware.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesComputerName.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesAdvanced.exe 2015-04-03 14:15 - 2014-10-29 04:19 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Netplwiz.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartScreenSettings.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OptionalFeatures.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Fondue.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DpiScaling.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RunLegacyCPLElevated.exe 2015-04-03 14:15 - 2014-10-29 04:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe 2015-04-03 14:15 - 2014-10-29 04:17 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUNATD.exe 2015-04-03 14:15 - 2014-10-29 04:12 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsui.exe 2015-04-03 14:15 - 2014-10-29 04:09 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthudtask.exe 2015-04-03 14:15 - 2014-10-29 04:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\credwiz.exe 2015-04-03 14:15 - 2014-10-29 04:08 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2015-04-03 14:15 - 2014-10-29 04:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll 2015-04-03 14:15 - 2014-10-29 04:03 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txfw32.dll 2015-04-03 14:15 - 2014-10-29 04:03 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wship6.dll 2015-04-03 14:15 - 2014-10-29 04:03 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSHTCPIP.DLL 2015-04-03 14:15 - 2014-10-29 04:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll 2015-04-03 14:15 - 2014-10-29 03:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\help.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorcpl.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzutil.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hh.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdkey.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiUnattend.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdplay.exe 2015-04-03 14:15 - 2014-10-29 03:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomcnfg.exe 2015-04-03 14:15 - 2014-10-29 03:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDOIProxy.dll 2015-04-03 14:15 - 2014-10-29 03:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr 2015-04-03 14:15 - 2014-10-29 03:54 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ctfmon.exe 2015-04-03 14:15 - 2014-10-29 03:53 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapimig.exe 2015-04-03 14:15 - 2014-10-29 03:53 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\winhlp32.exe 2015-04-03 14:15 - 2014-10-29 03:52 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.exe 2015-04-03 14:15 - 2014-10-29 03:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msra.exe 2015-04-03 14:15 - 2014-10-29 03:52 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winver.exe 2015-04-03 14:15 - 2014-10-29 03:52 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedt32.exe 2015-04-03 14:15 - 2014-10-29 03:52 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\write.exe 2015-04-03 14:15 - 2014-10-29 03:51 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InfDefaultInstall.exe 2015-04-03 14:15 - 2014-10-29 03:51 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systray.exe 2015-04-03 14:15 - 2014-10-29 03:46 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcad32.exe 2015-04-03 14:15 - 2014-10-29 03:45 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resmon.exe 2015-04-03 14:15 - 2014-10-29 03:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe 2015-04-03 14:15 - 2014-10-29 03:44 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationNotifications.exe 2015-04-03 14:15 - 2014-10-29 03:40 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Netplwiz.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceProperties.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesProtection.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesComputerName.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesAdvanced.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DpiScaling.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe 2015-04-03 14:15 - 2014-10-29 03:39 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe 2015-04-03 14:15 - 2014-10-29 03:32 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthudtask.exe 2015-04-03 14:15 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprext.dll 2015-04-03 14:15 - 2014-10-29 03:28 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL 2015-04-03 14:15 - 2014-10-29 03:28 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe 2015-04-03 14:15 - 2014-10-29 03:28 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdhcinst.dll 2015-04-03 14:15 - 2014-10-29 03:28 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mountvol.exe 2015-04-03 14:15 - 2014-10-29 03:28 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL 2015-04-03 14:15 - 2014-10-29 03:28 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TCPSVCS.EXE 2015-04-03 14:15 - 2014-10-29 03:28 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TcpipSetup.dll 2015-04-03 14:15 - 2014-10-29 03:28 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe 2015-04-03 14:15 - 2014-10-29 03:27 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\lodctr.exe 2015-04-03 14:15 - 2014-10-29 03:27 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\unlodctr.exe 2015-04-03 14:15 - 2014-10-29 03:27 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cacls.exe 2015-04-03 14:15 - 2014-10-29 03:27 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe 2015-04-03 14:15 - 2014-10-29 03:27 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TRACERT.EXE 2015-04-03 14:15 - 2014-10-29 03:27 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\HOSTNAME.EXE 2015-04-03 14:15 - 2014-10-29 03:26 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VaultCmd.exe 2015-04-03 14:15 - 2014-10-29 03:26 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRINFO.EXE 2015-04-03 14:15 - 2014-10-29 03:26 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityRtapiPal.dll 2015-04-03 14:15 - 2014-10-29 03:26 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpcsvc.dll 2015-04-03 14:15 - 2014-10-29 03:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\procinst.dll 2015-04-03 14:15 - 2014-10-29 03:23 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll 2015-04-03 14:15 - 2014-10-29 03:23 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxStreamingDataSourcePS.dll 2015-04-03 14:15 - 2014-10-29 03:21 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.ProxyStub.dll 2015-04-03 14:15 - 2014-10-29 03:21 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ROUTE.EXE 2015-04-03 14:15 - 2014-10-29 03:21 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2015-04-03 14:15 - 2014-10-29 03:21 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhst3g.exe 2015-04-03 14:15 - 2014-10-29 03:19 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschapext.dll 2015-04-03 14:15 - 2014-10-29 03:19 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2015-04-03 14:15 - 2014-10-29 03:12 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe 2015-04-03 14:15 - 2014-10-29 03:05 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TCPSVCS.EXE 2015-04-03 14:15 - 2014-10-29 03:05 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\backgroundTaskHost.exe 2015-04-03 14:15 - 2014-10-29 03:03 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe 2015-04-03 14:15 - 2014-10-29 03:01 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll 2015-04-03 14:15 - 2014-10-29 03:01 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.ps.dll 2015-04-03 14:15 - 2014-10-29 03:01 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll 2015-04-03 14:15 - 2014-10-29 03:01 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.ps.dll 2015-04-03 14:15 - 2014-10-29 03:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.ProxyStub.dll 2015-04-03 14:15 - 2014-10-29 02:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Startupscan.dll 2015-04-03 14:15 - 2014-10-29 02:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootim.exe 2015-04-03 14:15 - 2014-10-29 02:50 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe 2015-04-03 14:14 - 2014-10-29 04:50 - 02628608 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll 2015-04-03 14:14 - 2014-10-29 04:49 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUxRes.dll 2015-04-03 14:14 - 2014-10-29 04:49 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2015-04-03 14:14 - 2014-10-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl 2015-04-03 14:14 - 2014-10-29 04:49 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2help.dll 2015-04-03 14:14 - 2014-10-29 04:49 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2015-04-03 14:14 - 2014-10-29 04:49 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rnr20.dll 2015-04-03 14:14 - 2014-10-29 04:48 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll 2015-04-03 14:14 - 2014-10-29 04:48 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys 2015-04-03 14:14 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll 2015-04-03 14:14 - 2014-10-29 04:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL 2015-04-03 14:14 - 2014-10-29 04:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll 2015-04-03 14:14 - 2014-10-29 04:48 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys 2015-04-03 14:14 - 2014-10-29 04:48 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmi.dll 2015-04-03 14:14 - 2014-10-29 04:47 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys 2015-04-03 14:14 - 2014-10-29 04:47 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\qwavedrv.sys 2015-04-03 14:14 - 2014-10-29 04:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys 2015-04-03 14:14 - 2014-10-29 04:46 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2015-04-03 14:14 - 2014-10-29 04:46 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2015-04-03 14:14 - 2014-10-29 04:46 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiscap.sys 2015-04-03 14:14 - 2014-10-29 04:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys 2015-04-03 14:14 - 2014-10-29 04:46 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys 2015-04-03 14:14 - 2014-10-29 04:45 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll 2015-04-03 14:14 - 2014-10-29 04:45 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-04-03 14:14 - 2014-10-29 04:45 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys 2015-04-03 14:14 - 2014-10-29 04:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mslldp.sys 2015-04-03 14:14 - 2014-10-29 04:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll 2015-04-03 14:14 - 2014-10-29 04:45 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll 2015-04-03 14:14 - 2014-10-29 04:45 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2015-04-03 14:14 - 2014-10-29 04:45 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2015-04-03 14:14 - 2014-10-29 04:45 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll 2015-04-03 14:14 - 2014-10-29 04:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcNs4.dll 2015-04-03 14:14 - 2014-10-29 04:38 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstorec.dll 2015-04-03 14:14 - 2014-10-29 04:05 - 02628608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00638976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceUxRes.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2help.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2015-04-03 14:14 - 2014-10-29 04:04 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rnr20.dll 2015-04-03 14:14 - 2014-10-29 04:03 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll 2015-04-03 14:14 - 2014-10-29 04:03 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmi.dll 2015-04-03 14:14 - 2014-10-29 04:00 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OobeFldr.dll 2015-04-03 14:14 - 2014-10-29 04:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll 2015-04-03 14:14 - 2014-10-29 04:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2015-04-03 14:14 - 2014-10-29 04:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2015-04-03 14:14 - 2014-10-29 04:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll 2015-04-03 14:14 - 2014-10-29 04:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprop.dll 2015-04-03 14:14 - 2014-10-29 03:57 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcNs4.dll 2015-04-03 14:14 - 2014-10-29 03:56 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pstorec.dll 2015-04-03 14:14 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll 2015-04-03 14:14 - 2014-10-29 03:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_ISCII.DLL 2015-04-03 14:14 - 2014-10-29 03:06 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_ISCII.DLL 2015-04-03 14:14 - 2014-10-29 03:06 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dabapi.dll 2015-04-03 14:14 - 2014-10-07 05:30 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys 2015-04-03 14:14 - 2014-10-07 05:29 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2015-04-03 14:14 - 2014-10-07 05:29 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2015-04-03 14:14 - 2014-10-07 05:29 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2015-04-03 13:35 - 2014-10-31 06:50 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe 2015-04-03 13:35 - 2014-10-31 05:30 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2015-04-03 13:35 - 2014-10-31 05:23 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2015-04-03 13:35 - 2014-10-31 05:22 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2015-04-03 13:35 - 2014-10-31 05:18 - 04840960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2015-04-03 13:35 - 2014-10-31 05:09 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2015-04-03 13:35 - 2014-10-31 04:12 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2015-04-03 13:30 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-04-03 13:30 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-04-03 13:30 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-04-03 13:30 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-04-03 13:30 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-04-03 13:30 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2015-04-03 13:30 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2015-04-03 13:30 - 2015-01-21 07:54 - 01384712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2015-04-03 13:30 - 2015-01-21 07:15 - 01123848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2015-04-03 13:29 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2015-04-03 13:29 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2015-04-03 13:11 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-04-03 13:11 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-04-03 13:11 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2015-04-03 13:11 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2015-04-03 13:11 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2015-04-03 13:09 - 2015-04-03 13:52 - 00003615 _____ () C:\Users\***\Desktop\Gmer.txt 2015-04-03 13:02 - 2015-04-03 13:02 - 00380416 _____ () C:\Users\***\Desktop\us73qz2e.exe 2015-04-03 12:59 - 2015-04-03 13:51 - 00034024 _____ () C:\Users\***\Desktop\Addition.txt 2015-04-03 12:56 - 2015-04-06 16:31 - 00019760 _____ () C:\Users\***\Desktop\FRST.txt 2015-04-03 12:56 - 2015-04-06 16:31 - 00000000 ____D () C:\FRST 2015-04-03 12:56 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-04-03 12:56 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-04-03 12:55 - 2015-04-03 12:55 - 02095616 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe 2015-04-03 12:55 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-04-03 12:55 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-04-03 12:55 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-04-03 12:55 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-04-03 12:55 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-04-03 12:55 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-04-03 12:55 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-04-03 12:55 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-04-03 12:55 - 2015-02-20 04:35 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-04-03 12:55 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2015-04-03 12:55 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-04-03 12:55 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-04-03 12:55 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-04-03 12:55 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-04-03 12:55 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-04-03 12:55 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-04-03 12:55 - 2015-02-20 03:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-04-03 12:55 - 2015-02-20 03:56 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-04-03 12:55 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-04-03 12:55 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-04-03 12:55 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-04-03 12:55 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-04-03 12:55 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-04-03 12:55 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-04-03 12:55 - 2015-02-20 03:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-04-03 12:55 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-04-03 12:55 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-04-03 12:55 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-04-03 12:55 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-04-03 12:55 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-04-03 12:55 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-04-03 12:55 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-04-03 12:55 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-04-03 12:55 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-04-03 12:55 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-04-03 12:54 - 2015-04-03 12:54 - 00000474 _____ () C:\Users\***\Desktop\defogger_disable.log 2015-04-03 12:54 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2015-04-03 12:54 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2015-04-03 12:54 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2015-04-03 12:54 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2015-04-03 12:54 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2015-04-03 12:54 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2015-04-03 12:54 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2015-04-03 12:53 - 2015-04-03 12:53 - 00050477 _____ () C:\Users\***\Desktop\Defogger.exe 2015-04-03 12:53 - 2015-01-28 17:41 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-04-03 12:53 - 2015-01-28 17:41 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-04-03 12:53 - 2015-01-28 17:41 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-04-03 12:42 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2015-04-03 12:42 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2015-04-03 12:42 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2015-04-03 12:42 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2015-04-03 12:42 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2015-04-03 12:42 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2015-04-03 12:42 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2015-04-03 12:42 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2015-04-03 12:42 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll 2015-04-03 12:42 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll 2015-04-03 12:41 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe 2015-04-02 20:38 - 2015-04-02 21:11 - 00000000 ____D () C:\Users\***\AppData\Roaming\ClassicShell 2015-04-02 20:38 - 2015-04-02 20:38 - 00000000 ____D () C:\ProgramData\ClassicShell 2015-04-02 20:37 - 2015-04-02 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2015-04-02 20:37 - 2015-04-02 20:37 - 00000000 ____D () C:\Program Files\Classic Shell 2015-04-02 20:34 - 2015-04-02 20:34 - 00000000 __SHD () C:\Users\***\AppData\Local\EmieBrowserModeList 2015-04-02 20:31 - 2015-04-02 20:31 - 01203488 _____ () C:\Users\***\Downloads\Classic Shell - CHIP-Installer.exe 2015-04-02 20:01 - 2015-04-02 20:01 - 00001153 _____ () C:\Users\Public\Desktop\Avira.lnk 2015-04-02 20:00 - 2013-08-22 15:25 - 00000824 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20150402-200050.backup Code:
ATTFilter ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-06 16:34 - 2012-12-14 19:31 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1225493163-4127186220-2738876131-1001 2015-04-06 16:28 - 2012-12-15 07:51 - 00000000 ____D () C:\Users\***\AppData\Local\Google 2015-04-06 16:27 - 2013-11-09 17:07 - 01705537 _____ () C:\WINDOWS\WindowsUpdate.log 2015-04-06 16:27 - 2012-12-15 07:51 - 00000000 ____D () C:\Program Files (x86)\Google 2015-04-06 16:20 - 2013-11-13 08:15 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6AAE1431-92D2-40BE-9EA6-077D34A45FC1} 2015-04-06 16:20 - 2013-09-30 06:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-04-06 16:20 - 2013-09-30 05:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2015-04-06 16:20 - 2013-09-30 05:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2015-04-06 04:29 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2015-04-05 22:23 - 2012-12-14 19:26 - 00000000 ____D () C:\Users\***\AppData\Local\CrashDumps 2015-04-05 22:22 - 2012-10-19 08:12 - 00000000 ____D () C:\ProgramData\WinClon 2015-04-05 22:18 - 2014-10-23 19:41 - 00005228 _____ () C:\WINDOWS\setupact.log 2015-04-05 22:18 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-04-05 22:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2015-04-05 18:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache 2015-04-05 16:12 - 2014-10-23 19:32 - 00018790 _____ () C:\WINDOWS\PFRO.log 2015-04-05 15:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2015-04-05 15:41 - 2012-12-15 08:11 - 00000000 ____D () C:\Users\***\AppData\Local\Adobe 2015-04-05 15:35 - 2013-08-22 16:44 - 00554360 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-04-05 15:24 - 2015-01-21 22:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser 2015-04-05 15:24 - 2014-07-15 17:17 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-04-05 15:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-04-05 15:23 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\sppui 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform 2015-04-05 15:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-04-05 15:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe 2015-04-05 15:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2015-04-05 15:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\servicing 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ___SD () C:\WINDOWS\system32\dsc 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sppui 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\migwiz 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Com 2015-04-05 15:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME 2015-04-05 15:22 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2015-04-05 15:22 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2015-04-05 15:22 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2015-04-05 15:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore 2015-04-05 15:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\WindowsPowerShell 2015-04-05 15:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2015-04-05 15:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2015-04-05 15:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform 2015-04-05 15:11 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2015-04-05 14:38 - 2013-08-22 17:36 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2015-04-05 14:38 - 2013-08-22 17:36 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2015-04-04 10:00 - 2013-01-12 13:37 - 03580928 ___SH () C:\Users\***\Desktop\Thumbs.db 2015-04-03 13:20 - 2013-08-25 17:08 - 00000000 ____D () C:\WINDOWS\system32\MRT 2015-04-03 13:17 - 2013-08-22 15:25 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM 2015-04-03 13:17 - 2012-12-15 07:49 - 122905848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-04-02 20:57 - 2013-11-07 22:29 - 00000000 ____D () C:\Users\*** 2015-04-02 20:47 - 2014-10-16 21:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15 2015-04-02 20:01 - 2014-08-14 20:26 - 00000000 ____D () C:\ProgramData\Package Cache 2015-04-02 20:01 - 2013-02-05 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-04-02 20:01 - 2013-02-05 15:35 - 00000000 ____D () C:\Program Files (x86)\Avira 2015-04-02 19:45 - 2013-05-02 10:24 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2015-04-02 19:45 - 2013-04-21 18:16 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2015-04-02 19:45 - 2013-04-21 18:16 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2015-03-24 19:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared ==================== Files in the root of some directories ======= 2013-07-28 01:25 - 2013-10-28 13:27 - 0000111 _____ () C:\Users\***\AppData\Roaming\WB.CFG 2013-06-23 15:25 - 2013-10-28 13:27 - 0000006 _____ () C:\Users\***\AppData\Roaming\WBPU-TTL.DAT 2013-10-07 21:47 - 2013-10-07 21:47 - 0001456 _____ () C:\Users\***\AppData\Local\Adobe Für Web speichern 12.0 Prefs 2013-03-26 20:58 - 2013-04-27 12:32 - 0007604 _____ () C:\Users\***\AppData\Local\Resmon.ResmonCfg 2013-02-25 17:01 - 2013-02-21 17:59 - 2063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe 2013-02-25 17:01 - 2013-01-13 00:51 - 0003004 _____ () C:\ProgramData\MakeMarkerFile.xml Files to move or delete: ==================== C:\ProgramData\MakeMarkerFile.exe Some content of TEMP: ==================== C:\Users\***\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-05 16:40 ==================== End Of Log ============================ |
07.04.2015, 11:11 | #15 |
/// the machine /// TB-Ausbilder | Windows 8: fremde Dateien beim surfen entpackt, System sehr langsamESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 8: fremde Dateien beim surfen entpackt, System sehr langsam |
adware, antivir, antivirus, browser, converter, einstellung, google, helper, homepage, installation, langsam, malware, mozilla, mp3, office 365, programm, realtek, registry, scan, security, software, svchost.exe, system, usb, windows, wlan |