Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Unbekanntes UEFI Rootkit

Unbekanntes UEFI Rootkit


Plagegeister aller Art und deren Bekämpfung: Unbekanntes UEFI Rootkit

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 08.08.2015, 07:22   #1
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Grüße Euch,

ich bin ziemlich Ratlos. Ich habe mir vor einiger Zeit meiner meinung nach ein UEFI Rootkit eingefangen welches ich nicht mehr von meinen Festplatten bekomme. Die ganze vorgeschichte möchte ich jedoch ersparen.

Okay hier das Problem, ich verwende das Betriebsystem Windows 10, vorher hatte ich 8.1. Eine komplette wiederherstellung der Festplatten über den Asus Backtracker (Asus Notebook) konnte mein Problem nicht lösen, nach wenigen Tagen mit einer frischen Installation ist dieses wieder aufgetaucht

Wie äussert sich das Problem?
Die Festplatte des Laptop ist extrem ausgelastet erkennbar an der LED und Rucklern, paralell dazu sagt Windows 10 im Task Manager sowie Ressourcen Monitor jetzt genau wie sein vorgänger 8.1 das sich sogut wie garnichts tut, höchstens mal 1 oder 2 % Datenträger auslastung, hier ist egal ob grade hochgefahren oder nicht. Das hören von Musik knackt hin und wieder als wären es Buffer Probleme.

Ich glaube ich habe sogut wie jede Anti-Rootkit Software durch die ich finden konnte und das Ergebnis war immer Negativ, nichts gefunden, auch die Festplatte ist laut Windows top in schuss.

Meine Frage lautet also,- wie kann ich dem was dort passiert noch auf die schliche kommen?

Für sowas wäre eventuell GMER interessant, habe jedoch keine Erfahrung mit den false positives dieser Software. Das was ich feststelle ist das GMER beim start schon den Fehler meldet das System von einem anderen Prozess verwendet wird (das gleiche sagt sogar Windows selbst z . B als ich eine Recovery darüber durchführen wollte beim Hochfahren über den Manger).

Bei dem versuch mit GMER einen Quickscan durchzuführen erhielt ich einen Bluescreen mit der Meldung "Attempted to write read only memory". Davon steht aber nichts mehr in der Ereignis Anzeige

Code:
ATTFilter
GMER 2.1.19355 - hxxp://www.gmer.net
Rootkit scan 2015-08-08 08:15:16
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000038 Hitachi_HTS545050A7E380 rev.GG2OA6C0 465.76GB
Running: gmer.exe; Driver: C:\Users\NA\AppData\Local\Temp\fxldqpob.sys


---- Disk sectors - GMER 2.1 ----

Disk     \Device\Harddisk0\DR0                                                                                                                                                                          unknown MBR code

---- Threads - GMER 2.1 ----

Thread   C:\WINDOWS\system32\csrss.exe [852:932]                                                                                                                                                        fffff96136d17300
Thread   C:\WINDOWS\system32\csrss.exe [852:936]                                                                                                                                                        fffff96136d17300
---- Processes - GMER 2.1 ----

Library  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A2F1FD09-7A78-482F-AC56-B26E9218173C}\mpengine.dll (*** suspicious ***) @ C:\Program Files\Windows Defender\MsMpEng.exe [3104]   00007ff9a8240000
Library  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C0465565-4B2C-432B-9AA1-DDF00F1A8264}\GapaEngine.dll (*** suspicious ***) @ C:\Program Files\Windows Defender\NisSrv.exe [4332]  00007ff9a6d30000
Library  C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (*** suspicious ***) @ C:\WINDOWS\Explorer.EXE [2200]                                                    00007ff9a7740000
Library  C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\MSVCP120.dll (*** suspicious ***) @ C:\WINDOWS\Explorer.EXE [2200]                                                           00007ff9a7690000
Library  C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\MSVCR120.dll (*** suspicious ***) @ C:\WINDOWS\Explorer.EXE [2200]                                                           00007ff9a6420000
Library  C:\Users\NA\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\Ontology.dll (*** suspicious ***) @ C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [5900]                  000000006d4a0000
Process  \\?\C:\WINDOWS\system32\wbem\WMIADAP.EXE (*** suspicious ***) @ \\?\C:\WINDOWS\system32\wbem\WMIADAP.EXE [6116]                                                                                00007ff7d1980000

---- EOF - GMER 2.1 ----

Alt 08.08.2015, 07:30   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 08.08.2015, 08:27   #3
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Danke dir für den Querlink zur Software,

dies ist der erste Log, ich habe den Computer Neugestartet und alles so gelassen wie er ist ohne etwas selbständig zu starten. Allerdings wurde bei dem zweiten Scan keine Addition erstellt weswegen ich diese jetzt aus dem Parpierkorb (vor dem Neustart) herausholen musste.

Teil 1
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:06-08-2015
durchgeführt von NA (Administrator) auf NSA (08-08-2015 09:13:00)
Gestartet von C:\Users\NA\Downloads
Geladene Profile: NA (Verfügbare Profile: NA)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
() C:\Windows\System32\DptfParticipantProcessorService.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
() C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
Teil 2

Code:
ATTFilter
==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [164080 2015-06-27] (IvoSoft)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [HotKeysCmds] => "C:\WINDOWS\system32\hkcmd.exe"
HKLM\...\Run: [Persistence] => "C:\WINDOWS\system32\igfxpers.exe"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3350760 2015-08-04] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [Trend Micro RUBotted V2.0 Beta] => C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe [1102872 2013-07-25] (Trend Micro Inc.)
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)
AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-23] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-31] (Qualcomm Atheros Commnucations)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-06-27] (IvoSoft)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-28] (Oracle Corporation)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-28] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{4440a926-8d95-4267-9729-2f0ba60ff50a}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{524fb51f-a511-458c-aa92-db2e1bbc24d6}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{69887801-c31a-4bf3-a6e8-de44aa2aa6df}: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default
FF SelectedSearchEngine: Yahoo Search!
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-30] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-28] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-07-23] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-07-23] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-05] (Google Inc.)
FF Extension: Youtube Downloader - 4K Download - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\paulsaintuzb@gmail.com [2015-08-06]
FF Extension: Cookies Manager+ - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2015-07-30]
FF Extension: Firebug - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\firebug@software.joehewitt.com.xpi [2015-07-23]
FF Extension: Firepicker - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\firepicker@thedarkone.xpi [2015-07-23]
FF Extension: Firebug Autocompleter - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\{9aad3da6-6c46-4ef0-9109-6df5eaaf597c}.xpi [2015-07-23]
FF Extension: Adblock Edge - C:\Users\NA\AppData\Roaming\Mozilla\Firefox\Profiles\8rsg82e2.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2015-07-24]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-07-23]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-07-23]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-07-23] (Adobe Systems) [Datei ist nicht signiert]
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-07-10] (Microsoft Corporation)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe [194000 2015-07-09] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
S3 ClipSVC; C:\Windows\System32\ClipSVC.dll [658568 2015-07-29] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-07-29] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-07-29] (Microsoft Corporation)
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [196096 2015-07-10] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [33280 2015-07-10] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
R2 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [63488 2015-07-10] (Microsoft Corporation)
S2 DoSvc; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S2 DoSvc; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [29056 2012-07-30] ()
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [30592 2012-07-30] ()
S3 DsSvc; C:\Windows\System32\DsSvc.dll [143872 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [147688 2015-08-04] (ELAN Microelectronics Corp.)
R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-07-29] (Microsoft Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319888 2015-07-11] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-30] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-07-10] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
S3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [186368 2015-07-10] (Microsoft Corporation)
R3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [268800 2015-07-10] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [512000 2015-07-10] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-07-30] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RUBotSrv; C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe [443416 2013-07-25] (Trend Micro Inc.)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-07-29] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [229376 2015-07-30] (Microsoft Corporation)
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [583680 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [503808 2015-07-30] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-07-29] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-07-29] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 UserManager; C:\Windows\System32\usermgr.dll [717312 2015-07-10] (Microsoft Corporation)
S3 UsoSvc; C:\Windows\system32\usocore.dll [343040 2015-07-29] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-31] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-06-26] (Qualcomm Atheros Communications, Inc.)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [32256 2015-07-10] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [116736 2015-07-10] (Microsoft Corporation)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-07-09] (Kaspersky Lab UK Ltd)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-07-10] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-07-13] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-07-13] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-07-13] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96064 2012-07-13] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [228672 2012-07-13] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [361792 2012-07-13] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)
S3 fcvsc; C:\Windows\System32\drivers\fcvsc.sys [31232 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-07-09] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [64368 2015-07-09] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [159960 2015-07-09] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [226480 2015-07-09] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [831664 2015-07-09] (Kaspersky Lab ZAO)
S1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39792 2015-07-09] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [40304 2015-07-09] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [39792 2015-07-09] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-07-09] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [77680 2015-07-09] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [85360 2015-07-09] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [190648 2015-07-09] (Kaspersky Lab ZAO)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [48128 2015-07-10] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [94720 2015-07-10] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [934752 2015-07-29] (Microsoft Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-07-29] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [245088 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [127840 2015-07-10] (Microsoft Corporation)
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-07-10] (Microsoft Corporation)
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [685056 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> Keine Datei
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> Keine Datei



==================== Ende von log ============================
__________________
Alt 08.08.2015, 08:29   #4
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 3

Code:
ATTFilter
==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 09:10 - 2015-08-08 09:10 - 00016148 _____ C:\WINDOWS\system32\NSA_NA_HistoryPrediction.bin
2015-08-08 09:03 - 2015-08-08 09:13 - 00034644 _____ C:\Users\NA\Downloads\FRST.txt
2015-08-08 09:03 - 2015-08-08 09:13 - 00000000 ____D C:\FRST
2015-08-08 09:01 - 2015-08-08 09:01 - 02170368 _____ (Farbar) C:\Users\NA\Downloads\FRST64.exe
2015-08-08 08:36 - 2015-08-08 08:36 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-08-08 08:36 - 2015-08-08 08:36 - 00000000 _____ C:\WINDOWS\setupact.log
2015-08-08 08:23 - 2015-08-08 08:23 - 00602112 _____ (OldTimer Tools) C:\Users\NA\Downloads\OTL.exe
2015-08-08 08:21 - 2015-08-08 08:21 - 00370943 _____ C:\Users\NA\Downloads\gmer.zip
2015-08-08 08:05 - 2015-08-08 08:06 - 00000000 ____D C:\Users\NA\Downloads\Neuer Ordner
2015-08-08 07:46 - 2015-08-08 07:46 - 00000000 ____D C:\ProgramData\Trend Micro
2015-08-08 07:45 - 2015-08-08 07:45 - 00007618 _____ C:\Users\NA\AppData\Local\Resmon.ResmonCfg
2015-08-08 07:26 - 2015-08-08 09:12 - 00000401 _____ C:\Users\NA\AppData\Roaming\sp_data.sys
2015-08-08 07:19 - 2015-08-08 07:19 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\NA\Downloads\tdsskiller.exe
2015-08-08 07:16 - 2015-08-08 07:17 - 01797896 _____ (Malwarebytes Corporation) C:\Users\NA\Downloads\JRT.exe
2015-08-08 07:16 - 2015-08-08 07:16 - 02248704 _____ C:\Users\NA\Downloads\AdwCleaner_4.208.exe
2015-08-08 07:13 - 2015-08-08 07:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-08 07:12 - 2015-08-08 07:13 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-08 07:12 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-08-08 07:12 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-08 07:12 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-08-08 07:11 - 2015-08-08 07:11 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\NA\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-08 07:09 - 2015-08-08 07:09 - 00380416 _____ C:\Users\NA\Downloads\gmer.exe
2015-08-08 07:01 - 2015-08-08 07:09 - 00000000 ____D C:\Users\NA\AppData\Local\NPE
2015-08-08 07:01 - 2015-08-08 07:01 - 00000000 ____D C:\ProgramData\Norton
2015-08-08 07:00 - 2015-08-08 07:00 - 10079720 _____ (Symantec Corporation) C:\Users\NA\Downloads\NPE.exe
2015-08-08 06:56 - 2015-08-08 06:56 - 02828552 _____ (AVAST Software) C:\Users\NA\Downloads\avast-browser-cleanup.exe
2015-08-08 06:56 - 2015-08-08 06:56 - 00210183 _____ C:\Users\NA\Downloads\radix_installer.zip
2015-08-08 06:52 - 2015-08-08 07:13 - 00000000 ____D C:\ProgramData\HitmanPro
2015-08-08 06:52 - 2015-08-08 06:52 - 11032736 _____ (SurfRight B.V.) C:\Users\NA\Downloads\hitmanpro_x64.exe
2015-08-08 06:52 - 2015-08-08 06:52 - 00000000 ____D C:\Program Files\HitmanPro
2015-08-08 06:51 - 2015-08-08 06:51 - 00334720 _____ (Sysinternals - www.sysinternals.com) C:\Users\NA\Downloads\RootkitRevealer.exe
2015-08-08 06:49 - 2015-08-08 06:49 - 00003292 _____ C:\WINDOWS\System32\Tasks\{E0A60E4C-9290-4AFE-9163-91FB1EA27C07}
2015-08-08 06:49 - 2015-08-08 06:49 - 00000000 ____D C:\Users\NA\Pavark
2015-08-08 06:48 - 2015-08-08 06:48 - 00311591 _____ C:\Users\NA\Downloads\AntiRootkit.zip
2015-08-08 06:48 - 2015-08-08 06:48 - 00000000 ____D C:\Users\NA\Downloads\AntiRootkit
2015-08-08 06:44 - 2015-08-08 08:31 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-08 06:44 - 2015-08-08 07:17 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-08-08 06:44 - 2015-08-08 07:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-08 06:43 - 2015-08-08 06:43 - 16502728 _____ (Malwarebytes Corp.) C:\Users\NA\Downloads\mbar-1.09.1.1004.exe
2015-08-08 06:42 - 2015-08-08 06:42 - 00000036 _____ C:\Users\NA\AppData\Local\housecall.guid.cache
2015-08-08 06:42 - 2015-05-29 09:43 - 00307352 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys
2015-08-08 06:40 - 2015-08-08 06:41 - 00000000 ____D C:\Users\NA\Downloads\TMRBLog
2015-08-08 06:40 - 2015-08-08 06:40 - 14861360 _____ (Trend Micro Inc.) C:\Users\NA\Downloads\RootkitBusterV5.0-1180x64.exe
2015-08-08 06:40 - 2015-08-08 06:40 - 10066480 _____ (Trend Micro Inc.) C:\Users\NA\Downloads\RootkitBusterV5.0-1180.exe
2015-08-08 06:40 - 2015-08-08 06:40 - 02494560 _____ (Trend Micro Inc.) C:\Users\NA\Downloads\HousecallLauncher64.exe
2015-08-08 06:40 - 2015-08-08 06:40 - 00000000 ____D C:\Users\NA\Downloads\log
2015-08-08 06:38 - 2015-08-08 06:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2015-08-08 06:38 - 2015-08-08 06:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trend Micro RUBotted
2015-08-08 06:38 - 2015-08-08 06:38 - 00000000 ____D C:\Program Files (x86)\WinPcap
2015-08-08 06:38 - 2015-08-08 06:38 - 00000000 ____D C:\Program Files (x86)\Trend Micro
2015-08-08 06:37 - 2015-08-08 06:37 - 06229392 _____ (Trend Micro, Inc. ) C:\Users\NA\Downloads\RUBottedSetup.exe
2015-08-08 06:36 - 2015-08-08 06:37 - 00012077 _____ C:\Users\NA\Downloads\hijackthis.log
2015-08-08 06:28 - 2015-08-08 06:28 - 00388608 _____ (Trend Micro Inc.) C:\Users\NA\Downloads\hijackthis.exe
2015-08-08 06:24 - 2015-08-08 06:24 - 00000000 ___HD C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup (Disabled by Starter)
2015-08-08 06:24 - 2015-08-08 06:24 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup (Disabled by Starter)
2015-08-08 06:12 - 2015-08-08 09:09 - 00001986 _____ C:\WINDOWS\PFRO.log
2015-08-08 05:45 - 2015-08-08 05:45 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-08 05:45 - 2015-08-08 05:45 - 00001222 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-08 05:45 - 2015-08-08 05:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-08 05:43 - 2015-08-08 09:11 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-08 05:42 - 2015-08-08 05:42 - 00025770 _____ C:\Users\NA\Desktop\bookmarks-2015-08-08.json
2015-08-08 05:36 - 2015-08-08 05:36 - 00002840 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-08-08 05:36 - 2015-08-08 05:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-08-08 05:35 - 2015-08-08 05:36 - 00000000 ____D C:\Program Files\CCleaner
2015-08-08 05:35 - 2015-08-08 05:35 - 06609608 _____ (Piriform Ltd) C:\Users\NA\Downloads\ccsetup508.exe
2015-08-08 01:13 - 2015-08-08 01:13 - 01008624 _____ (DivX, LLC) C:\Users\NA\Downloads\DivXInstaller.exe
2015-08-07 23:05 - 2015-08-07 23:05 - 00000000 ____D C:\Users\NA\AppData\Roaming\RHEng
2015-08-07 23:05 - 2015-08-07 23:05 - 00000000 ____D C:\Users\NA\AppData\Roaming\DivX
2015-08-07 23:02 - 2015-08-08 04:33 - 00000000 ____D C:\ProgramData\DivX
2015-08-07 23:02 - 2015-08-08 04:33 - 00000000 ____D C:\Program Files (x86)\DivX
2015-08-07 23:02 - 2015-08-07 23:02 - 01008624 _____ (DivX, LLC) C:\Users\NA\Downloads\DivXInstaller(1).exe
2015-08-07 22:42 - 2015-08-07 22:44 - 61386445 _____ C:\Users\NA\Desktop\dämonenjäger.mp4
2015-08-07 22:29 - 2015-08-07 22:29 - 00000000 ____D C:\Users\NA\Desktop\parts
2015-08-07 04:14 - 2015-08-08 05:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-06 21:22 - 2015-08-06 21:38 - 1192551870 _____ C:\Users\NA\Downloads\World of Warcraft Expansion Unveiling at Gamescom – Live Stream August 6 (HD).mp4
2015-08-06 18:01 - 2015-08-06 21:17 - 00000000 ____D C:\Users\NA\Desktop\stream
2015-08-06 05:47 - 2015-08-06 05:47 - 00000000 ____D C:\Users\NA\AppData\Local\MicrosoftEdge
2015-08-06 05:39 - 2015-08-06 05:40 - 96485800 _____ (Autodesk, Inc.) C:\Users\NA\Downloads\fbx20161_fbxsdk_vs2015_win.exe
2015-08-06 05:23 - 2015-08-06 05:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk FBX Review
2015-08-06 05:22 - 2015-08-06 05:22 - 00000000 ____D C:\Users\NA\Downloads\Autodesk_FBX_Review_1.3.0.0_Win64
2015-08-06 05:21 - 2015-08-06 05:22 - 21671372 _____ C:\Users\NA\Downloads\Autodesk_FBX_Review_1.3.0.0_Win64.zip
2015-08-06 05:14 - 2015-08-06 05:14 - 00000000 ____D C:\Users\NA\AppData\Local\open3mod
2015-08-06 05:14 - 2015-08-06 05:14 - 00000000 ____D C:\Users\NA\AppData\Local\Downloaded Installations
2015-08-06 05:14 - 2015-08-06 05:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open3mod
2015-08-06 05:14 - 2015-08-06 05:14 - 00000000 ____D C:\Program Files (x86)\open3mod
2015-08-06 05:12 - 2015-08-06 05:13 - 08925871 _____ (Alexander Gessler) C:\Users\NA\Downloads\open3mod_1_1_setup.exe
2015-08-06 05:09 - 2015-08-06 05:13 - 00000000 ____D C:\Program Files (x86)\GLC_Player
2015-08-06 05:09 - 2015-08-06 05:09 - 00000000 ____D C:\Users\NA\GLC_Player_Cache
2015-08-06 05:08 - 2015-08-06 05:08 - 15229371 _____ C:\Users\NA\Downloads\GLC_Player_2.2.0-setup.exe
2015-08-06 05:08 - 2015-08-06 05:08 - 05911109 _____ C:\Users\NA\Downloads\Examples6.zip
2015-08-06 05:02 - 2015-08-06 05:30 - 00000000 ____D C:\Users\NA\Documents\FBX Converter 2013.2
2015-08-06 05:01 - 2015-08-06 05:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-08-06 05:01 - 2015-08-06 05:23 - 00000000 ____D C:\Program Files\Autodesk
2015-08-06 05:01 - 2015-08-06 05:01 - 26924824 _____ C:\Users\NA\Downloads\fbx20132_converter_win_x64.exe
2015-08-06 04:35 - 2015-08-06 04:35 - 01005836 _____ (Marcus Geelnard ) C:\Users\NA\Downloads\OpenCTM-1.0.3-setup.exe
2015-08-06 02:27 - 2015-08-06 02:27 - 00000000 ____D C:\Users\NA\Downloads\codecanyon-10631027-3dmodel-configurator-viewer-canvasio3dpro
2015-08-06 02:26 - 2015-08-06 02:27 - 38091540 _____ C:\Users\NA\Downloads\localhost.sql
2015-08-06 02:26 - 2015-08-06 02:26 - 09455152 _____ C:\Users\NA\Downloads\codecanyon-10631027-3dmodel-configurator-viewer-canvasio3dpro.zip
2015-08-06 01:27 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 01:27 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-06 01:27 - 2015-07-30 08:22 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-06 01:27 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-06 01:27 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 01:27 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-06 01:27 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 01:27 - 2015-07-30 08:16 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-06 01:27 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-06 01:27 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 01:27 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-06 01:27 - 2015-07-30 08:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 01:27 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-06 01:27 - 2015-07-30 08:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 01:27 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 01:27 - 2015-07-30 08:03 - 01983328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-06 01:27 - 2015-07-30 07:30 - 22319520 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-06 01:27 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-06 01:27 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-06 01:27 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-06 01:27 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-06 01:27 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-06 01:27 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-08-06 01:27 - 2015-07-30 06:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-06 01:27 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-08-06 01:27 - 2015-07-30 06:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-06 01:27 - 2015-07-30 06:17 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-06 01:27 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-06 01:27 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-06 01:27 - 2015-07-30 06:07 - 20854776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-06 01:27 - 2015-07-30 06:02 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-06 01:27 - 2015-07-30 05:56 - 16707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-06 01:27 - 2015-07-30 05:54 - 24591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-06 01:27 - 2015-07-30 05:54 - 02415616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-06 01:27 - 2015-07-30 05:53 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-06 01:27 - 2015-07-30 05:53 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-06 01:27 - 2015-07-30 05:53 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-06 01:27 - 2015-07-30 05:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-06 01:27 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-06 01:27 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 01:27 - 2015-07-30 05:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-06 01:27 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 01:27 - 2015-07-30 05:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-06 01:27 - 2015-07-30 05:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 01:27 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-06 01:27 - 2015-07-30 05:42 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-06 01:27 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-06 01:27 - 2015-07-30 05:41 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-06 01:27 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-06 01:27 - 2015-07-30 05:40 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-06 01:27 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-06 01:27 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 01:27 - 2015-07-30 05:32 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-06 01:27 - 2015-07-30 05:32 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-06 01:27 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-06 01:27 - 2015-07-30 05:23 - 13024256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-06 01:27 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-06 01:27 - 2015-07-30 05:14 - 19333632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-06 01:27 - 2015-07-30 05:13 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-06 01:27 - 2015-07-30 05:12 - 01914880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-06 01:27 - 2015-07-30 05:11 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-06 01:27 - 2015-07-30 05:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-06 01:27 - 2015-07-30 05:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-06 01:27 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-06 01:27 - 2015-07-30 05:04 - 00495616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-06 01:27 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-08-06 01:27 - 2015-07-30 04:58 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-06 01:26 - 2015-07-30 08:17 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-06 01:26 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-06 01:26 - 2015-07-30 06:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 01:26 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-08-06 01:26 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-08-06 01:26 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-08-06 01:26 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-08-06 01:26 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-06 01:26 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-06 01:26 - 2015-07-30 06:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-06 01:26 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-06 01:26 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-06 01:26 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-06 01:26 - 2015-07-30 05:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 01:26 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-06 01:26 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-06 01:26 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-06 01:26 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-06 01:26 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-06 01:26 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-06 01:26 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-06 01:26 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-06 01:26 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-06 01:26 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-06 01:26 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-06 01:26 - 2015-07-30 05:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-06 01:26 - 2015-07-30 05:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 01:26 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-08-06 01:26 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-08-06 01:26 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-08-06 01:26 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-08-06 01:26 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-08-06 01:26 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-08-05 21:46 - 2015-08-05 21:46 - 00000000 ____D C:\Users\NA\AppData\Roaming\Google
2015-08-05 21:46 - 2015-08-05 21:46 - 00000000 ____D C:\Users\NA\AppData\Local\Software
2015-08-05 21:46 - 2015-08-05 21:46 - 00000000 ____D C:\Users\NA\AppData\Local\NikLicenseFiles
2015-08-05 21:04 - 2015-08-08 09:14 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-05 21:04 - 2015-08-08 09:11 - 00001122 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-05 21:04 - 2015-08-06 03:19 - 00000000 ____D C:\Users\NA\AppData\Local\Google
2015-08-05 21:04 - 2015-08-05 21:09 - 00004184 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-05 21:04 - 2015-08-05 21:09 - 00003952 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-05 21:04 - 2015-08-05 21:04 - 00000000 ____D C:\Program Files (x86)\Google Nik
2015-08-05 21:04 - 2015-08-05 21:04 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-04 01:31 - 2015-08-04 01:31 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ETD_01009.Wdf
2015-08-04 01:31 - 2015-08-04 01:31 - 00000000 ____D C:\Program Files\Elantech
2015-08-04 01:30 - 2015-08-04 01:30 - 01731816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2015-08-04 01:30 - 2015-08-04 01:30 - 00477784 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\Drivers\ETD.sys
2015-08-04 01:30 - 2015-08-04 01:30 - 00081640 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDCoInstaller.dll
2015-08-03 23:08 - 2015-08-03 23:08 - 00000000 ____D C:\Users\NA\AppData\Local\NetworkTiles
2015-08-02 14:42 - 2015-08-02 15:03 - 00000000 ____D C:\Users\NA\AppData\Local\Screencast-O-Matic-v2
2015-08-02 14:42 - 2015-08-02 14:42 - 00000000 ____D C:\Users\NA\Documents\Screencast-O-Matic
2015-08-01 12:43 - 2015-08-01 12:43 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-08-01 12:43 - 2015-08-01 12:43 - 00000000 ____D C:\WINDOWS\system32\NV
2015-08-01 12:41 - 2015-07-23 06:02 - 42730312 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 37749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 30518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 22973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 18376584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 16160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 16011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 15754192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 14511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 13274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 12973680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 11843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 02963208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 02360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 02164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 01898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435362.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435362.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 01061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 01053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 00983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 00976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 00150832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-08-01 12:41 - 2015-07-23 06:02 - 00031376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2015-08-01 12:09 - 2015-08-01 12:09 - 00000000 ____D C:\Users\NA\AppData\Local\Screen Recorder Launcher
2015-08-01 11:55 - 2015-07-05 12:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-07-30 23:01 - 2015-07-30 23:01 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-07-30 10:56 - 2015-07-30 10:56 - 00000000 ____D C:\Users\NA\AppData\Local\Macromedia
2015-07-30 10:00 - 2015-08-08 08:07 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-29 23:46 - 2015-07-29 23:46 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeStuff Starter
2015-07-29 23:46 - 2015-07-29 23:46 - 00000000 ____D C:\Program Files (x86)\CodeStuff
2015-07-29 23:03 - 2015-08-06 05:22 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-29 22:41 - 2015-07-29 22:41 - 00000000 ____D C:\WINDOWS\Panther
2015-07-29 22:16 - 2015-07-29 22:16 - 00000000 ____D C:\icons
2015-07-29 21:53 - 2015-07-03 10:39 - 00002166 _____ C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2015-07-29 21:46 - 2015-07-29 21:48 - 00000000 ____D C:\AeroGlass
2015-07-29 21:46 - 2015-07-29 21:46 - 00000000 ____D C:\ProgramData\dbg
2015-07-29 21:05 - 2015-07-29 21:05 - 00000000 ____D C:\Users\NA\AppData\Local\Apps\2.0
2015-07-29 20:59 - 2015-07-29 20:59 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 12502016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 11260928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 02462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 02150696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-07-29 20:59 - 2015-07-29 20:59 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-07-29 20:59 - 2015-07-29 20:59 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00643616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00606392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-07-29 20:59 - 2015-07-29 20:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 03589632 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01601024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-07-29 20:58 - 2015-07-29 20:58 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01161728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-07-29 20:58 - 2015-07-29 20:58 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00539216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-07-29 20:58 - 2015-07-29 20:58 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-07-29 20:58 - 2015-07-29 20:58 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-07-29 20:58 - 2015-07-29 20:58 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-07-29 20:58 - 2015-07-29 20:58 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-07-29 20:55 - 2015-07-29 20:55 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-07-29 20:53 - 2015-07-29 20:53 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-07-29 20:53 - 2015-07-29 20:53 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-07-29 20:53 - 2015-07-29 20:53 - 00000000 ____D C:\Program Files\MSBuild
2015-07-29 20:53 - 2015-07-29 20:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-07-29 20:53 - 2015-07-29 20:53 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-29 20:52 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-07-29 20:52 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-29 20:52 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-07-29 20:52 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-07-29 20:52 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-29 20:52 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-07-29 20:50 - 2015-07-29 20:51 - 00000000 ___RD C:\Users\NA\OneDrive
2015-07-29 20:49 - 2015-07-29 20:49 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-07-29 20:47 - 2015-07-29 20:49 - 00000000 ____D C:\Users\NA\AppData\Local\Comms
2015-07-29 20:47 - 2015-07-29 20:47 - 00000000 ____D C:\Users\NA\AppData\Local\Publishers
2015-07-29 20:46 - 2015-07-29 20:46 - 00000020 ___SH C:\Users\NA\ntuser.ini
2015-07-29 20:46 - 2015-07-29 20:46 - 00000000 ____D C:\Users\NA\AppData\Local\TileDataLayer
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-07-29 20:44 - 2015-07-29 20:44 - 00000000 __SHD C:\Recovery
2015-07-29 20:42 - 2015-08-08 08:16 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-29 20:34 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-07-29 20:29 - 2015-07-29 20:29 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-29 20:24 - 2015-07-29 20:24 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-07-29 20:23 - 2015-08-08 09:08 - 00000000 ____D C:\Users\NA
2015-07-29 20:23 - 2015-07-29 20:46 - 00000000 ___RD C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-29 20:23 - 2015-07-29 20:24 - 00000000 ___RD C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Vorlagen
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Startmenü
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Netzwerkumgebung
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Lokale Einstellungen
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Eigene Dateien
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Druckumgebung
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Documents\Eigene Musik
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Documents\Eigene Bilder
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\AppData\Local\Verlauf
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\AppData\Local\Anwendungsdaten
2015-07-29 20:23 - 2015-07-29 20:23 - 00000000 _SHDL C:\Users\NA\Anwendungsdaten
2015-07-29 20:23 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-29 20:23 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-29 20:23 - 2015-07-10 13:04 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-29 20:21 - 2015-07-29 23:55 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-07-29 20:20 - 2015-08-01 12:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-29 20:20 - 2015-08-01 12:43 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-29 20:20 - 2015-07-29 20:20 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2015-07-29 20:20 - 2015-07-29 20:20 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2015-07-29 20:20 - 2015-07-29 20:20 - 00000000 ____D C:\ProgramData\SetupTPDriver
2015-07-29 20:20 - 2015-07-29 20:20 - 00000000 ____D C:\Program Files\Common Files\Atheros
2015-07-29 20:20 - 2015-07-23 03:10 - 06873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 00937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-07-29 20:20 - 2015-07-23 03:10 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-07-29 20:20 - 2015-07-22 06:29 - 05121613 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-07-29 20:19 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-07-29 20:19 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files\Intel
2015-07-29 20:19 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevPch_01009.Wdf
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-07-29 20:19 - 2015-07-29 20:19 - 00000000 ____D C:\Program Files\Realtek
2015-07-29 20:19 - 2015-07-11 00:29 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-07-29 20:19 - 2015-07-11 00:29 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-07-29 20:18 - 2015-07-29 20:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-07-29 20:18 - 2015-07-29 20:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2015-07-29 20:15 - 2015-07-29 20:16 - 00029798 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-07-29 13:08 - 2015-07-29 13:08 - 00000000 ___HD C:\$Windows.~WS
2015-07-29 13:01 - 2015-07-29 13:01 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2015-07-29 11:35 - 2014-11-08 04:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-07-29 11:22 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-07-29 11:18 - 2015-07-29 11:18 - 00000000 ____D C:\Users\NA\AppData\Local\GWX
2015-07-29 10:05 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Programme
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-07-29 00:33 - 2015-07-29 00:33 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-07-29 00:32 - 2015-07-29 20:42 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-07-29 00:10 - 2015-07-29 20:43 - 00036873 _____ C:\WINDOWS\diagwrn.xml
2015-07-29 00:10 - 2015-07-29 20:43 - 00036482 _____ C:\WINDOWS\diagerr.xml
2015-07-28 15:35 - 2015-07-29 20:30 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WoW Model Viewer
2015-07-28 15:35 - 2015-07-28 15:35 - 00000000 ____D C:\Program Files (x86)\WoWModelViewer
2015-07-28 14:34 - 2015-07-28 14:34 - 00000000 _____ C:\Users\NA\Desktop\Neues Textdokument (2).txt
2015-07-28 12:22 - 2015-07-28 12:22 - 00000000 ____D C:\Users\NA\.swt
2015-07-28 12:22 - 2015-07-28 12:22 - 00000000 ____D C:\ProgramData\Sun
2015-07-28 12:22 - 2015-07-28 12:21 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-07-28 12:21 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-07-28 12:21 - 2015-07-28 12:22 - 00000000 ____D C:\ProgramData\Oracle
2015-07-28 12:21 - 2015-07-28 12:21 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-28 12:20 - 2015-07-28 12:20 - 00000870 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Angry IP Scanner.lnk
2015-07-28 12:20 - 2015-07-28 12:20 - 00000000 ____D C:\Program Files\Angry IP Scanner
2015-07-27 16:47 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-07-27 16:47 - 2015-07-28 06:36 - 00000000 ____D C:\Fraps
2015-07-27 08:05 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-07-27 08:05 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-07-27 08:04 - 2015-07-27 08:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-07-27 08:04 - 2015-07-27 08:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-07-27 06:16 - 2015-08-08 05:00 - 00000000 ____D C:\Users\NA\Desktop\update
2015-07-26 16:48 - 2015-07-26 16:48 - 00000000 ____D C:\Program Files\EaseUS
2015-07-26 14:11 - 2015-07-29 13:00 - 00000000 ____D C:\Users\NA\Desktop\schreiben
2015-07-26 03:05 - 2015-07-29 20:47 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2015-07-26 03:05 - 2015-07-29 20:41 - 00003648 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher
2015-07-25 12:32 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-25 12:31 - 2015-07-25 12:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2015-07-25 12:31 - 2015-07-25 12:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2015-07-25 12:29 - 2015-08-05 20:50 - 00000000 ____D C:\Users\NA\AppData\Local\Microsoft Help
2015-07-25 12:29 - 2015-07-29 09:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-25 12:29 - 2015-07-25 12:29 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-25 12:28 - 2015-07-25 12:28 - 00000000 __RHD C:\MSOCache
2015-07-25 04:46 - 2015-07-30 16:12 - 00000241 _____ C:\Users\NA\Desktop\Neues Textdokument.txt
2015-07-25 03:10 - 2015-08-08 05:37 - 00000000 ____D C:\Users\NA\AppData\Roaming\MPC-HC
2015-07-25 03:10 - 2015-07-25 03:10 - 00000000 ____D C:\Program Files\MPC-HC
2015-07-25 00:14 - 2015-08-07 23:06 - 00004608 _____ C:\Users\NA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-24 00:22 - 2015-07-30 10:56 - 00000000 ____D C:\Users\NA\AppData\Local\Adobe
2015-07-24 00:22 - 2015-07-24 00:22 - 00000000 ____D C:\Users\NA\Documents\Updater
2015-07-23 23:26 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-07-23 23:26 - 2015-07-23 23:26 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2015-07-23 23:25 - 2015-07-23 23:25 - 00002047 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2015-07-23 22:56 - 2015-08-08 05:00 - 00000000 ____D C:\Users\NA\AppData\Local\GHISLER
2015-07-23 22:25 - 2015-07-23 22:25 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-07-23 20:26 - 2015-07-23 20:26 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-07-23 19:43 - 2015-07-23 19:43 - 00000000 ____D C:\sources
2015-07-23 18:25 - 2015-08-08 05:38 - 00000000 ____D C:\Users\NA\AppData\Roaming\TS3Client
2015-07-23 17:06 - 2015-07-29 20:46 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-07-23 17:01 - 2015-07-29 09:20 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2015-07-23 16:36 - 2015-07-29 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duden
2015-07-23 16:36 - 2015-07-23 16:37 - 00000000 ____D C:\Users\NA\AppData\Roaming\Duden
2015-07-23 16:36 - 2015-07-23 16:37 - 00000000 ____D C:\ProgramData\Duden
2015-07-23 16:36 - 2015-07-23 16:36 - 00000000 ____D C:\Program Files (x86)\Duden
2015-07-23 16:35 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-07-23 16:35 - 2015-07-23 16:35 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-07-23 16:33 - 2015-07-29 20:30 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitvise SSH Client
2015-07-23 16:33 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2015-07-23 16:33 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2015-07-23 16:32 - 2015-08-08 09:10 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-23 16:32 - 2015-07-23 16:33 - 00000000 ____D C:\Program Files (x86)\Bitvise SSH Client
2015-07-23 16:32 - 2015-07-23 16:32 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2015-07-23 16:32 - 2015-07-09 19:11 - 00831664 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2015-07-23 16:32 - 2015-07-09 19:11 - 00226480 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klhk.sys
2015-07-23 16:32 - 2015-07-09 19:11 - 00159960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2015-07-23 16:30 - 2015-07-29 20:30 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2015-07-23 16:30 - 2015-07-23 21:33 - 00000000 ____D C:\Users\NA\AppData\Roaming\GHISLER
2015-07-23 16:30 - 2015-07-23 16:30 - 00000000 ____D C:\Program Files (x86)\totalcmd
2015-07-23 16:26 - 2015-07-23 16:26 - 00000400 _____ C:\WINDOWS\ODBC.INI
2015-07-23 16:25 - 2015-07-27 08:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-07-23 16:24 - 2015-08-08 09:10 - 00000000 ____D C:\Users\NA\AppData\Local\CrashDumps
2015-07-23 16:23 - 2015-07-30 09:44 - 00000000 ____D C:\Users\NA\Desktop\Text & Verwaltung
2015-07-23 16:19 - 2015-07-24 07:31 - 00000000 ____D C:\Users\NA\AppData\Local\Windows Live Writer
2015-07-23 16:19 - 2015-07-24 01:00 - 00000000 ____D C:\Users\NA\AppData\Roaming\Windows Live Writer
2015-07-23 15:34 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-07-23 15:30 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-07-23 15:30 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-07-23 15:30 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-07-23 15:25 - 2015-08-08 04:41 - 00000000 ____D C:\Users\NA\AppData\Local\Battle.net
2015-07-23 15:25 - 2015-08-03 20:40 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-07-23 15:25 - 2015-07-29 20:30 - 00000000 ____D C:\WINDOWS\de
2015-07-23 15:25 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-07-23 15:25 - 2015-07-23 15:25 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-07-23 15:25 - 2015-07-23 15:25 - 00000000 ____D C:\Users\NA\AppData\Roaming\Battle.net
2015-07-23 15:25 - 2015-07-23 15:25 - 00000000 ____D C:\Users\NA\AppData\Local\Blizzard Entertainment
2015-07-23 15:25 - 2015-07-23 15:25 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-07-23 15:24 - 2015-07-23 15:24 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-07-23 15:24 - 2015-07-23 15:24 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-07-23 15:24 - 2015-07-23 15:24 - 00000000 ____D C:\Program Files\Windows Live
2015-07-23 15:24 - 2015-07-23 15:24 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-07-23 15:24 - 2015-07-23 15:24 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-23 15:23 - 2015-07-23 15:23 - 00000000 ____D C:\ProgramData\Battle.net
2015-07-23 15:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-07-23 15:22 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-07-23 15:22 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-07-23 15:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-07-23 15:22 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-07-23 15:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-07-23 15:22 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-07-23 15:22 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-07-23 15:22 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-07-23 15:22 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-07-23 15:21 - 2015-07-26 14:03 - 00000000 ____D C:\Users\NA\AppData\Local\Windows Live
2015-07-23 15:20 - 2015-07-29 20:30 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-07-23 15:20 - 2015-07-23 15:20 - 00000000 ____D C:\Users\NA\AppData\Roaming\IrfanView
2015-07-23 15:20 - 2015-07-23 15:20 - 00000000 ____D C:\Program Files (x86)\IrfanView
2015-07-23 15:14 - 2015-07-23 15:14 - 00000000 ____D C:\Users\NA\Tracing
2015-07-23 15:13 - 2015-08-07 23:49 - 00000000 ____D C:\Users\NA\AppData\Roaming\Skype
2015-07-23 15:13 - 2015-08-07 23:11 - 00000000 ___RD C:\Users\NA\Desktop\-=Programme=-
2015-07-23 15:13 - 2015-07-29 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-07-23 15:13 - 2015-07-23 15:13 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-23 15:13 - 2015-07-23 15:13 - 00000000 ____D C:\Users\NA\AppData\Local\Skype
2015-07-23 15:12 - 2015-07-23 15:13 - 00000000 ____D C:\ProgramData\Skype
2015-07-23 15:05 - 2015-03-04 09:26 - 00011105 _____ C:\WINDOWS\system32\AutoconfigV2.cab
2015-07-13 20:45 - 2015-07-23 06:02 - 11142984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-07-13 20:45 - 2015-07-23 06:02 - 03351864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 01165192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00991152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00031976 _____ C:\WINDOWS\system32\nvinfo.pb
2015-07-13 20:45 - 2015-07-13 20:45 - 01898312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435354.dll
2015-07-13 20:45 - 2015-07-13 20:45 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435354.dll
2015-07-13 08:03 - 2015-07-13 08:03 - 00047744 _____ C:\WINDOWS\system32\ASGCoInstaller_x64.dll
2015-07-11 00:51 - 2015-07-11 00:51 - 04363152 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 04359568 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 02499552 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00960400 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00546704 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00546192 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00531344 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00434576 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00384912 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTray.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00319888 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00281488 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00248208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00195472 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-07-11 00:51 - 2015-07-11 00:51 - 00155536 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-07-11 00:50 - 2015-07-11 00:50 - 03789240 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2015-07-11 00:50 - 2015-07-11 00:50 - 00400784 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeApp.exe
2015-07-11 00:50 - 2015-07-11 00:50 - 00400272 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-07-11 00:49 - 2015-07-11 00:49 - 12218376 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 11793480 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 10948400 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 10474552 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 04587608 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 03628160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 01137120 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 01133000 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00454760 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00366680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00218848 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00188496 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00183840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00159096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00031448 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-07-11 00:49 - 2015-07-11 00:49 - 00002564 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-07-11 00:47 - 2015-07-11 00:47 - 08520192 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2015-07-11 00:47 - 2015-07-11 00:47 - 00224256 _____ C:\WINDOWS\system32\igdde64.dll
2015-07-11 00:47 - 2015-07-11 00:47 - 00187844 _____ C:\WINDOWS\system32\resTHA.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00180644 _____ C:\WINDOWS\system32\resELL.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00176500 _____ C:\WINDOWS\system32\resRUS.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00162356 _____ C:\WINDOWS\system32\resARA.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00162304 _____ C:\WINDOWS\system32\igdail64.dll
2015-07-11 00:47 - 2015-07-11 00:47 - 00161812 _____ C:\WINDOWS\system32\resHEB.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00161764 _____ C:\WINDOWS\system32\resJPN.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00157172 _____ C:\WINDOWS\system32\resFRA.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00157156 _____ C:\WINDOWS\system32\resHUN.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00155460 _____ C:\WINDOWS\system32\resKOR.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00155364 _____ C:\WINDOWS\system32\resITA.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00155364 _____ C:\WINDOWS\system32\resDEU.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00155204 _____ C:\WINDOWS\system32\resROM.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00155092 _____ C:\WINDOWS\system32\resESN.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00154660 _____ C:\WINDOWS\system32\resPLK.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00154532 _____ C:\WINDOWS\system32\resSKY.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00154324 _____ C:\WINDOWS\system32\resNLD.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00153764 _____ C:\WINDOWS\system32\resPTB.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00153636 _____ C:\WINDOWS\system32\resTRK.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00153604 _____ C:\WINDOWS\system32\resCSY.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00153476 _____ C:\WINDOWS\system32\resPTG.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00153060 _____ C:\WINDOWS\system32\resFIN.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00152628 _____ C:\WINDOWS\system32\resHRV.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00152164 _____ C:\WINDOWS\system32\resSVE.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00152004 _____ C:\WINDOWS\system32\resSLV.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00151060 _____ C:\WINDOWS\system32\resNOR.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00150548 _____ C:\WINDOWS\system32\resDAN.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00149236 _____ C:\WINDOWS\system32\resENU.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00147460 _____ C:\WINDOWS\system32\resCHT.cui
2015-07-11 00:47 - 2015-07-11 00:47 - 00146628 _____ C:\WINDOWS\system32\resCHS.cui
2015-07-11 00:46 - 2015-07-11 00:46 - 00670208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00624128 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00384000 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00276480 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00255488 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-07-11 00:46 - 2015-07-11 00:46 - 00252416 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00086528 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00069632 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00059392 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00010752 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-07-11 00:46 - 2015-07-11 00:46 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-07-11 00:41 - 2015-07-11 00:41 - 06503424 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2015-07-11 00:41 - 2015-07-11 00:41 - 00185856 _____ C:\WINDOWS\SysWOW64\igdde32.dll
2015-07-11 00:41 - 2015-07-11 00:41 - 00143872 _____ C:\WINDOWS\SysWOW64\igdail32.dll
2015-07-11 00:41 - 2015-07-11 00:41 - 00030720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-07-11 00:38 - 2015-07-11 00:38 - 22905344 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-07-11 00:38 - 2015-07-11 00:38 - 01985536 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-07-11 00:38 - 2015-07-11 00:38 - 00376832 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-07-11 00:38 - 2015-07-11 00:38 - 00365568 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-07-11 00:36 - 2015-07-11 00:36 - 17838080 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-07-11 00:36 - 2015-07-11 00:36 - 01784320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-07-11 00:36 - 2015-07-11 00:36 - 00320512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-07-11 00:36 - 2015-07-11 00:36 - 00286720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 04015648 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 02813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2015-07-11 00:29 - 2015-07-11 00:29 - 02027008 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 01758208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 01460256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00856608 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00650784 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00607776 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00349216 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00215072 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00184832 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00182304 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00155136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00133152 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00098848 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00094208 _____ C:\WINDOWS\system32\IccLibDll_x64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-07-11 00:29 - 2015-07-11 00:29 - 00044025 _____ C:\WINDOWS\system32\iglhxo64.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00043816 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00043494 _____ C:\WINDOWS\system32\iglhxc64.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00043298 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00043256 _____ C:\WINDOWS\system32\iglhxg64.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00042079 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2015-07-11 00:29 - 2015-07-11 00:29 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2015-07-10 18:47 - 2015-07-10 13:01 - 00031816 _____ C:\WINDOWS\Core.xml
2015-07-10 18:46 - 2015-07-29 20:30 - 00000000 ____D C:\WINDOWS\ShellNew
2015-07-10 18:46 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files\Windows Journal
2015-07-10 18:46 - 2015-07-10 18:46 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
2015-07-10 18:35 - 2015-07-10 18:35 - 00000000 ____D C:\WINDOWS\SKB
2015-07-10 18:35 - 2015-07-10 18:35 - 00000000 ____D C:\WINDOWS\OCR
2015-07-10 18:34 - 2015-08-08 08:16 - 00779768 _____ C:\WINDOWS\system32\perfh007.dat
2015-07-10 18:34 - 2015-08-08 08:16 - 00157114 _____ C:\WINDOWS\system32\perfc007.dat
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-07-10 18:34 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-07-10 18:34 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-07-10 18:34 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-07-10 18:34 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-07-10 18:34 - 2015-07-10 18:34 - 00305634 _____ C:\WINDOWS\system32\perfi007.dat
2015-07-10 18:34 - 2015-07-10 18:34 - 00040390 _____ C:\WINDOWS\system32\perfd007.dat
2015-07-10 18:34 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\SysWOW64\de
2015-07-10 18:34 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2015-07-10 18:34 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\system32\de
2015-07-10 18:34 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\system32\0409
2015-07-10 15:20 - 2015-07-10 15:20 - 00016384 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG
2015-07-10 15:19 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-07-10 14:22 - 2015-07-10 14:22 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-M7P1NB6_Administrator_HistoryPrediction.bin
2015-07-10 14:22 - 2015-07-10 14:22 - 00000000 ____D C:\ProgramData\USOShared
2015-07-10 14:21 - 2015-08-08 09:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-10 14:20 - 2015-07-29 21:51 - 00288616 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-07-10 13:06 - 2015-07-29 20:58 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-10 13:06 - 2015-07-29 20:58 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-10 13:06 - 2015-07-10 13:06 - 00000000 ____D C:\WINDOWS\Setup
2015-07-10 13:04 - 2015-08-08 09:08 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-10 13:04 - 2015-08-08 09:05 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-07-10 13:04 - 2015-08-08 05:13 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-07-10 13:04 - 2015-08-07 20:47 - 00000000 ____D C:\WINDOWS\rescache
2015-07-10 13:04 - 2015-08-06 22:32 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-10 13:04 - 2015-08-06 01:45 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-07-10 13:04 - 2015-08-06 01:45 - 00000000 ____D C:\WINDOWS\Provisioning
2015-07-10 13:04 - 2015-07-30 08:01 - 00000000 ____D C:\WINDOWS\appcompat
2015-07-10 13:04 - 2015-07-29 23:02 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-07-10 13:04 - 2015-07-29 21:19 - 00000000 ____D C:\WINDOWS\system32\restore
2015-07-10 13:04 - 2015-07-29 21:13 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-07-10 13:04 - 2015-07-29 21:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-07-10 13:04 - 2015-07-29 20:47 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-07-10 13:04 - 2015-07-29 20:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-07-10 13:04 - 2015-07-29 20:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-07-10 13:04 - 2015-07-29 20:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-07-10 13:04 - 2015-07-29 20:44 - 00000000 ____D C:\Program Files\Windows NT
2015-07-10 13:04 - 2015-07-29 20:43 - 00000000 ____D C:\WINDOWS\Registration
2015-07-10 13:04 - 2015-07-29 20:39 - 00000000 __RHD C:\Users\Public\Libraries
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-07-10 13:04 - 2015-07-29 20:27 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\spool
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\IME
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-07-10 13:04 - 2015-07-29 20:26 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\InputMethod
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\WINDOWS\IME
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-10 13:04 - 2015-07-29 20:25 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-07-10 13:04 - 2015-07-29 20:24 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-07-10 13:04 - 2015-07-29 20:20 - 00000000 ____D C:\WINDOWS\Help
2015-07-10 13:04 - 2015-07-10 18:46 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 13:04 - 2015-07-10 18:46 - 00000000 ____D C:\WINDOWS\Web
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\system32\Com
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ____D C:\Program Files\Windows Defender
2015-07-10 13:04 - 2015-07-10 18:34 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-07-10 13:04 - 2015-07-10 15:19 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-07-10 13:04 - 2015-07-10 15:19 - 00000000 ____D C:\WINDOWS\system32\setup
2015-07-10 13:04 - 2015-07-10 14:22 - 00000000 ____D C:\ProgramData\USOPrivate
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 __RSD C:\WINDOWS\Media
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\Nui
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\Program Files\WindowsPowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Vss
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\tracing
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\TAPI
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sru
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\spp
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\restore
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SystemResources
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\winevt
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sppui
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\spp
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Speech
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\RasToast
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ras
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\networklist
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Macromed
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Licenses
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\icsxml
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\ias
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\es-MX
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system\Speech
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\System
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Speech_OneCore
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Speech
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\security
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\schemas
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SchCache
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Resources
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\PLA
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Performance
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Globalization
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Cursors
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Branding
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\addins
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\ProgramData\Comms
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\Services
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows NT
2015-07-10 13:04 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-07-10 13:04 - 2015-07-10 13:02 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2015-07-10 13:04 - 2015-07-10 13:02 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2015-07-10 13:04 - 2015-07-10 13:02 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2015-07-10 13:04 - 2015-07-10 13:02 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2015-07-10 13:04 - 2015-07-10 13:02 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2015-07-10 13:04 - 2015-07-10 13:02 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat
2015-07-10 13:04 - 2015-07-10 13:02 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat
2015-07-10 13:04 - 2015-07-10 13:02 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2015-07-10 13:04 - 2015-07-10 13:02 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat
2015-07-10 13:04 - 2015-07-10 13:02 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat
2015-07-10 13:04 - 2015-07-10 13:02 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2015-07-10 13:04 - 2015-07-10 13:02 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2015-07-10 13:04 - 2015-07-10 13:02 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2015-07-10 13:01 - 2015-07-10 18:45 - 02533888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysis.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 01949696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsCpl.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 01949696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsCpl.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00274224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2015-07-10 13:01 - 2015-07-10 18:45 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsClassExtension.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfdts.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorPerformanceEvents.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\jnwmon.dll
2015-07-10 13:01 - 2015-07-10 18:45 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorCustomAdbAlgorithm.dll
2015-07-10 13:01 - 2015-07-10 18:35 - 12039680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0007.dll
2015-07-10 13:01 - 2015-07-10 18:35 - 12039680 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0007.dll
2015-07-10 13:01 - 2015-07-10 18:35 - 11602944 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0007.dll
2015-07-10 13:01 - 2015-07-10 18:35 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0007.dll
2015-07-10 13:01 - 2015-07-10 18:35 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0007.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 28851224 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 28083144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 09375232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2015-07-10 13:01 - 2015-07-10 13:01 - 09375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2015-07-10 13:01 - 2015-07-10 13:01 - 06787584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 05156352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 04646400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

Alt 08.08.2015, 08:30   #5
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 4

Code:
ATTFilter
2015-07-10 13:01 - 2015-07-10 13:01 - 04238848 _____ (Microsoft) C:\WINDOWS\SysWOW64\GameUXLegacyGDFs.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 04238848 _____ (Microsoft) C:\WINDOWS\system32\GameUXLegacyGDFs.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 03748864 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 03555328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 03549184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 03415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 03300864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02926592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 02727936 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02369696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2015-07-10 13:01 - 2015-07-10 13:01 - 02362368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02350080 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02198016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 02042368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-07-10 13:01 - 2015-07-10 13:01 - 01976320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01940480 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01572864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0000.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 01566208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01517056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0000.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01492992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01432064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxpTaskSync.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01389056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxpTaskSync.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01270784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 01211392 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01189888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01163776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2015-07-10 13:01 - 2015-07-10 13:01 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2015-07-10 13:01 - 2015-07-10 13:01 - 01138688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 01054912 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmv2clt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00987848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00950272 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00926208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSRESM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSRESM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00918016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00901824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmv2clt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00879616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00859648 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSST.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\blackbox.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Bubbles.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdcpl.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartCardSimulator.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedwipes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedwipes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\elslad.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00690016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00679936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFSR.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSSVC.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\blackbox.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OobeFldr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elslad.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00588840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpunits.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00495848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmdev.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00484552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmnet.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiashext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadefui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiashext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceStatus.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00433896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCEWMDRMNDBootstrap.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceStatus.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSE.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadefui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructure.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmnet.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provsvc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00380224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDSp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructure.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-07-10 13:01 - 2015-07-10 13:01 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmmgrtn.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00312552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCEWMDRMNDBootstrap.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDSp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00305816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcl.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\scansetting.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drmmgrtn.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\cewmdm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00253600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scansetting.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00249464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2015-07-10 13:01 - 2015-07-10 13:01 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\elshyph.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOVER.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpeval.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\audiodev.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\unregmp2.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncMetastore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cewmdm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorShell.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssText3d.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cleanmgr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00201456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00201216 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elshyph.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgrade.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbeio.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00197632 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\ir32_32original.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unregmp2.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncMetastore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceTypes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\moricons.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moricons.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUTILITY.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceWMDRM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\charmap.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrdc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceSyncProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syncui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00153920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbeio.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceTypes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00142848 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncProviders.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgrsvr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msnetobj.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmttpmvscmgrsvr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceSyncProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceWiaCompat.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mystify.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAPI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Ribbons.scr
2015-07-10 13:01 - 2015-07-10 13:01 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclPowrProf.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAuthn.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrahc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclUnicode.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\raserver.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAuthn.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountExtension.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAPI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msnetobj.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncProviders.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\isoburn.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceClassExtension.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00113664 _____ (Microsoft) C:\WINDOWS\system32\SMBHelperClass.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorPwdMgr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidfdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\racpldlg.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msra.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorPwdMgr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSXP32.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\isoburn.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raserver.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiascanprofiles.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\whealogr.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\cca.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Cache.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00093702 _____ C:\WINDOWS\SysWOW64\SubRange.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00093702 _____ C:\WINDOWS\system32\SubRange.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kstvtune.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiascanprofiles.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mobsync.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00086528 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logagent.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srhelper.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mobsync.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00084992 _____ (Microsoft) C:\WINDOWS\SysWOW64\SMBHelperClass.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\recovery.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mpeg2Data.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSTPager.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSROUTE.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ELSCore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOM.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Syncreg.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSSessionUX.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bdaplgin.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BlbEvents.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidfdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cca.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidnsp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2015-07-10 13:01 - 2015-07-10 13:01 - 00076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2015-07-10 13:01 - 2015-07-10 13:01 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-07-10 13:01 - 2015-07-10 13:01 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WABSyncProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDvbNP.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00071824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\blb_ps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sberes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartScreenSettings.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\sberes.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartScreenSettings.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ELSCore.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Syncreg.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00060458 _____ C:\WINDOWS\SysWOW64\ideograf.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00060458 _____ C:\WINDOWS\system32\ideograf.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00060416 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WABSyncProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceConnectApi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclEtw.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hcproviders.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00058920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drtprov.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksxbar.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShServiceObj.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00056320 _____ (Microsoft) C:\WINDOWS\SysWOW64\cero.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00055296 _____ (Microsoft) C:\WINDOWS\SysWOW64\fpb.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00052736 _____ (Microsoft) C:\WINDOWS\SysWOW64\esrb.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConnectedAccountState.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidnsp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationHostProxy.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdchange.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmler.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbisurf.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSMON.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00047544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00046592 _____ (Microsoft) C:\WINDOWS\SysWOW64\oflc-nz.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00044544 _____ (Microsoft) C:\WINDOWS\SysWOW64\csrr.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drttransport.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConnectedAccountState.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hcproviders.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00041984 _____ (Microsoft) C:\WINDOWS\SysWOW64\cob-au.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdchange.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbisurf.ax
2015-07-10 13:01 - 2015-07-10 13:01 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmlog.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSEXT32.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiawow64.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxpps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\tvratings.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructureps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToStatusProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSERES.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmlog.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00032256 _____ (Microsoft) C:\WINDOWS\SysWOW64\usk.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tvratings.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsepno.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShextAutoplay.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToStatusProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\elsTrans.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WpdUpFltr.sys
2015-07-10 13:01 - 2015-07-10 13:01 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MemoryDiagnostic.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00028896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraSettingsUIHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ms3dthumbnailprovider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShextAutoplay.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\srwmi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elsTrans.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00024006 _____ C:\WINDOWS\SysWOW64\gb2312.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00024006 _____ C:\WINDOWS\system32\gb2312.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ms3dthumbnailprovider.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscTimer.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00022984 _____ C:\WINDOWS\SysWOW64\bopomofo.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00022984 _____ C:\WINDOWS\system32\bopomofo.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00022528 _____ (Microsoft) C:\WINDOWS\SysWOW64\grb.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00021504 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi-pt.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00021504 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscisvif.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\VscMgrPS.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dscproxy.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteWipeCSP.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amcompat.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\srdelayed.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\amcompat.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUNATD.exe


Alt 08.08.2015, 08:31   #6
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 5
Code:
ATTFilter
2015-07-10 13:01 - 2015-07-10 13:01 - 00018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntosext.sys
2015-07-10 13:01 - 2015-07-10 13:01 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vdmdbg.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00017576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00017576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructureps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srdelayed.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00016740 _____ C:\WINDOWS\SysWOW64\ShiftJIS.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00016740 _____ C:\WINDOWS\system32\ShiftJIS.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00016384 _____ (Microsoft) C:\WINDOWS\SysWOW64\djctq.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentTask.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00015872 _____ (Microsoft) C:\WINDOWS\SysWOW64\pcbp.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclSqm.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidcrl40.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHostps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootim.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VscMgrPS.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidcrl40.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00012876 _____ C:\WINDOWS\SysWOW64\korean.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00012876 _____ C:\WINDOWS\system32\korean.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHostps.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiaExtensionHost64.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WallpaperHost.exe
2015-07-10 13:01 - 2015-07-10 13:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00010429 _____ C:\WINDOWS\system32\ScavengeSpace.xml
2015-07-10 13:01 - 2015-07-10 13:01 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LAPRXY.DLL
2015-07-10 13:01 - 2015-07-10 13:01 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typelib.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storage.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2nls.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2disp.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compobj.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir32_32.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getuname.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclWdi.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSEVENT.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00008566 _____ C:\WINDOWS\system32\ResPriHMImageList
2015-07-10 13:01 - 2015-07-10 13:01 - 00008484 _____ C:\WINDOWS\SysWOW64\kanji_2.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00008484 _____ C:\WINDOWS\system32\kanji_2.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00008260 _____ C:\WINDOWS\system32\ResPriImageList
2015-07-10 13:01 - 2015-07-10 13:01 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2015-07-10 13:01 - 2015-07-10 13:01 - 00006948 _____ C:\WINDOWS\SysWOW64\kanji_1.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00006948 _____ C:\WINDOWS\system32\kanji_1.uce
2015-07-10 13:01 - 2015-07-10 13:01 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2015-07-10 13:01 - 2015-07-10 13:01 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00005120 _____ (Microsoft) C:\WINDOWS\SysWOW64\WEB.rs
2015-07-10 13:01 - 2015-07-10 13:01 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrEvents.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2015-07-10 13:01 - 2015-07-10 13:01 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmerror.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asferror.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmerror.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\blbres.dll
2015-07-10 13:01 - 2015-07-10 13:01 - 00002349 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk
2015-07-10 13:01 - 2015-07-10 13:01 - 00002199 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk
2015-07-10 13:01 - 2015-07-10 13:01 - 00002197 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Devices Flow.lnk
2015-07-10 13:01 - 2015-07-10 13:01 - 00001649 _____ C:\WINDOWS\SysWOW64\WindowsCodecsRaw.txt
2015-07-10 13:01 - 2015-07-10 13:01 - 00001649 _____ C:\WINDOWS\system32\WindowsCodecsRaw.txt
2015-07-10 13:00 - 2015-07-10 18:45 - 03793408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 03603968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysis.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mblctr.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SnippingTool.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00306800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SNTSearch.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrreg.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DFDWiz.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\RotMgr.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrcomp.exe
2015-07-10 13:00 - 2015-07-10 18:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2015-07-10 13:00 - 2015-07-10 18:45 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetppui.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 46214656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imageres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 46214656 _____ (Microsoft Corporation) C:\WINDOWS\system32\imageres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 15785472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDORes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 09577472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 09577472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 07805120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSetup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 07561248 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 07502848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 06830720 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 06713856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 06638080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 06525424 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 06440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 05865824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizimg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 05510144 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 05448704 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 05329408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 04737024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 04453888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 04143104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03873280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03813888 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03789312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03692032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03528192 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03467784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03440660 _____ C:\WINDOWS\SysWOW64\Drivers\gm.dls
2015-07-10 13:00 - 2015-07-10 13:00 - 03440660 _____ C:\WINDOWS\system32\Drivers\gm.dls
2015-07-10 13:00 - 2015-07-10 13:00 - 03292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 03170304 _____ C:\WINDOWS\SysWOW64\boot.sdi
2015-07-10 13:00 - 2015-07-10 13:00 - 03064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 03046400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 03014144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02849280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02839040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02816024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02747392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02679296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02674176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02640872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02599424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02550784 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02542760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02508800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02430816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 02405376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02253824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02222080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02187960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02181120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02158960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02119168 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 02102272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02065408 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02058240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 02027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01951360 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01933784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplaySwitch.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01925632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01923440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplaySwitch.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01857024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01823248 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01811360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01797632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01780904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01744384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01744384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01733880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01719296 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01718272 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01686528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01684480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkexplorer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01676288 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01587248 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfshim.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01541632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01538176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01531376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01521608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01520828 _____ C:\WINDOWS\system32\WpcNBModel.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 01516456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01495552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01495040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pimstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01457152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01422336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01420392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01389056 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvbvm60.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01384960 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01366168 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01350144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01336832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01321224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\connect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01298432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01286144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01284608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01270272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01252864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01240064 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01235456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ogldrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01222144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfshim.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01213952 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01210880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01206784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01192960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01181184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01180704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01179640 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Pimstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shellstyle.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\system32\shellstyle.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01149440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01149440 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01123328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01122304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01115648 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01114112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01100800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ogldrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01099776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01096192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01093120 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01083656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01074176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01068544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onexui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01063936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01056768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01055232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01049088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01044992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01042784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01039360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01032192 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01026560 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 01010016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 01009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 01007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00994816 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00975360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00966656 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceqp40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00952968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00924944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc40u.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00924944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00921440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00918016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00904704 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00892224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallControlPanel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00889856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim700.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00860160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00839680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir41_32original.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00838808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00835072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00829952 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00825856 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00823808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00819712 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00815104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00813568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00809336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00776192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00771672 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00771160 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsecsnp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppinst.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00768000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00766976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00763904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00762880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00753664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00751616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00746496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir50_32original.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vault.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00741888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00739328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceqp40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00729088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc_ssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00724168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00706560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagesp1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagesp1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00699744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00692064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsuiext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00680256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00679776 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00673088 _____ C:\WINDOWS\SysWOW64\mlang.dat
2015-07-10 13:00 - 2015-07-10 13:00 - 00673088 _____ C:\WINDOWS\system32\mlang.dat
2015-07-10 13:00 - 2015-07-10 13:00 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsuiext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vault.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00668000 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00667344 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00660992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dccw.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppinst.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dccw.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00643072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00635392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc_ssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00633768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00633184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00632680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00630120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00628224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00624312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00624128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched20.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp60.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00609792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00609464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_isv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00601600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00597344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dramp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00591912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00585568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00579424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IasMigPlugin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00568176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00565656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_isv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_9.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00554248 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00552288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\glmf32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcese40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00534064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00529456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00528384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00526068 _____ C:\WINDOWS\system32\staticurllist.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00519072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00517568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched20.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdri.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00507904 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00503600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00501992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxApplicabilityEngine.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp_isv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00497896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00486400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\main.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00472416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shwebsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00452992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\localsec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00449408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00446336 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp60.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00442208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00439648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsmsnap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00435712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glmf32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsquery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00432360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcese40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shwebsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00427104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00426664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00423424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00422560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-07-10 13:00 - 2015-07-10 13:00 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00417752 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\winsqlite3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdohlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdlgs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdelta.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexch40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00409080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00405344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-07-10 13:00 - 2015-07-10 13:00 - 00405016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DbgModel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsquery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00400736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_isv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscoree.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shrpubw.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizards.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptuiwizard.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshipsec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00380957 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00380768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00380256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFSv1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00377080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00374624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WmpDui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00372912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00372512 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00370352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00370016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgrx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00368992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00367456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00366768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00365224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00365128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptuiwizard.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00364544 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00364384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00363664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authfwcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00355168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00354816 _____ C:\WINDOWS\system32\EditionUpgradeHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00354816 _____ (Microsoft Corporation) C:\WINDOWS\system32\certCredProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00350680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifier.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_isv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\eudcedit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certCredProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00341432 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscoree.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\difxapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00338432 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcxoriginal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00334704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00332656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00328488 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttune.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00328048 _____ C:\WINDOWS\system32\LargeRoom.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00324904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00322048 _____ C:\WINDOWS\system32\HrtfApo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcjt32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx
2015-07-10 13:00 - 2015-07-10 13:00 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscandui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttune.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00310968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00309912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmontr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00306528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00304640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00303456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eudcedit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00301648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWGP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00299600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00298576 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdprint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WmpDui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\modemui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskraid.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll

Alt 08.08.2015, 08:32   #7
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 6

Code:
ATTFilter
2015-07-10 13:00 - 2015-07-10 13:00 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00278424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\drt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00274768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00273760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00270848 _____ C:\WINDOWS\SysWOW64\HrtfApo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00269648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00263432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00261896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00260960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdprint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00257024 _____ C:\WINDOWS\system32\MTFServer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00253952 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt20.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00252608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscandui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00246048 _____ C:\WINDOWS\system32\MediumRoom.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 00245368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00245088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldpc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00240728 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgprint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mycomput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsnap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeComposite.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netdiagfx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provthrd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpresult.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00227680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00226816 _____ C:\WINDOWS\system32\MTF.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstask.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offfilt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Cortana.Persona.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvisioningHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00221568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SurfaceHubHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00220504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qcap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquoui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00218528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216920 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiageng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceoledb40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00215352 _____ C:\WINDOWS\system32\weretw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpdui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldpc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msls31.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00214360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00212480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsCfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00211938 _____ C:\WINDOWS\SysWOW64\lcphrase.tbl
2015-07-10 13:00 - 2015-07-10 13:00 - 00211938 _____ C:\WINDOWS\system32\lcphrase.tbl
2015-07-10 13:00 - 2015-07-10 13:00 - 00211768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00211288 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotepg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmime.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdListen.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\itircl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00204105 _____ C:\WINDOWS\SysWOW64\winrm.vbs
2015-07-10 13:00 - 2015-07-10 13:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlDiagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203504 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsigd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditcse.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsdmo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VerifierExt.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpresult.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00200192 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcoriginal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoeacct.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00198144 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingFolder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00197632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iac25_32.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00196960 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdminst.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00195618 _____ C:\WINDOWS\SysWOW64\C_10002.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\qcap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrdc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\prncache.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00190120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00188768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlunirl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00187560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlandlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fms.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00187008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsdmo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rgb9rast.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactHarvesterDS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiageng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquoui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Cortana.Persona.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\els.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183808 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcxoriginal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miguiresource.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00182296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifiergui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsadmin.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00179256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\slr100.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Maps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00177698 _____ C:\WINDOWS\SysWOW64\C_10003.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagprv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceoledb40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00173602 _____ C:\WINDOWS\SysWOW64\C_10008.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00173408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00173040 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uireng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\desk.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\desk.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsAuth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00168432 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00168400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00168104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rometadata.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167640 _____ C:\WINDOWS\SysWOW64\chs_singlechar_pinyin.dat
2015-07-10 13:00 - 2015-07-10 13:00 - 00167640 _____ C:\WINDOWS\system32\chs_singlechar_pinyin.dat
2015-07-10 13:00 - 2015-07-10 13:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\softkbd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\netjoin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\keymgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msls31.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00166352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ocsetapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itircl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\fde.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00164048 _____ C:\WINDOWS\system32\SmallRoom.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfmon.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbctrac.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Help.Runtime.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00162850 _____ C:\WINDOWS\SysWOW64\C_10001.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabview.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00162144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00161632 _____ C:\WINDOWS\SysWOW64\weretw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PersonaX.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdadiag.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\playtomenu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00159072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagprv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimofcodec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00158560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchangeHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keymgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmgp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00157560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00156672 _____ C:\WINDOWS\SysWOW64\MTF.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\McxDriv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mydocs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00156000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmitomi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00154944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fms.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00154464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssenh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00153952 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00153440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicli.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdadiag.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00151360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00150904 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\L2SecHC.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00149019 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crtdll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicli.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabview.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mydocs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskpart.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00146944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ivfsrc.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00145640 _____ C:\WINDOWS\SysWOW64\devmgmt.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00145519 _____ C:\WINDOWS\SysWOW64\perfmon.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00145127 _____ C:\WINDOWS\SysWOW64\eventvwr.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00145059 _____ C:\WINDOWS\SysWOW64\taskschd.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00144998 _____ C:\WINDOWS\SysWOW64\lusrmgr.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00144998 _____ C:\WINDOWS\system32\lusrmgr.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00144909 _____ C:\WINDOWS\SysWOW64\fsmgmt.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00144862 _____ C:\WINDOWS\SysWOW64\tpm.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifiergui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00144224 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcecompact40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\joy.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvfw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00143128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00142904 _____ C:\WINDOWS\SysWOW64\slmgr.vbs
2015-07-10 13:00 - 2015-07-10 13:00 - 00142904 _____ C:\WINDOWS\system32\slmgr.vbs
2015-07-10 13:00 - 2015-07-10 13:00 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netjoin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\IDStore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00141152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XamlDiagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00140536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\playtomenu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlhtml.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00139616 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbctrac.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dsui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softkbd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prncache.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPermissions.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassvcs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\advpack.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00135344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxva2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134832 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidcom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdart.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmiv2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\gcdef.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00131248 _____ C:\WINDOWS\system32\OutdoorAudioEnvironment.bin
2015-07-10 13:00 - 2015-07-10 13:00 - 00131208 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbceip.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fde.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCellAdapter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00128648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00127592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00127080 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptxml.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnscmmc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\repair-bde.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rekeywiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccp32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvfw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fundisc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00124520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabinet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00124118 _____ C:\WINDOWS\SysWOW64\comexp.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gcdef.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00122944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00122944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsExtensibilityHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00122504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00121992 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rekeywiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmstyle.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcecompact40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimofcodec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dsui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00120320 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcoriginal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Kswdmcap.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnetlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\avifil32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\control.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsadu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00117088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppwmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00116216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcshext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdart.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceElementSource.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00115091 _____ C:\WINDOWS\SysWOW64\WF.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmsynth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\control.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWWizFwk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtstocom.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\profprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmusic.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_OneCore_BatterySaver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp_isv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113256 _____ C:\WINDOWS\SysWOW64\compmgmt.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\efslsaext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00113112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxva2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112672 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advpack.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00112632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssadmin.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IDStore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontview.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngcredui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00110040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapiui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\joinutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resmon.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccp32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\fingerprintcredential.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PersonaX.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oledlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DuCsps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00106928 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00106520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00106496 _____ C:\WINDOWS\system32\InputLocaleManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontview.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joinutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnetlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastInputMgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00105312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWinPalMisc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngcredui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft) C:\WINDOWS\system32\VaultRoaming.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\systeminfo.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\logagent.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\amstream.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00103264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsadu.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerWizardElev.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwreg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loadperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\console.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcksp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00101264 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txflog.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2015-07-10 13:00 - 2015-07-10 13:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\OptionalFeatures.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Fondue.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00100240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll

Alt 08.08.2015, 08:34   #8
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 7

Code:
ATTFilter
2015-07-10 13:00 - 2015-07-10 13:00 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersGPExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00099656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptxml.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlgpclnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avifil32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Fondue.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comrepl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciavi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdsapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrscmd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmiv2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmscript.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Narrator.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.rll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.rll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\CortanaMapiHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceProperties.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpbcreds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00093000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092746 _____ C:\WINDOWS\SysWOW64\services.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceProperties.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olethk32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00092000 _____ (Microsoft Corporation) C:\WINDOWS\system32\apisetschema.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radardt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fphc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\console.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mibincodec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp_isv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccu32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingCSP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FingerprintEnrollment.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmInit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccr32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPELoggingDictationHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeLegacyWinLocation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlsbres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfhcdiscovery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-07-10 13:00 - 2015-07-10 13:00 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingWizard.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorcpl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spfileq.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorcpl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPolEng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\spcompat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciavi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00084808 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesRemote.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesProtection.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesPerformance.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesHardware.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesComputerName.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesAdvanced.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcirt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netsh.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabcal.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtfwd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesProtection.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesComputerName.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesAdvanced.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amstream.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olecli32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WfHC.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\PINEnrollment.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00082104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fingerprintcredential.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscories.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SPInf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlaySndSrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventvwr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSAppXHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingWizard.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipcontainer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinMsoIrmProtector.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pnrphc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationSystemIntegration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00080568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00080232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00080128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\avicap32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanext.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DpiScaling.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systeminfo.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bootcfg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DpiScaling.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.Fontgroups.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SpbCx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpbcreds.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DocumentPerformanceEvents.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\frprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076472 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessionmsg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iashlpr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\scripto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapimig.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00076128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcompos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00075448 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogonext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uexfat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00074432 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mibincodec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinOpcIrmProtector.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stream.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00073880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscories.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapimig.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopShellExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073400 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngcksp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\djoin.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00072848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccu32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcad32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndishc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprovisionsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ C:\WINDOWS\system32\EditBufferTestHook.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slwga.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccr32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmonui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\slwga.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eqossnap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScanProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sihost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Query.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colbact.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPolEng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\umb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00070496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUX.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipsec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\makecab.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CortanaMapiHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avicap32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfwwdm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loghours.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsockhc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinMsoIrmProtector.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Storprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\playlistfolder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\drtprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\driverquery.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationHostProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmghost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hbaapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentprf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066672 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066594 _____ C:\WINDOWS\SysWOW64\C_437.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066594 _____ C:\WINDOWS\system32\C_437.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_875.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_870.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_500.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_21027.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_21025.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20924.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20905.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20880.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20871.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20838.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20833.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20424.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20423.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20420.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20297.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20290.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20285.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20284.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20280.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20278.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20277.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20273.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20269.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20108.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20107.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20106.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20105.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1252.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1149.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1148.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1147.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1146.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1145.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1144.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1143.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1142.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1141.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1140.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1047.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1026.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10082.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10081.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10079.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10029.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10021.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10017.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10010.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10007.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10006.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10005.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10004.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10000.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\SysWOW64\C_037.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066082 _____ C:\WINDOWS\system32\C_1252.NLS
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065888 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSHED.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcirt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatchc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\btpanui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\pautoenr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065136 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcRtRemote.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastSrv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00065096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getmac.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msident.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WfHC.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radarrs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprovfw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\g711codc.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ C:\WINDOWS\system32\WpKbdLayout.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prvdmofcomp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentprf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsRdpWebAccess.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00063081 _____ C:\WINDOWS\SysWOW64\certlm.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00063070 _____ C:\WINDOWS\SysWOW64\certmgr.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinOpcIrmProtector.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdmat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msobjs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\frprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msobjs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmxmlhelputils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WorkFoldersRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scripto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\capiprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPELoggingDictationHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RunLegacyCPLElevated.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfscli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00061248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00060992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3cfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmonui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geocommon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00060124 _____ C:\WINDOWS\system32\tcpmon.ini
2015-07-10 13:00 - 2015-07-10 13:00 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\adprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00059232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSHED.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.Fontgroups.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whoami.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vfwwdm32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasdatastore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dxof.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Storprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\winver.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.ServiceHostBuilder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeservice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcProCsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HelpPaneProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizard.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprovisionsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypttpmeksvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winver.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DfsShlEx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapiprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\bidispl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\threadpoolwinrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows6Compat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2nacp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintPlatformConfig.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeGnss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00056360 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00056344 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00056320 _____ (Microsoft) C:\WINDOWS\system32\cero.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiMigPlugin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ C:\WINDOWS\system32\BWContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ (Microsoft) C:\WINDOWS\system32\fpb.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\g711codc.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSTheme.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00055136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NapiNSP.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capiprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Suplcsps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\net.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MultiDigiMon.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msports.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pautoenr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expand.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ C:\WINDOWS\SysWOW64\WpKbdLayout.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetmib1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3hc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagschd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iyuv_32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\drttransport.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wtsapi32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\joinproviderol.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft) C:\WINDOWS\system32\esrb.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsnmp32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprovfw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msident.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\playlistfolder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsRdpWebAccess.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ustprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\RegCtrl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00052192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcRtRemote.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcw.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\takeown.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssdpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00051168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWESEProviderResources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWESEProviderResources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskadp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotect.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iyuv_32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapiprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3dlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeoLocatorHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpclnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcbcp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00049080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geocommon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandBrokerClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontGlyphAnimator.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fodhelper.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Lockdown.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskadp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFCoinstaller.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnification.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00047679 _____ C:\WINDOWS\SysWOW64\diskmgmt.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucmhc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setx.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdhui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimtf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSTheme.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdl32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bidispl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bderepair.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00047032 _____ (Microsoft Corporation) C:\WINDOWS\system32\utildll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft) C:\WINDOWS\system32\oflc-nz.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.ServiceHostBuilder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HelpPaneProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.Extensions.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\grpconv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPCRYPT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msports.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypttpmeksvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiMigPlugin.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkitemfactory.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\runonce.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlfilter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netfxperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joinproviderol.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmocx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciqtz32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft) C:\WINDOWS\system32\csrr.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xcopy.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Suplcsps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\signdrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IoTAssignedAccessLockFramework.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lodctr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsmproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstallerComHandler.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00043872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlwoa.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndiscapCfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsjob.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttunesvr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrameHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RegCtrl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintPlatformConfig.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFrameworkInternalPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\f3ahvoas.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmloader.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfscli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcsPlugInService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UI0Detect.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00042936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00042864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsUtilsV2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrs.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\luainstall.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitsProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\htui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\docprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft) C:\WINDOWS\system32\cob-au.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ustprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tpmcompc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regini.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\forfiles.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Portable.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netfxperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\condrv.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041840 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041587 _____ C:\WINDOWS\SysWOW64\azman.msc
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows61.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationNotificationWindows.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc_os.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\RoamingSecurity.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.XboxLive.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortServer2003Compat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcbcp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnification.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ACCTRES.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprnext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACCTRES.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciqtz32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cipher.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsActionDialog.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecEdit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00039792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\werkernel.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00039776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdi.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vpnikeapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSModuleDiscoveryProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvcapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00039264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cnghwassist.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00039248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\utildll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeoLocatorHelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.BioEnrollment.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvidc32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MirrorDrvCompat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksetup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.Extensions.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WalletProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecEdit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\execmodelproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.rll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\esevss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\credwiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.rll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiclnt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttunesvr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmmon32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amsi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdown.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\klist.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nci.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatcha.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimtf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grpconv.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthudtask.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialer.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00036712 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uicom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskSchdPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runonce.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\docprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00036136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsclient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pifmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\htui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmlua.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ZTrace_ca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\pifmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\notificationplatformcomponent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035696 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpata.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00035664 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unlodctr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\traffic.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandBrokerClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmband.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00035176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00035112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcacli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsjob.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ThumbnailExtractionHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadauthhelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00034600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netutils.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\where.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NETSTAT.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\proquota.exe

Alt 08.08.2015, 08:35   #9
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 8

Code:
ATTFilter
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthMtpContextHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcsPlugInService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shutdown.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimefilt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esevss.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvidc32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MirrorDrvCompat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprnext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcreate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapilua.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevQueryBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00033104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\waitfor.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialer.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddodiag.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmcfg32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwsso.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\navshutdown.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbrpm.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscacheugc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordOnWakeSettingFlyout.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdmo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft) C:\WINDOWS\system32\usk.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasphone.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzSqlExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032080 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraSettingsUIHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Portable.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pots.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtsh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrnr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\syskey.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountBroker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\proquota.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxlegih.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\embeddedmodesvcapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Apphlpdm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthTelemetry.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031080 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptbase.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00031016 _____ (Microsoft Corporation) C:\WINDOWS\system32\version.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00031016 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00030872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030749 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbajet32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsauth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aeevts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\linkinfo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputInjectionBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00030504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00030368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olesvr32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icacls.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceDisplayStatusManager.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credwiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ThumbnailExtractionHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidserv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findstr.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\extrac32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\shgina.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\at.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdcom.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00029408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PasswordOnWakeSettingFlyout.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32topl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vss_ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipconfig.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\setspn.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00029024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00028968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ C:\WINDOWS\SysWOW64\dtdump.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ZTrace_ca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfetw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\choice.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Netplwiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDACLSys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdmo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsRemoveDevice.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ C:\WINDOWS\system32\efsext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syskey.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcnsh.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FdDevQuery.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsCtfMonitor.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdupgrd.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcsubs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cacls.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wephostsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpauto.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00027360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\version.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtffilt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ctl3d32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaUacHelper.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\lfsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026920 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WofUtil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timeout.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Netplwiz.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzSqlExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\VaultCmd.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msyuv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\icmui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ioqos.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ C:\WINDOWS\system32\WordBreakers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksthunk.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00025864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcwum.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxdm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagnhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gptext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDACLSys.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BOOTVID.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00025352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ureg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\at.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshcon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\midimap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.proxystub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxsstore.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shgina.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputInjectionBroker.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmintf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clip.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024114 _____ C:\WINDOWS\SysWOW64\lcptr.tbl
2015-07-10 13:00 - 2015-07-10 13:00 - 00024114 _____ C:\WINDOWS\system32\lcptr.tbl
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrshost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dswave.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CheckNetIsolation.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletBackgroundServiceProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BOOTVID.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00023776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msyuv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutilext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdupgrd.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comp.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmpbk32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.RemoteDesktop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\easconsent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnmpntw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\capisp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemManufacturers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaUacHelper.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsCtfMonitor.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lsmproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkdsk.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ARP.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimgvw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AJRouter.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ C:\WINDOWS\SysWOW64\efsext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft) C:\WINDOWS\system32\grb.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lfsvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpauditapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsrole.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagnhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbtugc.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultPrinterProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\shunimpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogHost3D.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00021856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlS0WndH.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft) C:\WINDOWS\system32\pegi-pt.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft) C:\WINDOWS\system32\pegi.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshcon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winusb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sort.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osbaseln.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcdProp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gptext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\shpafact.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\smclib.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sisbkup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Register-CimProvider.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netevent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSls.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\netevent.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblGameSaveProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WalletBackgroundServiceProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shunimpl.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscorier.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinitext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanui2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscorier.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdkey.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wmilib.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00020152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SlideToShutDown.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnlsres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serwvdrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ROUTE.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasctrs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcaApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpauditapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundPlayback.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\umdmxfrm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\replace.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnmpntw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\convert.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkntfs.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capisp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Startupscan.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontgroupsoverride.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHostProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlS0WndH.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00019136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksuser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.RemoteDesktop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\midimap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\attrib.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxshared.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shpafact.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimgvw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdial.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\prevhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgwdi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\hh.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017935 _____ C:\WINDOWS\SysWOW64\EventViewer_EventDetails.xsl
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlprovi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uniplat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runas.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanui2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiltcfg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrle32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlwid.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\backgroundTaskHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017632 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrss.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WINSRPC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdkey.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileAppxStreamingDataSource.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00017048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshqos.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinitext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schedcli.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCHERP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EsdSip.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\doskey.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstplua.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsbyuv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCHERP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft) C:\WINDOWS\system32\djctq.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsock32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Startupscan.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prevhost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PATHPING.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFrameworkPS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irclass.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsunattend.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hh.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dispex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMmRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMmRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft) C:\WINDOWS\system32\pcbp.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serialui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RmClient.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmutil.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcmsetup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstorec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcico.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJPN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\CommsTypeHelperUtil_ca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TRACERT.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpxl32.dLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mountvol.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\label.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\find.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clb.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsddd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\panmap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKOR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshrm.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcmsetup.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syssetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subst.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secinit.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\print.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prflbmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbios.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrle32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudDomainJoinAUG.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sas.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceElevated.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\prflbmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IconCodecService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsControlInternal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.ps.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pstorec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommonPal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MRINFO.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetmon.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiUnattend.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaPs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsbyuv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndproxystub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\finger.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDOIProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clrhost.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\verclsid.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBthProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\browseui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSChannel.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutilx.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CommsTypeHelperUtil_ca.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbioext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringIeProvider.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiSysprep.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonUI.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUxRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CortanaMapiHelper.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CHxReadingStringIME.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpPortingLibrary.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiUnattend.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwinsat.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\recover.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\panmap.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcico.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MinstoreEvents.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsui.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsControlInternal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\txfw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemotePosWorker.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LAPRXY.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxStreamingDataSourcePS.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whhelper.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbperf.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txfw32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityRtapiPal.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IconCodecService.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HOSTNAME.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcmonitor.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceUxRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdplay.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlibres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshirda.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbioext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verclsid.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscat32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InfDefaultInstall.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_ISCII.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidle.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscat32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsied.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\write.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_8.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wship6.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensApi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaPs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschapext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifsproxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browseui.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_8.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapihost.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\nddeapi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00011109 _____ C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00011109 _____ C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSHTCPIP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrssrv.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TCPSVCS.EXE
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softpub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceElevated.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedt32.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBthProxy.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdplay.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CortanaMapiHelper.ProxyStub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CHxReadingStringIME.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput9_1_0.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systray.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\softpub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shfolder.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mspclock.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNSO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNO1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnec95.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnec.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINUK2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdibm02.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGRLND.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFI1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007784 _____ C:\WINDOWS\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00007784 _____ C:\WINDOWS\system32\connectedsearch-suggestions.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSX.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTZM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIPRD.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIPRC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSW09.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSORS1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSOREX.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNSO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLV1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIULAT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdibm02.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHELA3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDES.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCZ1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBENE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdax2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106n.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSX.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTZM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTUQ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTUF.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSW09.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSORS1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPL1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLV1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlk41a.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKHMR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIULAT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINMAL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINDEV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIBO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHELA3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHELA2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE319.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE220.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGKL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDES.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBENE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdax2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106n.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101c.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole32.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYCC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYBA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDWOL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUZB.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUS.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUGHR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTUQ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTUF.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIFI2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIFI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH0.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSYR2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSYR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSF.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPL1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdphags.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPASH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOLDIT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNEPR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMONST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMONMO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMLT48.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMLT47.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMACST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMAC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlk41a.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlisus.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlisub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLAO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKNI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKHMR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKAZ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINPUN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINMAL.DLL

Alt 08.08.2015, 08:35   #10
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 9

Code:
ATTFilter
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINGUJ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINDEV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBE2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBE1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINASA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIBO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHU1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHELA2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE319.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE220.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGKL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeooa.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeome.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGAE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdfar.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDEST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDIV2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDIV1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCHER.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBHC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBGPH1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBGPH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdarmty.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdarmph.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd103.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101c.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101b.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101a.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYCC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYBA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDWOL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDVNTC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUZB.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUGHR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIFI2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIFI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH0.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSYR2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSYR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSP.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSORA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSF.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdphags.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPASH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOSM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOLDIT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNEPR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMONST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMONMO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMLT48.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMLT47.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMACST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMAC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlisus.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlisub.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLAO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKNI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKAZ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJAV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIT142.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINTAM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINPUN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINORI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINGUJ.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBEN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBE2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBE1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINASA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHU1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGTHC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeooa.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeome.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoer.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGAE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdfar.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDEST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDIV2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDIV1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCHER.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBHC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBGPH1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBGPH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdarmty.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdarmph.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA3.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd103.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101b.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101a.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\null.sys
2015-07-10 13:00 - 2015-07-10 13:00 - 00007152 _____ C:\WINDOWS\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00007152 _____ C:\WINDOWS\system32\connectedsearch-zeroinput.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDVNTC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDURDU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUGHR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTURME.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTT102.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAJIK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAILE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSORA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSN1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOSM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOLCH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNTL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnko.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMYAN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMON.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMAORI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKYR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJAV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIT142.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINTEL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINTAM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINORI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINMAR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINKAN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINHIN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBEN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHEB.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHAW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHAU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGTHC.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFTHRK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDZO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBULG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBUG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBLR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDARMW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDARME.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FamilySafetyExt.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDURDU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUGHR1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTURME.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTT102.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAJIK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAILE.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSN1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOLCH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOGHAM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNTL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnko.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMYAN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMON.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMAORI.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT1.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKYR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIT.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINTEL.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINMAR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINKAN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINHIN.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHEB.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHAW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHAU.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFTHRK.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFA.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDZO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDV.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBULG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBUG.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBLR.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDARMW.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDARME.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA2.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOGHAM.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGEO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGEO.DLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidntld.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatsrc.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmi.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidntld.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatsrc.tlb
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft) C:\WINDOWS\system32\WEB.rs
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\security.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaccrc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\security.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaccrc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00004675 _____ C:\WINDOWS\SysWOW64\wsmanconfig_schema.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2help.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-processor-aggregator-events.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00004453 _____ C:\WINDOWS\SysWOW64\odbcconf.rsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-07-10 13:00 - 2015-07-10 13:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00004014 _____ C:\WINDOWS\SysWOW64\xwizard.dtd
2015-07-10 13:00 - 2015-07-10 13:00 - 00003666 _____ C:\WINDOWS\SysWOW64\sysprtj.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00003666 _____ C:\WINDOWS\system32\sysprtj.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanutil.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003317 _____ C:\WINDOWS\SysWOW64\sysprint.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00003317 _____ C:\WINDOWS\system32\sysprint.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\neth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorc32r.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpx32r.dLL
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msafd.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lz32.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprop.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iologmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmp.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskres2.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32res.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\neth.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msprivs.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iologmsg.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\asferror.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32res.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrsmgr.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rnr20.dll
2015-07-10 13:00 - 2015-07-10 13:00 - 00002426 _____ C:\WINDOWS\SysWOW64\WsmTxt.xsl
2015-07-10 13:00 - 2015-07-10 13:00 - 00002269 _____ C:\WINDOWS\SysWOW64\WimBootCompress.ini
2015-07-10 13:00 - 2015-07-10 13:00 - 00002233 _____ C:\WINDOWS\SysWOW64\12520850.cpx
2015-07-10 13:00 - 2015-07-10 13:00 - 00002219 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk
2015-07-10 13:00 - 2015-07-10 13:00 - 00002151 _____ C:\WINDOWS\SysWOW64\12520437.cpx
2015-07-10 13:00 - 2015-07-10 13:00 - 00002125 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00001820 _____ C:\WINDOWS\SysWOW64\rasctrnm.h
2015-07-10 13:00 - 2015-07-10 13:00 - 00001673 _____ C:\WINDOWS\SysWOW64\tcpbidi.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00001673 _____ C:\WINDOWS\system32\tcpbidi.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00001588 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
2015-07-10 13:00 - 2015-07-10 13:00 - 00001559 _____ C:\WINDOWS\SysWOW64\WsmPty.xsl
2015-07-10 13:00 - 2015-07-10 13:00 - 00000853 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk
2015-07-10 13:00 - 2015-07-10 13:00 - 00000726 _____ C:\WINDOWS\system32\wpr.config.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00000714 _____ C:\WINDOWS\SysWOW64\RestartManager.mof
2015-07-10 13:00 - 2015-07-10 13:00 - 00000670 ___RH C:\WINDOWS\WindowsShell.Manifest
2015-07-10 13:00 - 2015-07-10 13:00 - 00000646 _____ C:\WINDOWS\SysWOW64\Drivers\gmreadme.txt
2015-07-10 13:00 - 2015-07-10 13:00 - 00000646 _____ C:\WINDOWS\system32\Drivers\gmreadme.txt
2015-07-10 13:00 - 2015-07-10 13:00 - 00000565 _____ C:\WINDOWS\SysWOW64\NdfEventView.xml
2015-07-10 13:00 - 2015-07-10 13:00 - 00000543 _____ C:\WINDOWS\SysWOW64\connectedsearch-appcmd.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000543 _____ C:\WINDOWS\system32\connectedsearch-appcmd.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000539 _____ C:\WINDOWS\SysWOW64\connectedsearch-history.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000539 _____ C:\WINDOWS\system32\connectedsearch-history.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000530 _____ C:\WINDOWS\SysWOW64\connectedsearch-protocol.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000530 _____ C:\WINDOWS\system32\connectedsearch-protocol.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000528 _____ C:\WINDOWS\SysWOW64\connectedsearch-contacts.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000528 _____ C:\WINDOWS\system32\connectedsearch-contacts.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000525 _____ C:\WINDOWS\SysWOW64\connectedsearch-music.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000525 _____ C:\WINDOWS\system32\connectedsearch-music.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000522 _____ C:\WINDOWS\SysWOW64\connectedsearch-paths.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000522 _____ C:\WINDOWS\system32\connectedsearch-paths.searchconnector-ms
2015-07-10 13:00 - 2015-07-10 13:00 - 00000263 _____ C:\WINDOWS\system32\odbcconf.rsp
2015-07-10 13:00 - 2015-07-10 13:00 - 00000176 _____ C:\WINDOWS\SysWOW64\RestartManagerUninstall.mof
2015-07-10 13:00 - 2015-07-10 13:00 - 00000150 _____ C:\WINDOWS\SysWOW64\pcl.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00000150 _____ C:\WINDOWS\system32\pcl.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00000051 _____ C:\WINDOWS\SysWOW64\pscript.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00000051 _____ C:\WINDOWS\system32\pscript.sep
2015-07-10 13:00 - 2015-07-10 13:00 - 00000035 _____ C:\WINDOWS\SysWOW64\winrm.cmd
2015-07-10 13:00 - 2015-07-10 13:00 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-07-10 13:00 - 2015-07-10 13:00 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01015_Inbox_Critical.Wdf
2015-07-10 12:59 - 2015-07-10 18:45 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\terminpt.sys
2015-07-10 12:59 - 2015-07-10 18:45 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 15791616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDORes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 08550160 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 06571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 05865824 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 04212736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 03436896 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 03420160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 03170304 _____ C:\WINDOWS\system32\boot.sdi
2015-07-10 12:59 - 2015-07-10 12:59 - 02950656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02875392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02823736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02641928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 02601160 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02556928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02459096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 02444616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 02162072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01991120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 01965568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 01895576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01860944 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01817064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01811968 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01729024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01695744 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkexplorer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01549544 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01479168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01426432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\connect.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01370112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 01353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01314496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01296224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01270104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 01248896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01239096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfperfhelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01238584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01211392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01168896 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01150816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01146624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01135456 _____ (PMC-Sierra) C:\WINDOWS\system32\Drivers\adp80xx.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 01106872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01094144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01087712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfperfhelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01086464 _____ (Microsoft Corporation) C:\WINDOWS\system32\onexui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01074176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 01065152 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01064016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagCpl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 01047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00998416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh265enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00928768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxpresentation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00924000 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallControlPanel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00873984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh265enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00873984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00872960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00849760 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsecsnp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00787720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00779936 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00779936 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00775312 _____ C:\WINDOWS\system32\locale.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00772448 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00752000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00728576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00723648 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00714808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00710200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00707424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IasMigPlugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00705376 _____ (Mellanox) C:\WINDOWS\system32\Drivers\mlx4_bus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00702512 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00696200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00695760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00679936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00673120 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAV.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00671584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00657880 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\winsqlite3.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00654952 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00635312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsdyn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00587264 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00583136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00575840 _____ (LSI Corporation, Inc.) C:\WINDOWS\system32\Drivers\megasr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\filemgmt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00571288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsmsnap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdohlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00549600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00536928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00531296 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFSv1.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00521192 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\devmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdelta.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\localsec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00508768 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00499552 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\authfwcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00479288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2015-07-10 12:59 - 2015-07-10 12:59 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00474464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00473616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdlgs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00468320 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00467440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizards.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroleui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00457056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00441696 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00433872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00426120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00424800 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ibbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00424072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00423936 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl
2015-07-10 12:59 - 2015-07-10 12:59 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00420416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshipsec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00418816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00412000 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorV.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00411133 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shrpubw.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00402424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxclu.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00384288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtckrm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00378720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00378104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\difxapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00373936 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00371552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00369296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00362848 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmontr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskraid.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00331104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00329072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00324960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2015-07-10 12:59 - 2015-07-10 12:59 - 00322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3ui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\netdiagfx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\provthrd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00310624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWGP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00305776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00305504 _____ (VIA Corporation) C:\WINDOWS\system32\Drivers\VSTXRAID.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\PowerWmiProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00302160 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\modemui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00292392 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00291680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\offfilt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00283032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00278424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00277400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mycomput.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00267088 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpdui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00259424 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00256216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00251552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00250528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00249464 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.cpl
2015-07-10 12:59 - 2015-07-10 12:59 - 00241664 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00239456 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00235872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394ohci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00234512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00232904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringStation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00232288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00231264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\els.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00227504 _____ (Microsoft Corporation) C:\WINDOWS\system32\rometadata.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00224712 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpsapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00211808 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_14e4.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmitomi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysclass.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsadmin.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sstpsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00209760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00209208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanHC.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdminst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00207712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdspa.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00205072 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsigd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00204105 _____ C:\WINDOWS\system32\winrm.vbs
2015-07-10 12:59 - 2015-07-10 12:59 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlandlg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\SysWOW64\C_950.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\SysWOW64\C_949.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\SysWOW64\C_936.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\system32\C_950.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\system32\C_949.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196642 _____ C:\WINDOWS\system32\C_936.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00196448 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00195618 _____ C:\WINDOWS\system32\C_10002.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00193024 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm
2015-07-10 12:59 - 2015-07-10 12:59 - 00192864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00189986 _____ C:\WINDOWS\SysWOW64\C_1361.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00189986 _____ C:\WINDOWS\system32\C_1361.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\irftp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\uireng.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00188032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00187938 _____ C:\WINDOWS\SysWOW64\C_20005.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00187938 _____ C:\WINDOWS\system32\C_20005.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconfig.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00187904 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winjson.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00186402 _____ C:\WINDOWS\SysWOW64\C_20001.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00186402 _____ C:\WINDOWS\system32\C_20001.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlhtml.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\L2SecHC.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00185378 _____ C:\WINDOWS\SysWOW64\C_20003.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00185378 _____ C:\WINDOWS\system32\C_20003.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00184672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00184320 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm
2015-07-10 12:59 - 2015-07-10 12:59 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\miguiresource.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00182624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfmon.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00180770 _____ C:\WINDOWS\SysWOW64\C_20932.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180770 _____ C:\WINDOWS\system32\C_20932.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180258 _____ C:\WINDOWS\SysWOW64\C_20004.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180258 _____ C:\WINDOWS\SysWOW64\C_20000.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180258 _____ C:\WINDOWS\system32\C_20004.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180258 _____ C:\WINDOWS\system32\C_20000.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmgp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00177698 _____ C:\WINDOWS\SysWOW64\C_20949.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00177698 _____ C:\WINDOWS\system32\C_20949.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00177698 _____ C:\WINDOWS\system32\C_10003.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00176992 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafupnp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00173602 _____ C:\WINDOWS\SysWOW64\C_20936.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00173602 _____ C:\WINDOWS\SysWOW64\C_20002.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00173602 _____ C:\WINDOWS\system32\C_20936.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00173602 _____ C:\WINDOWS\system32\C_20002.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00173602 _____ C:\WINDOWS\system32\C_10008.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmvdspa.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsprop.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbceip.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\dps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00166752 _____ (VIA Technologies Inc.,Ltd) C:\WINDOWS\system32\Drivers\vsmraid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00166240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00162850 _____ C:\WINDOWS\SysWOW64\C_932.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00162850 _____ C:\WINDOWS\system32\C_10001.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00159072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

Alt 08.08.2015, 08:36   #11
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 10

Code:
ATTFilter
2015-07-10 12:59 - 2015-07-10 12:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmwmicsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00155488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfdvdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\fundisc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00151904 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00150368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvraid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpw32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssadmin.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00145640 _____ C:\WINDOWS\system32\devmgmt.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00145519 _____ C:\WINDOWS\system32\perfmon.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00145127 _____ C:\WINDOWS\system32\eventvwr.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00145059 _____ C:\WINDOWS\system32\taskschd.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00144909 _____ C:\WINDOWS\system32\fsmgmt.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00144862 _____ C:\WINDOWS\system32\tpm.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00144673 _____ C:\WINDOWS\system32\WmiMgmt.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00143096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx
2015-07-10 12:59 - 2015-07-10 12:59 - 00139810 _____ C:\WINDOWS\SysWOW64\C_20261.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00139810 _____ C:\WINDOWS\system32\C_20261.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmusic.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxadapter.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtstocom.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCCSEngineShared.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\CourtesyEngine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00134832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfAACEnc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00133984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscmmc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00131936 _____ (PMC-Sierra, Inc.) C:\WINDOWS\system32\Drivers\arcsas.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafDockingProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcshext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpiex.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPPolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oledlg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00126304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NV_AGP.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00125792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00124118 _____ C:\WINDOWS\system32\comexp.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ClosedCaptioning.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\txflog.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\loadperf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00122608 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_I2C.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfdvdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmsynth.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlgpclnt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfhcdiscovery.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwreg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatformNetCfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irda.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00119800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcmcia.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprmsg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00115704 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00115091 _____ C:\WINDOWS\system32\WF.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWWizFwk.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\trkwks.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fphc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00113624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfAACEnc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00113256 _____ C:\WINDOWS\system32\compmgmt.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUX.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootsect.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\resmon.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwutl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00109920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sbp2port.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00108896 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtfwd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrscmd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00107952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00107360 _____ (LSI) C:\WINDOWS\system32\Drivers\3ware.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winethc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmInit.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00104800 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas2i.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWiProv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00103856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2015-07-10 12:59 - 2015-07-10 12:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnshc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpurapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\spfileq.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipsec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanext.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00100712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00099728 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00099168 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\lsi_sas3i.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\radardt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBSource.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00098144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\alg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SPInf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcl.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00094208 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndishc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00094048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UfxChipidea.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBSource.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssoc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\netsh.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00092746 _____ C:\WINDOWS\system32\services.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00092208 _____ C:\WINDOWS\system32\DiskSnapshot.conf
2015-07-10 12:59 - 2015-07-10 12:59 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdSched.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlaySndSrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iashlpr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\correngine.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\uexfat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00088928 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlsbres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00088928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorClass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00088904 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootcfg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsockhc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Query.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusb.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdRes.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00087040 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm
2015-07-10 12:59 - 2015-07-10 12:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\makecab.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\getmac.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EventAggregation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipfltdrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\loghours.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\prvdmofcomp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatchc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00084320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00083808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00083712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSchedExe.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventvwr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00083296 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdsata.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\igdDiag.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\driverquery.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00082784 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sss.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00082688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mslldp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\hbaapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\eqossnap.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081760 _____ (Silicon Integrated Systems) C:\WINDOWS\system32\Drivers\sisraid4.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00081248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rspndr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_AuthenticAMD.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuntimeBroker.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rassstp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxgraphics.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasdatastore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CEA.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkhelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00076128 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ndfltr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdmat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00075634 _____ C:\WINDOWS\system32\gatherNetworkInfo.vbs
2015-07-10 12:59 - 2015-07-10 12:59 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sigverif.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiskSnapshot.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\btpanui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00073216 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm
2015-07-10 12:59 - 2015-07-10 12:59 - 00072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\InternetMailCsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00072286 _____ C:\WINDOWS\system32\normidna.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows6Compat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071824 _____ C:\WINDOWS\system32\normnfkc.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mferror.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mferror.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3cfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanHC.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\threadpoolwinrt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\expand.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\whoami.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\radarrs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MaintenanceUI.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3hc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfsShlEx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\provplatformdesktop.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\nduprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotplug.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00067936 _____ (Microsoft Corporation) C:\WINDOWS\system32\gacinstall.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NapiNSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ULIAGPKX.SYS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\GAGP30KX.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_874.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_869.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_865.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_864.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_863.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_862.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_861.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_860.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_858.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_857.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_855.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_852.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_850.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_775.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_737.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\SysWOW64\C_720.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_874.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_869.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_865.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_864.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_863.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_862.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_861.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_860.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_858.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_857.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_855.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_852.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_850.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_775.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_737.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066594 _____ C:\WINDOWS\system32\C_720.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetmib1.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UAGP35.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_708.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28605.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\c_28603.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28599.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28598.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28597.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28596.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28595.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28594.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28593.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28592.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_28591.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_21866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20127.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1258.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1257.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1256.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1255.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1254.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1253.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1251.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1250.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_875.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_870.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_708.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_500.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28605.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\c_28603.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28599.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28598.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28596.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28593.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28592.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_28591.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_21866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_21027.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_21025.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20924.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20905.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20880.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20871.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20866.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20838.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20833.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20424.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20423.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20420.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20297.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20290.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20285.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20284.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20280.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20278.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20277.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20273.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20269.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20127.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20108.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20107.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20106.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_20105.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1258.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1257.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1256.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1255.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1254.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1253.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1251.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1250.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1149.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1148.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1147.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1146.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1145.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1144.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1143.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1142.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1141.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1140.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1047.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_1026.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10082.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10081.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10079.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10029.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10021.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10017.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10010.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10007.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10006.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10005.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10004.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_10000.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066082 _____ C:\WINDOWS\system32\C_037.NLS
2015-07-10 12:59 - 2015-07-10 12:59 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimeprovider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fthsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\execmodelproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065698 _____ C:\WINDOWS\system32\normnfkd.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2nacp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAlacEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00064352 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpSAMD.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lltdio.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00063840 _____ (Marvell Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\mvumis.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizard.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndisuio.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmwappushsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AGP440.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00063081 _____ C:\WINDOWS\system32\certlm.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00063070 _____ C:\WINDOWS\system32\certmgr.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsnmp32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmclient.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00062304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmbmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Lockdown.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\takeown.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbFlt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3dlg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00060256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AepRoam.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00059744 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\megasas.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpclnt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00059232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00059232 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winverbs.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskSchdPS.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00058720 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas3i.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsvd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00058208 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\percsas2i.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpowmi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucmhc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssocPrx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkitemfactory.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAlacDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\umbus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsigd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00057184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdhui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitsProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlfilter.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmintf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfSMCClassExt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\setx.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00055803 _____ C:\WINDOWS\system32\srms.dat
2015-07-10 12:59 - 2015-07-10 12:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicDisplay.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndiscapCfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\signdrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\prauthproviders.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh263enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAlacEncoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeXmlParser.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\luainstall.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdl32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmocx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmloader.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00051552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\lodctr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPCRYPT.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows61.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSModuleDiscoveryProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiscap.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00050144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iri.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00050112 _____ C:\WINDOWS\system32\normnfc.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00050016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidinterrupt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xcopy.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\forfiles.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrs.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\qwavedrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\circlass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnikeapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc_os.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2015-07-10 12:59 - 2015-07-10 12:59 - 00047679 _____ C:\WINDOWS\system32\diskmgmt.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAlacDecoder.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortServer2003Compat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rrinstaller.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidir.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\nci.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatcha.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoWorkplace.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00045536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh263enc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmlua.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cipher.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00044896 _____ (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\Drivers\sisraid2.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00044568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\uicom.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcacli.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044384 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ C:\WINDOWS\system32\Drivers\Udecx.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmcompc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsiCofire.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxcommon.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssmbios.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00043566 _____ C:\WINDOWS\system32\normnfd.nls
2015-07-10 12:59 - 2015-07-10 12:59 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityServicePal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00043440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00043131 _____ C:\WINDOWS\mib.bin
2015-07-10 12:59 - 2015-07-10 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\unlodctr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucsvc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmmon32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00042848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vdrvroot.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\traffic.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafDnsSd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmgrcspps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00041840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsclient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00041587 _____ C:\WINDOWS\system32\azman.msc
2015-07-10 12:59 - 2015-07-10 12:59 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\where.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\NETSTAT.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimefilt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcreate.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\cnvfat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00040288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\waitfor.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\UVoipBackgroundManagerPolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00039856 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-pnp-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rrinstaller.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SebBackgroundManagerPolicy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetEvtFwdr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsauth.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcfghost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddodiag.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_1969.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthudtask.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00038128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_GPIO.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dtsh.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImpl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmcfg32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00037728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\icacls.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBroker.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\witnesswmiv2provider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetProxyCredential.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBCAMD2.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00036704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_0C_8086.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
2015-07-10 12:59 - 2015-07-10 12:59 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\datusage.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00036192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdhcinst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcsubs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\FDResPub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\FdDevQuery.dll

Alt 08.08.2015, 08:38   #12
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Teil 11

Code:
ATTFilter
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filetrace.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDisplayStatusManager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfetw.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Apphlpdm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_15b3.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00035168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasphone.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\pots.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipconfig.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\extrac32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.WorkplaceSettings.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\findstr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RNDISMP.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dmvsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\choice.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmNotificationBroker.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofiredm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcnsh.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cacls.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtffilt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fdc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthpanapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDOIProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostRes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00031528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\InprocLogger.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifmon.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tape.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fcvsc.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00031072 _____ (Promise Technology, Inc.) C:\WINDOWS\system32\Drivers\stexstor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\timeout.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxsstore.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWNet.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeevts.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiprop.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ureg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\clip.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncuprov.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBSink.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\LldpNotify.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wacompen.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CmBatt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dot3Conn.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmpbk32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00029024 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_19a2.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00029024 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10df.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrshost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutilext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dswave.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urschipidea.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemManufacturers.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com
2015-07-10 12:59 - 2015-07-10 12:59 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbatt.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\asyncmac.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00027944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CheckNetIsolation.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00027488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urssynopsys.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmoleaututils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEject.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\streamci.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026976 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winmad.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026976 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdxata.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winusb.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npsvctrig.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\davhlpr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINSRPC.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\osbaseln.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifibus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HyperVideo.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultPrinterProvider.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\comp.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkwudrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkdsk.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ARP.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdProp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\fc.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsperf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VMBusHID.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcfgutils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBSink.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sisbkup.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\serwvdrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Register-CimProvider.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd1394.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sort.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ROUTE.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mcd.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofire.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsDeviceAccessRevocation.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCCSPal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\lmhsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kdnic.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\acu.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlprovi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\umdmxfrm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmprocessxmlfiltered.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\uniplat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\replace.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasctrs.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndproxystub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\convert.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00021856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00021656 _____ C:\WINDOWS\system32\NetTrace.PLA.Diagnostics.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PING.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\nbtstat.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPHost.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\bridgeunattend.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundPlayback.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdial.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiltcfg.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisVirtualBus.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\genericusbfn.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkntfs.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\attrib.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.ps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2015-07-10 12:59 - 2015-07-10 12:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstplua.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00020184 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumbase.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019992 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtIntcLpioDMA.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnlsres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\runas.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\EsdSip.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhv1394.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\PATHPING.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\doskey.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupetw.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msisadrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\serialui.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernelceip.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmOmaCpMo.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00018656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsock32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\syssetup.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbios.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wmiacpi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\clb.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRTProxy.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00017935 _____ C:\WINDOWS\system32\EventViewer_EventDetails.xsl
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\TRACERT.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\RmClient.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mountvol.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmpushproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017624 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn2.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00017432 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtPL080.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wowreg32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\print.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\label.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmutil.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseetw.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00017248 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00017248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_07_1415.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\secinit.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommonPal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetmon.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsavailux.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\find.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\subst.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\regidle.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRINFO.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hyperkbd.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet_uart16550.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00016168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSChannel.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwrun.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutilx.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MTConfig.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwinsat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpts.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00015200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdstub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshirda.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpPortingLibrary.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrssrv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeSyncTask.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcommandlineutils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifsproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00014552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumdll.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbperf.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensApi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\recover.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\HOSTNAME.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBrokerPS.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dmpusbstor.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DockInterface.ProxyStub.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcmonitor.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsiproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmcodecdspps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\whhelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\svsvc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityRtapiPal.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmiso8601utils.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_ISCII.DLL
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_1137.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InfDefaultInstall.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Eap3Host.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgencounter.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpipmi.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschapext.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MinstoreEvents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-battery-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\umpass.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mstee.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpitime.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acproxy.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TCPSVCS.EXE
2015-07-10 12:59 - 2015-07-10 12:59 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netwphelper.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpipagr.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultDeviceManager.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeDateMUICallback.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\spnet.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regedt32.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiwer.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBrokerHost.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mshidumdf.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\errdev.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\help.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\CIRCoInst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spmpm.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Locator.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mspqm.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\acledit.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmcodecdspps.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Nlsdl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhst3g.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\comcat.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoWorkplaceN.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshhyperv.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcNs4.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\osuninst.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\idndl.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vms3cap.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mshidkmdf.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00008192 _____ C:\WINDOWS\system32\settings.dat
2015-07-10 12:59 - 2015-07-10 12:59 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole32.tlb
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-hal-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\FamilySafetyExt.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrolluxdll.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-storage-tiering-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-sleepstudy-events.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00004675 _____ C:\WINDOWS\system32\wsmanconfig_schema.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2help.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsyncres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00004148 _____ C:\WINDOWS\system32\psmodulediscoveryprovider.mof
2015-07-10 12:59 - 2015-07-10 12:59 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00004014 _____ C:\WINDOWS\system32\xwizard.dtd
2015-07-10 12:59 - 2015-07-10 12:59 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanutil.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootstr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncRes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msafd.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lz32.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\icmp.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskres2.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAppsRes.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\bridgeres.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrsmgr.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rnr20.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00002426 _____ C:\WINDOWS\system32\WsmTxt.xsl
2015-07-10 12:59 - 2015-07-10 12:59 - 00002269 _____ C:\WINDOWS\system32\WimBootCompress.ini
2015-07-10 12:59 - 2015-07-10 12:59 - 00002125 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00001820 _____ C:\WINDOWS\system32\rasctrnm.h
2015-07-10 12:59 - 2015-07-10 12:59 - 00001559 _____ C:\WINDOWS\system32\WsmPty.xsl
2015-07-10 12:59 - 2015-07-10 12:59 - 00000843 _____ C:\WINDOWS\system32\onlinesetup.cmd
2015-07-10 12:59 - 2015-07-10 12:59 - 00000714 _____ C:\WINDOWS\system32\RestartManager.mof
2015-07-10 12:59 - 2015-07-10 12:59 - 00000614 _____ C:\WINDOWS\system32\WdsUnattendTemplate.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00000565 _____ C:\WINDOWS\system32\NdfEventView.xml
2015-07-10 12:59 - 2015-07-10 12:59 - 00000176 _____ C:\WINDOWS\system32\RestartManagerUninstall.mof
2015-07-10 12:59 - 2015-07-10 12:59 - 00000035 _____ C:\WINDOWS\system32\winrm.cmd
2015-07-10 12:55 - 2015-08-06 01:43 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-10 11:11 - 2015-07-10 11:11 - 00000164 _____ C:\WINDOWS\system32\config\FP
2015-07-10 11:07 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2015-07-10 11:07 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-07-10 11:07 - 2015-07-10 11:07 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-07-10 11:07 - 2015-07-10 11:07 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-07-10 11:05 - 2015-08-08 09:09 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-07-10 11:05 - 2015-07-29 20:59 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-07-10 11:05 - 2015-07-29 20:59 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-07-10 11:05 - 2015-07-29 20:44 - 00000000 __RHD C:\Users\Default
2015-07-10 11:05 - 2015-07-29 20:30 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM
2015-07-10 11:05 - 2015-07-29 20:22 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-07-10 11:05 - 2015-07-10 18:34 - 00000000 ____D C:\WINDOWS\servicing
2015-07-10 11:05 - 2015-07-10 11:05 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmiEngine.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00618272 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00243040 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmipnpinstall.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00207200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdscore.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe
2015-07-10 11:05 - 2015-07-10 11:05 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PkgMgr.exe
2015-07-10 11:05 - 2015-07-10 11:05 - 00191840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmipnpinstall.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00135520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00111456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SSShim.dll
2015-07-10 11:05 - 2015-07-10 11:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe
2015-07-10 11:05 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2015-07-10 11:05 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\SMI
2015-07-10 11:05 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\downlevel
2015-07-09 19:11 - 2015-07-09 19:11 - 00478392 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00247016 _____ (Kaspersky Lab UK Ltd) C:\WINDOWS\system32\Drivers\cm_km_w.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00190648 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kneps.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00085360 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klwtp.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00077680 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klwfp.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00064368 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kldisk.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00040304 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klkbdflt.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00039792 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klmouflt.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00039792 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klim6.sys
2015-07-09 19:11 - 2015-07-09 19:11 - 00024944 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klpd.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 09:11 - 2015-07-03 10:43 - 00000000 ____D C:\Users\NA\AppData\Local\ClassicShell
2015-08-08 08:07 - 2015-07-03 11:08 - 00326175 ____N C:\WINDOWS\Minidump\080815-31250-01.dmp
2015-08-08 06:35 - 2015-07-03 10:15 - 00000000 ____D C:\Users\NA\AppData\Local\VirtualStore
2015-08-05 21:07 - 2015-07-03 10:17 - 00000000 ____D C:\Users\NA\AppData\Roaming\Adobe
2015-08-01 12:43 - 2012-10-23 12:27 - 00000000 ____D C:\temp
2015-07-30 10:20 - 2015-07-03 10:15 - 00000000 ____D C:\Users\NA\AppData\Local\Packages
2015-07-29 23:55 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-07-29 23:38 - 2015-07-03 10:55 - 00000000 ____D C:\Users\NA\AppData\Local\NVIDIA Corporation
2015-07-29 20:41 - 2015-07-03 10:24 - 00003710 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1390383356-2510122101-3705231715-1002
2015-07-29 20:30 - 2015-07-03 11:10 - 00000000 ____D C:\Users\NA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-29 20:30 - 2015-07-03 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-29 20:30 - 2015-07-03 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2015-07-29 20:30 - 2015-07-03 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-29 20:30 - 2015-07-03 10:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-07-29 20:30 - 2012-10-23 12:34 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite
2015-07-29 20:29 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2015-07-29 20:26 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-07-29 20:26 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-07-29 20:25 - 2015-07-03 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2015-07-29 20:25 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-07-29 20:25 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-07-29 20:25 - 2012-10-23 12:44 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD
2015-07-29 20:25 - 2012-08-02 15:28 - 00000000 ____D C:\ProgramData\PRICache
2015-07-29 11:11 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-27 18:52 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2015-07-26 08:41 - 2015-07-03 10:58 - 00000000 ____D C:\Users\NA\AppData\Roaming\Winamp
2015-07-26 03:04 - 2012-10-23 12:31 - 00000000 ____D C:\Program Files\DIFX
2015-07-24 06:21 - 2015-07-03 10:55 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-07-24 06:21 - 2015-07-03 10:55 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-07-24 06:21 - 2015-07-03 10:55 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-07-24 06:21 - 2015-07-03 10:55 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-07-23 23:26 - 2012-08-17 02:52 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-23 23:25 - 2012-08-17 02:52 - 00000000 ____D C:\ProgramData\Adobe
2015-07-23 16:58 - 2015-07-03 12:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-23 15:45 - 2015-07-03 11:11 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-07-23 15:18 - 2015-07-03 10:58 - 00000000 ____D C:\Program Files (x86)\Winamp
2015-07-10 13:00 - 2012-07-26 10:18 - 00000001 ___SH C:\BOOTNXT

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-08 07:26 - 2015-08-08 09:12 - 0000401 _____ () C:\Users\NA\AppData\Roaming\sp_data.sys
2015-07-25 00:14 - 2015-08-07 23:06 - 0004608 _____ () C:\Users\NA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-08-08 06:42 - 2015-08-08 06:42 - 0000036 _____ () C:\Users\NA\AppData\Local\housecall.guid.cache
2015-08-08 07:45 - 2015-08-08 07:45 - 0007618 _____ () C:\Users\NA\AppData\Local\Resmon.ResmonCfg
2015-07-29 20:19 - 2015-07-29 20:19 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-08-17 02:52 - 2012-07-30 08:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 02:52 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2015-07-03 10:24 - 2015-07-03 10:25 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2015-07-03 10:24 - 2015-07-03 10:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Einige Dateien in TEMP:
====================
C:\Users\NA\AppData\Local\Temp\AFOEGFDIJCFUGT.exe
C:\Users\NA\AppData\Local\Temp\CCJIT.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-07-29 20:14
Addition TXT Teil 1

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:06-08-2015
durchgeführt von NA (2015-08-08 09:05:42)
Gestartet von C:\Users\NA\Downloads
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1390383356-2510122101-3705231715-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1390383356-2510122101-3705231715-503 - Limited - Disabled)
Gast (S-1-5-21-1390383356-2510122101-3705231715-501 - Limited - Disabled)
NA (S-1-5-21-1390383356-2510122101-3705231715-1002 - Administrator - Enabled) => C:\Users\NA

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Anti-Virus (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.3.3 - Angry IP Scanner)
ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.2 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.5 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.4 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.3.14 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0004 - ASUS)
ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.4 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.26 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.10.168 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0022 - ASUS)
Autodesk FBX Review   (HKLM\...\{B9342F8C-3E1B-45EF-AEFC-0A00E156AF56}) (Version: 1.3.0.0 - Autodesk)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bitvise SSH Client 6.31 (remove only) (HKLM-x32\...\BvSshClient) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
Classic Shell (HKLM\...\{7C129CF8-199F-4269-AAEE-60B5D8D716E2}) (Version: 4.2.1 - IvoSoft)
CodeStuff Starter (HKLM-x32\...\CodeStuff Starter) (Version: 5.6.2.9 - CodeStuff)
CyberLink LabelPrint 2.5 (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5415 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.2914 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Duden Professional (HKLM-x32\...\{CADD1164-F60E-484B-A01C-F5CDE6FD40FD}) (Version: 10.0.0 - Bibliographisches Institut GmbH)
ELAN Touchpad 15.8.4.3_X64_WHQL (HKLM\...\Elantech) (Version: 15.8.4.3 - ELAN Microelectronic Corp.)
ExpressCache (HKLM\...\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}) (Version: 1.0.86 - Diskeeper Corporation)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Google Update Helper (x32 Version: 1.3.21.129 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 6.0.5.1080 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{02FECEE0-16B2-43DB-BC3B-C844477FC142}) (Version: 15.0.2.361 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 15.0.2.361 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 39.0.3 - Mozilla)
MPC-HC 1.7.9 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.9 - MPC-HC Team)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
NVIDIA GeForce Experience 2.5.12.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.12.11 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open 3D Model Viewer (HKLM-x32\...\{EBDFEC36-5277-454F-875B-F0AA2CDC3C92}) (Version: 1.10.0000 - Alexander Gessler)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.208 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.27023 - Realtek Semiconductor Corp.)
SceneSwitch (HKLM-x32\...\{5172E572-C175-4F80-A6D5-5CB45826AD61}) (Version: 1.0.14 - ASUS)
Screen Recorder Launcher (HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\...\ScreenRecorderLauncher) (Version: 1.7 - )
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.12.11 - NVIDIA Corporation) Hidden
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.102 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Trend Micro RUBotted 2.0 Beta (HKLM-x32\...\{54D4EAF5-4C80-4878-B4AC-5AE454A02E3C}_is1) (Version: 2.0.0.1034 - Trend Micro, Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - ASUS (ATP) Mouse  (01/13/2015 1.0.0.233) (HKLM\...\8335D73177E6D80E7ADC00FED2275758BD28AEFB) (Version: 01/13/2015 1.0.0.233 - ASUS)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{AFD6BFDC-F329-41BB-9C53-764B965DD483}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1390383356-2510122101-3705231715-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\NA\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

05-08-2015 20:44:38 Windows Modules Installer
08-08-2015 07:18:07 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00EEBA9C-F9EF-4272-B793-C830FBADD359} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {0CCA7916-2916-4F12-BD32-1E3BE31E1269} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {115CB6F0-0342-42C7-8F33-547BB3823494} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.)
Task: {1641F54C-1E57-4902-AB65-EE2B65E5629D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {19865544-CE08-40BE-8B8C-87C47681433D} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {1D3D099E-EE1E-4907-8BA2-BA8F12D11AA6} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe [2015-07-10] (Microsoft Corporation)
Task: {26EAEFBB-A811-4FFC-9941-17B554419B29} - \Microsoft\Windows\Setup\gwx\launchtrayprocess No Task File <==== ACHTUNG
Task: {2C97A00A-1C5C-4318-B5CC-8A1A126B77F9} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
Task: {2E4D82CB-B298-4274-94D5-42BACF2FC29E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-05] (Google Inc.)
Task: {2F52D5DF-EA4F-432B-9F33-9EDC38691BA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {3950B384-2841-4030-8A20-0F0C0B3D45E6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {3D1D2945-50FF-4510-A536-D1FC653FE6D6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent No Task File <==== ACHTUNG
Task: {3DFA0466-0416-4560-BB16-FA008E0AE061} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d No Task File <==== ACHTUNG
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {41160EA0-208B-4C3E-B4DB-805BBABC6B93} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {4454A8D0-2E4E-4A02-BF67-48DF6A7BFAB4} - System32\Tasks\Microsoft\Windows\Maps\MapsUpdateTask
Task: {4BA1F0D2-B6EB-46E9-A827-B63FFD09DC17} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2012-08-06] (ASUS)
Task: {5C4E6F1F-FA45-4AFB-BDC9-028E79F8658A} - System32\Tasks\{E0A60E4C-9290-4AFE-9163-91FB1EA27C07} => pcalua.exe -a C:\Users\NA\Downloads\AntiRootkit\PAVARK.exe -d C:\Users\NA\Downloads\AntiRootkit
Task: {5D3EE910-62AC-47B9-9956-591BF45A49E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-05] (Google Inc.)
Task: {5E5515C1-7D87-4904-B9CE-FD29EB2ADB72} - System32\Tasks\Microsoft\Windows\Sysmain\ResPriStaticDbSync
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {653E9E69-3C64-44C2-B381-CC5514969CFD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d No Task File <==== ACHTUNG
Task: {711EE2F9-A611-4773-AF8E-D4B278A6718D} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
Task: {7200B306-5179-4CFA-976F-650D9693CCDC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d No Task File <==== ACHTUNG
Task: {73551810-E5F4-433E-9494-0D00B55C855E} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {744C9FEA-08B7-43E1-A729-0F94647D655C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {763C6E84-56F6-4F22-9937-64C3970A405C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig No Task File <==== ACHTUNG
Task: {784AE36D-5787-4F83-AF00-4C5A0F24E31D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d No Task File <==== ACHTUNG
Task: {78B77FA3-9D97-441D-97B6-68CEA40B4F74} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {7A003965-A297-4DC6-B15B-852D798391E0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe [2015-07-29] (Microsoft Corporation)
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\windows\system32\MusNotification.exe [2015-07-29] (Microsoft Corporation)
Task: {8DF84CB3-D8E0-4307-A35B-CA74E21786DB} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2015-07-29] (Microsoft Corporation)
Task: {A01692AB-B7AD-42A7-B1C0-B30767006F3B} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe
Task: {A263C0D8-470D-4C0B-B8A8-89810BEC25F5} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd No Task File <==== ACHTUNG
Task: {A364E297-00AD-490D-900E-22AC34598C71} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {A5B6CD85-1B57-49B9-BA80-5D5D65F02826} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {AC29E64E-3271-47BA-B8F1-914523CF379B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Automatic App Update
Task: {B9B36D41-C776-424E-9A13-5387E17A2CEB} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\Windows\System32\WiFiTask.exe [2015-07-10] (Microsoft Corporation)
Task: {BA40EA09-415E-4B6D-A462-3D3E7303CC37} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {C0B6CEE6-76BF-425A-94FE-143B496508C1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent No Task File <==== ACHTUNG
Task: {C2162702-FFEB-48C0-AA5F-2DA3A8887D61} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Installation
Task: {C56AFFD3-06B8-4A16-AF7E-F7A6EB3FAE9E} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {C5EE2EA2-5312-4D1F-B9D0-41B18DF31B78} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {C7A236B2-12E1-46DC-9501-3B1B0209CC09} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {D2401052-A382-42DE-9C79-D1CF3563F654} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
Task: {DAF2BAE3-1C5B-4CB5-9F62-0911C031A15A} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\Windows\system32\disksnapshot.exe [2015-07-10] (Microsoft Corporation)
Task: {EA12143E-19E9-4168-8088-F9075A12E4C0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B No Task File <==== ACHTUNG
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\windows\system32\MusNotification.exe [2015-07-29] (Microsoft Corporation)
Task: {ED0B944E-324D-47EA-B02D-A4E472F61629} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d No Task File <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-29 20:58 - 2015-07-29 20:58 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2015-07-29 20:20 - 2015-07-23 03:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-09-07 06:41 - 2012-07-30 13:27 - 00030592 _____ () C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe
2012-09-07 06:41 - 2012-07-30 13:26 - 00029056 _____ () C:\WINDOWS\system32\DptfParticipantProcessorService.exe
2015-07-29 20:59 - 2015-07-29 20:59 - 00403968 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-08-06 01:27 - 2015-07-30 08:05 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2015-08-06 01:27 - 2015-07-30 08:05 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-08-06 01:27 - 2015-08-02 03:37 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-06 01:27 - 2015-08-02 03:34 - 01806848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-06 01:27 - 2015-08-02 03:35 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 01272616 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\kpcengine.2.3.dll
2015-08-08 06:38 - 2010-08-24 19:06 - 00085840 _____ () C:\Program Files (x86)\Trend Micro\RUBotted\hc_help.dll
2015-07-13 20:45 - 2015-07-23 06:02 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-07-03 10:54 - 2015-07-24 06:22 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2012-08-24 18:17 - 2012-08-24 18:17 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 00502056 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-12-23 16:54 - 2014-12-23 16:54 - 00608040 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\74833134.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\74833134.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer trusted/restricted ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\NA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "AsusVibeLauncher.lnk"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1390383356-2510122101-3705231715-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{50088D85-AF86-4209-8663-34D4264C344D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{8741A430-5048-48A7-81E6-71B0500C7E55}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{AA61731E-3F75-4FF2-A928-531F2690FDD5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2B4464FE-8B63-4661-9B1F-0BE54E6F300F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D5E0A46B-800D-4607-AF51-323943953871}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FEA1D8F1-B5BF-4844-9AC6-66005BE29FA0}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{F78797A5-BB80-4A39-B36E-02CBC84AE068}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [TCP Query User{40C8BFD2-D488-41FE-883D-EF66AAA47F93}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{8586D046-ACC7-4AE6-9779-9BB4F80B8440}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{DFB963BE-7677-48DD-89BC-6C1DA871B997}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{53160981-E9A7-4D37-B4A9-AFF2F2EAEAE3}] => (Allow) LPort=2869
FirewallRules: [{A4045CCA-9038-4E80-AAE0-020BCDE44499}] => (Allow) LPort=1900
FirewallRules: [{2D87DFB6-ED6B-44ED-A0DC-8C6F8E9959A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{9C8AA0F2-BC20-46C4-96D9-1FBE1CD6A556}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{26057A0E-3E06-454B-9360-0A7C593AA163}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7F46EF18-EB13-4CF7-9A9F-9EC43E2AF638}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{25BA9553-A2EE-412C-93CC-31A9DFA70F3E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{BA785C57-461A-439C-88F4-2FB565FAE1D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C1D48DA3-7663-48B7-9D01-AE7017437832}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{69B56F30-E3C6-45FA-BB65-6D57CAE4A88C}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe
FirewallRules: [UDP Query User{E4E46770-8493-4288-9F77-5B5C7EE123BA}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Controller der Familie Realtek PCIe GBE
Description: Controller der Familie Realtek PCIe GBE
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: rt640x64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/08/2015 08:41:01 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b20

Startzeit: 01d0d1a2f5b2e2da

Beendigungszeit: 4294967295

Anwendungspfad: C:\Users\NA\Downloads\OTL.exe

Berichts-ID: 6e0c795c-3d98-11e5-bea1-fd8413ba69b8

Vollständiger Name des fehlerhaften Pakets: 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:

Error: (08/08/2015 08:24:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 16b4

Startzeit: 01d0d1a2b94a744e

Beendigungszeit: 4294967295

Anwendungspfad: C:\Users\NA\Downloads\OTL.exe

Berichts-ID: 2e4910af-3d96-11e5-bea1-fd8413ba69b8

Vollständiger Name des fehlerhaften Pakets: 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:

Error: (08/08/2015 08:22:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6105.2351, Zeitstempel: 0x55c26502
Name des fehlerhaften Moduls: Mso30Imm.dll, Version: 16.0.6014.1000, Zeitstempel: 0x55a5783f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000012b70
ID des fehlerhaften Prozesses: 0x18e0
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5

Error: (08/08/2015 08:09:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ElanTPCfg64.exe, Version: 1.0.65.1, Zeitstempel: 0x4f0be108
Name des fehlerhaften Moduls: ETDApi.dll, Version: 11.9.8.1, Zeitstempel: 0x5464772b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000008f72
ID des fehlerhaften Prozesses: 0x2cc
Startzeit der fehlerhaften Anwendung: 0xElanTPCfg64.exe0
Pfad der fehlerhaften Anwendung: ElanTPCfg64.exe1
Pfad des fehlerhaften Moduls: ElanTPCfg64.exe2
Berichtskennung: ElanTPCfg64.exe3
Vollständiger Name des fehlerhaften Pakets: ElanTPCfg64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ElanTPCfg64.exe5

Error: (08/08/2015 07:25:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ElanTPCfg64.exe, Version: 1.0.65.1, Zeitstempel: 0x4f0be108
Name des fehlerhaften Moduls: ETDApi.dll, Version: 11.9.8.1, Zeitstempel: 0x5464772b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000008f72
ID des fehlerhaften Prozesses: 0x146c
Startzeit der fehlerhaften Anwendung: 0xElanTPCfg64.exe0
Pfad der fehlerhaften Anwendung: ElanTPCfg64.exe1
Pfad des fehlerhaften Moduls: ElanTPCfg64.exe2
Berichtskennung: ElanTPCfg64.exe3
Vollständiger Name des fehlerhaften Pakets: ElanTPCfg64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ElanTPCfg64.exe5

Error: (08/08/2015 07:20:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 39.0.3.5696, Zeitstempel: 0x55c33d81
Name des fehlerhaften Moduls: mozalloc.dll, Version: 39.0.3.5696, Zeitstempel: 0x55c32c73
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x38c4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (08/08/2015 07:18:12 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (08/08/2015 06:51:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RootkitRevealer.exe, Version: 1.71.0.0, Zeitstempel: 0x44e255aa
Name des fehlerhaften Moduls: RootkitRevealer.exe, Version: 1.71.0.0, Zeitstempel: 0x44e255aa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000040cd
ID des fehlerhaften Prozesses: 0x1f48
Startzeit der fehlerhaften Anwendung: 0xRootkitRevealer.exe0
Pfad der fehlerhaften Anwendung: RootkitRevealer.exe1
Pfad des fehlerhaften Moduls: RootkitRevealer.exe2
Berichtskennung: RootkitRevealer.exe3
Vollständiger Name des fehlerhaften Pakets: RootkitRevealer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RootkitRevealer.exe5

Error: (08/08/2015 06:51:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RootkitRevealer.exe, Version: 1.71.0.0, Zeitstempel: 0x44e255aa
Name des fehlerhaften Moduls: RootkitRevealer.exe, Version: 1.71.0.0, Zeitstempel: 0x44e255aa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000040cd
ID des fehlerhaften Prozesses: 0xc08
Startzeit der fehlerhaften Anwendung: 0xRootkitRevealer.exe0
Pfad der fehlerhaften Anwendung: RootkitRevealer.exe1
Pfad des fehlerhaften Moduls: RootkitRevealer.exe2
Berichtskennung: RootkitRevealer.exe3
Vollständiger Name des fehlerhaften Pakets: RootkitRevealer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: RootkitRevealer.exe5

Error: (08/08/2015 06:32:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ElanTPCfg64.exe, Version: 1.0.65.1, Zeitstempel: 0x4f0be108
Name des fehlerhaften Moduls: ETDApi.dll, Version: 11.9.8.1, Zeitstempel: 0x5464772b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000008f72
ID des fehlerhaften Prozesses: 0x13e4
Startzeit der fehlerhaften Anwendung: 0xElanTPCfg64.exe0
Pfad der fehlerhaften Anwendung: ElanTPCfg64.exe1
Pfad des fehlerhaften Moduls: ElanTPCfg64.exe2
Berichtskennung: ElanTPCfg64.exe3
Vollständiger Name des fehlerhaften Pakets: ElanTPCfg64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ElanTPCfg64.exe5


Systemfehler:
=============
Error: (08/08/2015 08:40:53 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (08/08/2015 08:25:07 AM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (08/08/2015 08:11:52 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (08/08/2015 08:10:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Management and Security Application User Notification Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/08/2015 08:10:42 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Management and Security Application User Notification Service erreicht.

Error: (08/08/2015 08:09:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/08/2015 08:09:18 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht.

Error: (08/08/2015 08:07:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/08/2015 08:07:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Dynamic Application Loader Host Interface Service erreicht.

Error: (08/08/2015 08:07:42 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x000000be (0xfffff960ab2c0000, 0x8030000128d6e001, 0xffffd000205ff131, 0x000000000000000b)C:\WINDOWS\Minidump\080815-31250-01.dmp080815-31250-01


Microsoft Office:
=========================

CodeIntegrity:
===================================
  Date: 2015-08-04 14:19:33.476
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-03 15:35:16.364
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-02 12:54:33.883
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.177
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.162
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.143
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.128
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.103
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:50.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-01 15:43:49.863
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM) i5-3317U CPU @ 1.70GHz
Percentage of memory in use: 32%
Total physical RAM: 8013.52 MB
Available physical RAM: 5418.72 MB
Total Virtual: 16205.52 MB
Available Virtual: 13677.71 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:185.86 GB) (Free:107.44 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:258.35 GB) (Free:227.65 GB) NTFS
Drive f: (500 GB 1) (Fixed) (Total:443.23 GB) (Free:208.24 GB) NTFS
Drive g: (500 GB 2) (Fixed) (Total:488.28 GB) (Free:119.52 GB) NTFS
Drive y: (Volume) (Fixed) (Total:22.36 GB) (Free:22.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A3677F4F)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 22.4 GB) (Disk ID: A3677F2B)

Partition: GPT Partition Type.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 47BD5845)
Partition 1: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS)

==================== Ende von log ============================

Alt 08.08.2015, 10:00   #13
schrauber
/// the machine
/// TB-Ausbilder
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Ok. Dann hätte ich jetzt erst mal ne Frage:

Hast Du die Standardsachen wie RAM und HDD auf Defekte geprüft, bevor du dich in die Science Fiction Welt der UEFI Rootkits begeben hast?

Ich habe keinen Schimmer was derzeit los ist, aber du bist der vierte oder fünfte innerhalb von 2 Wochen mit solchen Vorstellungen.

Gibt es UEFI Rootkits in the wild? Nein
Gibt es die technische Möglichkeit auf UEFI Rootkits? Ja
Gab es bis heute einen einzigen Fall davon? Ja, Hacking Team hat so ein Ding gebaut, funktioniert nur bei einem einzigen US-BIOS für Laptops, und auch nur wenn man direkten physischen Zugang zum Rechner hat, da das von Hand ins BIOS gedumpt werden muss
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 09.08.2015, 03:01   #14
Deex
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Wie gesagt lange Geschichte, habe auch nie gesagt das ich es aus der Wildnis erhalten habe .

Problemlösung war einfach, wiederherstellungspartionen sichtbar machen, partition auflösen, Neu- Partionieren, Formatieren, Bios Flash

Alles jetzt in Ordnung

Alt 09.08.2015, 07:34   #15
schrauber
/// the machine
/// TB-Ausbilder
 
Unbekanntes UEFI Rootkit - Standard

Unbekanntes UEFI Rootkit


Da war nie Malware im BIOS
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Unbekanntes UEFI Rootkit
asus, ausgelastet, auslastung, bluescreen, defender, explorer.exe, fehler, festplatte, frage, harddisk, installation, laptop, microsoft, monitor, musik, notebook, nvidia, onedrive, problem, prozess, rootkit, software, system32, temp, updates, windows, windows 10


« iexplore.exe virus und ständige browser Abstürze | reimage erscheint nicht bei den uninstallern und lässt sich weder entfernen noch löschen »


Ähnliche Themen: Unbekanntes UEFI Rootkit


  1. Offline Scanner 64Bit UEFI only via USB?
    Diskussionsforum - 13.11.2015 (12)
  2. Hacking Team verwendet UEFI-Rootkit
    Nachrichten - 14.07.2015 (0)
  3. Uefi trojaner P9x79 und rsa efi rooktit macbookpro 13 zoll retina 2013 l8
    Mülltonne - 02.06.2015 (1)
  4. Uefi trojaner P9x79 und rsa efi rooktit macbookpro 13 zoll retina 2013 l8
    Log-Analyse und Auswertung - 02.06.2015 (1)
  5. US-Cert warnt vor weiteren UEFI-BIOS-Lücken
    Nachrichten - 07.01.2015 (0)
  6. Mehr Updates gegen die UEFI-Sicherheitslücke
    Nachrichten - 05.11.2014 (0)
  7. Extreme Privilege Escalation: Gefährliche Sicherheitslücken in UEFI-Firmware
    Nachrichten - 21.10.2014 (0)
  8. Win8.1x64 UEFI SecureBoot infiziert mit Gen:Trojan.Heur.Fu.ku0 und Gen:Variant.Graftor.6958 . Suche Backdoor!
    Log-Analyse und Auswertung - 10.04.2014 (13)
  9. Black Hat: UEFI-Toolkit zur Suche nach Bootkits
    Nachrichten - 02.08.2013 (0)
  10. Sony Vaio UEFI Win 8 GVU Trojaner
    Plagegeister aller Art und deren Bekämpfung - 27.06.2013 (23)
  11. Rootkit, Bootkit, Rootkit.win32.tdss.ld4 - ich weiss nicht weiter..
    Log-Analyse und Auswertung - 18.03.2013 (1)
  12. c't Bankix und c't Surfix unterstützen UEFI Secure Boot
    Nachrichten - 09.03.2013 (0)
  13. UEFI Secure Boot für Suse-Linux
    Nachrichten - 10.08.2012 (0)
  14. Rootkit.gen gefunden/Rootkit-Befall - Bin ich im dran? Brauche dringend Beratung !!!
    Plagegeister aller Art und deren Bekämpfung - 25.05.2012 (3)
  15. Windows 8: "Secure Boot" mit UEFI 2.3.1
    Nachrichten - 01.09.2011 (0)
  16. Komplizierter Fall: Unbekanntes Rootkit?
    Plagegeister aller Art und deren Bekämpfung - 17.01.2011 (0)
  17. Unbekanntes Rootkit
    Plagegeister aller Art und deren Bekämpfung - 17.08.2009 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Unbekanntes UEFI Rootkit - Grüße Euch, ich bin ziemlich Ratlos. Ich habe mir vor einiger Zeit meiner meinung nach ein UEFI Rootkit eingefangen welches ich nicht mehr von meinen Festplatten bekomme. Die ganze vorgeschichte - Unbekanntes UEFI Rootkit...
Archiv
Du betrachtest: Unbekanntes UEFI Rootkit auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131