Jump to content

AveMaria02

Members
  • Posts

    7
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I have tried that. I even tried deleting my profile on Firefox and creating a new one which usually fixes problems. Unfortunately, nothing has fixed it. That's why I am beginning to think that my Xmarks extension is causing the unresponsive scripts. I did search online for information about the problem and it appears that I am not the only one having this problem with Xmarks. I just hope they get the extension fixed soon so I can go back to using Firefox. I won't use Firefox without it because I need my bookmarks.
  2. Hello. I tried to edit my profile and I received a notification that I am not allowed to edit it. Why is this?
  3. Sure. They are attached to this post. FRST.txt Addition.txt
  4. Oh I should also note that the fixes were done when I had Windows 10 installed but I have since did a Factory Reset and went back to Windows 7 because my old games were not compatible with Windows 10. I am still experiencing the unresponsive scripts issue with Mozilla Firefox which leads me to believe that the infection is still there.
  5. Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-04-2016 Ran by Gloria Deo (2016-04-24 14:30:44) Running from C:\Users\Gloria Deo\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2016-04-20 22:34:01) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1565124662-2897034396-4106828886-500 - Administrator - Disabled) Gloria Deo (S-1-5-21-1565124662-2897034396-4106828886-1001 - Administrator - Enabled) => C:\Users\Gloria Deo Guest (S-1-5-21-1565124662-2897034396-4106828886-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1565124662-2897034396-4106828886-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: COMODO Antivirus (Enabled - Up to date) {D0CC7563-ABD2-DEBE-138E-FDD553335AF2} AS: Comodo Defense+ (Enabled - Up to date) {6BAD9487-8DE8-D130-293E-C6A728B4104F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Enabled) {E8F7F446-E1BD-DFE6-38D1-54E0ADE01D89} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.1 - Hewlett-Packard) Hidden Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated) Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated) Chromodo (HKLM-x32\...\Chromodo) (Version: 48.12.18.254 - Comodo) Comodo IceDragon (HKLM-x32\...\Comodo IceDragon) (Version: 45.0.0.5 - COMODO) COMODO Internet Security Premium (HKLM\...\{84875F6F-2996-4469-BF1D-F59A85C5C702}) (Version: 8.2.0.5005 - COMODO Security Solutions Inc.) Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2115 - CyberLink Corp.) DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 3.1.3224 - Hewlett-Packard) DVD Menu Pack for HP MediaSmart Video (x32 Version: 3.1.3224 - Hewlett-Packard) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.87 - Google Inc.) Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Hardware Diagnostic Tools (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5247.34 - PC-Doctor, Inc.) HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.9512.3162 - Hewlett-Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent) HP MediaSmart Demo (HKLM-x32\...\{9DEF9686-CCB2-47B7-BF83-B49EA21FA016}) (Version: 1.00.0000 - Hewlett-Packard) HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.1.3317 - Hewlett-Packard) HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.1.3422 - Hewlett-Packard) HP MediaSmart SmartMenu (HKLM\...\{88E60521-1E4E-4785-B9F1-1798A4BD0C30}) (Version: 3.1.0.1 - Hewlett-Packard) HP MediaSmart/TouchSmart Netflix (HKLM-x32\...\{35021DFB-F9CA-402A-89A2-47F91E506465}) (Version: 1.0.2.0 - Hewlett-Packard) HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard) HP Remote Solution (HKLM-x32\...\HP Remote Solution) (Version: 1.1.11.0 - Hewlett-Packard) HP Setup (HKLM-x32\...\{17B4760F-334B-475D-829F-1A3E94A6A4E6}) (Version: 1.2.3560.3170 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{741CFE3A-1C0B-4A7D-8E08-5D78C911C09D}) (Version: 4.2.5.3 - Hewlett-Packard) HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden Hulu Desktop (HKU\S-1-5-21-1565124662-2897034396-4106828886-1001\...\HuluDesktop) (Version: 0.9.9 - Hulu LLC) Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2017 - CyberLink Corp.) LabelPrint (x32 Version: 2.5.2017 - CyberLink Corp.) Hidden LightScribe System Software (HKLM-x32\...\{CC8E94A2-55C7-4460-953C-2A790180578C}) (Version: 1.18.8.1 - LightScribe) LSI PCI-SV92EX Soft Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.100 - LSI Corporation) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.566.0 - Microsoft Live Search Toolbar) Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation) Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 3.1.3310 - Hewlett-Packard) Movie Theme Pack for HP MediaSmart Video (x32 Version: 3.1.3310 - Hewlett-Packard) Hidden Mozilla Firefox 45.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 45.0.2 (x86 en-US)) (Version: 45.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.2 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation) Pharaoh (HKLM-x32\...\Pharaoh) (Version: - ) Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.12 - ) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3304 - CyberLink Corp.) Power2Go (x32 Version: 6.0.3304 - CyberLink Corp.) Hidden PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.) PowerDirector (x32 Version: 7.0.3503 - CyberLink Corp.) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6196 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 5.5.2216 - CyberLink Corp.) Hidden Trillian (HKLM-x32\...\Trillian) (Version: - Cerulean Studios, LLC) Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation) Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {27D73AF9-EED4-452F-8658-C0C1E39A82DC} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-04-06] (COMODO) Task: {41090C1E-6D8F-4A07-AC15-25C96A905512} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-24] (Adobe Systems Incorporated) Task: {57C068B7-3BCC-418C-B8B3-176F983AA51A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-20] (Google Inc.) Task: {651EEDCE-6452-4B96-B8D5-837951F5211C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe [2016-04-24] (Adobe Systems Incorporated) Task: {756F0B93-AB67-4F36-8C44-3EAAA89A3B80} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-04-06] (COMODO) Task: {922660ED-7CF4-498E-BDDD-816F8BCC6C40} - System32\Tasks\Hewlett-Packard\HP Assistant\First Boot => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2009-09-24] (Hewlett-Packard) Task: {9425BC44-C027-4D65-9C6E-F0D30EDE7D10} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-04-06] (COMODO) Task: {979BC51A-9450-4554-AFE1-B703624FF111} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-20] (Google Inc.) Task: {B33A8E32-9AF0-49A8-A446-FF62FAC8E3F8} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-04-06] (COMODO) Task: {D25FBDA2-984B-4594-94CF-2C257AC0D929} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-04-06] (COMODO) Task: {E15D98A2-7DEE-4FD7-AD27-6FAEDC926EFA} - System32\Tasks\CLMLSvc => c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [2009-10-22] (CyberLink) Task: {F65E7AD3-F0D2-4C7A-980B-099AA05D01F6} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-04-05 09:40 - 2016-04-22 22:34 - 01985688 _____ () C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe 2009-09-14 19:17 - 2009-09-14 19:17 - 00610360 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 2016-03-16 11:25 - 2016-03-16 11:25 - 00073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav 2009-10-22 21:50 - 2009-10-22 21:50 - 00931112 _____ () c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll 2015-05-27 00:00 - 2015-05-27 00:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll 2016-04-22 22:15 - 2016-04-20 17:08 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libglesv2.dll 2016-04-22 22:15 - 2016-04-20 17:08 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows\agrdel64.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\agrsmdel.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\bfsvc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\notepad.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\splwow64.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\twain_32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\accessibilitycpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\acppage.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ActionCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ActionCenterCPL.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ActionQueue.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\actxprxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\adprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AERTAC64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AERTAR64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\agrsco64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\aitagent.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\amstream.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\appwiz.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\asycfilt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AuthFWSnapin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\autochk.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\autoconv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\autofmt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\autoplay.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AuxiliaryDisplayCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AuxiliaryDisplayServices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AxInstSv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\azroles.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\azroleui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\AzSqlExt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\basecsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\basesrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\batmeter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bcdboot.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bcdsrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\BFE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\biocpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bitsadmin.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bitsperf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\BlbEvents.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bootres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\browcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\browser.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\browseui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\bthprops.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Bubbles.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\BWUnpairElevated.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cabinet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cabview.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\capiprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cca.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cdd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cdosys.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\certenc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\CertEnroll.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\certmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\CertPolEng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\certprop.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\certutil.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cfgmgr32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\charmap.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\choice.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\clusapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cmd.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cmstp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cngprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\comdlg32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\credui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cryptdlg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cscapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cscdll.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\cscript.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\C_ISCII.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\d3d11.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\d3d9.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dbgeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dbghelp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\defaultlocationcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\desk.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DeviceCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DevicePairingFolder.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dfrgui.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dfshim.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dhcpcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dhcpcore6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dhcpcsvc6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DiagCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\diagperf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dimsroam.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\diskpart.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\diskraid.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Display.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\djoin.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dnsapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dnscacheugc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dnscmmc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dnsrslvr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dot3api.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dot3cfg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dot3msm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dot3svc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dot3ui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dpapiprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dpnaddr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dpnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dpx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\drvstore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dsauth.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DShowRdpFilter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dskquoui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dsuiext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dwmcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dwmredir.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dxdiagn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DXP.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DXPTaskRingtone.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\DxpTaskSync.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\eapp3hst.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\eapphost.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\efscore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\EhStorAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\elsTrans.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\eudcedit.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Faultrep.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fde.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fdeploy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fdProxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\findstr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FirewallControlPanel.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FMAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fms.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fontext.dll:$CmdTcID [32] AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fphc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\framedyn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\framedynos.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ftp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\fveapibase.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FWPUCLNT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSCOVER.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSMON.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSSVC.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSTIFF.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\FXSUNATD.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\g711codc.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\gameux.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\gpsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\hal.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\hbaapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\hgcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\hgprint.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\HotStartUserAgent.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\httpapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iasacct.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iasrad.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iasrecst.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\icaapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\icardagt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\icardres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IEUDINIT.EXE:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ifsutil.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IKEEXT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\imagehlp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\imapi2.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\imapi2fs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\inetmib1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\inetpp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\infocardapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\intl.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iologmsg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IPHLPAPI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iphlpsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iprtrmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\IPSECSVC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ipsmsnap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iscsicli.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iscsium.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\isoburn.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\itircl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iTVData.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\iyuv_32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\jnwmon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDAZE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDAZEL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDBLR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDBULG.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDCZ1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDGEO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kbdgeoqw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDGKL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDGR1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINBEN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINHIN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINKAN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINMAR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINORI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINTAM.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDINTEL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kbdlk41a.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDLT1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDMAORI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDMON.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDNEPR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDPO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDSF.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDSG.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDTAJIK.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDTUF.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDTUQ.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDTURME.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDUGHR1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KBDUS.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kd1394.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kdcom.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kdusb.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\KMSVC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\kstvtune.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Kswdmcap.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ksxbar.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ListSvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\localsec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\logoncli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\LogonUI.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\lpksetup.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\lsm.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\lsmproxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\luainstall.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\main.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\manage-bde.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mblctr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mcbuilder.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MCEWMDRMNDBootstrap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mciqtz32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mcupdate_GenuineIntel.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Mcx2Svc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MdSched.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MediaMetadataHandler.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfc42.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfc42u.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfds.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MFPlay.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfreadwrite.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mimefilt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mmcndmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mmsys.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mobsync.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Mpeg2Data.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mpg2splt.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mprapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mprddm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MPSSVC.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MSAC3ENC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msasn1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mscms.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msconfig.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mscoree.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mscorier.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mscories.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msdmo.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msdri.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msdrm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msdtctm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MSDvbNP.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msftedit.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msieftp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msinfo32.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MSNP.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mspbda.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MsRdpWebAccess.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msrle32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msscntrs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mssph.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mssphtb.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mssrch.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mssvp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mstask.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msvcrt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msvidc32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MSVidCtl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mswsock.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msxml6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\msyuv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mtxclu.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mtxoci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\muifontsetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\MultiDigiMon.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\mydocs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Mystify.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\NAPCRYPT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\napdsnap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\NAPHLPR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Narrator.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\NaturalLanguage6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ncryptui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ncsi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\net1.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netapi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netcenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netcfgx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netcorehc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netdiagfx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netevent.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netfxperf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netid.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netiohlp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netjoin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netlogon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netplwiz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netshell.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\netutils.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\networkexplorer.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\networkmap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nlaapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nltest.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\notepad.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nrpsrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nshipsec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nshwfp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nslookup.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ntlanman.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ntprint.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ntshrui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\NVCOSMU.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\nvusmu.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\objsel.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ocsetapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ocsetup.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbc32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbcconf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbccp32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbccr32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbccu32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\odbctrac.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\oleacc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\onex.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\onexui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\OnLineIDCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\OobeFldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\OpcServices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\osk.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\OxpsConverter.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\packager.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pdh.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PerfCenterCPL.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\perfmon.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PhotoScreensaver.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\photowiz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pifmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PkgMgr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pku2u.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pla.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\pnidui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PnPUnattend.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PortableDeviceApi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PortableDeviceStatus.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PortableDeviceSyncProvider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\powercfg.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\powercpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PresentationHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PresentationHostProxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\prevhost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\PrintIsolationProxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\printui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\prncache.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\prnfldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\prntvpt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\profprov.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\propsys.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\proquota.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\provsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\psisdecd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\psisrndr.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\puiobj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QAGENT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QAGENTRT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qcap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QCLIPROV.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qdv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\qmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QSHVHOST.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QSVRMGMT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Query.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\QUTIL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RacEngn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\raschap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rasmans.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rasppp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rastls.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RCoInst64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpcfgex.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpcorekmts.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpd3d.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpdd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RDPENCDD.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpencom.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpendp_winip.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RdpGroupPolicyExtension.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdprefdrvapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdpwsx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdrmemptylst.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rdvidcrl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ReAgent.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\recdisc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\recovery.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\regapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\remotepg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\repair-bde.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Ribbons.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\riched20.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\riched32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RMActivate.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RMActivate_isv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RMActivate_ssp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RMActivate_ssp_isv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Robocopy.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RP3DAA64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RP3DHT64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RpcRtRemote.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rpcss.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTEED64A.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTEEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTEEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTEEP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RtkApi64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RtkAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RtkCfg64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RtlCPAPI64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RtPgEx64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\RTSnMg64.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\rtutils.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\runonce.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\samcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\samlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\samsrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sbe.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\scansetting.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\scecli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\schedcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\schtasks.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\scrrun.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sdclt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sdcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sdengin2.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sdrsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SearchFilterHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SearchFolder.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SearchIndexer.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SearchProtocolHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\seclogon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\secproc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\secproc_isv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\secproc_ssp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\secproc_ssp_isv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SensorsCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\services.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SessEnv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sethc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\setupapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\setupcl.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shacct.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sharemediacpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shdocvw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shgina.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shimgvw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shlwapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shsetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shsvcs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shunimpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\shwebsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sisbkup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\slui.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\slwga.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SmartcardCredentialProvider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SmiEngine.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SndVol.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SndVolSSO.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spbcd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spinstall.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spoolsv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spopk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppcomapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppnp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppobjs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppsvc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sppwinob.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spreview.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spwizeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spwizres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spwizui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sqlcese30.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sqlsrv32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sqmapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\srchadmin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\srrstr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SRSTSX64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SRSWOW64.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\srvcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\srvsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sscore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ssText3d.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\stobject.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\StructuredQuery.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sud.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sxs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SyncCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\synceng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\syncui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sysclass.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sysdm.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\sysmon.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\syssetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\systemcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\t2embed.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tabcal.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TabletPC.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TabSvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\takeown.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tapisrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskbarcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskcomp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskeng.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskhost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskmgr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\taskschd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tbs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tcpipcfg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\termmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\termsrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\themecpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\themeui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\thumbcache.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\timedate.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tlscsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tquery.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TRAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tsbyuv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tsmf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TsUsbGDCoInstaller.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TSWorkspace.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\twext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\tzutil.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ucrtbase.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\UIRibbon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\UIRibbonRes.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\umb.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\umpnpmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\unimdm.tsp:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\unimdmat.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\untfs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\upnp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\UserAccountControlSettings.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\usercpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\userenv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\userinit.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\uxlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VAN.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Vault.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VBICodec.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vbisurf.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vds.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vdsbas.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vdsutil.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vfwwdm32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vpnike.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vpnikeapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vssapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\VSSVC.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\vss_ps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WavDest.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wavemsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wbemcomn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wbengine.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wcncsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wdc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Wdfres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wdiasqmmodule.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wdmaud.drv:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\webservices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wer.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\werconcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WerFaultSecure.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wevtsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WFS.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wiadefui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wiaservc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wiavideo.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wincredprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WindowsAnytimeUpgradeResults.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winhttp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winlogon.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WinSAT.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WinSATAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WinSCard.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winspool.drv:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\winsta.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wisptis.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wkscli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wksprtPS.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wkssvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wlangpui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wlanmsm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wlanpref.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wlanui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Wldap32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmdrmdev.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmdrmnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmicmiplugin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMNetMgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpdxm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpeffects.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMPEncEn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpshell.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wmpsrcwp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVCORE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Wpc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wpccpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wpdbusenum.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wpdshext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WPDShServiceObj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WPDSp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wpdwcn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wpd_ci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\ws2_32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wscapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wscript.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WSDApi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wsdchngr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wshbth.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wshirda.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wshom.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wsnmp32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wsqmcons.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WSTPager.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WUDFCoinstaller.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WUDFHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WUDFPlatform.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WUDFSvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\WUDFx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wusa.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wwanconn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wwanprotdim.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\wwansvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\xmllite.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\XpsRasterService.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\xpsservices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\zipfldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\accessibilitycpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\acppage.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ActionCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ActionCenterCPL.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\activeds.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\actxprxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\adprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\adsldp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\amstream.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\appwiz.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\asycfilt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\audiodev.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AuthFWSnapin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\autochk.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\autoconv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\autofmt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\autoplay.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\avifil32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\azroles.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\azroleui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\AzSqlExt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\basecsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\batmeter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\bitsadmin.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\bitsperf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\browcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\browseui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\bthprops.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Bubbles.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cabinet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cabview.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\calc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\capiprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cca.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cdosys.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\certenc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\CertEnroll.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\certmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\CertPolEng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\certutil.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cfgmgr32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\charmap.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\clusapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cmd.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cmstp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cngprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\comdlg32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\credui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cryptdlg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cscapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cscdll.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\cscript.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\C_ISCII.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\d3d11.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\d3d9.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dbghelp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\defaultlocationcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\desk.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\DeviceCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\DevicePairingFolder.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\devobj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\devrtl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dfrgui.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dfshim.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dhcpcsvc6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dimsroam.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\diskpart.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\diskraid.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Display.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dnsapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dnscacheugc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dnscmmc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dot3api.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dot3cfg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dot3msm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dot3ui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dpapiprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dpnaddr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dpnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dpx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\drvinst.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\drvstore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dsauth.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\DShowRdpFilter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dskquoui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dsuiext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dxdiagn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\DXPTaskRingtone.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\DxpTaskSync.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\eapphost.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\efscore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\EhStorAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\elsTrans.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\eudcedit.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Faultrep.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fde.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fdeploy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\findstr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\FirewallControlPanel.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fms.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fontext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\fphc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\framedyn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\framedynos.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ftp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\FWPUCLNT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\g711codc.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\gameux.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\hbaapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\hgcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\httpapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iasacct.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iasrad.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iasrecst.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\icardagt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\icardres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iccvid.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ifsutil.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\imagehlp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\imapi2.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\imapi2fs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\imm32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\inetmib1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\infocardapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\intl.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iologmsg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\IPHLPAPI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iprtrmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ipsmsnap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iscsicli.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iscsium.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\isoburn.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\itircl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iTVData.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\iyuv_32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDAZE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDAZEL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDBLR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDBULG.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDCZ1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDGEO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\kbdgeoqw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDGKL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDGR1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINBEN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINHIN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINKAN.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINMAR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINORI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINTAM.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDINTEL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\kbdlk41a.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDLT1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDMAORI.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDMON.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDNEPR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDPO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDSF.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDSG.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDTAJIK.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDTUF.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDTUQ.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDTURME.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDUGHR1.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\KBDUS.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\kstvtune.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Kswdmcap.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ksxbar.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\localsec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\logagent.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\logoncli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\lsmproxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\luainstall.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\main.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mcbuilder.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mciavi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mciqtz32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MediaMetadataHandler.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfc40.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfc40u.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfc42.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfc42u.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfds.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MFPlay.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfreadwrite.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\migisol.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mimefilt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mmcndmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MMDevAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mmsys.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mobsync.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Mpeg2Data.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mpg2splt.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mprapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mprddm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MSAC3ENC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msasn1.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mscms.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mscoree.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mscorier.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mscories.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msdmo.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msdrm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MSDvbNP.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msftedit.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msieftp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msimsg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msinfo32.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MSNP.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msorcl32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MsRdpWebAccess.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msrle32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msscntrs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mssph.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mssphtb.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mssrch.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mssvp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mstask.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msutb.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msvcrt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msvfw32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msvidc32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MSVidCtl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mswsock.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\msyuv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mtxclu.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mtxoci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\muifontsetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\MuiUnattend.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\mydocs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Mystify.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\NAPCRYPT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\napdsnap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\NAPHLPR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\NaturalLanguage6.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nci.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ncryptui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\net1.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netapi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netbtugc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netcenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netcfgx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netcorehc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netdiagfx.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netevent.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netfxperf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netid.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netiohlp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netiougc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netjoin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netlogon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netplwiz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netshell.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\netutils.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\networkexplorer.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\networkmap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\notepad.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nshipsec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nshwfp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\nslookup.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ntlanman.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ntprint.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ntshrui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\objsel.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ocsetapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ocsetup.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbc32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbcconf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbccp32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbccr32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbccu32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbcjt32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\odbctrac.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\oleacc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\olepro32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\olethk32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\onex.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\onexui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\OnLineIDCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\OobeFldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\OpcServices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\osk.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\packager.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pdh.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pdhui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PerfCenterCPL.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\perfmon.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\perfts.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PhotoScreensaver.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\photowiz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pifmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PkgMgr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pku2u.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pla.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\pnidui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceApi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceStatus.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\powercfg.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\powercpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PresentationHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\PresentationHostProxy.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\prevhost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\printui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\prncache.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\prnfldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\prntvpt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\propsys.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\proquota.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\provsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\psisdecd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\psisrndr.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\puiobj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\QAGENT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\qcap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\QCLIPROV.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\qdv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\QSHVHOST.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\QSVRMGMT.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Query.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\QUTIL.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RacEngn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\raschap.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rasppp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rastapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rastls.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdpcore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdpd3d.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdpencom.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdpendp_winip.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdprefdrvapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rdvidcrl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ReAgent.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ReAgentc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\regapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\remotepg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\resutils.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Ribbons.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\riched20.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\riched32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RMActivate.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_isv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp_isv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Robocopy.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\RpcRtRemote.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\rtutils.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\runonce.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\samcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\samlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sbe.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\scansetting.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\scecli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\schedcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\schtasks.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\scrrun.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SearchFilterHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SearchFolder.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SearchIndexer.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SearchProtocolHost.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\secproc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\secproc_isv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp_isv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SensorsCpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SessEnv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sethc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\setupapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\setupcln.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\setupugc.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shacct.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shdocvw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shgina.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shimgvw.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shlwapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shsetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shsvcs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shunimpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\shwebsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sisbkup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\slwga.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SmartcardCredentialProvider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SndVol.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SndVolSSO.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spbcd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spopk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sppc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sppcomapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sppinst.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spwizeng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spwizres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sqlcese30.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sqlsrv32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sqmapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\srchadmin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\srvcli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sscore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ssText3d.scr:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\stobject.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\StructuredQuery.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sud.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sxs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\SyncCenter.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\synceng.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\syncui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sysdm.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\sysmon.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\syssetup.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\systemcpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\t2embed.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\takeown.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tapisrv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\taskcomp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\taskeng.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\taskmgr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\taskschd.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tbs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tcpipcfg.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tcpmonui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\termmgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\themecpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\themeui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\thumbcache.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\timedate.cpl:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tlscsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tquery.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\TRAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tsbyuv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tsmf.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\TSWorkspace.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\twext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\tzutil.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ucrtbase.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\UIRibbon.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\UIRibbonRes.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\unimdm.tsp:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\unimdmat.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\unlodctr.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\untfs.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\upnp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\UserAccountControlSettings.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\usercpl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\userenv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\userinit.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\utildll.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\uxlib.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\VAN.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Vault.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\VBICodec.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\vbisurf.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\vdsbas.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\vfwwdm32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\vpnikeapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\vssapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\w32tm.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wavemsp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wbemcomn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wcncsvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wdc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wdmaud.drv:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wdscore.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\webio.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\webservices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wer.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WerFaultSecure.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wiadefui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wiavideo.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wimgapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wimserv.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\win32spl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wincredprovider.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\winhttp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\winmm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WinSATAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WinSCard.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\winspool.drv:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\winsta.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wkscli.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wksprtPS.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wlangpui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wlanmsm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wlanpref.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wlanui.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Wldap32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmdrmdev.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmdrmnet.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMNetMgr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpdxm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpeffects.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMPEncEn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpps.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpshell.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wmpsrcwp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVCORE.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\Wpc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WPDShServiceObj.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WPDSp.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wpdwcn.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\ws2_32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wscapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wscript.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WSDApi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wsdchngr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wshbth.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wshirda.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wshom.ocx:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wsnmp32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\WSTPager.ax:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wtsapi32.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wusa.exe:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\wvc.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\xmllite.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\XpsRasterService.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\xpsservices.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\SysWOW64\zipfldr.dll:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\1394ohci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\acpi.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\acpipmi.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\AGP440.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\agrsm64.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ataport.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\cdrom.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\Classpnp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\CompositeBus.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\dfsc.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\disk.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\Diskdump.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\dxgkrnl.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\dxgmms1.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\errdev.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\fltMgr.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\fs_rec.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\fvevol.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\FWPKCLNT.SYS:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\hdaudbus.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\hidclass.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\hidparse.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\hidusb.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\HpSAMD.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\hwpolicy.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\i8042prt.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ipfltdrv.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\IPMIDrv.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\isapnp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\kbdclass.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\kbdhid.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ks.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mouclass.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mpio.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\msahci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\msdsm.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\msiscsi.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\msrpc.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ndisuio.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ndiswan.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ndproxy.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\netbt.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\netio.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ntfs.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\nvsmu.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\NV_AGP.SYS:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\pacer.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\partmgr.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\pci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rasl2tp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\raspptp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rdbss.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rdpvideominiport.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rdpwd.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rdyboost.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\RNDISMP.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\RTKVHD64.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\sbp2port.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\scfilter.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\scsiport.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\sermouse.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\sffp_sd.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\srv.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\srv2.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\srvnet.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\storport.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\stream.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tcpip.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tcpipreg.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tdi.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tdtcp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\termdd.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tssecsrv.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\TsUsbFlt.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\tunnel.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\udfs.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\ULIAGPKX.SYS:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\umbus.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usb8023.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\USBAUDIO.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\USBCAMD2.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbccgp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbcir.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbd.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbehci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbhub.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbohci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbport.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbrpm.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\USBSTOR.SYS:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbuhci.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\usbvideo.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\vhdmp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\volmgr.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\volmgrx.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\volsnap.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\wanarp.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\Wdf01000.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\WdfLdr.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\wmiacpi.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\WUDFPf.sys:$CmdTcID [130] AlternateDataStreams: C:\Windows\system32\Drivers\WUDFRd.sys:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Desktop\FRST64.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Desktop\FRST64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\chromodosetup.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\chromodosetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\Firefox Setup Stub 45.0.2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\icedragonsetup.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\icedragonsetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\mbam-setup-2.2.1.1043.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\mbam-setup-2.2.1.1043.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\pidgin-2.10.12.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\pidgin-2.10.12.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\si_pharaoh-cleopatra_update_en_20_21.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\si_pharaoh-cleopatra_update_en_20_21.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\trillian-v5.6.0.5.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Gloria Deo\Downloads\trillian-v5.6.0.5.exe:$CmdZnID [26] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1565124662-2897034396-4106828886-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{E0B202C8-2841-4884-AFE4-C177EA83D863}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE FirewallRules: [{4170E2F0-FBC2-479E-9C44-DF1E413147C9}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe FirewallRules: [{71AAE239-C02B-469A-9174-E7797633D0B4}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe FirewallRules: [{8CC3D0F2-AB89-4000-B40D-C88C32633871}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe FirewallRules: [{D88C681B-24BB-4908-8142-07563344022F}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe FirewallRules: [{23B34DAD-A06C-4668-BC35-4422419BED68}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe FirewallRules: [{DFD78013-10E5-4549-9931-17735FC5F05A}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe FirewallRules: [{65D120EF-9B20-4B98-8DBD-361436F04A4F}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe FirewallRules: [{30DC93C2-35FA-4BD2-9F33-333A88BEEFFA}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe FirewallRules: [{66958FAC-AC6B-468B-8BE0-80EA36923E8C}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe FirewallRules: [{EA5278B5-5737-4903-924F-1CC40A84CAFB}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe FirewallRules: [{417CF2C7-485E-4D5E-A70A-FAFCA6096347}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe FirewallRules: [{DD6F1F28-3619-4D6B-8A0B-45B3897AA2A1}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe FirewallRules: [{8D35444B-7740-4380-A94B-FB2276FDEE60}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{D8FBFBE9-8CFF-4C58-BD80-0183626649A7}] => (Allow) svchost.exe FirewallRules: [{67184CBB-52F7-412B-8DEB-32517434C06F}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{6A3ABBCF-B0AC-42A2-A12A-B2E9ABD4D7E0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5C1D933F-C113-457E-B4DA-FBC605EF370B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{50C8A6A5-270E-48C4-ADF2-EA75724B9C35}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 22-04-2016 12:25:38 Windows Update 22-04-2016 13:24:14 Windows Update 22-04-2016 18:53:14 Windows Update 22-04-2016 19:46:31 Windows Update 22-04-2016 20:56:03 Windows Update 22-04-2016 21:28:33 Windows Update 22-04-2016 22:55:33 Windows Update 23-04-2016 22:27:49 Windows Update ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/22/2016 09:43:14 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: LSSrvc.exe, version: 1.18.8.1, time stamp: 0x4a8db089 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x74747454 Faulting process id: 0x64c Faulting application start time: 0xLSSrvc.exe0 Faulting application path: LSSrvc.exe1 Faulting module path: LSSrvc.exe2 Report Id: LSSrvc.exe3 Error: (04/22/2016 09:43:11 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: UMVPFSrv.exe, version: 13.31.1044.0, time stamp: 0x4f166843 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x74747454 Faulting process id: 0x404 Faulting application start time: 0xUMVPFSrv.exe0 Faulting application path: UMVPFSrv.exe1 Faulting module path: UMVPFSrv.exe2 Report Id: UMVPFSrv.exe3 Error: (04/22/2016 02:30:08 AM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003 Error: (04/21/2016 01:01:28 AM) (Source: ESENT) (EventID: 215) (User: ) Description: WinMail (2840) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. Error: (04/20/2016 08:48:16 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GeekBuddyRSP.exe, version: 4.2.7.1, time stamp: 0x56f3acfa Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0xe5c Faulting application start time: 0xGeekBuddyRSP.exe0 Faulting application path: GeekBuddyRSP.exe1 Faulting module path: GeekBuddyRSP.exe2 Report Id: GeekBuddyRSP.exe3 Error: (04/20/2016 08:48:14 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GoogleUpdate.exe, version: 1.3.29.5, time stamp: 0x5690f842 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0x13a4 Faulting application start time: 0xGoogleUpdate.exe0 Faulting application path: GoogleUpdate.exe1 Faulting module path: GoogleUpdate.exe2 Report Id: GoogleUpdate.exe3 Error: (04/20/2016 08:48:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: LSSrvc.exe, version: 1.18.8.1, time stamp: 0x4a8db089 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0x6bc Faulting application start time: 0xLSSrvc.exe0 Faulting application path: LSSrvc.exe1 Faulting module path: LSSrvc.exe2 Report Id: LSSrvc.exe3 Error: (04/20/2016 08:48:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GeekBuddyRSP.exe, version: 4.2.7.1, time stamp: 0x56f3acfa Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0x69c Faulting application start time: 0xGeekBuddyRSP.exe0 Faulting application path: GeekBuddyRSP.exe1 Faulting module path: GeekBuddyRSP.exe2 Report Id: GeekBuddyRSP.exe3 Error: (04/20/2016 08:48:08 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: UMVPFSrv.exe, version: 13.31.1044.0, time stamp: 0x4f166843 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0x434 Faulting application start time: 0xUMVPFSrv.exe0 Faulting application path: UMVPFSrv.exe1 Faulting module path: UMVPFSrv.exe2 Report Id: UMVPFSrv.exe3 Error: (04/20/2016 08:48:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: launcher_service.exe, version: 4.0.0.0, time stamp: 0x568e772b Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x742d6cc4 Faulting process id: 0x344 Faulting application start time: 0xlauncher_service.exe0 Faulting application path: launcher_service.exe1 Faulting module path: launcher_service.exe2 Report Id: launcher_service.exe3 System errors: ============= Error: (04/22/2016 10:58:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3075226). Error: (04/22/2016 09:35:37 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3075226). Error: (04/22/2016 09:06:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3075226). Error: (04/22/2016 09:02:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB2965788). Error: (04/22/2016 09:00:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3126446). Error: (04/22/2016 08:59:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Update for Windows 7 for x64-based Systems (KB2923545). Error: (04/22/2016 08:58:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3020388). Error: (04/22/2016 09:50:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Internet Explorer 8 Compatibility View List for Windows 7 for x64-based Systems (KB2598845). Error: (04/22/2016 09:49:52 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED} Error: (04/22/2016 09:49:40 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Windows Modules Installer service terminated with the following error: %%16405 ==================== Memory info =========================== Processor: AMD Athlon(tm) II X2 215 Processor Percentage of memory in use: 37% Total physical RAM: 4863.24 MB Available physical RAM: 3053.53 MB Total Virtual: 9724.66 MB Available Virtual: 7168.37 MB ==================== Drives ================================ Drive c: (HP) (Fixed) (Total:584.9 GB) (Free:536.08 GB) NTFS Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.74 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)] Drive e: (Cleopatra) (CDROM) (Total:0.55 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 596.2 GB) (Disk ID: 2EB6E298) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=584.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=10.7 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================
  6. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016 Ran by Gloria Deo (administrator) on GLORIADEO-PC (24-04-2016 14:27:50) Running from C:\Users\Gloria Deo\Desktop Loaded Profiles: Gloria Deo (Available Profiles: Gloria Deo) Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe () C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe (Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610360 2009-09-14] () HKLM\...\Run: [PC-Doctor for Windows localizer] => C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-17] (PC-Doctor, Inc.) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1610936 2016-04-06] (COMODO) HKLM-x32\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard) HKLM-x32\...\Run: [HP Remote Solution] => %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM\...\RunOnce: [PCDrProfiler] => C:\Program Files\PC-Doctor for Windows\RunProfiler.exe [89584 2009-09-17] (PC-Doctor, Inc.) HKU\S-1-5-21-1565124662-2897034396-4106828886-1001\...\MountPoints2: {c0d7c5d6-0760-11e6-bd95-806e6f6e6963} - E:\autorun.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-04-20] (Microsoft Corporation) Startup: C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2016-04-23] ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{BDA8AB6D-8468-4D36-8430-E8219CEC309D}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1565124662-2897034396-4106828886-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation) BHO-x32: Microsoft Live Search Toolbar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corp.) Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corp.) Toolbar: HKU\S-1-5-21-1565124662-2897034396-4106828886-1001 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default FF DefaultSearchEngine.US: Google FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll [2009-06-24] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-20] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-20] (Google Inc.) FF Plugin HKU\S-1-5-21-1565124662-2897034396-4106828886-1001: @hulu.com/Hulu Desktop -> C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.9.1\npHDPlg.dll [2009-10-27] (Hulu LLC) FF Extension: LastPass - C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default\extensions\support@lastpass.com [2016-04-22] FF Extension: WOT - C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-04-22] FF Extension: Xmarks - C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default\extensions\foxmarks@kei.com [2016-04-23] FF Extension: Adblock Plus - C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-22] FF Extension: Facebook Share Button - C:\Users\Gloria Deo\AppData\Roaming\Mozilla\Firefox\Profiles\7f4dx3gp.default\Extensions\{d4e0dc9c-c356-438e-afbe-dca439f4399d}.xpi [2016-04-22] Chrome: ======= CHR HomePage: Default -> hxxp://www.newadvent.org/ CHR StartupUrls: Default -> "hxxp://www.newadvent.org/" CHR DefaultSearchKeyword: Default -> lp CHR Profile: C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-20] CHR Extension: (Xmarks Bookmark Sync) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2016-04-20] CHR Extension: (Google Docs) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-20] CHR Extension: (Google Drive) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-20] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2016-04-20] CHR Extension: (YouTube) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-20] CHR Extension: (Adblock Plus) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-04-20] CHR Extension: (AddThis - Share & Bookmark (new)) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde [2016-04-24] CHR Extension: (Blur Privacy Dashboard) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjidbdiahninbecbcigapoocbkfncobc [2016-04-20] CHR Extension: (Google Sheets) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-20] CHR Extension: (Google Docs Offline) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-20] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-04-20] CHR Extension: (Google Dictionary (by Google)) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2016-04-20] CHR Extension: (AddThis) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\njcjhcfedjeaigjdoemnbgkmboooipml [2016-04-20] CHR Extension: (Chrome Web Store Payments) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-20] CHR Extension: (Gmail) - C:\Users\Gloria Deo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-20] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2304184 2016-04-23] (Comodo) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5799552 2016-04-06] (COMODO) R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2271928 2016-04-06] (COMODO) R2 HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [125440 2009-09-24] (Hewlett-Packard) [File not signed] R2 IceDragonUpdater; C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe [1985688 2016-04-22] () R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-04-21] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [31648 2016-04-06] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [823848 2016-04-06] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [56464 2016-04-06] (COMODO) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [116248 2016-04-06] (COMODO) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-04-24 14:27 - 2016-04-24 14:28 - 00013527 _____ C:\Users\Gloria Deo\Desktop\FRST.txt 2016-04-24 14:27 - 2016-04-24 14:27 - 00001776 _____ C:\Windows\system32\Drivers\fvstore.dat 2016-04-24 14:27 - 2016-04-24 14:27 - 00000000 ____D C:\FRST 2016-04-24 14:21 - 2016-04-24 14:21 - 02375680 _____ (Farbar) C:\Users\Gloria Deo\Desktop\FRST64.exe 2016-04-24 07:24 - 2016-04-24 14:26 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-04-24 07:24 - 2016-04-24 07:24 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-04-24 07:24 - 2016-04-24 07:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-04-24 07:24 - 2016-04-24 07:24 - 00003904 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2016-04-24 07:24 - 2016-04-24 07:24 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-04-24 07:24 - 2016-04-24 07:24 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-04-24 07:23 - 2016-04-24 07:23 - 00000000 ____D C:\Windows\system32\Macromed 2016-04-24 07:22 - 2016-04-24 07:24 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Adobe 2016-04-23 21:36 - 2016-04-23 21:37 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-04-23 21:35 - 2016-04-23 21:35 - 22851472 _____ (Malwarebytes ) C:\Users\Gloria Deo\Downloads\mbam-setup-2.2.1.1043.exe 2016-04-23 21:35 - 2016-04-23 21:35 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-04-23 21:35 - 2016-04-23 21:35 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-04-23 21:35 - 2016-04-23 21:35 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-04-23 21:35 - 2016-04-23 21:35 - 00001108 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-04-23 21:35 - 2016-04-23 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-04-23 21:35 - 2016-04-23 21:35 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-04-23 21:35 - 2016-04-23 21:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-04-23 20:54 - 2016-04-23 20:55 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Trillian 2016-04-23 20:54 - 2016-04-23 20:54 - 15644248 _____ C:\Users\Gloria Deo\Downloads\trillian-v5.6.0.5.exe 2016-04-23 20:54 - 2016-04-23 20:54 - 00001115 _____ C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk 2016-04-23 20:54 - 2016-04-23 20:54 - 00001085 _____ C:\Users\Gloria Deo\Desktop\Trillian.lnk 2016-04-23 20:54 - 2016-04-23 20:54 - 00000000 ____D C:\Program Files (x86)\Trillian 2016-04-23 20:53 - 2016-04-23 20:53 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk 2016-04-23 20:52 - 2016-04-23 20:52 - 09047960 _____ C:\Users\Gloria Deo\Downloads\pidgin-2.10.12.exe 2016-04-23 20:52 - 2016-04-23 20:52 - 00000000 ____D C:\Program Files (x86)\Pidgin 2016-04-23 20:43 - 2016-04-23 20:43 - 00001128 _____ C:\Users\Public\Desktop\Internet (Chromodo).lnk 2016-04-23 20:42 - 2016-04-23 20:42 - 51892512 _____ (Comodo) C:\Users\Gloria Deo\Downloads\chromodosetup.exe 2016-04-23 08:51 - 2016-04-23 08:51 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2016-04-23 08:51 - 2016-04-23 08:51 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2016-04-23 08:51 - 2016-04-23 08:51 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2016-04-23 08:51 - 2016-04-23 08:51 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2016-04-23 08:51 - 2016-04-23 08:51 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2016-04-23 08:51 - 2016-04-23 08:51 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2016-04-23 08:51 - 2015-07-11 09:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2016-04-22 22:28 - 2016-04-23 20:43 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Comodo 2016-04-22 22:28 - 2016-04-22 22:28 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\IceDragon 2016-04-22 22:27 - 2016-04-23 20:43 - 00000000 ____D C:\Program Files (x86)\Comodo 2016-04-22 22:27 - 2016-04-22 22:34 - 00001064 _____ C:\Users\Public\Desktop\Comodo IceDragon.lnk 2016-04-22 22:27 - 2016-04-22 22:27 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll 2016-04-22 22:27 - 2016-04-22 22:27 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Comodo 2016-04-22 22:26 - 2016-04-22 22:26 - 53489464 _____ (COMODO) C:\Users\Gloria Deo\Downloads\icedragonsetup.exe 2016-04-22 22:17 - 2016-04-23 21:19 - 00000000 ____D C:\Users\Gloria Deo\AppData\LocalLow\LastPass 2016-04-22 21:28 - 2016-04-22 21:28 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\GWX 2016-04-22 21:07 - 2016-04-22 21:07 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2016-04-22 21:07 - 2016-04-22 21:07 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2016-04-22 21:07 - 2016-04-22 21:07 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2016-04-22 21:06 - 2016-04-22 21:06 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2016-04-22 19:56 - 2016-04-22 19:56 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2016-04-22 19:56 - 2016-04-22 19:56 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2016-04-22 19:56 - 2016-04-22 19:56 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2016-04-22 19:56 - 2016-04-22 19:56 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2016-04-22 19:56 - 2016-04-22 19:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2016-04-22 19:56 - 2016-04-22 19:56 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2016-04-22 19:56 - 2016-04-22 19:56 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2016-04-22 19:56 - 2016-04-22 19:56 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2016-04-22 19:56 - 2016-04-22 19:56 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2016-04-22 19:56 - 2016-04-22 19:56 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2016-04-22 19:52 - 2016-04-22 19:52 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2016-04-22 19:52 - 2016-04-22 19:52 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll 2016-04-22 19:52 - 2016-04-22 19:52 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2016-04-22 19:46 - 2016-04-22 19:46 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2016-04-22 19:46 - 2016-04-22 19:46 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 03243008 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 02364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00114624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2016-04-22 19:44 - 2016-04-22 19:44 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2016-04-22 19:44 - 2016-04-22 19:44 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2016-04-22 19:44 - 2016-04-22 19:44 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2016-04-22 19:44 - 2016-04-22 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2016-04-22 19:44 - 2016-04-22 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2016-04-22 19:44 - 2015-12-16 10:38 - 00419928 _____ C:\Windows\SysWOW64\locale.nls 2016-04-22 19:44 - 2015-12-16 10:37 - 00419928 _____ C:\Windows\system32\locale.nls 2016-04-22 19:39 - 2016-04-22 19:39 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-04-22 19:39 - 2016-04-22 19:39 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-04-22 18:46 - 2016-04-23 21:17 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Mozilla 2016-04-22 18:46 - 2016-04-22 18:46 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-04-22 18:46 - 2016-04-22 18:46 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-04-22 18:46 - 2016-04-22 18:46 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Mozilla 2016-04-22 18:46 - 2016-04-22 18:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-22 18:46 - 2016-04-22 18:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-04-22 18:45 - 2016-04-22 18:45 - 00242144 _____ C:\Users\Gloria Deo\Downloads\Firefox Setup Stub 45.0.2.exe 2016-04-22 13:24 - 2016-04-22 13:24 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2016-04-22 13:24 - 2016-04-22 13:24 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2016-04-22 13:24 - 2016-04-22 13:24 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2016-04-22 13:24 - 2016-04-22 13:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2016-04-22 13:07 - 2016-04-22 13:07 - 00000000 ___SD C:\Windows\system32\CompatTel 2016-04-22 13:07 - 2016-04-22 13:07 - 00000000 ____D C:\Windows\system32\appraiser 2016-04-22 10:27 - 2016-04-04 14:14 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-04-22 10:27 - 2016-04-04 14:02 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-04-22 10:27 - 2016-04-02 09:08 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-04-22 10:27 - 2016-03-23 10:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2016-04-22 10:27 - 2016-03-17 19:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-04-22 10:27 - 2016-03-17 19:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-04-22 10:27 - 2016-03-17 19:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-04-22 10:27 - 2016-03-17 19:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-04-22 10:27 - 2016-03-17 19:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-04-22 10:27 - 2016-03-17 19:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-04-22 10:27 - 2016-03-17 18:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-04-22 10:27 - 2016-03-17 18:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-04-22 10:27 - 2016-03-17 18:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-04-22 10:27 - 2016-03-17 18:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-04-22 10:27 - 2016-03-17 18:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-04-22 10:27 - 2016-03-17 18:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-04-22 10:27 - 2016-03-17 18:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-04-22 10:27 - 2016-03-17 18:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-04-22 10:27 - 2016-03-17 18:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-04-22 10:27 - 2016-03-17 18:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-04-22 10:27 - 2016-03-17 18:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-04-22 10:27 - 2016-03-17 18:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-04-22 10:27 - 2016-03-17 18:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-04-22 10:27 - 2016-03-17 18:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-04-22 10:27 - 2016-03-17 18:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-04-22 10:27 - 2016-03-17 18:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-04-22 10:27 - 2016-03-17 18:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-04-22 10:27 - 2016-03-17 18:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-04-22 10:27 - 2016-03-17 18:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-04-22 10:27 - 2016-03-17 18:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-04-22 10:27 - 2016-03-17 18:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-04-22 10:27 - 2016-03-17 18:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-04-22 10:27 - 2016-03-17 18:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-04-22 10:27 - 2016-03-17 18:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-04-22 10:27 - 2016-03-17 18:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-04-22 10:27 - 2016-03-17 18:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-04-22 10:27 - 2016-03-17 18:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-04-22 10:27 - 2016-03-17 18:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-04-22 10:27 - 2016-03-17 18:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-04-22 10:27 - 2016-03-17 18:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-04-22 10:27 - 2016-03-17 18:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-04-22 10:27 - 2016-03-17 18:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-04-22 10:27 - 2016-03-17 18:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-04-22 10:27 - 2016-03-17 18:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-04-22 10:27 - 2016-03-17 18:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-04-22 10:27 - 2016-03-17 18:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-04-22 10:27 - 2016-03-17 18:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 17:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-04-22 10:27 - 2016-03-17 17:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-04-22 10:27 - 2016-03-17 17:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-04-22 10:27 - 2016-03-17 17:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-04-22 10:27 - 2016-03-17 17:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-04-22 10:27 - 2016-03-17 17:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-04-22 10:27 - 2016-03-17 17:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-04-22 10:27 - 2016-03-17 17:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-04-22 10:27 - 2016-03-17 17:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-04-22 10:27 - 2016-03-17 17:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-04-22 10:27 - 2016-03-17 17:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-04-22 10:27 - 2016-03-17 17:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-04-22 10:27 - 2016-03-17 17:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-04-22 10:27 - 2016-03-17 17:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-04-22 10:27 - 2016-03-17 17:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-04-22 10:27 - 2016-03-17 17:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-04-22 10:27 - 2016-03-17 17:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-04-22 10:27 - 2016-03-17 17:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 17:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 17:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 17:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-04-22 10:27 - 2016-03-17 14:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-04-22 10:27 - 2016-03-17 14:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-04-22 10:27 - 2016-03-17 14:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-04-22 10:27 - 2016-03-17 14:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-04-22 10:27 - 2016-02-03 10:07 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2016-04-22 10:27 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2016-04-22 10:27 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2016-04-22 10:27 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2016-04-22 10:27 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2016-04-22 10:27 - 2014-07-08 22:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2016-04-22 10:27 - 2014-07-08 21:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2016-04-22 10:27 - 2014-07-08 21:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2016-04-22 10:27 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2016-04-22 10:27 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2016-04-22 10:27 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2016-04-22 10:27 - 2013-11-26 04:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2016-04-22 10:27 - 2013-11-22 18:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2016-04-22 10:24 - 2016-03-30 20:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-04-22 10:24 - 2016-03-30 20:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-04-22 10:24 - 2016-03-30 20:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-04-22 10:24 - 2016-03-30 19:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-04-22 10:24 - 2016-03-30 19:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-04-22 10:24 - 2016-03-30 19:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-04-22 10:24 - 2016-03-30 19:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-04-22 10:24 - 2016-03-30 19:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-04-22 10:24 - 2015-11-10 14:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2016-04-22 10:24 - 2015-11-10 14:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2016-04-22 10:24 - 2015-11-10 14:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2016-04-22 10:24 - 2011-03-11 02:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2016-04-22 10:24 - 2011-03-11 02:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2016-04-22 10:24 - 2011-03-11 02:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2016-04-22 10:24 - 2011-03-11 02:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2016-04-22 10:24 - 2011-03-11 02:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2016-04-22 10:24 - 2011-03-11 02:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2016-04-22 10:24 - 2011-03-11 02:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2016-04-22 10:24 - 2011-03-11 01:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2016-04-22 10:24 - 2011-03-11 01:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2016-04-22 10:23 - 2016-03-31 15:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-04-22 10:23 - 2016-03-31 14:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-04-22 10:23 - 2016-03-30 20:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-04-22 10:23 - 2016-03-30 20:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-04-22 10:23 - 2016-03-30 20:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-04-22 10:23 - 2016-03-30 20:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-04-22 10:23 - 2016-03-30 20:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-04-22 10:23 - 2016-03-30 20:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-04-22 10:23 - 2016-03-30 20:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-04-22 10:23 - 2016-03-30 20:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-04-22 10:23 - 2016-03-30 20:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-04-22 10:23 - 2016-03-30 20:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-04-22 10:23 - 2016-03-30 20:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-04-22 10:23 - 2016-03-30 20:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-04-22 10:23 - 2016-03-30 20:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-04-22 10:23 - 2016-03-30 20:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-04-22 10:23 - 2016-03-30 20:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-04-22 10:23 - 2016-03-30 20:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-04-22 10:23 - 2016-03-30 20:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-04-22 10:23 - 2016-03-30 20:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-04-22 10:23 - 2016-03-30 20:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-04-22 10:23 - 2016-03-30 19:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-04-22 10:23 - 2016-03-30 19:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-04-22 10:23 - 2016-03-30 19:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-04-22 10:23 - 2016-03-30 19:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-04-22 10:23 - 2016-03-30 19:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-04-22 10:23 - 2016-03-30 19:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-04-22 10:23 - 2016-03-30 19:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-04-22 10:23 - 2016-03-30 19:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-04-22 10:23 - 2016-03-30 19:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-04-22 10:23 - 2016-03-30 19:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-04-22 10:23 - 2016-03-30 19:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-04-22 10:23 - 2016-03-30 19:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-04-22 10:23 - 2016-03-30 19:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-04-22 10:23 - 2016-03-30 19:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-04-22 10:23 - 2016-03-30 19:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-04-22 10:23 - 2016-03-30 19:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-04-22 10:23 - 2016-03-30 19:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-04-22 10:23 - 2016-03-30 19:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-04-22 10:23 - 2016-03-30 19:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-04-22 10:23 - 2016-03-30 19:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-04-22 10:23 - 2016-03-30 19:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-04-22 10:23 - 2016-03-30 19:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-04-22 10:23 - 2016-03-30 19:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-04-22 10:23 - 2016-03-30 19:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-04-22 10:23 - 2016-03-30 19:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-04-22 10:23 - 2016-03-30 19:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-04-22 10:23 - 2016-03-30 19:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-04-22 10:23 - 2016-03-30 19:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-04-22 10:23 - 2016-03-30 19:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-04-22 10:23 - 2016-03-30 19:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-04-22 10:23 - 2016-03-30 19:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-04-22 10:23 - 2016-03-30 19:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-04-22 10:23 - 2016-03-30 19:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-04-22 10:23 - 2016-03-30 19:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-04-22 10:23 - 2016-03-30 19:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-04-22 10:23 - 2016-03-30 19:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-04-22 10:23 - 2016-03-30 19:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-04-22 10:21 - 2015-12-08 17:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-04-22 10:21 - 2015-12-08 15:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-04-22 10:21 - 2015-07-30 14:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2016-04-22 10:21 - 2015-07-30 13:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2016-04-22 10:21 - 2015-02-02 23:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-04-22 10:21 - 2015-02-02 23:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-04-22 10:20 - 2015-02-03 23:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2016-04-22 10:20 - 2015-02-03 22:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2016-04-22 09:40 - 2016-04-22 09:49 - 00000000 ___SD C:\Windows\system32\GWX 2016-04-22 09:40 - 2016-04-22 09:40 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-04-22 03:56 - 2016-04-22 03:56 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2016-04-22 03:56 - 2016-04-22 03:56 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-04-22 03:52 - 2016-04-22 03:52 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2016-04-22 03:45 - 2016-04-22 03:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2016-04-22 03:45 - 2016-04-22 03:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2016-04-22 03:45 - 2016-04-22 03:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2016-04-22 03:45 - 2016-04-22 03:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2016-04-22 03:45 - 2016-04-22 03:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2016-04-22 03:45 - 2016-04-22 03:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2016-04-22 03:45 - 2016-04-22 03:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2016-04-22 03:28 - 2016-04-22 03:28 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2016-04-22 03:28 - 2016-04-22 03:28 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2016-04-22 02:28 - 2016-04-22 13:28 - 00910224 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-04-22 00:07 - 2016-04-22 00:07 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2016-04-22 00:07 - 2016-04-22 00:07 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2016-04-22 00:07 - 2016-04-22 00:07 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2016-04-22 00:07 - 2016-04-22 00:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2016-04-22 00:07 - 2016-04-22 00:07 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2016-04-22 00:07 - 2016-04-22 00:07 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2016-04-22 00:07 - 2016-04-22 00:07 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2016-04-22 00:07 - 2012-06-02 10:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2016-04-21 23:31 - 2016-04-21 23:31 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2016-04-21 23:31 - 2016-04-21 23:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2016-04-21 23:31 - 2016-04-21 23:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2016-04-21 23:07 - 2016-04-21 23:07 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2016-04-21 23:07 - 2016-04-21 23:07 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2016-04-21 23:07 - 2016-04-21 23:07 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2016-04-21 23:07 - 2016-04-21 23:07 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2016-04-21 23:07 - 2016-04-21 23:07 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2016-04-21 23:07 - 2016-04-21 23:07 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2016-04-21 23:07 - 2016-04-21 23:07 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2016-04-21 23:07 - 2016-04-21 23:07 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2016-04-21 13:02 - 2016-04-21 13:02 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2016-04-21 13:02 - 2016-04-21 13:02 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2016-04-21 13:02 - 2016-04-21 13:02 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll 2016-04-21 13:02 - 2016-04-21 13:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2016-04-21 12:59 - 2016-04-21 12:59 - 00634432 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-04-21 12:59 - 2016-04-21 12:59 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-04-21 12:59 - 2016-04-21 12:59 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2016-04-21 12:59 - 2016-04-21 12:59 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-04-21 12:59 - 2016-04-21 12:59 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2016-04-21 12:59 - 2016-04-21 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2016-04-21 12:59 - 2016-04-21 12:59 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2016-04-21 12:58 - 2016-04-21 12:58 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2016-04-21 12:58 - 2016-04-21 12:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2016-04-21 12:58 - 2016-04-21 12:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2016-04-21 12:57 - 2016-04-21 12:57 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2016-04-21 12:57 - 2016-04-21 12:57 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2016-04-21 12:57 - 2016-04-21 12:57 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2016-04-21 12:57 - 2016-04-21 12:57 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2016-04-21 12:57 - 2016-04-21 12:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2016-04-21 12:57 - 2016-04-21 12:57 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2016-04-21 12:56 - 2016-04-21 12:56 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2016-04-21 12:56 - 2016-04-21 12:56 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2016-04-21 12:56 - 2016-04-21 12:56 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2016-04-21 12:55 - 2016-04-21 12:55 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2016-04-21 12:55 - 2016-04-21 12:55 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2016-04-21 12:55 - 2016-04-21 12:55 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2016-04-21 12:55 - 2016-04-21 12:55 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2016-04-21 12:55 - 2016-04-21 12:55 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2016-04-21 12:55 - 2016-04-21 12:55 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2016-04-21 12:55 - 2016-04-21 12:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2016-04-21 12:55 - 2016-04-21 12:55 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe 2016-04-21 12:55 - 2016-04-21 12:55 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2016-04-21 12:54 - 2016-04-21 12:54 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2016-04-21 12:54 - 2016-04-21 12:54 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2016-04-21 12:54 - 2016-04-21 12:54 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-04-21 12:53 - 2016-04-21 12:53 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2016-04-21 12:53 - 2016-04-21 12:53 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-04-21 12:53 - 2016-04-21 12:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2016-04-21 12:53 - 2016-04-21 12:53 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2016-04-21 12:52 - 2016-04-21 12:52 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2016-04-21 12:52 - 2016-04-21 12:52 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2016-04-21 12:52 - 2016-04-21 12:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2016-04-21 12:52 - 2016-04-21 12:52 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2016-04-21 12:52 - 2016-04-21 12:52 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2016-04-21 12:52 - 2016-04-21 12:52 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2016-04-21 12:52 - 2016-04-21 12:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2016-04-21 12:52 - 2016-04-21 12:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2016-04-21 12:52 - 2016-04-21 12:52 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2016-04-21 12:52 - 2016-04-21 12:52 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2016-04-21 12:52 - 2012-11-28 18:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2016-04-21 12:51 - 2016-04-21 12:51 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2016-04-21 12:51 - 2016-04-21 12:51 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2016-04-21 12:51 - 2016-04-21 12:51 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2016-04-21 12:51 - 2016-04-21 12:51 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2016-04-21 12:50 - 2016-04-21 12:50 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2016-04-21 12:50 - 2016-04-21 12:50 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2016-04-21 12:50 - 2016-04-21 12:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2016-04-21 12:49 - 2016-04-21 12:49 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2016-04-21 12:49 - 2016-04-21 12:49 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-04-21 12:49 - 2016-04-21 12:49 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2016-04-21 12:49 - 2016-04-21 12:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2016-04-21 12:49 - 2016-04-21 12:49 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2016-04-21 12:49 - 2016-04-21 12:49 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2016-04-21 12:48 - 2016-04-21 12:48 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00459344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-04-21 12:48 - 2016-04-21 12:48 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00298192 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2016-04-21 12:48 - 2016-04-21 12:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2016-04-21 12:48 - 2016-04-21 12:48 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2016-04-21 12:48 - 2012-12-07 07:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2016-04-21 12:48 - 2012-12-07 07:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2016-04-21 12:48 - 2012-12-07 07:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2016-04-21 12:48 - 2012-12-07 06:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2016-04-21 12:46 - 2016-04-21 12:46 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-04-21 12:46 - 2016-04-21 12:46 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2016-04-21 12:46 - 2016-04-21 12:46 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-04-21 12:46 - 2016-04-21 12:46 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2016-04-21 12:46 - 2016-04-21 12:46 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2016-04-21 12:46 - 2016-04-21 12:46 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe 2016-04-21 12:46 - 2016-04-21 12:46 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2016-04-21 12:46 - 2016-04-21 12:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2016-04-21 12:46 - 2016-04-21 12:46 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2016-04-21 12:46 - 2016-04-21 12:46 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2016-04-21 12:46 - 2016-04-21 12:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2016-04-21 12:46 - 2016-04-21 12:46 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2016-04-21 12:45 - 2016-04-21 12:45 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2016-04-21 12:45 - 2016-04-21 12:45 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2016-04-21 12:45 - 2016-04-21 12:45 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2016-04-21 12:45 - 2016-04-21 12:45 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2016-04-21 12:45 - 2016-04-21 12:45 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2016-04-21 12:45 - 2016-04-21 12:45 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2016-04-21 12:45 - 2016-04-21 12:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2016-04-21 12:45 - 2016-04-21 12:45 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe 2016-04-21 12:45 - 2016-04-21 12:45 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2016-04-21 12:45 - 2016-04-21 12:45 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2016-04-21 12:45 - 2016-04-21 12:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2016-04-21 12:45 - 2016-04-21 12:45 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2016-04-21 12:44 - 2016-04-21 12:44 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-04-21 12:44 - 2016-04-21 12:44 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-04-21 12:44 - 2016-04-21 12:44 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2016-04-21 12:44 - 2016-04-21 12:44 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2016-04-21 12:44 - 2016-04-21 12:44 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2016-04-21 12:44 - 2016-04-21 12:44 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-04-21 12:44 - 2016-04-21 12:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2016-04-21 12:44 - 2016-04-21 12:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-04-21 12:44 - 2016-04-21 12:44 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2016-04-21 12:44 - 2016-04-21 12:44 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys 2016-04-21 12:44 - 2016-04-21 12:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2016-04-21 12:44 - 2016-04-21 12:44 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2016-04-21 12:43 - 2016-04-21 12:43 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2016-04-21 12:43 - 2016-04-21 12:43 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2016-04-21 12:43 - 2016-04-21 12:43 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2016-04-21 12:43 - 2016-04-21 12:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2016-04-21 12:42 - 2016-04-21 12:42 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2016-04-21 12:42 - 2016-04-21 12:42 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2016-04-21 12:41 - 2016-04-21 12:41 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2016-04-21 12:41 - 2016-04-21 12:41 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2016-04-21 12:41 - 2016-04-21 12:41 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2016-04-21 12:41 - 2016-04-21 12:41 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2016-04-21 12:41 - 2016-04-21 12:41 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2016-04-21 12:41 - 2016-04-21 12:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2016-04-21 12:41 - 2016-04-21 12:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-04-21 12:41 - 2016-04-21 12:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2016-04-21 12:40 - 2016-04-21 12:40 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2016-04-21 12:40 - 2016-04-21 12:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2016-04-21 12:40 - 2016-04-21 12:40 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2016-04-21 12:39 - 2016-04-21 12:39 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2016-04-21 12:39 - 2016-04-21 12:39 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2016-04-21 12:39 - 2016-04-21 12:39 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2016-04-21 12:39 - 2016-04-21 12:39 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2016-04-21 12:39 - 2016-04-21 12:39 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2016-04-21 12:39 - 2016-04-21 12:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2016-04-21 12:39 - 2016-04-21 12:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2016-04-21 12:38 - 2016-04-21 12:38 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2016-04-21 12:38 - 2016-04-21 12:38 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2016-04-21 12:38 - 2016-04-21 12:38 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2016-04-21 12:38 - 2016-04-21 12:38 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2016-04-21 12:38 - 2016-04-21 12:38 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2016-04-21 12:38 - 2016-04-21 12:38 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2016-04-21 12:38 - 2016-04-21 12:38 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2016-04-21 12:22 - 2016-04-21 12:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2016-04-21 11:53 - 2016-04-21 11:53 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2016-04-21 11:53 - 2016-04-21 11:53 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2016-04-21 11:53 - 2016-04-21 11:53 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2016-04-20 20:17 - 2016-04-20 20:17 - 00000000 ____D C:\Windows\system32\SPReview 2016-04-20 20:17 - 2016-04-20 20:17 - 00000000 ____D C:\Windows\system32\EventProviders 2016-04-20 20:15 - 2016-04-20 20:15 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2016-04-20 20:15 - 2016-04-20 20:15 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\defaultlocationcpl.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 02755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2016-04-20 20:15 - 2016-04-20 19:47 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2016-04-20 20:15 - 2016-04-20 19:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll 2016-04-20 20:15 - 2016-04-20 19:47 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 02157568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 01326592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallControlPanel.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00416768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadefui.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanui.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSATAPI.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimserv.exe 2016-04-20 20:15 - 2016-04-20 19:46 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2016-04-20 20:15 - 2016-04-20 19:46 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp 2016-04-20 20:15 - 2016-04-20 19:46 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodev.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe 2016-04-20 20:15 - 2016-04-20 19:46 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdwcn.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00166400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vdsbas.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twext.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvfw32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPHLPR.DLL 2016-04-20 20:15 - 2016-04-20 19:46 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountControlSettings.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe 2016-04-20 20:15 - 2016-04-20 19:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdmat.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NAPCRYPT.DLL 2016-04-20 20:15 - 2016-04-20 19:46 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll 2016-04-20 20:15 - 2016-04-20 19:46 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userinit.exe 2016-04-20 20:15 - 2016-04-20 19:45 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiavideo.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fphc.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\takeown.exe 2016-04-20 20:15 - 2016-04-20 19:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe 2016-04-20 20:15 - 2016-04-20 19:45 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TRAPI.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schedcli.dll 2016-04-20 20:15 - 2016-04-20 19:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe 2016-04-20 20:14 - 2016-04-20 19:47 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll 2016-04-20 20:14 - 2016-04-20 19:47 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 02504192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 02494464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 02146304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 02130944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkmap.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 01750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pnidui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 01661440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\networkexplorer.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 01644032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 01040384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00933376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vault.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00854016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlsrv32.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00744448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00630784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PerfCenterCPL.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\main.cpl 2016-04-20 20:14 - 2016-04-20 19:46 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercpl.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shwebsvc.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00413696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr 2016-04-20 20:14 - 2016-04-20 19:46 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnfldr.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxs.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00352256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00346112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshipsec.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3ui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysdm.cpl 2016-04-20 20:14 - 2016-04-20 19:46 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2016-04-20 20:14 - 2016-04-20 19:46 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00312168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCEWMDRMNDBootstrap.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqlcese30.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ssText3d.scr 2016-04-20 20:14 - 2016-04-20 19:46 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eudcedit.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00276480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskraid.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MediaMetadataHandler.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAC3ENC.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdiagfx.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mystify.scr 2016-04-20 20:14 - 2016-04-20 19:46 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ribbons.scr 2016-04-20 20:14 - 2016-04-20 19:46 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnLineIDCpl.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstask.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetup.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquoui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpsrcwp.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrad.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netjoin.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syncui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remotepg.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00144768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2016-04-20 20:14 - 2016-04-20 19:46 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\net1.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fde.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxlib.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prncache.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscmmc.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IPHLPAPI.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 00098816 _____ (Microsoft) C:\Windows\SysWOW64\Robocopy.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logagent.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\isoburn.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kstvtune.ax 2016-04-20 20:14 - 2016-04-20 19:46 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3cfg.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QUTIL.DLL 2016-04-20 20:14 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nci.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasacct.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptui.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpd3d.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wtsapi32.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\utildll.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\proquota.exe 2016-04-20 20:14 - 2016-04-20 19:46 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vpnikeapi.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lsmproxy.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sisbkup.dll 2016-04-20 20:14 - 2016-04-20 19:46 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime 2016-04-20 20:14 - 2016-04-20 19:45 - 00283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdv.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdscore.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpps.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mydocs.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe 2016-04-20 20:14 - 2016-04-20 19:45 - 00128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EhStorAPI.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Kswdmcap.ax 2016-04-20 20:14 - 2016-04-20 19:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mobsync.exe 2016-04-20 20:14 - 2016-04-20 19:45 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppinst.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MuiUnattend.exe 2016-04-20 20:14 - 2016-04-20 19:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\amstream.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\napdsnap.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertPolEng.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findstr.exe 2016-04-20 20:14 - 2016-04-20 19:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vfwwdm32.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetmib1.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsnmp32.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksxbar.ax 2016-04-20 20:14 - 2016-04-20 19:45 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\luainstall.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz32.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimgvw.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pifmgr.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbisurf.ax 2016-04-20 20:14 - 2016-04-20 19:45 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2016-04-20 20:14 - 2016-04-20 19:45 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netutils.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elsTrans.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shgina.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshirda.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_ISCII.DLL 2016-04-20 20:14 - 2016-04-20 19:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shunimpl.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched32.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizres.dll 2016-04-20 20:14 - 2016-04-20 19:45 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll 2016-04-20 20:14 - 2010-11-04 22:20 - 00105559 _____ C:\Windows\SysWOW64\RacRules.xml 2016-04-20 20:14 - 2009-06-10 17:39 - 00001041 _____ C:\Windows\SysWOW64\tcpbidi.xml 2016-04-20 20:13 - 2016-04-20 19:47 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroles.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe 2016-04-20 20:13 - 2016-04-20 19:47 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2016-04-20 20:13 - 2016-04-20 19:47 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 03727872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 02983424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 02202624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsCpl.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01624064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPEncEn.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01508864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxpTaskSync.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01227776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01111552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onexui.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 01003008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMNetMgr.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00905216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl 2016-04-20 20:13 - 2016-04-20 19:46 - 00878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Bubbles.scr 2016-04-20 20:13 - 2016-04-20 19:46 - 00859648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00776192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\batmeter.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl 2016-04-20 20:13 - 2016-04-20 19:46 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsuiext.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00679424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuxiliaryDisplayCpl.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00658944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00649216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl 2016-04-20 20:13 - 2016-04-20 19:46 - 00638976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmdev.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00429056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\localsec.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2016-04-20 20:13 - 2016-04-20 19:46 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\termmgr.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl 2016-04-20 20:13 - 2016-04-20 19:46 - 00328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpx.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scansetting.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wavemsp.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00222208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iTVData.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00211456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairingFolder.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax 2016-04-20 20:13 - 2016-04-20 19:46 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsldp.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsadmin.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scecli.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv 2016-04-20 20:13 - 2016-04-20 19:46 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QAGENT.DLL 2016-04-20 20:13 - 2016-04-20 19:46 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\SysWOW64\fms.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olethk32.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax 2016-04-20 20:13 - 2016-04-20 19:46 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSTPager.ax 2016-04-20 20:13 - 2016-04-20 19:46 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samcli.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzutil.exe 2016-04-20 20:13 - 2016-04-20 19:46 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mimefilt.dll 2016-04-20 20:13 - 2016-04-20 19:46 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME 2016-04-20 20:13 - 2016-04-20 19:45 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmnet.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax 2016-04-20 20:13 - 2016-04-20 19:45 - 00144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsicli.exe 2016-04-20 20:13 - 2016-04-20 19:45 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\desk.cpl 2016-04-20 20:13 - 2016-04-20 19:45 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasrecst.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3msm.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmstp.exe 2016-04-20 20:13 - 2016-04-20 19:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabinet.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QCLIPROV.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cca.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax 2016-04-20 20:13 - 2016-04-20 19:45 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\g711codc.ax 2016-04-20 20:13 - 2016-04-20 19:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unlodctr.exe 2016-04-20 20:13 - 2016-04-20 19:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdmo.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsauth.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzSqlExt.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe 2016-04-20 20:13 - 2016-04-20 19:45 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2016-04-20 20:13 - 2016-04-20 19:45 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdprefdrvapi.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bitsperf.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\syssetup.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browseui.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUQ.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTUF.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSG.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdlk41a.dll 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGR1.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGKL.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDCZ1.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDSF.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDPO.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDNEPR.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTAM.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINORI.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAR.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINKAN.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINHIN.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBEN.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUS.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDUGHR1.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTURME.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAJIK.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMON.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDMAORI.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDLT1.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTEL.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDGEO.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBULG.DLL 2016-04-20 20:13 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBLR.DLL 2016-04-20 20:13 - 2016-04-20 19:36 - 00363008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wbemcomn.dll 2016-04-20 20:11 - 2016-04-20 19:47 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2016-04-20 20:11 - 2016-04-20 19:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2016-04-20 20:11 - 2016-04-20 19:47 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2016-04-20 20:11 - 2016-04-20 19:47 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2016-04-20 20:11 - 2016-04-20 19:47 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2016-04-20 20:11 - 2016-04-20 19:46 - 00934912 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2016-04-20 20:11 - 2016-04-20 19:46 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2016-04-20 20:11 - 2016-04-20 19:46 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2016-04-20 20:11 - 2016-04-20 19:46 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2016-04-20 20:11 - 2016-04-20 19:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2016-04-20 20:11 - 2016-04-20 19:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys 2016-04-20 20:10 - 2016-04-20 20:10 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-04-20 20:10 - 2016-04-20 19:48 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2016-04-20 20:10 - 2016-04-20 19:47 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2016-04-20 20:10 - 2016-04-20 19:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2016-04-20 20:10 - 2016-04-20 19:47 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2016-04-20 20:10 - 2016-04-20 19:47 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2016-04-20 20:10 - 2016-04-20 19:47 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 03524608 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 01264640 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2016-04-20 20:10 - 2016-04-20 19:46 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2016-04-20 20:10 - 2016-04-20 19:46 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2016-04-20 20:10 - 2016-04-20 19:46 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2016-04-20 20:10 - 2016-04-20 19:46 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2016-04-20 20:10 - 2016-04-20 19:46 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2016-04-20 20:10 - 2016-04-20 19:46 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2016-04-20 20:10 - 2016-04-20 19:46 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2016-04-20 20:10 - 2016-04-20 19:46 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2016-04-20 20:10 - 2016-04-20 19:46 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2016-04-20 20:10 - 2016-04-20 19:46 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2016-04-20 20:10 - 2016-04-20 19:46 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2016-04-20 20:10 - 2016-04-20 19:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2016-04-20 20:10 - 2016-04-20 19:46 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2016-04-20 20:10 - 2016-04-20 19:46 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2016-04-20 20:10 - 2016-04-20 19:46 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2016-04-20 20:10 - 2016-04-20 19:45 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2016-04-20 20:10 - 2016-04-20 19:45 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2016-04-20 20:10 - 2016-04-20 19:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2016-04-20 20:10 - 2016-04-20 19:45 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2016-04-20 20:10 - 2016-04-20 19:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2016-04-20 20:10 - 2016-04-20 19:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2016-04-20 20:10 - 2016-04-20 19:45 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2016-04-20 20:10 - 2016-04-20 19:45 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2016-04-20 20:10 - 2016-04-20 19:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2016-04-20 20:10 - 2016-04-20 19:45 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2016-04-20 20:10 - 2016-04-20 19:45 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2016-04-20 20:10 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2016-04-20 20:10 - 2016-04-20 19:36 - 00529408 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2016-04-20 20:10 - 2010-11-09 21:48 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml 2016-04-20 20:09 - 2016-04-20 19:47 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2016-04-20 20:09 - 2016-04-20 19:47 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2016-04-20 20:09 - 2016-04-20 19:47 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2016-04-20 20:09 - 2016-04-20 19:47 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2016-04-20 20:09 - 2016-04-20 19:47 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2016-04-20 20:09 - 2016-04-20 19:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2016-04-20 20:09 - 2016-04-20 19:47 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2016-04-20 20:09 - 2016-04-20 19:47 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2016-04-20 20:09 - 2016-04-20 19:47 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2016-04-20 20:09 - 2016-04-20 19:47 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2016-04-20 20:09 - 2016-04-20 19:47 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2016-04-20 20:09 - 2016-04-20 19:46 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2016-04-20 20:09 - 2016-04-20 19:46 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00474112 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2016-04-20 20:09 - 2016-04-20 19:46 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2016-04-20 20:09 - 2016-04-20 19:46 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00373248 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2016-04-20 20:09 - 2016-04-20 19:46 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2016-04-20 20:09 - 2016-04-20 19:46 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2016-04-20 20:09 - 2016-04-20 19:46 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2016-04-20 20:09 - 2016-04-20 19:46 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2016-04-20 20:09 - 2016-04-20 19:46 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2016-04-20 20:09 - 2016-04-20 19:46 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00128000 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2016-04-20 20:09 - 2016-04-20 19:46 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspptp.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2016-04-20 20:09 - 2016-04-20 19:46 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2016-04-20 20:09 - 2016-04-20 19:46 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipfltdrv.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2016-04-20 20:09 - 2016-04-20 19:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2016-04-20 20:09 - 2016-04-20 19:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2016-04-20 20:09 - 2016-04-20 19:46 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2016-04-20 20:09 - 2016-04-20 19:46 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2016-04-20 20:09 - 2016-04-20 19:45 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys 2016-04-20 20:09 - 2016-04-20 19:45 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2016-04-20 20:09 - 2016-04-20 19:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2016-04-20 20:09 - 2016-04-20 19:45 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2016-04-20 20:09 - 2016-04-20 19:45 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2016-04-20 20:09 - 2016-04-20 19:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2016-04-20 20:09 - 2016-04-20 19:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2016-04-20 20:09 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2016-04-20 20:09 - 2010-11-04 22:20 - 00347904 _____ C:\Windows\system32\systemsf.ebd 2016-04-20 20:09 - 2010-11-04 22:20 - 00105559 _____ C:\Windows\system32\RacRules.xml 2016-04-20 20:08 - 2016-04-20 19:47 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2016-04-20 20:08 - 2016-04-20 19:47 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2016-04-20 20:08 - 2016-04-20 19:47 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2016-04-20 20:08 - 2016-04-20 19:47 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2016-04-20 20:08 - 2016-04-20 19:47 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2016-04-20 20:08 - 2016-04-20 19:47 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2016-04-20 20:08 - 2016-04-20 19:47 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2016-04-20 20:08 - 2016-04-20 19:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 03745792 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 01457664 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00899584 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2016-04-20 20:08 - 2016-04-20 19:46 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00763904 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2016-04-20 20:08 - 2016-04-20 19:46 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2016-04-20 20:08 - 2016-04-20 19:46 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00433512 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2016-04-20 20:08 - 2016-04-20 19:46 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2016-04-20 20:08 - 2016-04-20 19:46 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2016-04-20 20:08 - 2016-04-20 19:46 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2016-04-20 20:08 - 2016-04-20 19:46 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00116224 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys 2016-04-20 20:08 - 2016-04-20 19:46 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2016-04-20 20:08 - 2016-04-20 19:46 - 00071168 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2016-04-20 20:08 - 2016-04-20 19:46 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2016-04-20 20:08 - 2016-04-20 19:46 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2016-04-20 20:08 - 2016-04-20 19:46 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2016-04-20 20:08 - 2016-04-20 19:45 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2016-04-20 20:08 - 2016-04-20 19:45 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\FXSUNATD.exe 2016-04-20 20:08 - 2016-04-20 19:45 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\BWUnpairElevated.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2016-04-20 20:08 - 2016-04-20 19:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll 2016-04-20 20:08 - 2016-04-20 19:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2016-04-20 20:07 - 2016-04-20 19:47 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2016-04-20 20:07 - 2016-04-20 19:46 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2016-04-20 20:07 - 2016-04-20 19:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys 2016-04-20 20:06 - 2016-04-20 20:06 - 00329488 _____ C:\Users\Gloria Deo\Downloads\si_pharaoh-cleopatra_update_en_20_21.exe 2016-04-20 19:51 - 2016-04-20 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impressions Games 2016-04-20 19:48 - 2016-04-20 20:02 - 00000572 _____ C:\Windows\SIERRA.INI 2016-04-20 19:48 - 2016-04-20 19:57 - 00304128 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2016-04-20 19:48 - 2016-04-20 19:48 - 00000000 ____D C:\SIERRA 2016-04-20 19:48 - 2016-04-20 19:48 - 00000000 ____D C:\Program Files (x86)\Sierra On-Line 2016-04-20 19:14 - 2016-04-20 19:14 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk 2016-04-20 19:14 - 2016-04-20 19:14 - 00000000 ____D C:\Windows\System32\Tasks\COMODO 2016-04-20 19:13 - 2016-04-24 14:28 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat 2016-04-20 19:12 - 2016-04-23 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO 2016-04-20 19:12 - 2016-04-21 01:05 - 00000000 ____D C:\Program Files\COMODO 2016-04-20 19:11 - 2016-04-20 19:12 - 00000000 ____D C:\ProgramData\Comodo 2016-04-20 19:11 - 2016-04-20 19:11 - 00000000 ____D C:\ProgramData\Shared Space 2016-04-20 19:07 - 2016-04-20 19:09 - 222776824 _____ (COMODO) C:\Users\Gloria Deo\Downloads\cispremium_installer_6100_08.exe 2016-04-20 18:59 - 2016-04-20 18:59 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0 2016-04-20 18:54 - 2016-04-20 18:55 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Microsoft Games 2016-04-20 18:50 - 2016-04-20 18:50 - 00000000 ____D C:\Windows\Hewlett-Packard 2016-04-20 18:48 - 2016-04-20 18:52 - 00000000 ____D C:\Windows\system32\MRT 2016-04-20 18:48 - 2016-04-20 18:52 - 00000000 ____D C:\Program Files\Common Files\logishrd 2016-04-20 18:48 - 2016-04-20 18:48 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-04-20 18:47 - 2016-04-20 18:50 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\HpUpdate 2016-04-20 18:47 - 2016-04-06 10:18 - 00453280 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-04-20 18:46 - 2016-04-22 22:15 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-04-20 18:46 - 2016-04-22 22:15 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-04-20 18:45 - 2016-04-24 13:50 - 00000906 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-04-20 18:45 - 2016-04-24 07:17 - 00000902 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-04-20 18:45 - 2016-04-22 12:23 - 00080320 _____ C:\Users\Gloria Deo\AppData\Local\GDIPFONTCACHEV1.DAT 2016-04-20 18:45 - 2016-04-21 01:10 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Google 2016-04-20 18:45 - 2016-04-20 18:46 - 00000000 ____D C:\Program Files (x86)\Google 2016-04-20 18:45 - 2016-04-20 18:45 - 00003902 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-04-20 18:45 - 2016-04-20 18:45 - 00003650 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-04-20 18:45 - 2016-04-20 18:45 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Deployment 2016-04-20 18:45 - 2016-04-20 18:45 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Apps\2.0 2016-04-20 18:43 - 2016-04-20 18:43 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Adobe 2016-04-20 18:37 - 2016-04-20 18:37 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Hewlett-Packard 2016-04-20 18:36 - 2016-04-22 12:23 - 00001419 _____ C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-04-20 18:36 - 2016-04-20 18:37 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\Hewlett-Packard 2016-04-20 18:34 - 2016-04-20 18:37 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\VirtualStore 2016-04-20 18:34 - 2016-04-20 18:36 - 00000000 ____D C:\Users\Gloria Deo 2016-04-20 18:34 - 2016-04-20 18:34 - 00000020 ___SH C:\Users\Gloria Deo\ntuser.ini 2016-04-20 18:34 - 2016-04-20 18:34 - 00000000 _SHDL C:\Users\Gloria Deo\My Documents 2016-04-20 18:34 - 2016-04-20 18:34 - 00000000 _SHDL C:\Users\Gloria Deo\Documents\My Videos 2016-04-20 18:34 - 2016-04-20 18:34 - 00000000 _SHDL C:\Users\Gloria Deo\Documents\My Pictures 2016-04-20 18:34 - 2016-04-20 18:34 - 00000000 _SHDL C:\Users\Gloria Deo\Documents\My Music 2016-04-20 18:34 - 2011-10-27 04:46 - 00001976 _____ C:\Users\Gloria Deo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hulu Desktop.lnk 2016-04-20 18:34 - 2011-10-27 04:46 - 00000000 ____D C:\Users\Gloria Deo\AppData\Local\HuluDesktop 2016-04-20 18:34 - 2009-07-14 03:44 - 00000000 ____D C:\Users\Gloria Deo\AppData\Roaming\Media Center Programs 2016-04-06 13:19 - 2016-04-06 13:19 - 00116248 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys 2016-04-06 13:19 - 2016-04-06 13:19 - 00056464 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys 2016-04-06 13:18 - 2016-04-06 13:18 - 00823848 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys 2016-04-06 13:18 - 2016-04-06 13:18 - 00031648 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys 2016-04-06 13:17 - 2016-04-06 13:17 - 00051800 _____ (COMODO) C:\Windows\system32\cmdcsr.dll 2016-04-06 13:16 - 2016-04-06 13:16 - 00596232 _____ (COMODO) C:\Windows\system32\guard64.dll 2016-04-06 13:16 - 2016-04-06 13:16 - 00461648 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll 2016-04-06 13:14 - 2016-04-06 13:14 - 00365752 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll 2016-04-06 13:14 - 2016-04-06 13:14 - 00051896 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll 2016-04-06 13:12 - 2016-04-06 13:12 - 00296120 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll 2016-04-06 13:11 - 2016-04-06 13:11 - 00046776 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-04-24 12:25 - 2009-07-14 00:45 - 00015984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-04-24 12:25 - 2009-07-14 00:45 - 00015984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-04-24 07:26 - 2009-07-14 01:13 - 00918446 _____ C:\Windows\system32\PerfStringBackup.INI 2016-04-24 07:26 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf 2016-04-24 07:17 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-04-23 12:25 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache 2016-04-23 08:44 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\AppCompat 2016-04-22 21:14 - 2009-07-14 00:45 - 00322248 _____ C:\Windows\system32\FNTCACHE.DAT 2016-04-22 20:38 - 2011-10-27 04:43 - 00000000 ____D C:\ProgramData\NVIDIA 2016-04-22 20:36 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2016-04-22 19:53 - 2011-10-27 04:33 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2016-04-22 19:53 - 2010-09-07 11:27 - 02620008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 02484072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2016-04-22 19:53 - 2010-09-07 11:27 - 02045032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 01215592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 01146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2016-04-22 19:53 - 2010-09-07 11:27 - 00540264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2016-04-22 19:53 - 2010-09-07 11:27 - 00081000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2016-04-22 19:53 - 2010-09-02 23:47 - 00338336 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2016-04-22 19:53 - 2010-07-22 08:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2016-04-22 19:53 - 2009-12-15 10:26 - 00372936 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2016-04-22 19:53 - 2009-12-15 10:26 - 00201928 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2016-04-22 19:53 - 2009-12-15 10:26 - 00099016 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2016-04-22 19:53 - 2009-12-15 10:26 - 00076488 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2016-04-22 19:53 - 2009-12-11 01:55 - 00307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2016-04-22 19:53 - 2009-12-11 01:55 - 00307920 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2016-04-22 19:53 - 2009-11-24 01:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2016-04-22 19:53 - 2009-11-24 01:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2016-04-22 19:53 - 2009-11-17 10:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2016-04-22 19:48 - 2011-10-27 04:33 - 00000000 ____D C:\Program Files\LSI SoftModem 2016-04-22 19:48 - 2010-01-26 17:52 - 01212416 _____ (LSI Corporation) C:\Windows\system32\Drivers\agrsm64.sys 2016-04-22 19:48 - 2009-12-03 20:28 - 00064000 _____ (LSI Corporation) C:\Windows\agrsmdel.exe 2016-04-22 19:48 - 2009-12-03 20:28 - 00027648 _____ (LSI Corporation) C:\Windows\system32\agrsco64.dll 2016-04-22 19:48 - 2009-12-03 20:27 - 00042496 _____ (LSI Corporation) C:\Windows\agrdel64.exe 2016-04-22 19:47 - 2009-07-21 07:48 - 00539680 _____ (NVIDIA Corporation) C:\Windows\system32\nvusmu.exe 2016-04-22 19:47 - 2009-07-21 07:48 - 00167936 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL 2016-04-22 19:47 - 2009-06-29 07:36 - 00028704 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys 2016-04-22 09:41 - 2009-07-14 03:45 - 00000000 ____D C:\Program Files\Windows Journal 2016-04-22 09:41 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2016-04-22 09:41 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\Dism 2016-04-22 09:41 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2016-04-22 09:41 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\System 2016-04-22 09:40 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\Windows Defender 2016-04-22 09:40 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2016-04-22 09:40 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\tracing 2016-04-21 12:44 - 2009-07-13 20:22 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2016-04-20 22:27 - 2009-07-14 01:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2016-04-20 21:32 - 2011-10-27 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services 2016-04-20 21:32 - 2011-10-27 05:06 - 00000000 ___RD C:\Program Files (x86)\Online Services 2016-04-20 21:32 - 2011-10-27 04:53 - 00000000 ____D C:\ProgramData\Hewlett-Packard 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\DVD Maker 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-04-20 20:47 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2016-04-20 20:47 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\servicing 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\manifeststore 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\SysWOW64\AdvancedInstallers 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\Setup 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\oobe 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\migwiz 2016-04-20 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\manifeststore 2016-04-20 20:46 - 2009-07-13 20:00 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys 2016-04-20 20:46 - 2009-07-13 19:38 - 00122960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NV_AGP.SYS 2016-04-20 20:46 - 2009-07-13 19:38 - 00064592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ULIAGPKX.SYS 2016-04-20 20:46 - 2009-07-13 19:38 - 00061008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AGP440.sys 2016-04-20 20:46 - 2009-07-13 19:31 - 00020544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\isapnp.sys 2016-04-20 20:46 - 2009-07-13 19:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmiacpi.sys 2016-04-20 20:46 - 2009-07-13 19:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\errdev.sys 2016-04-20 20:46 - 2009-07-13 19:19 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys 2016-04-20 20:46 - 2009-07-13 19:19 - 00050768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys 2016-04-20 20:46 - 2009-07-13 19:19 - 00049216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys 2016-04-20 20:23 - 2009-07-13 22:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2016-04-20 20:23 - 2009-07-13 22:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2016-04-20 18:50 - 2011-10-27 04:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2016-04-20 18:50 - 2011-10-27 04:41 - 00000000 ____D C:\Program Files (x86)\hp 2016-04-20 18:40 - 2011-10-27 05:14 - 00000000 ____D C:\ProgramData\Norton 2016-04-20 18:34 - 2011-10-27 05:30 - 00000000 ___HD C:\hp 2016-04-20 18:33 - 2009-07-13 23:20 - 00000000 __RHD C:\Users\Public\Libraries Some files in TEMP: ==================== C:\Users\Gloria Deo\AppData\Local\Temp\chromodo_restart_helper.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-04-21 14:43 ==================== End of FRST.txt ============================
  7. Hey everyone. I think I have a malware infection on my computer. A few weeks ago Facebook told me I had a malware infection on my computer. Some of the symptoms I was experiencing were problems with Mozilla Firefox locking up due to unresponsive scripts on numerous sites. I also had problems with the thing popping up at the bottom of the screen to find a word when I did not intentionally bring it up. There was another issue as well but I don't remember what it was. All of the issues were with Mozilla Firefox. I did post on another forum for help and they had me do the Farbar Recovery Tool and they found a few issues which they fixed but the problem with unresponsive scripts in Mozilla Firefox continues. That said, I think the issue might have something to do with the extension I use called Xmarks but I am not sure. I will not use Firefox again until I can get the unresponsive scripts and the Xmarks issue fixed. Firefox always locks up when synchronizing my bookmarks using Xmarks. Anyway, I will post both log files for the Farbar Recovery Tool in the next two replies so that there is one log per reply.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.