Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016 Ran by [removed] (administrator) on DESKTOP-2M6JV2N (16-02-2016 20:35:13) Running from C:\Users\[removed]\Downloads [removed] Platform: Windows 10 Home Version 1511 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation) C:\Windows\syswow64\IntelCpHeciSvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe () C:\Program Files\update\UpdateAgent.exe (Lenovo) C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe (Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.5.471.0\McCSPServiceHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-30] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-30] (Realtek Semiconductor) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14054104 2015-06-26] (Realtek Semiconductor) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-10] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink) HKLM-x32\...\Run: [Lenovo Silver Silk Wireless Keyboard] => C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe [1742336 2013-08-14] (Lenovo) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [719272 2015-04-02] (McAfee, Inc.) HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink Corp.) HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\...\RunOnce: [Uninstall C:\Users\me\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\me\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\...\RunOnce: [Uninstall C:\Users\me\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\me\AppData\Local\Microsoft\OneDrive\17.3.5892.0626" ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0abac4ab-36f4-4e5d-b562-15dfb2217d34}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo15.msn.com/?pc=LCTE HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com HKU\S-1-5-21-4285912779-1882838953-3759274200-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll [2015-07-16] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-07-16] (McAfee, Inc.) FireFox: ======== FF Plugin: @mcafee.com/MSC,version=10 -> C:\PROGRA~1\mcafee\msc\npMcSnFFPl64.dll [2015-07-16] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\PROGRA~2\McAfee\msc\npMcSnFFPl.dll [2015-07-16] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-05-10] (Adobe Systems Inc.) FF HKLM-x32\...\Thunderbird\Extensions: [[removed]] - C:\Program Files\McAfee\MSK FF Extension: No Name - C:\Program Files\McAfee\MSK [2016-02-16] [not signed] Chrome: ======= CHR Profile: C:\Users\me\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-14] CHR Extension: (Google Docs) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-14] CHR Extension: (Google Drive) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-14] CHR Extension: (YouTube) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-14] CHR Extension: (Google Search) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-14] CHR Extension: (Google Sheets) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-14] CHR Extension: (Google Docs Offline) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-15] CHR Extension: (Chrome Web Store Payments) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-14] CHR Extension: (Gmail) - C:\Users\me\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-14] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [288768 2015-12-04] (Lenovo) [File not signed] R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation) S2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [150256 2015-07-13] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2016-02-06] (Intel Corporation) S2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [33696 2015-08-14] () S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed] R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-06-24] (Intel Corporation) R2 LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [24312 2015-12-04] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-08-07] (Lenovo) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [754792 2015-07-16] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.) R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.471.0\McCSPServiceHost.exe [207344 2015-04-27] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [612688 2015-04-09] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-06-29] (McAfee, Inc.) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-07-06] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-06-29] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] () R2 UpdateAgentService; C:\Program Files\update\UpdateAgent.exe [226216 2015-12-04] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation) S2 0081691455476483mcinstcleanup; C:\WINDOWS\TEMP\008169~1.EXE -cleanup -nolog [X] ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 cfwids; C:\Windows\system32\drivers\cfwids.sys [77536 2015-07-02] (McAfee, Inc.) R0 cm_km; C:\Windows\System32\drivers\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [67608 2015-12-04] (Windows (R) Win 7 DDK provider) [File not signed] R0 FBFsmon; C:\Windows\System32\DRIVERS\FBFsmon.sys [39448 2015-12-04] (Windows (R) Win 7 DDK provider) [File not signed] S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.) R1 klhk; C:\Windows\System32\drivers\klhk.sys [237952 2015-12-19] (AO Kaspersky Lab) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [129312 2016-02-06] (Intel Corporation) R2 mfeaack; C:\Windows\system32\drivers\mfeaack.sys [412440 2015-07-02] (McAfee, Inc.) R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-07-02] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 mfefirek; C:\Windows\system32\drivers\mfefirek.sys [496888 2015-07-02] (McAfee, Inc.) R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-07-02] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [492000 2015-05-27] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2015-05-27] (McAfee, Inc.) R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-07-02] (McAfee, Inc.) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-22] (Realtek Semiconductor Corp.) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek ) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2016-02-06] (Realtek Semiconductor Corporation) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ========================== Drivers MD5 ======================= C:\Windows\System32\drivers\urschipidea.sys 2410A0C20D21A25E6C01979FA886BE90 C:\Windows\System32\drivers\urscx01000.sys 6E59CE43B6BA5AA1ADCF36A4DBBB92BB C:\Windows\System32\drivers\urssynopsys.sys E8A59FA109A22FC07E44BDFCC9727DBD C:\Windows\system32\drivers\usbaudio.sys 9F9D5E2086BB9AEEA96E9BF73B7B2D32 C:\Windows\System32\drivers\usbccgp.sys D8A44550ECE102B6443F5D54DCE7DAB3 C:\Windows\System32\drivers\usbcir.sys 66B3D22DAB5312FF238ABF5C6D9F8FAB C:\Windows\System32\drivers\usbehci.sys 3E4F20DB902D2E2914F3FF3DB9772200 C:\Windows\System32\drivers\usbhub.sys 41F7F00D76904416EF1F9EFA1A4C37A2 C:\Windows\System32\drivers\UsbHub3.sys 12A0B486EA13DF46C27B90CC2CE92FE5 C:\Windows\System32\drivers\usbohci.sys DAB35CCA86F5FBE77D870A40089BC4A1 C:\Windows\System32\drivers\usbprint.sys 21162F65C7756AAECAEBED9E67D0A5FE C:\Windows\System32\drivers\usbser.sys CA6369870F91F3D367D26278E0AD0DDF C:\Windows\System32\drivers\USBSTOR.SYS 37C2CD8587BF7F785381EB7B26916B52 C:\Windows\System32\drivers\usbuhci.sys 8B3E458A8851F9A3B2109B1680EE1159 C:\Windows\System32\Drivers\usbvideo.sys 4B13B61CBB9CC3CB373C60B930D648F5 C:\Windows\System32\drivers\USBXHCI.SYS 325727F01F03C504CF788618A13DC266 C:\Windows\System32\drivers\vdrvroot.sys E1BE37312785A71862516F66B3FD24CE C:\Windows\System32\drivers\VerifierExt.sys E42C0F2850735FF9D908B9DB581E6314 C:\Windows\System32\drivers\vhdmp.sys EC15FD6A28757793E2DA394CD94ABD52 C:\Windows\System32\drivers\vhf.sys D0C9632C350F46786643A069251BC249 C:\Windows\System32\drivers\vmbus.sys E886CB75DA2B6EB35469EF10135624C7 C:\Windows\System32\drivers\VMBusHID.sys 46D2EC27820EC0F798F85821E53C2942 C:\Windows\System32\drivers\volmgr.sys B9265F47E7A354BAAA0AF5CBA3F8F7CE C:\Windows\System32\drivers\volmgrx.sys BEE9C8B72AB752B794F69C2B9B3678AA C:\Windows\System32\drivers\volsnap.sys E1F91A727A04C9F8199D04FF3BBBF63C C:\Windows\System32\drivers\vpci.sys F7B1B1101271E31F43CC76E890704F51 C:\Windows\System32\drivers\vsmraid.sys D48ED0A08BD2FD25A833E6AC99623091 C:\Windows\System32\drivers\vstxraid.sys 6990D4AFDF545669D4E6C232F26DE1FB C:\Windows\System32\drivers\vwifibus.sys 1EE11F0508C58EF081F4176E66D6970B C:\Windows\System32\drivers\vwififlt.sys 938E4EF58E42D252B742B0E243011B90 C:\Windows\System32\drivers\vwifimp.sys 3BE5AAC930447FD18D4A8255A2FEC95C C:\Windows\System32\drivers\wacompen.sys 00C27B64C758C111E5D78A70DE6CA2B6 C:\Windows\System32\DRIVERS\wanarp.sys 8CB53620B2C2F0641DD7563EA0FDF491 C:\Windows\System32\DRIVERS\wanarp.sys 8CB53620B2C2F0641DD7563EA0FDF491 C:\Windows\system32\drivers\WdBoot.sys 069D3D6E20AD753B34FCE856F0436869 C:\Windows\System32\drivers\Wdf01000.sys 6CC727E94CD84E9720FDCDA8089CABCC C:\Windows\system32\drivers\WdFilter.sys E3E97151A1D1E87BB2D5371F66C5F169 C:\Windows\System32\DRIVERS\wdiwifi.sys E70DDD8E2245CC67547B0861983912D8 C:\Windows\System32\Drivers\WdNisDrv.sys 07B043160399AF4009054E2EA3464BF4 C:\Windows\System32\drivers\wfplwfs.sys C11272713719922DE5711094333BD166 C:\Windows\System32\drivers\wimmount.sys 413093D680826762AC809D0B65E17BE5 C:\Windows\System32\drivers\WindowsTrustedRT.sys D8966A76408107224C6013993135DD78 C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys 8B102A7B6CE326FD4208CC7C2D183343 C:\Windows\System32\drivers\winmad.sys 4A53441C1C4D2878BEF27E381138BB2D C:\Windows\System32\drivers\WinUSB.SYS 260907CE034FE327AC99BDA4153AB22F C:\Windows\System32\drivers\winverbs.sys 40A3E8D729F458B2C9A8BD9380FF83D5 C:\Windows\System32\drivers\wmiacpi.sys 8F010BF65238F3F822D22BA12831796E C:\Windows\System32\Drivers\Wof.sys 2A9650FCC696DB28E45EA8B33B99B8E6 C:\Windows\System32\DRIVERS\wpcfltr.sys 22C52D7EE7C7D0E02C8EFD8CAE8E3A71 C:\Windows\System32\drivers\WpdUpFltr.sys 1C08E424CBDD5065BB7266F8C048C1B1 C:\Windows\system32\drivers\ws2ifsl.sys 638B43D39A3D0B47024555CF1095E6F1 C:\Windows\system32\DRIVERS\wsvd.sys 72B4E9DF6456C43C42A1419B09486045 C:\Windows\System32\drivers\WudfPf.sys A928F25CB62232F413EE655352856E10 C:\Windows\System32\drivers\WUDFRd.sys A932391623D5CEC4EF4A2A17D3CEBFCD C:\Windows\System32\drivers\xboxgip.sys 80BC02A73A3949A7AEF34791206C7D7F C:\Windows\System32\drivers\xinputhid.sys 1F1EF8E701859581251B52035C1C1CEF ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-02-16 20:35 - 2016-02-16 20:35 - 00020227 _____ C:\Users\me\Downloads\FRST.txt 2016-02-16 20:35 - 2016-02-16 20:35 - 00000000 ____D C:\FRST 2016-02-16 20:34 - 2016-02-16 20:34 - 02370560 _____ (Farbar) C:\Users\me\Downloads\FRST64.exe 2016-02-16 20:34 - 2016-02-16 20:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2016-02-16 20:31 - 2016-02-16 20:31 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2016-02-16 20:17 - 2016-02-16 20:17 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-02-16 20:16 - 2016-02-16 20:29 - 00120242 _____ C:\WINDOWS\ntbtlog.txt 2016-02-16 19:18 - 2016-02-16 19:18 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2016-02-16 12:09 - 2016-02-16 12:09 - 00000000 ____D C:\ProgramData\USOShared 2016-02-16 12:09 - 2016-02-16 12:09 - 00000000 ____D C:\ProgramData\USOPrivate 2016-02-16 12:08 - 2016-02-16 12:08 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2016-02-16 12:07 - 2016-02-16 23:03 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2016-02-16 12:07 - 2016-02-16 12:07 - 00000000 ____D C:\ProgramData\Citrix 2016-02-16 11:44 - 2016-02-16 11:44 - 03007700 _____ C:\Users\me\Downloads\revouninstaller.zip 2016-02-16 11:40 - 2016-02-16 11:41 - 03620806 _____ C:\Users\me\Documents\TJC-LENOVO.arn 2016-02-16 11:26 - 2016-02-16 11:26 - 00000000 ____D C:\Users\me\AppData\Local\Sonos,_Inc 2016-02-16 11:25 - 2016-02-16 11:26 - 04146556 _____ C:\Users\me\Documents\TJC-LENOVO Autorun Feb 16.arn 2016-02-16 11:11 - 2016-02-16 23:04 - 00000000 ____D C:\Users\me\AppData\Roaming\ICAClient 2016-02-16 11:10 - 2016-02-16 23:05 - 00000000 ____D C:\Program Files (x86)\Citrix 2016-02-16 11:10 - 2016-02-16 11:11 - 00000000 ____D C:\Users\me\AppData\Local\Citrix 2016-02-16 11:09 - 2016-02-16 11:09 - 00001339 _____ C:\Users\me\Downloads\Q1RIRC5DaXRyaXggRGVza3RvcCAkUzEtMQ-- (1).ica 2016-02-16 11:08 - 2016-02-16 11:09 - 00001339 _____ C:\Users\me\Downloads\Q1RIRC5DaXRyaXggRGVza3RvcCAkUzEtMQ--.ica 2016-02-16 10:18 - 2016-02-16 10:18 - 00000000 ____D C:\Users\me\AppData\LocalLow\Dashlane 2016-02-16 10:15 - 2016-02-16 23:04 - 00000000 ____D C:\Users\me\AppData\Roaming\Dashlane 2016-02-16 08:56 - 2016-02-16 23:03 - 00000000 ____D C:\WINDOWS\SecSrv 2016-02-15 22:38 - 2016-02-16 23:04 - 00000000 ____D C:\Users\me\AppData\Roaming\Audacity 2016-02-15 22:37 - 2016-02-16 23:05 - 00000000 ____D C:\Program Files (x86)\Audacity 2016-02-15 18:29 - 2016-02-15 18:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-02-15 06:02 - 2016-02-15 06:02 - 00007606 _____ C:\Users\me\AppData\Local\Resmon.ResmonCfg 2016-02-15 03:17 - 2016-02-15 03:18 - 06714468 _____ C:\Users\me\Documents\AutoRuns2.arn 2016-02-15 03:12 - 2016-02-15 03:13 - 07003358 _____ C:\Users\me\Documents\AutoRuns.arn 2016-02-15 01:27 - 2016-02-16 20:11 - 00000000 ____D C:\Program Files\Common Files\logishrd 2016-02-15 01:20 - 2016-02-15 01:21 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-02-15 01:08 - 2016-02-16 11:18 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee 2016-02-15 00:16 - 2016-02-15 00:16 - 00661861 _____ C:\Users\me\Downloads\Statement_Jan 2016 (1).pdf 2016-02-15 00:14 - 2016-02-15 00:14 - 01116601 _____ C:\Users\me\Downloads\Statement_Dec 2015.pdf 2016-02-15 00:13 - 2016-02-15 00:13 - 00632774 _____ C:\Users\me\Downloads\Statement_Nov 2015.pdf 2016-02-15 00:10 - 2016-02-15 00:10 - 00627064 _____ C:\Users\me\Downloads\Statement_Oct 2015.pdf 2016-02-15 00:07 - 2016-02-15 00:07 - 00661859 _____ C:\Users\me\Downloads\Statement_Jan 2016.pdf 2016-02-14 22:56 - 2016-02-14 22:56 - 00000000 ____D C:\Program Files\HP 2016-02-14 15:32 - 2016-02-14 15:32 - 00000000 _____ C:\Users\me\Downloads\webmon_recent_domains 2016-02-14 14:41 - 2016-02-14 14:41 - 00000000 ____D C:\Users\me\AppData\Roaming\Macromedia 2016-02-14 14:35 - 2016-02-14 09:58 - 00000000 ____D C:\Users\me\AppData\Local\ElevatedDiagnostics 2016-02-14 14:19 - 2016-02-14 14:19 - 00000000 ____D C:\Users\me\Intel 2016-02-14 14:19 - 2016-02-14 14:19 - 00000000 ____D C:\Users\me\AppData\LocalLow\Intel 2016-02-14 14:18 - 2016-02-16 23:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-02-14 14:16 - 2016-02-14 14:16 - 00000000 ____D C:\Users\me\AppData\Local\Comms 2016-02-14 14:15 - 2016-02-14 14:15 - 00000000 ____D C:\Users\me\AppData\Local\VS Revo Group 2016-02-14 14:15 - 2016-02-14 14:15 - 00000000 ____D C:\Program Files\VS Revo Group 2016-02-14 14:14 - 2016-02-14 14:14 - 00000000 ____D C:\Users\me\AppData\Local\MicrosoftEdge 2016-02-14 14:08 - 2016-02-14 14:08 - 00000000 ____D C:\Users\me\REACHit 2016-02-14 14:08 - 2016-02-14 14:08 - 00000000 ____D C:\Users\me\AppData\Roaming\LSC 2016-02-14 14:08 - 2016-02-14 14:08 - 00000000 ____D C:\Users\me\AppData\Local\Lenovo 2016-02-14 14:06 - 2016-02-14 14:06 - 00000000 ____D C:\Users\me\AppData\Roaming\Lenovo 2016-02-14 14:01 - 2016-02-16 20:31 - 00002365 _____ C:\Users\me\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-02-14 14:01 - 2016-02-16 20:31 - 00000000 ___RD C:\Users\me\OneDrive 2016-02-14 14:01 - 2016-02-14 14:01 - 00000000 ____D C:\Users\me\AppData\Roaming\Intel Corporation 2016-02-14 14:00 - 2016-02-14 14:00 - 00000000 ____D C:\Users\me\AppData\Local\Power2Go 2016-02-14 14:00 - 2016-02-14 14:00 - 00000000 ____D C:\Users\me\AppData\Local\ActiveSync 2016-02-14 13:59 - 2016-02-14 13:59 - 00000000 ____D C:\Users\me\AppData\Local\Publishers 2016-02-14 13:58 - 2016-02-16 22:54 - 00000000 ____D C:\Users\me\AppData\Roaming\Intel 2016-02-14 13:58 - 2016-02-16 22:54 - 00000000 ____D C:\Users\me\AppData\Local\Packages 2016-02-14 13:58 - 2016-02-16 20:30 - 00000000 __SHD C:\Users\me\IntelGraphicsProfiles 2016-02-14 13:58 - 2016-02-14 13:58 - 00000000 ____D C:\Users\me\AppData\Roaming\Adobe 2016-02-14 13:58 - 2016-02-14 13:58 - 00000000 ____D C:\Users\me\AppData\Local\VirtualStore 2016-02-14 13:58 - 2016-02-14 13:58 - 00000000 ____D C:\Users\me\AppData\Local\TileDataLayer 2016-02-14 13:57 - 2016-02-16 20:10 - 00000000 ____D C:\Users\me 2016-02-14 13:57 - 2016-02-14 13:57 - 00000020 ___SH C:\Users\me\ntuser.ini 2016-02-14 13:57 - 2016-02-14 13:57 - 00000000 _SHDL C:\Users\me\My Documents 2016-02-14 13:57 - 2016-02-14 13:57 - 00000000 _SHDL C:\Users\me\Documents\My Videos 2016-02-14 13:57 - 2016-02-14 13:57 - 00000000 _SHDL C:\Users\me\Documents\My Pictures 2016-02-14 13:57 - 2016-02-14 13:57 - 00000000 _SHDL C:\Users\me\Documents\My Music 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default\My Documents 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default\Documents\My Videos 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default\Documents\My Music 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default User\Documents\My Music 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\Default User 2016-02-14 13:52 - 2016-02-14 13:52 - 00000000 _SHDL C:\Users\All Users 2016-02-14 13:51 - 2016-02-14 13:51 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-02-14 13:49 - 2015-10-30 02:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-02-14 13:47 - 2016-02-16 20:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-14 13:45 - 2016-02-14 13:45 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-02-14 13:40 - 2016-02-14 13:40 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-02-14 13:35 - 2016-02-16 20:30 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-02-14 13:35 - 2016-02-14 14:20 - 00000000 ____D C:\Intel 2016-02-14 13:35 - 2016-02-14 13:35 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2016-02-14 13:35 - 2016-02-14 13:35 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2016-02-14 13:35 - 2016-02-06 23:13 - 00103944 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2016-02-14 13:35 - 2016-02-06 23:13 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2016-02-14 13:34 - 2016-02-16 23:05 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2016-02-14 13:34 - 2016-02-16 22:53 - 00000000 ____D C:\Program Files\Intel 2016-02-14 13:32 - 2016-02-16 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2016-02-14 13:32 - 2016-02-16 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-02-14 13:32 - 2016-02-16 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-02-14 13:32 - 2016-02-14 13:46 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-02-14 13:32 - 2016-02-14 13:32 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2016-02-14 13:32 - 2016-02-14 13:32 - 00000000 _____ C:\Recovery.txt 2016-02-14 13:32 - 2015-12-04 02:26 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk 2016-02-14 13:32 - 2015-12-04 01:49 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2016-02-14 13:32 - 2015-12-04 01:44 - 00002060 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2016-02-14 13:32 - 2015-04-28 13:06 - 00043256 _____ C:\WINDOWS\system32\oemlogo.bmp 2016-02-14 12:24 - 2016-02-14 12:25 - 00000000 _____ C:\Users\me\Downloads\webmon_recent_domains (1) 2016-02-14 12:18 - 2016-02-16 23:04 - 00000000 ____D C:\Users\me\AppData\Local\Downloaded Installations 2016-02-14 11:18 - 2016-02-14 11:18 - 00000058 _____ C:\Users\Public\Documents\Lenovo.Portal.txt 2016-02-14 11:18 - 2016-02-14 11:18 - 00000000 ____D C:\Download 2016-02-14 11:07 - 2016-02-16 23:04 - 00000000 ____D C:\Users\me\Downloads\logonSessions 2016-02-14 11:06 - 2016-02-14 12:00 - 00000000 ____D C:\Users\me\Downloads\AutoLogon 2016-02-14 11:06 - 2016-02-14 11:06 - 00108360 _____ C:\Users\me\Downloads\logonSessions.zip 2016-02-14 11:05 - 2016-02-14 11:06 - 00078822 _____ C:\Users\me\Downloads\AutoLogon.zip 2016-02-14 10:57 - 2016-02-14 10:57 - 00615478 _____ C:\Users\me\Downloads\Autoruns.zip 2016-02-14 10:29 - 2016-02-14 10:45 - 00064512 _____ C:\WINDOWS\system32\UserMgrLog.etl 2016-02-14 10:29 - 2016-02-14 10:45 - 00018432 _____ C:\WINDOWS\system32\umstartup.etl 2016-02-14 10:29 - 2016-02-14 10:39 - 00061440 _____ C:\WINDOWS\system32\UserMgrLogBackup.etl 2016-02-14 10:29 - 2016-02-14 10:39 - 00021504 _____ C:\WINDOWS\system32\umstartup000.etl 2016-02-14 10:23 - 2016-02-16 10:35 - 00000000 ____D C:\Users\me\AppData\Local\Google 2016-02-14 10:23 - 2016-02-14 10:24 - 00000000 ____D C:\Program Files (x86)\Google 2016-02-14 09:33 - 2016-02-14 13:55 - 00000000 ___DC C:\WINDOWS\Panther 2016-02-14 09:33 - 2016-02-14 09:33 - 00000000 ____D C:\WINDOWS\InfusedApps 2016-02-14 09:32 - 2016-02-14 09:33 - 00000000 ____D C:\Windows.old 2016-02-14 09:32 - 2016-02-14 09:32 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\WINDOWS\Setup 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\WINDOWS\OCR 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\Program Files\MSBuild 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-02-14 09:31 - 2016-02-14 09:31 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\winrm 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\WCN 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\slmgr 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\0409 2016-02-14 09:30 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\DigitalLocker 2016-02-14 09:27 - 2016-02-13 15:45 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-02-14 09:27 - 2016-02-13 15:45 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ___SD C:\WINDOWS\system32\F12 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\Provisioning 2016-02-14 09:26 - 2016-02-16 23:06 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-02-14 09:26 - 2016-02-16 23:05 - 00000000 __RHD C:\Users\Public\Libraries 2016-02-14 09:26 - 2016-02-16 23:05 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-02-14 09:26 - 2016-02-16 23:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-02-14 09:26 - 2016-02-16 23:05 - 00000000 ____D C:\Program Files\Windows Journal 2016-02-14 09:26 - 2016-02-16 23:00 - 00000000 ____D C:\WINDOWS\registration 2016-02-14 09:26 - 2016-02-16 22:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-02-14 09:26 - 2016-02-16 22:58 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-02-14 09:26 - 2016-02-16 22:57 - 00000000 ____D C:\WINDOWS\security 2016-02-14 09:26 - 2016-02-16 22:53 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-02-14 09:26 - 2016-02-16 20:16 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-02-14 09:26 - 2016-02-16 20:15 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-14 09:26 - 2016-02-16 20:13 - 00000000 ___HD C:\Program Files\WindowsApps 2016-02-14 09:26 - 2016-02-14 13:58 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-02-14 09:26 - 2016-02-14 13:58 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-02-14 09:26 - 2016-02-14 13:57 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-02-14 09:26 - 2016-02-14 13:53 - 00000000 ____D C:\WINDOWS\rescache 2016-02-14 09:26 - 2016-02-14 13:44 - 00000000 ____D C:\WINDOWS\system32\spool 2016-02-14 09:26 - 2016-02-14 13:42 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-02-14 09:26 - 2016-02-14 13:40 - 00000000 ____D C:\WINDOWS\appcompat 2016-02-14 09:26 - 2016-02-14 13:32 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-02-14 09:26 - 2016-02-14 09:58 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ___SD C:\WINDOWS\system32\dsc 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\setup 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\MUI 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\migwiz 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\system32\Com 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\IME 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\Help 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\Program Files\Windows Defender 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\Program Files\Common Files\System 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2016-02-14 09:26 - 2016-02-14 09:30 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 __SHD C:\Program Files\Windows Sidebar 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 __RSD C:\WINDOWS\Media 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___SD C:\WINDOWS\system32\Nui 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Web 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Vss 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\tracing 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\TAPI 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SystemResources 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SystemApps 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\winevt 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\ras 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\IME 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\icsxml 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\ias 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\downlevel 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\System 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SKB 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\ShellNew 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\schemas 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\SchCache 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Resources 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\PLA 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Performance 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\ModemLogs 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\L2Schemas 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\InputMethod 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Globalization 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Cursors 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\Branding 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\addins 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files\Windows NT 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files\Common Files\Services 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files (x86)\Windows NT 2016-02-14 09:26 - 2016-02-14 09:26 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2016-02-14 09:26 - 2016-02-14 09:24 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2016-02-14 09:26 - 2016-02-14 09:24 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2016-02-14 09:26 - 2016-02-14 09:24 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2016-02-14 09:26 - 2016-02-14 09:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2016-02-14 09:26 - 2016-02-14 09:24 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-02-14 09:26 - 2016-02-14 09:24 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2016-02-14 09:26 - 2016-02-14 09:24 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2016-02-14 09:26 - 2016-02-14 09:24 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2016-02-14 09:26 - 2016-02-14 09:24 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2016-02-14 09:26 - 2016-02-14 09:24 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2016-02-14 09:26 - 2016-02-14 09:24 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2016-02-14 09:26 - 2016-02-14 09:24 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2016-02-14 09:26 - 2016-02-14 09:24 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2016-02-14 09:26 - 2016-02-14 09:24 - 00000389 _____ C:\WINDOWS\system32\AutoWorkplace.exe.config 2016-02-14 09:24 - 2016-02-16 20:34 - 00000000 ____D C:\WINDOWS\INF 2016-02-14 09:19 - 2016-02-15 03:38 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-02-14 09:16 - 2016-02-16 20:29 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-02-14 09:16 - 2016-02-16 19:21 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-02-14 09:16 - 2016-02-14 09:30 - 00000000 ____D C:\WINDOWS\servicing 2016-02-14 09:16 - 2016-02-14 09:26 - 00000000 ____D C:\WINDOWS\system32\SMI 2016-02-14 09:16 - 2015-10-30 01:33 - 00000164 _____ C:\WINDOWS\system32\config\FP 2016-02-07 06:42 - 2015-10-23 20:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2016-02-07 06:42 - 2015-10-23 20:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-02-07 06:42 - 2015-10-23 20:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2016-02-07 06:41 - 2015-10-23 20:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2016-02-07 06:41 - 2015-10-23 20:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2016-02-07 06:41 - 2015-10-23 20:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 35016296 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 34083104 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 29894272 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 28612544 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 15454976 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 13928480 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 13468680 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 13427688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 11441600 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 10210312 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 07858088 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys 2016-02-06 23:13 - 2016-02-06 23:13 - 06560024 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 05797102 _____ C:\WINDOWS\system32\igdclbif.bin 2016-02-06 23:13 - 2016-02-06 23:13 - 05685768 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 05262864 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 05028408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 04608520 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 04482424 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 04324664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 04123144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 03970056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 02813952 _____ C:\WINDOWS\system32\iglhxa64.cpa 2016-02-06 23:13 - 2016-02-06 23:13 - 02145232 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 02052104 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01816720 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01814064 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01665200 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01576968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01167880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 01026464 _____ C:\WINDOWS\system32\igfxSDK.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00962464 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00958880 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00819449 _____ C:\WINDOWS\system32\DisplayAudiox64.cab 2016-02-06 23:13 - 2016-02-06 23:13 - 00750088 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv 2016-02-06 23:13 - 2016-02-06 23:13 - 00626696 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00621472 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00535968 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00511260 _____ C:\WINDOWS\system32\cp_resources.bin 2016-02-06 23:13 - 2016-02-06 23:13 - 00466344 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00439304 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00435088 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00433968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00415752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv 2016-02-06 23:13 - 2016-02-06 23:13 - 00402344 _____ C:\WINDOWS\system32\igfxTray.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00390152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00388616 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00384008 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00381936 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00379792 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00373160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00354216 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00350224 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00318472 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00310160 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00300968 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00295024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00273416 _____ C:\WINDOWS\system32\igfxCPL.cpl 2016-02-06 23:13 - 2016-02-06 23:13 - 00268704 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00266248 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00255496 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00242160 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00236456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00231848 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00231336 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00225288 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00222736 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00206344 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4331.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00205360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00193032 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00181328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00174504 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe 2016-02-06 23:13 - 2016-02-06 23:13 - 00173584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00111624 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00103944 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00103432 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00100872 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00095248 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00083464 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00055248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00052744 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll 2016-02-06 23:13 - 2016-02-06 23:13 - 00004730 _____ C:\WINDOWS\system32\iglhxs64.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp 2016-02-06 23:13 - 2016-02-06 23:13 - 00000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config 2016-02-06 23:13 - 2016-02-06 23:13 - 00000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config 2016-02-06 23:13 - 2016-02-06 23:13 - 00000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config 2016-02-06 23:13 - 2016-02-06 23:13 - 00000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config 2016-02-06 23:12 - 2016-02-06 23:13 - 29101576 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 19861512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00593624 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtkBtfilter.sys 2016-02-06 23:12 - 2016-02-06 23:12 - 00375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv 2016-02-06 23:12 - 2016-02-06 23:12 - 00129312 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverx64.sys 2016-02-06 23:12 - 2016-02-06 23:12 - 00050928 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00050876 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00049088 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00048276 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00048192 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00045868 _____ C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00040516 _____ C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll 2016-02-06 23:12 - 2016-02-06 23:12 - 00033620 _____ C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll 2016-02-05 18:05 - 2015-12-19 22:26 - 00237952 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys 2016-02-05 13:09 - 2016-02-05 17:53 - 02365304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-02-16 23:06 - 2015-12-04 02:25 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles 2016-02-16 23:06 - 2015-12-04 01:53 - 00000000 ____D C:\ProgramData\Office2013 2016-02-16 23:06 - 2015-12-04 01:51 - 00000000 ____D C:\ProgramData\install_clap 2016-02-16 23:06 - 2015-12-04 01:42 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2016-02-16 23:05 - 2015-12-04 02:25 - 00000000 ____D C:\ProgramData\Intel.sav 2016-02-16 23:05 - 2015-12-04 02:21 - 00000000 ____D C:\Program Files (x86)\Realtek 2016-02-16 23:05 - 2015-12-04 02:20 - 00000000 ____D C:\Program Files\DIFX 2016-02-16 23:05 - 2015-12-04 01:50 - 00000000 ____D C:\ProgramData\CyberLink 2016-02-16 23:05 - 2015-12-04 01:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-16 23:05 - 2015-12-04 01:48 - 00000000 ____D C:\ProgramData\Temp 2016-02-16 23:05 - 2015-12-04 01:44 - 00000000 ____D C:\ProgramData\Package Cache 2016-02-16 23:05 - 2015-12-04 01:44 - 00000000 ____D C:\ProgramData\Lenovo 2016-02-16 23:05 - 2015-12-04 01:44 - 00000000 ____D C:\Program Files\mcafee.com 2016-02-16 23:05 - 2015-12-04 01:44 - 00000000 ____D C:\Program Files (x86)\mcafee.com 2016-02-16 23:05 - 2015-12-04 01:44 - 00000000 ____D C:\Program Files (x86)\McAfee 2016-02-16 23:05 - 2015-07-16 10:49 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-02-16 22:53 - 2015-12-04 02:23 - 00000000 ____D C:\Program Files\Realtek 2016-02-16 22:53 - 2015-12-04 02:21 - 00000000 ____D C:\ProgramData\Intel 2016-02-16 22:53 - 2015-12-04 01:44 - 00000000 ____D C:\Program Files\mcafee 2016-02-16 22:53 - 2015-12-04 01:44 - 00000000 ____D C:\Program Files\Common Files\McAfee 2016-02-16 22:52 - 2015-12-04 02:20 - 00000000 ____D C:\Program Files (x86)\Intel 2016-02-16 22:52 - 2015-12-04 01:49 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-02-16 22:52 - 2015-12-04 01:41 - 00000000 ____D C:\Program Files (x86)\Lenovo 2016-02-16 20:34 - 2015-07-16 10:54 - 00881036 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-02-16 20:13 - 2015-12-04 01:44 - 00000000 ____D C:\ProgramData\McAfee 2016-02-16 20:08 - 2015-12-04 01:41 - 00000000 ____D C:\Program Files\update 2016-02-16 11:47 - 2015-07-10 04:05 - 00000000 ____D C:\Users\Default.migrated 2016-02-14 14:17 - 2015-12-04 02:22 - 00000000 ___HD C:\Program Files (x86)\Temp 2016-02-14 13:49 - 2015-12-04 02:22 - 00896880 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2016-02-14 13:49 - 2015-12-04 01:41 - 00000000 ____D C:\Users\Public\Documents\Lenovo 2016-02-14 13:44 - 2015-12-04 02:23 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-02-14 13:44 - 2015-12-04 02:23 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-02-14 13:44 - 2015-12-04 01:50 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2016-02-14 13:42 - 2015-12-04 01:52 - 00000000 ____D C:\Users\Public\CyberLink 2016-02-14 13:41 - 2015-12-04 01:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-02-14 13:41 - 2015-12-04 01:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-02-14 13:40 - 2015-12-04 02:25 - 00000000 ____D C:\Program Files\Common Files\Intel 2016-02-14 13:40 - 2015-12-04 02:25 - 00000000 ____D C:\Program Files (x86)\Cisco 2016-02-14 13:40 - 2015-12-04 02:23 - 00000000 ____D C:\Program Files\Dolby Digital Plus 2016-02-14 13:40 - 2015-12-04 01:50 - 00000000 ____D C:\Program Files (x86)\Cyberlink 2016-02-14 13:40 - 2015-12-04 01:42 - 00000000 ____D C:\Program Files\Lenovo 2016-02-13 15:45 - 2015-10-30 02:19 - 19338752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-02-13 15:45 - 2015-10-30 02:19 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2016-02-13 15:45 - 2015-10-30 02:19 - 01859584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2016-02-13 15:45 - 2015-10-30 02:19 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-02-13 15:45 - 2015-10-30 02:19 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 21125920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 07825920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 05237336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-02-13 15:45 - 2015-10-30 02:18 - 02185832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-02-13 15:45 - 2015-10-30 02:18 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01138688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 01041920 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-02-13 15:45 - 2015-10-30 02:18 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-02-13 15:45 - 2015-10-30 02:18 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00157696 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00085312 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2016-02-13 15:45 - 2015-10-30 02:18 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 2016-02-13 15:45 - 2015-10-30 02:18 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2016-02-13 15:45 - 2015-10-30 02:18 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-02-13 15:45 - 2015-10-30 02:17 - 02796544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 02652784 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 01392128 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-02-13 15:45 - 2015-10-30 02:17 - 01118720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 01066104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00983976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2016-02-13 15:45 - 2015-10-30 02:17 - 00911640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00717952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00652320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-02-13 15:45 - 2015-10-30 02:17 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-02-13 15:45 - 2015-10-30 02:17 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00361824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-02-13 15:45 - 2015-10-30 02:17 - 00289760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2016-02-13 15:45 - 2015-10-30 02:17 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-02-13 15:45 - 2015-10-30 02:17 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-02-13 15:45 - 2015-10-30 02:17 - 00119328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-02-13 15:45 - 2015-10-30 02:17 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-02-13 15:45 - 2015-10-30 02:17 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe 2016-02-13 15:45 - 2015-10-30 02:17 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll 2016-02-13 15:45 - 2015-10-30 02:17 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 12120064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2016-02-13 15:44 - 2015-10-30 02:19 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 22573656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 06974280 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 04502864 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 02918296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 02624000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-02-13 15:44 - 2015-10-30 02:18 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01759688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 01718272 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-02-13 15:44 - 2015-10-30 02:18 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-02-13 15:44 - 2015-10-30 02:18 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 01009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-02-13 15:44 - 2015-10-30 02:18 - 00974680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00946176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00500576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00454048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00084312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-02-13 15:44 - 2015-10-30 02:18 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2016-02-13 15:44 - 2015-10-30 02:18 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 02772576 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01998848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01997664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-02-13 15:44 - 2015-10-30 02:17 - 01947136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01804672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 01394688 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01300016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01156456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-02-13 15:44 - 2015-10-30 02:17 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00953344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2016-02-13 15:44 - 2015-10-30 02:17 - 00926120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00823776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00794816 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00712544 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-02-13 15:44 - 2015-10-30 02:17 - 00643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-02-13 15:44 - 2015-10-30 02:17 - 00512864 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00510288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00499472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2016-02-13 15:44 - 2015-10-30 02:17 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe 2016-02-13 15:44 - 2015-10-30 02:17 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2016-02-13 15:44 - 2015-10-30 02:17 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2016-02-13 15:43 - 2015-10-30 02:19 - 18677248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-02-13 15:43 - 2015-10-30 02:19 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-02-13 15:43 - 2015-10-30 02:19 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-02-13 15:43 - 2015-10-30 02:19 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-02-13 15:43 - 2015-10-30 02:19 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-02-13 15:43 - 2015-10-30 02:19 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2016-02-13 15:43 - 2015-10-30 02:19 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-02-13 15:43 - 2015-10-30 02:19 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 13377024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 02596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01997320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01858424 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00675056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-02-13 15:43 - 2015-10-30 02:18 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00296800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00227328 _____ C:\WINDOWS\system32\MTF.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-02-13 15:43 - 2015-10-30 02:18 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2016-02-13 15:43 - 2015-10-30 02:18 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00051672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2016-02-13 15:43 - 2015-10-30 02:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2016-02-13 15:43 - 2015-10-30 02:18 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 08738216 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 06601408 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 03429888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 02181160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 02063872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 02058240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01648128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01398200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-02-13 15:43 - 2015-10-30 02:17 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01092976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00968704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00898704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00884768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2016-02-13 15:43 - 2015-10-30 02:17 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-02-13 15:43 - 2015-10-30 02:17 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00701392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00671440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00584672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00517056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00339384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2016-02-13 15:43 - 2015-10-30 02:17 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00110040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-02-13 15:43 - 2015-10-30 02:17 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-02-13 15:43 - 2015-10-30 02:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2016-02-13 15:43 - 2015-10-30 02:17 - 00035664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2016-02-13 15:43 - 2015-10-30 02:17 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll 2016-02-13 15:43 - 2015-10-30 02:17 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2016-02-13 15:42 - 2015-10-30 02:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-02-13 15:42 - 2015-10-30 02:18 - 02121728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 01541280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-02-13 15:42 - 2015-10-30 02:18 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00579424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2016-02-13 15:42 - 2015-10-30 02:18 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2016-02-13 15:42 - 2015-10-30 02:18 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00257024 _____ C:\WINDOWS\system32\MTFServer.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-02-13 15:42 - 2015-10-30 02:18 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-02-13 15:42 - 2015-10-30 02:18 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2016-02-13 15:42 - 2015-10-30 02:18 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 02544776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01133056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 01020616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00858440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00795912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-02-13 15:42 - 2015-10-30 02:17 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00244784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00234512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-02-13 15:42 - 2015-10-30 02:17 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-02-13 15:42 - 2015-10-30 02:17 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2016-02-13 15:42 - 2015-10-30 02:17 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2016-02-13 15:42 - 2015-10-30 02:17 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2016-02-13 15:42 - 2015-10-30 02:17 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe ==================== Files in the root of some directories ======= 2016-02-15 06:02 - 2016-02-15 06:02 - 0007606 _____ () C:\Users\me\AppData\Local\Resmon.ResmonCfg 2016-02-16 12:08 - 2016-02-16 12:08 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-02-14 13:32 ==================== End of FRST.txt ============================