Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017 Ran by [removed] (administrator) on DESKTOP-4EL592D (17-03-2017 13:54:25) Running from C:\Users\[removed]\Desktop [removed] Platform: Windows 10 Home Version 1607 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Intel Corporation) C:\Windows\syswow64\esif_uf.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\Everything\Everything.exe (Microsoft Corporation) C:\Windows\HelpPane.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.79.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Shannon\Desktop\farfaraway.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (The CefSharp Authors) C:\Users\Shannon\AppData\Local\Facebook\Games\Facebook Gameroom Browser.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [602624 2009-03-12] () HKLM\...\Winlogon: [Userinit] Startup: C:\Users\Shannon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-03-16] ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Shannon\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook) BootExecute: ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Winsock: -> Catalog5-x64 - Broken internet access due to missing entry. <===== ATTENTION Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 [removed] Tcpip\..\Interfaces\{30ffcc6d-d73b-4ad8-aba3-17ee10a1a666}: [DhcpNameServer] 192.168.1.254 [removed] Internet Explorer: ================== URLSearchHook: [S-1-5-21-1540712080-551408199-3099575163-1001] ATTENTION => Default URLSearchHook is missing FireFox: ======== FF DefaultProfile: thx244b2.default FF ProfilePath: C:\Users\Shannon\AppData\Roaming\Mozilla\Firefox\Profiles\thx244b2.default [2017-03-17] FF Homepage: Mozilla\Firefox\Profiles\thx244b2.default -> hxxps://www.google.com/ ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 Appinfo; C:\WINDOWS\System32\appinfo.dll [125952 2016-11-20] (Microsoft Corporation) [File not signed] S3 AppReadiness; C:\WINDOWS\system32\AppReadiness.dll [560128 2016-11-11] (Microsoft Corporation) [File not signed] S3 AppXSvc; C:\WINDOWS\system32\appxdeploymentserver.dll [2275840 2016-12-20] (Microsoft Corporation) [File not signed] R2 AudioEndpointBuilder; C:\WINDOWS\System32\AudioEndpointBuilder.dll [337920 2016-11-20] (Microsoft Corporation) [File not signed] R2 Audiosrv; C:\WINDOWS\System32\Audiosrv.dll [942080 2016-11-20] (Microsoft Corporation) [File not signed] S3 BDESVC; C:\WINDOWS\System32\bdesvc.dll [361472 2016-11-20] (Microsoft Corporation) [File not signed] S2 BITS; C:\WINDOWS\System32\qmgr.dll [1054208 2016-11-20] (Microsoft Corporation) [File not signed] R2 BrokerInfrastructure; C:\WINDOWS\System32\bisrv.dll [770560 2016-11-20] (Microsoft Corporation) [File not signed] S2 CDPSvc; C:\WINDOWS\System32\CDPSvc.dll [411648 2016-11-11] (Microsoft Corporation) [File not signed] S2 CDPUserSvc; C:\WINDOWS\System32\CDPUserSvc.dll [339456 2016-11-11] (Microsoft Corporation) [File not signed] S3 CertPropSvc; C:\WINDOWS\System32\certprop.dll [193536 2016-12-13] (Microsoft Corporation) [File not signed] R2 CoreMessagingRegistrar; C:\WINDOWS\SysWOW64\coremessaging.dll [483840 2016-12-09] (Microsoft Corporation) [File not signed] R3 DeviceAssociationService; C:\WINDOWS\system32\das.dll [447488 2016-11-20] (Microsoft Corporation) [File not signed] R2 DiagTrack; C:\WINDOWS\system32\diagtrack.dll [1980416 2016-11-20] (Microsoft Corporation) [File not signed] S3 DmEnrollmentSvc; C:\WINDOWS\system32\Windows.Internal.Management.dll [407552 2016-11-11] (Microsoft Corporation) [File not signed] S3 DmEnrollmentSvc; C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll [298496 2016-11-11] (Microsoft Corporation) [File not signed] S2 DoSvc; C:\WINDOWS\system32\dosvc.dll [1231872 2016-12-13] (Microsoft Corporation) [File not signed] R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2836296 2016-12-14] (ESET) S3 EntAppSvc; C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll [285696 2016-11-11] (Microsoft Corporation) [File not signed] R2 esifsvc; C:\WINDOWS\SysWoW64\esif_uf.exe [1394360 2015-08-13] (Intel Corporation) R2 EventLog; C:\WINDOWS\System32\wevtsvc.dll [1709056 2016-11-20] (Microsoft Corporation) [File not signed] R2 FontCache; C:\WINDOWS\system32\FntCache.dll [1840640 2016-11-20] (Microsoft Corporation) [File not signed] S3 FrameServer; C:\WINDOWS\system32\FrameServer.dll [805888 2016-11-20] (Microsoft Corporation) [File not signed] S2 gpsvc; C:\WINDOWS\System32\gpsvc.dll [1227264 2016-11-20] (Microsoft Corporation) [File not signed] S3 HomeGroupListener; C:\WINDOWS\system32\ListSvc.dll [274432 2016-11-20] (Microsoft Corporation) [File not signed] R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373744 2016-11-02] (Intel Corporation) S2 iphlpsvc; C:\WINDOWS\System32\iphlpsvc.dll [945664 2016-11-20] (Microsoft Corporation) [File not signed] R2 LanmanWorkstation; C:\WINDOWS\System32\wkssvc.dll [283648 2016-11-11] (Microsoft Corporation) [File not signed] R3 LicenseManager; C:\WINDOWS\system32\LicenseManagerSvc.dll [26112 2016-11-20] (Microsoft Corporation) [File not signed] R2 LSM; C:\WINDOWS\System32\lsm.dll [691712 2016-11-11] (Microsoft Corporation) [File not signed] S2 MapsBroker; C:\WINDOWS\System32\moshost.dll [82944 2016-11-11] (Microsoft Corporation) [File not signed] S3 NetSetupSvc; C:\WINDOWS\System32\NetSetupSvc.dll [265728 2016-11-20] (Microsoft Corporation) [File not signed] S3 NgcSvc; C:\WINDOWS\system32\ngcsvc.dll [983040 2016-11-20] (Microsoft Corporation) [File not signed] R2 NlaSvc; C:\WINDOWS\System32\nlasvc.dll [368640 2016-11-20] (Microsoft Corporation) [File not signed] S3 PhoneSvc; C:\WINDOWS\System32\PhoneService.dll [781824 2016-11-20] (Microsoft Corporation) [File not signed] S3 PimIndexMaintenanceSvc; C:\WINDOWS\System32\PimIndexMaintenance.dll [203776 2016-11-20] (Microsoft Corporation) [File not signed] R2 ProfSvc; C:\WINDOWS\system32\profsvc.dll [358400 2016-11-20] (Microsoft Corporation) [File not signed] S3 RasMan; C:\WINDOWS\System32\rasmans.dll [657920 2016-11-11] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\WINDOWS\System32\mprdim.dll [496128 2016-11-20] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\WINDOWS\SysWOW64\mprdim.dll [431104 2016-11-20] (Microsoft Corporation) [File not signed] S3 RetailDemo; C:\WINDOWS\system32\RDXService.dll [650752 2016-11-11] (Microsoft Corporation) [File not signed] R3 RmSvc; C:\WINDOWS\System32\RMapi.dll [140800 2016-11-20] (Microsoft Corporation) [File not signed] R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-07-22] (Realtek Semiconductor) S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [201728 2016-12-13] (Microsoft Corporation) [File not signed] S3 SCPolicySvc; C:\WINDOWS\System32\certprop.dll [193536 2016-12-13] (Microsoft Corporation) [File not signed] S2 SENS; C:\WINDOWS\System32\sens.dll [70656 2016-11-20] (Microsoft Corporation) [File not signed] S3 SensorDataService; C:\WINDOWS\System32\SensorDataService.exe [1312768 2016-11-20] (Microsoft Corporation) [File not signed] S3 SensorService; C:\WINDOWS\system32\SensorService.dll [417792 2016-11-20] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\WINDOWS\system32\sessenv.dll [387072 2016-11-20] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\WINDOWS\SysWOW64\sessenv.dll [331776 2016-11-20] (Microsoft Corporation) [File not signed] S3 SharedAccess; C:\WINDOWS\System32\ipnathlp.dll [541696 2016-11-20] (Microsoft Corporation) [File not signed] S3 smphost; C:\WINDOWS\System32\smphost.dll [23552 2016-11-20] (Microsoft Corporation) [File not signed] S3 smphost; C:\WINDOWS\SysWOW64\smphost.dll [20992 2016-11-20] (Microsoft Corporation) [File not signed] R2 Spooler; C:\WINDOWS\System32\spoolsv.exe [792064 2016-11-20] (Microsoft Corporation) [File not signed] R3 StateRepository; C:\WINDOWS\system32\windows.staterepository.dll [4136448 2016-11-11] (Microsoft Corporation) [File not signed] R3 StateRepository; C:\WINDOWS\SysWOW64\windows.staterepository.dll [3370496 2016-11-11] (Microsoft Corporation) [File not signed] R3 StorSvc; C:\WINDOWS\system32\storsvc.dll [396800 2016-11-11] (Microsoft Corporation) [File not signed] R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2016-10-05] (Synaptics Incorporated) S2 TrustedInstaller; C:\WINDOWS\servicing\TrustedInstaller.exe [122880 2016-11-11] (Microsoft Corporation) [File not signed] S4 tzautoupdate; C:\WINDOWS\system32\tzautoupdate.dll [95232 2016-11-20] (Microsoft Corporation) [File not signed] R2 UserManager; C:\WINDOWS\System32\usermgr.dll [1020928 2016-11-20] (Microsoft Corporation) [File not signed] S3 UsoSvc; C:\WINDOWS\system32\usocore.dll [539648 2016-12-13] (Microsoft Corporation) [File not signed] S3 vmicguestinterface; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmicheartbeat; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmickvpexchange; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmicrdv; C:\WINDOWS\System32\icsvcext.dll [349696 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmicshutdown; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmictimesync; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmicvmsession; C:\WINDOWS\System32\icsvc.dll [305152 2016-11-20] (Microsoft Corporation) [File not signed] S3 vmicvss; C:\WINDOWS\System32\icsvcext.dll [349696 2016-11-20] (Microsoft Corporation) [File not signed] R3 W32Time; C:\WINDOWS\system32\w32time.dll [520192 2016-11-20] (Microsoft Corporation) [File not signed] S2 WbioSrvc; C:\WINDOWS\System32\wbiosrvc.dll [837632 2016-12-13] (Microsoft Corporation) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) R3 WinHttpAutoProxySvc; C:\WINDOWS\system32\winhttp.dll [817664 2016-11-20] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\WINDOWS\SysWOW64\winhttp.dll [636928 2016-11-20] (Microsoft Corporation) [File not signed] S3 WinRM; C:\WINDOWS\system32\WsmSvc.dll [2716672 2016-11-11] (Microsoft Corporation) [File not signed] S3 WinRM; C:\WINDOWS\SysWOW64\WsmSvc.dll [2333184 2016-11-11] (Microsoft Corporation) [File not signed] S3 wisvc; C:\WINDOWS\system32\flightsettings.dll [635904 2016-11-20] (Microsoft Corporation) [File not signed] R2 WlanSvc; C:\WINDOWS\System32\wlansvc.dll [2370048 2016-11-20] (Microsoft Corporation) [File not signed] S3 wlidsvc; C:\WINDOWS\system32\wlidsvc.dll [2104320 2016-11-11] (Microsoft Corporation) [File not signed] R2 wscsvc; C:\WINDOWS\System32\wscsvc.dll [184832 2016-11-11] (Microsoft Corporation) [File not signed] R2 WSearch; C:\WINDOWS\system32\SearchIndexer.exe [903680 2016-11-20] (Microsoft Corporation) [File not signed] R2 WSearch; C:\WINDOWS\SysWOW64\SearchIndexer.exe [773120 2016-11-20] (Microsoft Corporation) [File not signed] S3 wuauserv; C:\WINDOWS\system32\wuaueng.dll [2317824 2016-12-13] (Microsoft Corporation) [File not signed] S3 WwanSvc; C:\WINDOWS\System32\wwansvc.dll [1282048 2016-11-20] (Microsoft Corporation) [File not signed] S3 XblAuthManager; C:\WINDOWS\System32\XblAuthManager.dll [1013248 2016-11-20] (Microsoft Corporation) [File not signed] S3 WMPNetworkSvc; "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 ahcache; C:\WINDOWS\System32\DRIVERS\ahcache.sys [227328 2016-11-20] (Microsoft Corporation) [File not signed] R3 bowser; C:\WINDOWS\System32\DRIVERS\bowser.sys [101888 2016-11-20] (Microsoft Corporation) [File not signed] S3 BthEnum; C:\WINDOWS\System32\drivers\BthEnum.sys [114176 2016-11-20] (Microsoft Corporation) [File not signed] S3 BthLEEnum; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [249856 2016-11-20] (Microsoft Corporation) [File not signed] S3 BthPan; C:\WINDOWS\System32\drivers\bthpan.sys [128512 2016-11-20] (Microsoft Corporation) [File not signed] S3 BTHPORT; C:\WINDOWS\System32\drivers\BTHport.sys [967168 2016-11-11] (Microsoft Corporation) [File not signed] R3 BTHUSB; C:\WINDOWS\System32\drivers\BTHUSB.sys [84992 2016-11-20] (Microsoft Corporation) [File not signed] S3 CapImg; C:\WINDOWS\System32\drivers\capimg.sys [118272 2016-11-20] (Microsoft Corporation) [File not signed] R1 Dfsc; C:\WINDOWS\System32\Drivers\dfsc.sys [144896 2016-11-20] (Microsoft Corporation) [File not signed] R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [55816 2015-08-13] (Intel Corporation) R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [53752 2015-08-13] (Intel Corporation) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132272 2017-01-17] (ESET) R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [106768 2017-01-17] (ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15488 2017-01-17] (ESET) R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [180544 2017-01-17] (ESET) R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [49672 2017-01-17] (ESET) R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [77616 2017-01-17] (ESET) R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [96856 2017-01-17] (ESET) R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [261624 2015-08-13] (Intel Corporation) R3 HidUsb; C:\WINDOWS\System32\drivers\hidusb.sys [38400 2016-11-20] (Microsoft Corporation) [File not signed] U4 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [54736 2017-03-17] () R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7402992 2016-11-02] (Intel Corporation) S3 kbdhid; C:\WINDOWS\System32\drivers\kbdhid.sys [39424 2016-11-20] (Microsoft Corporation) [File not signed] S3 Modem; C:\WINDOWS\System32\drivers\modem.sys [42496 2016-11-11] (Microsoft Corporation) [File not signed] S3 MRxDAV; C:\WINDOWS\system32\drivers\mrxdav.sys [143872 2016-11-20] (Microsoft Corporation) [File not signed] R2 mrxsmb10; C:\WINDOWS\System32\DRIVERS\mrxsmb10.sys [282624 2016-11-11] (Microsoft Corporation) [File not signed] S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-11-25] (Realtek Semiconductor Corp.) R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [719424 2016-08-24] (Realtek Semiconductor Corporation) R3 RTWlanE; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [6294016 2017-02-01] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [79960 2016-10-05] (Synaptics Incorporated) R2 srv; C:\WINDOWS\System32\DRIVERS\srv.sys [409088 2016-11-20] (Microsoft Corporation) [File not signed] R3 srv2; C:\WINDOWS\System32\DRIVERS\srv2.sys [713216 2016-11-11] (Microsoft Corporation) [File not signed] R3 srvnet; C:\WINDOWS\System32\DRIVERS\srvnet.sys [248320 2016-11-20] (Microsoft Corporation) [File not signed] U5 TPM; C:\Windows\System32\Drivers\TPM.sys [219488 2016-11-11] (Microsoft Corporation) R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-14] (Intel Corporation) R3 usbvideo; C:\WINDOWS\System32\Drivers\usbvideo.sys [226816 2016-11-20] (Microsoft Corporation) [File not signed] S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 wdiwifi; C:\WINDOWS\System32\DRIVERS\wdiwifi.sys [719360 2016-11-20] (Microsoft Corporation) [File not signed] S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [32832 2016-08-10] (HP) S3 xinputhid; C:\WINDOWS\System32\drivers\xinputhid.sys [43520 2016-11-20] (Microsoft Corporation) [File not signed] S1 epp; \??\C:\Program Files\bin64\epp.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-03-17 13:54 - 2017-03-17 13:55 - 00018812 _____ C:\Users\Shannon\Desktop\FRST.txt 2017-03-17 13:15 - 2017-03-17 13:25 - 02424832 _____ (Farbar) C:\Users\Shannon\Desktop\farfaraway.exe 2017-03-17 13:15 - 2017-03-17 13:19 - 00032448 _____ C:\Users\Shannon\Desktop\Rkill.txt 2017-03-17 13:14 - 2017-03-17 13:14 - 02451912 _____ (IObit ) C:\Users\Shannon\Downloads\sesame.exe 2017-03-17 11:51 - 2017-03-17 11:51 - 00478392 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\E0FEB6CC.sys 2017-03-17 11:51 - 2017-03-17 11:51 - 00085600 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\60209899.sys 2017-03-17 11:03 - 2017-03-17 13:08 - 00004170 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E1C4B113-8E9B-4833-97B4-9EE77E8BDE35} 2017-03-17 10:41 - 2017-03-17 10:41 - 00371282 _____ C:\Users\Shannon\Downloads\meow.zip 2017-03-17 10:30 - 2017-03-17 10:35 - 00000000 ____D C:\Users\Shannon\AppData\Local\NPE 2017-03-17 10:30 - 2017-03-17 10:30 - 00000000 ____D C:\ProgramData\Norton 2017-03-17 10:24 - 2017-03-17 10:24 - 00000000 ____D C:\Program Files\Reports 2017-03-17 10:19 - 2017-03-17 10:20 - 00000000 ____D C:\Program Files\Quarantine 2017-03-17 10:10 - 2017-03-17 10:11 - 00000000 ____D C:\Users\Shannon\Downloads\lawgz 2017-03-17 09:17 - 2017-03-17 10:03 - 00000000 ____D C:\ProgramData\RogueKiller 2017-03-17 09:17 - 2017-03-17 09:17 - 00000899 _____ C:\Users\Public\Desktop\RogueKiller.lnk 2017-03-17 09:17 - 2017-03-17 09:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2017-03-17 09:17 - 2017-03-17 09:17 - 00000000 ____D C:\Program Files\RogueKiller 2017-03-17 08:37 - 2017-03-17 09:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2017-03-17 08:37 - 2017-03-17 08:37 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-03-17 08:37 - 2017-03-17 08:37 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-03-17 08:36 - 2017-03-17 08:36 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2017-03-17 07:55 - 2017-03-17 07:56 - 06751360 _____ (ESET spol. s r.o.) C:\Users\Shannon\Downloads\esetonlinescanner_enu.exe 2017-03-17 03:05 - 2017-03-17 13:51 - 00000000 ____D C:\Program Files (x86)\Everything 2017-03-17 03:05 - 2017-03-17 03:06 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything 2017-03-17 00:11 - 2017-03-17 00:11 - 00054736 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys 2017-03-17 00:09 - 2017-03-17 00:09 - 00330484 _____ C:\WINDOWS\Minidump\031717-16562-01.dmp 2017-03-17 00:09 - 2017-03-17 00:09 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-03-17 00:09 - 2017-03-17 00:09 - 00000000 ____D C:\WINDOWS\Minidump 2017-03-17 00:04 - 2017-03-17 00:04 - 00257851 _____ C:\Users\Shannon\Documents\archive.zip 2017-03-16 23:47 - 2017-03-16 23:58 - 00000000 ____D C:\ProgramData\HitmanPro 2017-03-16 23:13 - 2017-03-17 13:53 - 00000000 ____D C:\Users\Shannon\AppData\Local\CrashDumps 2017-03-16 20:06 - 2017-03-17 09:18 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys 2017-03-16 19:43 - 2017-03-16 23:26 - 00165376 _____ C:\Users\Shannon\Downloads\SystemLook_x64.exe 2017-03-16 15:48 - 2017-03-16 15:48 - 00000000 ____D C:\Users\Shannon\AppData\Local\ElevatedDiagnostics 2017-03-16 14:54 - 2017-03-17 01:18 - 00034784 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS 2017-03-16 14:53 - 2017-03-17 13:10 - 00000000 ____D C:\Users\Shannon\Downloads\ProcessExplorer 2017-03-16 12:09 - 2017-03-16 12:09 - 00716456 _____ (Sysinternals - www.sysinternals.com) C:\Users\Shannon\Downloads\autoruns.exe 2017-03-16 07:48 - 2017-03-16 07:48 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\.mono 2017-03-16 07:48 - 2017-03-16 07:48 - 00000000 ____D C:\ProgramData\.mono 2017-03-16 06:19 - 2017-03-16 06:19 - 00000000 ____D C:\Users\Shannon\AppData\LocalLow\Glu Mobile, Inc 2017-03-16 06:14 - 2017-03-16 06:14 - 00000000 ____D C:\Users\Public\Facebook Games 2017-03-16 06:13 - 2017-03-16 06:13 - 00001241 _____ C:\Users\Shannon\Desktop\Facebook Gameroom.lnk 2017-03-16 06:13 - 2017-03-16 06:13 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook 2017-03-16 06:13 - 2017-03-16 06:13 - 00000000 ____D C:\Users\Shannon\AppData\Local\Facebook 2017-03-16 06:13 - 2017-03-16 06:13 - 00000000 ____D C:\Users\Shannon\AppData\Local\CEF 2017-03-16 06:11 - 2017-03-16 06:11 - 00252104 _____ (Facebook) C:\Users\Shannon\Downloads\FacebookGameroom.exe 2017-03-16 05:56 - 2017-03-16 05:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2017-03-16 05:29 - 2017-03-17 13:18 - 00000000 ____D C:\Users\Shannon\AppData\LocalLow\Mozilla 2017-03-16 05:29 - 2017-03-16 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-03-16 05:29 - 2017-03-16 05:33 - 00000000 ____D C:\Users\Shannon\AppData\Local\Mozilla 2017-03-16 05:29 - 2017-03-16 05:29 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-03-16 05:29 - 2017-03-16 05:29 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Mozilla 2017-03-16 05:29 - 2017-03-16 05:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-03-15 20:05 - 2017-03-17 13:54 - 00000000 ____D C:\FRST 2017-03-15 13:33 - 2017-03-15 13:33 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Skype 2017-03-14 06:48 - 2017-03-14 06:48 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Synaptics 2017-03-14 06:48 - 2017-03-14 06:48 - 00000000 ____D C:\ProgramData\Synaptics 2017-03-14 06:11 - 2017-03-17 05:56 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-03-14 06:11 - 2017-03-17 05:54 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-03-14 05:52 - 2016-12-21 01:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-03-14 05:52 - 2016-12-21 01:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-03-14 05:52 - 2016-12-21 00:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-03-14 05:52 - 2016-12-21 00:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-03-14 05:52 - 2016-12-21 00:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-03-14 05:52 - 2016-12-21 00:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-03-14 05:52 - 2016-12-21 00:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-03-14 05:52 - 2016-12-21 00:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-03-14 05:52 - 2016-12-21 00:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-03-14 05:52 - 2016-12-21 00:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-03-14 05:52 - 2016-12-21 00:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-03-14 05:52 - 2016-12-21 00:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-03-14 05:52 - 2016-12-21 00:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-03-14 05:52 - 2016-12-21 00:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-03-14 05:52 - 2016-12-21 00:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-03-14 05:52 - 2016-12-20 23:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-03-14 05:52 - 2016-12-20 23:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-03-14 05:52 - 2016-12-20 23:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-03-14 05:52 - 2016-12-20 23:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-03-14 05:52 - 2016-12-20 23:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-03-14 05:52 - 2016-12-20 23:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-03-14 05:52 - 2016-12-20 23:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-03-14 05:52 - 2016-12-20 23:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-03-14 05:52 - 2016-12-20 23:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-03-14 05:52 - 2016-12-20 22:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-03-14 05:52 - 2016-12-20 22:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-03-14 05:52 - 2016-12-20 22:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-03-14 05:52 - 2016-12-20 21:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-03-14 05:52 - 2016-12-20 21:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-03-14 05:52 - 2016-12-20 21:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-03-14 05:52 - 2016-12-20 21:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-03-14 05:52 - 2016-12-20 21:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-03-14 05:52 - 2016-12-20 21:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-03-14 05:52 - 2016-12-20 21:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-03-14 05:52 - 2016-12-20 21:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-03-14 05:52 - 2016-12-20 21:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-03-14 05:52 - 2016-12-20 21:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-03-14 05:52 - 2016-12-20 21:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-03-14 05:52 - 2016-12-20 21:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-03-14 05:52 - 2016-12-13 22:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-03-14 05:52 - 2016-12-13 22:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-03-14 05:52 - 2016-12-13 22:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-03-14 05:52 - 2016-12-13 22:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-03-14 05:52 - 2016-12-13 22:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-03-14 05:52 - 2016-12-13 21:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-03-14 05:52 - 2016-12-13 21:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-03-14 05:52 - 2016-12-13 21:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-03-14 05:52 - 2016-12-13 21:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-03-14 05:52 - 2016-12-13 21:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-03-14 05:52 - 2016-12-13 21:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-03-14 05:52 - 2016-12-13 21:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-03-14 05:52 - 2016-12-13 21:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-03-14 05:52 - 2016-12-13 21:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-03-14 05:52 - 2016-12-13 21:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-03-14 05:52 - 2016-12-13 21:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-03-14 05:52 - 2016-12-13 21:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-03-14 05:52 - 2016-12-13 21:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-03-14 05:52 - 2016-12-13 21:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-03-14 05:52 - 2016-12-13 21:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-03-14 05:52 - 2016-12-13 21:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-03-14 05:52 - 2016-12-13 21:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-03-14 05:52 - 2016-12-13 21:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-03-14 05:52 - 2016-12-13 21:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-03-14 05:52 - 2016-12-13 21:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-03-14 05:52 - 2016-12-09 03:42 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-03-14 05:52 - 2016-12-09 03:42 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-03-14 05:52 - 2016-12-09 03:29 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-03-14 05:52 - 2016-12-09 03:20 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2017-03-14 05:52 - 2016-12-09 03:20 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-03-14 05:52 - 2016-12-09 03:20 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-03-14 05:52 - 2016-12-09 03:19 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2017-03-14 05:52 - 2016-12-09 03:18 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-03-14 05:52 - 2016-12-09 03:18 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2017-03-14 05:52 - 2016-12-09 03:18 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-03-14 05:52 - 2016-12-09 03:18 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-03-14 05:52 - 2016-12-09 03:18 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-03-14 05:52 - 2016-12-09 03:18 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-03-14 05:52 - 2016-12-09 03:01 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-03-14 05:52 - 2016-12-09 03:01 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2017-03-14 05:52 - 2016-12-09 03:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2017-03-14 05:52 - 2016-12-09 02:59 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-03-14 05:52 - 2016-12-09 02:59 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2017-03-14 05:52 - 2016-12-09 02:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-03-14 05:52 - 2016-12-09 02:52 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-03-14 05:52 - 2016-12-09 02:41 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2017-03-14 05:52 - 2016-12-09 02:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2017-03-14 05:52 - 2016-12-09 02:37 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2017-03-14 05:52 - 2016-12-09 02:36 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2017-03-14 05:52 - 2016-12-09 02:36 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-03-14 05:52 - 2016-12-09 02:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2017-03-14 05:52 - 2016-12-09 02:33 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-03-14 05:52 - 2016-12-09 02:31 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2017-03-14 05:52 - 2016-12-09 02:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2017-03-14 05:52 - 2016-12-09 02:21 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-03-14 05:52 - 2016-12-09 02:20 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-03-14 05:52 - 2016-12-09 02:18 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-03-14 05:52 - 2016-12-09 02:18 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-03-14 05:52 - 2016-12-09 02:18 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2017-03-14 05:52 - 2016-12-09 02:16 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2017-03-14 05:52 - 2016-12-09 02:15 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2017-03-14 05:52 - 2016-12-09 02:15 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2017-03-14 05:52 - 2016-12-09 02:15 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2017-03-14 05:52 - 2016-12-09 01:54 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-03-14 05:52 - 2016-11-11 03:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2017-03-14 05:52 - 2016-11-11 03:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2017-03-14 05:52 - 2016-11-11 03:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-03-14 05:52 - 2016-11-11 03:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2017-03-14 05:52 - 2016-11-11 03:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll 2017-03-14 05:52 - 2016-11-11 03:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2017-03-14 05:52 - 2016-11-11 03:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2017-03-14 05:52 - 2016-11-11 03:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2017-03-14 05:52 - 2016-11-11 02:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2017-03-14 05:52 - 2016-11-11 02:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-03-14 05:52 - 2016-11-11 02:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-03-14 05:52 - 2016-11-11 02:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe 2017-03-14 05:52 - 2016-11-11 02:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll 2017-03-14 05:52 - 2016-11-11 02:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2017-03-14 05:52 - 2016-11-11 02:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-03-14 05:52 - 2016-11-11 02:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2017-03-14 05:52 - 2016-11-11 02:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2017-03-14 05:52 - 2016-11-11 02:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2017-03-14 05:52 - 2016-11-11 02:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2017-03-14 05:52 - 2016-11-11 02:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll 2017-03-14 05:52 - 2016-11-11 02:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2017-03-14 05:52 - 2016-11-11 02:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2017-03-14 05:52 - 2016-11-11 02:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2017-03-14 05:52 - 2016-11-11 02:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-03-14 05:52 - 2016-11-11 02:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-03-14 05:52 - 2016-11-11 02:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2017-03-14 05:52 - 2016-11-11 02:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-03-14 05:52 - 2016-11-11 02:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2017-03-14 05:52 - 2016-11-11 02:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2017-03-14 05:52 - 2016-11-11 02:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-03-14 05:52 - 2016-11-11 02:18 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-03-14 05:52 - 2016-11-11 02:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2017-03-14 05:52 - 2016-11-11 02:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2017-03-14 05:52 - 2016-11-11 02:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2017-03-14 05:52 - 2016-11-11 02:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-03-14 05:52 - 2016-11-11 02:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2017-03-14 05:52 - 2016-11-11 02:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2017-03-14 05:52 - 2016-11-11 02:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2017-03-14 05:52 - 2016-11-11 02:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll 2017-03-14 05:52 - 2016-11-11 02:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2017-03-14 05:52 - 2016-11-11 02:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll 2017-03-14 05:52 - 2016-11-11 02:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2017-03-14 05:52 - 2016-11-11 02:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-03-14 05:52 - 2016-11-11 02:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-03-14 05:52 - 2016-11-11 02:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2017-03-14 05:52 - 2016-11-11 02:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-03-14 05:52 - 2016-11-11 02:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2017-03-14 05:52 - 2016-11-11 02:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2017-03-14 05:52 - 2016-11-11 02:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2017-03-14 05:52 - 2016-11-11 02:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-03-14 05:52 - 2016-11-11 02:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-03-14 05:52 - 2016-11-11 02:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-03-14 05:52 - 2016-11-11 02:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2017-03-14 05:52 - 2016-11-11 02:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2017-03-14 05:52 - 2016-11-11 01:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2017-03-14 05:52 - 2016-11-11 01:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-03-14 05:52 - 2016-11-11 00:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-03-14 05:52 - 2016-11-11 00:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-03-14 05:52 - 2016-11-11 00:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-03-14 05:52 - 2016-11-11 00:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-03-14 05:52 - 2016-11-11 00:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-03-14 05:52 - 2016-11-11 00:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2017-03-14 05:52 - 2016-11-11 00:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2017-03-14 05:52 - 2016-11-11 00:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2017-03-14 05:52 - 2016-11-11 00:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2017-03-14 05:52 - 2016-11-11 00:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-03-14 05:52 - 2016-11-11 00:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-03-14 05:52 - 2016-11-11 00:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-03-14 05:52 - 2016-11-11 00:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2017-03-14 05:52 - 2016-11-11 00:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2017-03-14 05:52 - 2016-11-11 00:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2017-03-14 05:52 - 2016-11-11 00:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2017-03-14 05:52 - 2016-11-11 00:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-03-14 05:52 - 2016-11-11 00:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2017-03-14 05:52 - 2016-11-11 00:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2017-03-14 05:52 - 2016-11-11 00:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2017-03-14 05:52 - 2016-11-11 00:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll 2017-03-14 05:52 - 2016-11-11 00:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-03-14 05:52 - 2016-11-11 00:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-03-14 05:52 - 2016-11-11 00:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2017-03-14 05:52 - 2016-11-11 00:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2017-03-14 05:52 - 2016-11-11 00:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2017-03-14 05:52 - 2016-11-11 00:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2017-03-14 05:52 - 2016-11-11 00:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-03-14 05:52 - 2016-11-11 00:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2017-03-14 05:52 - 2016-11-11 00:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2017-03-14 05:52 - 2016-11-11 00:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2017-03-14 05:52 - 2016-11-11 00:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2017-03-14 05:52 - 2016-11-11 00:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-03-14 05:51 - 2016-12-21 01:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-03-14 05:51 - 2016-12-21 00:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-03-14 05:51 - 2016-12-21 00:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-03-14 05:51 - 2016-12-21 00:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-03-14 05:51 - 2016-12-21 00:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-03-14 05:51 - 2016-12-21 00:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-03-14 05:51 - 2016-12-21 00:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-03-14 05:51 - 2016-12-21 00:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-03-14 05:51 - 2016-12-21 00:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-03-14 05:51 - 2016-12-21 00:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-03-14 05:51 - 2016-12-21 00:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-03-14 05:51 - 2016-12-21 00:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-03-14 05:51 - 2016-12-21 00:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-03-14 05:51 - 2016-12-21 00:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-03-14 05:51 - 2016-12-21 00:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-03-14 05:51 - 2016-12-21 00:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-03-14 05:51 - 2016-12-21 00:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-03-14 05:51 - 2016-12-21 00:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-03-14 05:51 - 2016-12-21 00:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-03-14 05:51 - 2016-12-21 00:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-03-14 05:51 - 2016-12-21 00:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-03-14 05:51 - 2016-12-21 00:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-03-14 05:51 - 2016-12-21 00:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-03-14 05:51 - 2016-12-21 00:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-03-14 05:51 - 2016-12-20 23:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-03-14 05:51 - 2016-12-20 23:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-03-14 05:51 - 2016-12-20 23:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-03-14 05:51 - 2016-12-20 23:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-03-14 05:51 - 2016-12-20 23:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-03-14 05:51 - 2016-12-20 23:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-03-14 05:51 - 2016-12-20 23:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-03-14 05:51 - 2016-12-20 23:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-03-14 05:51 - 2016-12-20 23:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-03-14 05:51 - 2016-12-20 23:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-03-14 05:51 - 2016-12-20 23:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-03-14 05:51 - 2016-12-20 22:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-03-14 05:51 - 2016-12-20 21:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-03-14 05:51 - 2016-12-20 21:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-03-14 05:51 - 2016-12-20 21:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-03-14 05:51 - 2016-12-20 21:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-03-14 05:51 - 2016-12-20 21:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-03-14 05:51 - 2016-12-20 21:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-03-14 05:51 - 2016-12-20 21:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-03-14 05:51 - 2016-12-20 21:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-03-14 05:51 - 2016-12-20 21:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-03-14 05:51 - 2016-12-20 21:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-03-14 05:51 - 2016-12-20 21:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-03-14 05:51 - 2016-12-20 21:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-03-14 05:51 - 2016-12-20 21:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-03-14 05:51 - 2016-12-20 21:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-03-14 05:51 - 2016-12-20 21:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-03-14 05:51 - 2016-12-20 21:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-03-14 05:51 - 2016-12-13 22:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-03-14 05:51 - 2016-12-13 22:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-03-14 05:51 - 2016-12-13 22:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-03-14 05:51 - 2016-12-13 22:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-03-14 05:51 - 2016-12-13 22:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-03-14 05:51 - 2016-12-13 22:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-03-14 05:51 - 2016-12-13 22:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-03-14 05:51 - 2016-12-13 22:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-03-14 05:51 - 2016-12-13 22:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-03-14 05:51 - 2016-12-13 22:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-03-14 05:51 - 2016-12-13 22:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-03-14 05:51 - 2016-12-13 22:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-03-14 05:51 - 2016-12-13 22:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-03-14 05:51 - 2016-12-13 21:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-03-14 05:51 - 2016-12-13 21:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-03-14 05:51 - 2016-12-13 21:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-03-14 05:51 - 2016-12-13 21:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-03-14 05:51 - 2016-12-13 21:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-03-14 05:51 - 2016-12-13 21:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-03-14 05:51 - 2016-12-13 21:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-03-14 05:51 - 2016-12-13 21:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-03-14 05:51 - 2016-12-13 21:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-03-14 05:51 - 2016-12-13 21:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-03-14 05:51 - 2016-12-13 21:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-03-14 05:51 - 2016-12-13 21:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-03-14 05:51 - 2016-12-13 21:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-03-14 05:51 - 2016-12-13 21:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-03-14 05:51 - 2016-12-13 21:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-03-14 05:51 - 2016-12-13 21:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-03-14 05:51 - 2016-12-13 21:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-03-14 05:51 - 2016-12-13 21:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-03-14 05:51 - 2016-12-13 21:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-03-14 05:51 - 2016-12-13 21:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-03-14 05:51 - 2016-12-13 21:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-03-14 05:51 - 2016-12-13 21:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-03-14 05:51 - 2016-12-13 21:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-03-14 05:51 - 2016-12-13 21:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-03-14 05:51 - 2016-12-13 21:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-03-14 05:51 - 2016-12-13 21:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-03-14 05:51 - 2016-12-09 03:34 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-03-14 05:51 - 2016-12-09 03:34 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-03-14 05:51 - 2016-12-09 03:33 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-03-14 05:51 - 2016-12-09 03:33 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-03-14 05:51 - 2016-12-09 03:30 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-03-14 05:51 - 2016-12-09 03:28 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-03-14 05:51 - 2016-12-09 03:27 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-03-14 05:51 - 2016-12-09 03:20 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-03-14 05:51 - 2016-12-09 03:20 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-03-14 05:51 - 2016-12-09 03:19 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2017-03-14 05:51 - 2016-12-09 03:15 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-03-14 05:51 - 2016-12-09 03:14 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-03-14 05:51 - 2016-12-09 03:11 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-03-14 05:51 - 2016-12-09 03:10 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-03-14 05:51 - 2016-12-09 03:10 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-03-14 05:51 - 2016-12-09 03:01 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-03-14 05:51 - 2016-12-09 02:57 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-03-14 05:51 - 2016-12-09 02:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-03-14 05:51 - 2016-12-09 02:51 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-03-14 05:51 - 2016-12-09 02:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2017-03-14 05:51 - 2016-12-09 02:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2017-03-14 05:51 - 2016-12-09 02:33 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2017-03-14 05:51 - 2016-12-09 02:32 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-03-14 05:51 - 2016-12-09 02:31 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-03-14 05:51 - 2016-12-09 02:28 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-03-14 05:51 - 2016-12-09 02:28 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-03-14 05:51 - 2016-12-09 02:27 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-03-14 05:51 - 2016-12-09 02:27 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2017-03-14 05:51 - 2016-12-09 02:27 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2017-03-14 05:51 - 2016-12-09 02:23 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-03-14 05:51 - 2016-12-09 02:22 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-03-14 05:51 - 2016-12-09 02:21 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2017-03-14 05:51 - 2016-12-09 02:20 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2017-03-14 05:51 - 2016-12-09 02:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-03-14 05:51 - 2016-12-09 02:20 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-03-14 05:51 - 2016-12-09 02:19 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2017-03-14 05:51 - 2016-12-09 02:19 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2017-03-14 05:51 - 2016-12-09 02:19 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2017-03-14 05:51 - 2016-12-09 02:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2017-03-14 05:51 - 2016-12-09 02:17 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2017-03-14 05:51 - 2016-11-11 03:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2017-03-14 05:51 - 2016-11-11 03:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2017-03-14 05:51 - 2016-11-11 03:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-03-14 05:51 - 2016-11-11 03:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2017-03-14 05:51 - 2016-11-11 03:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2017-03-14 05:51 - 2016-11-11 03:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-03-14 05:51 - 2016-11-11 03:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-03-14 05:51 - 2016-11-11 03:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-03-14 05:51 - 2016-11-11 03:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-03-14 05:51 - 2016-11-11 03:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-03-14 05:51 - 2016-11-11 02:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-03-14 05:51 - 2016-11-11 02:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2017-03-14 05:51 - 2016-11-11 02:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll 2017-03-14 05:51 - 2016-11-11 02:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-03-14 05:51 - 2016-11-11 02:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-03-14 05:51 - 2016-11-11 02:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll 2017-03-14 05:51 - 2016-11-11 02:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2017-03-14 05:51 - 2016-11-11 02:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-03-14 05:51 - 2016-11-11 02:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll 2017-03-14 05:51 - 2016-11-11 02:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys 2017-03-14 05:51 - 2016-11-11 02:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2017-03-14 05:51 - 2016-11-11 02:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2017-03-14 05:51 - 2016-11-11 02:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2017-03-14 05:51 - 2016-11-11 02:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2017-03-14 05:51 - 2016-11-11 02:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2017-03-14 05:51 - 2016-11-11 02:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2017-03-14 05:51 - 2016-11-11 02:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-03-14 05:51 - 2016-11-11 02:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2017-03-14 05:51 - 2016-11-11 02:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2017-03-14 05:51 - 2016-11-11 02:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2017-03-14 05:51 - 2016-11-11 02:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-03-14 05:51 - 2016-11-11 02:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll 2017-03-14 05:51 - 2016-11-11 02:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe 2017-03-14 05:51 - 2016-11-11 02:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2017-03-14 05:51 - 2016-11-11 02:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-03-14 05:51 - 2016-11-11 02:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2017-03-14 05:51 - 2016-11-11 02:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-03-14 05:51 - 2016-11-11 02:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-03-14 05:51 - 2016-11-11 02:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-03-14 05:51 - 2016-11-11 02:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-03-14 05:51 - 2016-11-11 02:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2017-03-14 05:51 - 2016-11-11 02:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2017-03-14 05:51 - 2016-11-11 02:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2017-03-14 05:51 - 2016-11-11 02:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2017-03-14 05:51 - 2016-11-11 02:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-03-14 05:51 - 2016-11-11 02:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-03-14 05:51 - 2016-11-11 02:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll 2017-03-14 05:51 - 2016-11-11 02:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-03-14 05:51 - 2016-11-11 02:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-03-14 05:51 - 2016-11-11 02:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2017-03-14 05:51 - 2016-11-11 02:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-03-14 05:51 - 2016-11-11 02:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-03-14 05:51 - 2016-11-11 02:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll 2017-03-14 05:51 - 2016-11-11 02:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2017-03-14 05:51 - 2016-11-11 02:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-03-14 05:51 - 2016-11-11 02:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-03-14 05:51 - 2016-11-11 02:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2017-03-14 05:51 - 2016-11-11 02:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll 2017-03-14 05:51 - 2016-11-11 02:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-03-14 05:51 - 2016-11-11 02:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-03-14 05:51 - 2016-11-11 02:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-03-14 05:51 - 2016-11-11 02:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll 2017-03-14 05:51 - 2016-11-11 02:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2017-03-14 05:51 - 2016-11-11 02:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-03-14 05:51 - 2016-11-11 02:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2017-03-14 05:51 - 2016-11-11 02:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-03-14 05:51 - 2016-11-11 02:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2017-03-14 05:51 - 2016-11-11 02:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-03-14 05:51 - 2016-11-11 02:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2017-03-14 05:51 - 2016-11-11 02:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-03-14 05:51 - 2016-11-11 02:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2017-03-14 05:51 - 2016-11-11 01:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2017-03-14 05:51 - 2016-11-11 00:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-03-14 05:51 - 2016-11-11 00:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll 2017-03-14 05:51 - 2016-11-11 00:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2017-03-14 05:51 - 2016-11-11 00:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2017-03-14 05:51 - 2016-11-11 00:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2017-03-14 05:51 - 2016-11-11 00:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2017-03-14 05:51 - 2016-11-11 00:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-03-14 05:51 - 2016-11-11 00:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2017-03-14 05:51 - 2016-11-11 00:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll 2017-03-14 05:51 - 2016-11-11 00:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll 2017-03-14 05:51 - 2016-11-11 00:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe 2017-03-14 05:51 - 2016-11-11 00:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe 2017-03-14 05:51 - 2016-11-11 00:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2017-03-14 05:51 - 2016-11-11 00:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2017-03-14 05:51 - 2016-11-11 00:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll 2017-03-14 05:51 - 2016-11-11 00:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2017-03-14 05:51 - 2016-11-11 00:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2017-03-14 05:51 - 2016-11-11 00:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2017-03-14 05:51 - 2016-11-11 00:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2017-03-14 05:51 - 2016-11-11 00:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2017-03-14 05:51 - 2016-11-11 00:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2017-03-14 05:51 - 2016-11-11 00:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-03-14 05:51 - 2016-11-11 00:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2017-03-14 05:51 - 2016-11-11 00:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2017-03-14 05:51 - 2016-11-11 00:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-03-14 05:51 - 2016-11-11 00:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2017-03-14 05:51 - 2016-11-11 00:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2017-03-14 05:51 - 2016-11-11 00:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2017-03-14 05:51 - 2016-11-11 00:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll 2017-03-14 05:51 - 2016-11-11 00:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-03-14 05:51 - 2016-11-11 00:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2017-03-14 05:51 - 2016-11-11 00:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-03-14 05:51 - 2016-11-11 00:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2017-03-14 05:51 - 2016-11-11 00:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2017-03-14 05:51 - 2016-11-11 00:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2017-03-14 05:51 - 2016-11-11 00:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2017-03-14 05:51 - 2016-11-11 00:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-03-14 05:51 - 2016-11-11 00:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll 2017-03-14 05:51 - 2016-11-11 00:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-03-14 05:51 - 2016-11-11 00:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-03-14 05:51 - 2016-11-11 00:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-03-14 05:51 - 2016-11-11 00:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2017-03-14 05:51 - 2016-11-11 00:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll 2017-03-14 05:51 - 2016-11-11 00:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-03-14 05:51 - 2016-11-11 00:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-03-14 05:51 - 2016-11-11 00:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-03-14 05:29 - 2017-03-14 05:29 - 00000000 ____D C:\Users\Shannon\AppData\Local\NetworkTiles 2017-03-14 05:21 - 2016-12-21 00:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-03-14 05:21 - 2016-12-20 21:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-03-14 05:12 - 2017-03-17 07:56 - 00000000 ____D C:\Users\Shannon\AppData\Local\ESET 2017-03-14 05:08 - 2017-03-14 05:08 - 00002100 _____ C:\Users\Public\Desktop\ESET Banking & Payment protection.lnk 2017-03-14 05:08 - 2017-03-14 05:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2017-03-14 05:08 - 2017-03-14 05:08 - 00000000 ____D C:\ProgramData\ESET 2017-03-14 05:08 - 2017-03-14 05:08 - 00000000 ____D C:\Program Files\ESET 2017-03-14 05:07 - 2017-03-14 05:07 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2017-03-14 05:07 - 2017-03-14 05:07 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2017-03-14 05:07 - 2017-03-14 05:07 - 00000000 ____D C:\Program Files\Synaptics 2017-03-14 05:07 - 2016-10-05 00:44 - 00079960 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys 2017-03-14 04:57 - 2017-03-14 04:57 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Macromedia 2017-03-14 04:54 - 2017-03-14 04:54 - 00000000 ____D C:\Users\Shannon\AppData\Local\MicrosoftEdge 2017-03-14 04:48 - 2017-03-14 04:48 - 00000000 ____D C:\Users\Shannon\AppData\Local\Comms 2017-03-14 02:41 - 2017-03-14 02:41 - 00001203 _____ C:\Users\defaultuser0\AppData\Roaming\AppData - Shortcut.lnk 2017-03-14 02:30 - 2017-03-16 06:29 - 00000000 ___RD C:\Users\Shannon\OneDrive 2017-03-14 02:30 - 2017-03-14 02:30 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-03-14 02:28 - 2017-03-14 02:28 - 00000000 ____D C:\Users\Shannon\AppData\Local\Publishers 2017-03-14 02:27 - 2017-03-17 13:14 - 00964282 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-03-14 02:27 - 2017-03-17 00:09 - 00000000 __SHD C:\Users\Shannon\IntelGraphicsProfiles 2017-03-14 02:27 - 2017-03-16 20:25 - 00000000 ____D C:\Users\Shannon\AppData\Local\Packages 2017-03-14 02:27 - 2017-03-16 06:11 - 00000000 ____D C:\Users\Shannon 2017-03-14 02:27 - 2017-03-14 06:48 - 00000000 ___RD C:\Users\Public\AccountPictures 2017-03-14 02:27 - 2017-03-14 06:48 - 00000000 ____D C:\Users\Shannon\AppData\Local\ConnectedDevicesPlatform 2017-03-14 02:27 - 2017-03-14 02:27 - 00000020 ___SH C:\Users\Shannon\ntuser.ini 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 _SHDL C:\Users\Shannon\My Documents 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 _SHDL C:\Users\Shannon\Documents\My Videos 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 _SHDL C:\Users\Shannon\Documents\My Pictures 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 _SHDL C:\Users\Shannon\Documents\My Music 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 ____D C:\Users\Shannon\AppData\Roaming\Adobe 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 ____D C:\Users\Shannon\AppData\Local\VirtualStore 2017-03-14 02:27 - 2017-03-14 02:27 - 00000000 ____D C:\Users\Shannon\AppData\Local\TileDataLayer 2017-03-14 02:26 - 2017-03-14 02:26 - 00000000 __SHD C:\Users\defaultuser0\IntelGraphicsProfiles 2017-03-14 02:26 - 2017-03-14 02:26 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore 2017-03-14 02:26 - 2017-03-14 02:26 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer 2017-03-14 02:26 - 2017-03-14 02:26 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2017-03-14 02:26 - 2017-03-14 02:26 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform 2017-03-14 02:25 - 2017-03-14 02:26 - 00000000 ____D C:\Users\defaultuser0 2017-03-14 02:25 - 2017-03-14 02:25 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini 2017-03-14 02:25 - 2017-03-14 02:25 - 00000000 _SHDL C:\Users\defaultuser0\My Documents 2017-03-14 02:25 - 2017-03-14 02:25 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Videos 2017-03-14 02:25 - 2017-03-14 02:25 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Pictures 2017-03-14 02:25 - 2017-03-14 02:25 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Music 2017-03-14 02:23 - 2016-07-16 04:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Public\Documents\My Videos 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Public\Documents\My Pictures 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Public\Documents\My Music 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default\My Documents 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default\Documents\My Videos 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default\Documents\My Music 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Music 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\Default User 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Users\All Users 2017-03-14 02:21 - 2017-03-14 02:21 - 00000000 _SHDL C:\Documents and Settings 2017-03-14 02:18 - 2017-03-14 02:18 - 00007961 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip 2017-03-14 02:18 - 2017-03-14 02:18 - 00000000 ____D C:\ProgramData\Realtek 2017-03-14 02:18 - 2017-03-14 02:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos 2017-03-14 02:17 - 2017-03-14 02:26 - 00000000 ____D C:\Intel 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_esif_umdf2_02_00_00.Wdf 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\WINDOWS\system32\SRSLabs 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\ProgramData\USOShared 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\Program Files\Realtek 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\Program Files\Intel 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 ____D C:\Program Files (x86)\Intel 2017-03-14 02:17 - 2017-03-14 02:17 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2017-03-14 02:17 - 2016-11-02 00:05 - 00103952 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-03-14 02:17 - 2016-11-02 00:05 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-03-14 02:16 - 2017-03-17 08:15 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-03-14 02:16 - 2017-03-17 05:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-03-14 02:16 - 2017-03-14 02:16 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-03-14 02:15 - 2017-03-14 06:45 - 00194192 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-03-14 01:42 - 2017-03-14 02:25 - 00000000 ___DC C:\WINDOWS\Panther 2017-03-14 01:42 - 2017-03-14 01:42 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-03-14 01:42 - 2017-03-14 01:42 - 00000000 ____D C:\WINDOWS\InfusedApps 2017-03-14 01:41 - 2017-03-14 01:41 - 00000000 ____D C:\Program Files (x86)\HP 2017-03-14 01:40 - 2017-03-14 01:40 - 00000000 ____D C:\WINDOWS\Setup 2017-03-14 01:40 - 2017-03-09 22:17 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-03-14 01:40 - 2017-03-09 22:17 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-03-14 01:34 - 2017-03-14 01:34 - 00000000 ____D C:\WINDOWS\OCR 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\winrm 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\WCN 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\slmgr 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\0409 2017-03-14 01:33 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\DigitalLocker 2017-03-14 01:26 - 2017-03-17 12:43 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-03-14 01:26 - 2017-03-17 11:21 - 00000000 ____D C:\WINDOWS\rescache 2017-03-14 01:26 - 2017-03-17 00:15 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-03-14 01:26 - 2017-03-17 00:15 - 00000000 ____D C:\Program Files\WindowsApps 2017-03-14 01:26 - 2017-03-16 20:46 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-03-14 01:26 - 2017-03-15 19:18 - 00000000 ____D C:\WINDOWS\Registration 2017-03-14 01:26 - 2017-03-15 13:36 - 00000000 ____D C:\WINDOWS\appcompat 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\Provisioning 2017-03-14 01:26 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-03-14 01:26 - 2017-03-14 05:09 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2017-03-14 01:26 - 2017-03-14 02:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-03-14 01:26 - 2017-03-14 02:23 - 00000000 ____D C:\WINDOWS\system32\spool 2017-03-14 01:26 - 2017-03-14 02:23 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2017-03-14 01:26 - 2017-03-14 02:22 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-03-14 01:26 - 2017-03-14 02:18 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-03-14 01:26 - 2017-03-14 02:18 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-03-14 01:26 - 2017-03-14 02:17 - 00000000 ____D C:\ProgramData\USOPrivate 2017-03-14 01:26 - 2017-03-14 01:42 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ___RD C:\Program Files\Windows Defender 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\WINDOWS\system32\setup 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-03-14 01:26 - 2017-03-14 01:39 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-03-14 01:26 - 2017-03-14 01:38 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-03-14 01:26 - 2017-03-14 01:34 - 00000000 ____D C:\WINDOWS\SystemApps 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\system32\Com 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\IME 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\WINDOWS\Help 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\Program Files\Common Files\System 2017-03-14 01:26 - 2017-03-14 01:33 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 __SHD C:\Program Files\Windows Sidebar 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 __RSD C:\WINDOWS\Media 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___SD C:\WINDOWS\system32\Nui 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ___RD C:\Users\Public\Libraries 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Web 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Vss 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\tracing 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\TAPI 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SystemResources 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\winevt 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\ras 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\IME 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\icsxml 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\ias 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\downlevel 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\DDFs 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\System 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SKB 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\security 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\schemas 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\SchCache 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Resources 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\PLA 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Performance 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\L2Schemas 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\InputMethod 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Globalization 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Cursors 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\Branding 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\addins 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\ProgramData\Comms 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files\Windows Portable Devices 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files\Windows NT 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files\Common Files\Services 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files (x86)\Windows NT 2017-03-14 01:26 - 2017-03-14 01:26 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2017-03-14 01:26 - 2017-03-14 01:22 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2017-03-14 01:26 - 2017-03-14 01:22 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2017-03-14 01:26 - 2017-03-14 01:22 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2017-03-14 01:26 - 2017-03-14 01:22 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2017-03-14 01:26 - 2017-03-14 01:22 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2017-03-14 01:26 - 2017-03-14 01:22 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK 2017-03-14 01:26 - 2017-03-14 01:22 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2017-03-14 01:26 - 2017-03-14 01:22 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2017-03-14 01:26 - 2017-03-14 01:22 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2017-03-14 01:26 - 2017-03-14 01:22 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2017-03-14 01:26 - 2017-03-14 01:22 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2017-03-14 01:26 - 2017-03-14 01:22 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2017-03-14 01:26 - 2017-03-14 01:22 - 00000219 _____ C:\WINDOWS\system.ini 2017-03-14 01:26 - 2017-03-14 01:22 - 00000092 _____ C:\WINDOWS\win.ini 2017-03-14 01:23 - 2017-03-17 00:09 - 00000000 ____D C:\WINDOWS\INF 2017-03-14 01:15 - 2017-03-17 05:53 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-03-14 01:13 - 2017-03-15 18:54 - 00262144 _____ C:\WINDOWS\system32\config\BBI 2017-03-14 01:13 - 2017-03-14 06:42 - 00000000 ____D C:\WINDOWS\servicing 2017-03-14 01:13 - 2017-03-14 05:39 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-03-14 01:13 - 2017-03-14 01:26 - 00000000 ____D C:\WINDOWS\system32\SMI 2017-03-14 01:12 - 2017-03-14 01:51 - 00000000 ____D C:\$SysReset ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-03-10 18:16 - 2016-07-16 04:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll Some files in TEMP: ==================== 2017-03-17 11:49 - 2016-11-11 03:13 - 1886344 _____ (Microsoft Corporation) C:\Users\Shannon\AppData\Local\Temp\dllnt_dump.dll 2017-03-17 10:14 - 2017-03-16 23:47 - 11581544 _____ (SurfRight B.V.) C:\Users\Shannon\AppData\Local\Temp\HitmanPro.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe [2017-03-14 05:52] - [2016-12-13 21:24] - 0673792 ____A (Microsoft Corporation) 917F081E2AB667C44F7D96DE1D16DFAE C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-03-14 02:15 ==================== End of FRST.txt ============================