Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-07-2017 Ran by [removed] (administrator) on PC (16-07-2017 13:50:31) Running from C:\Users\[removed]\Desktop [removed] Platform: Windows 10 Pro Version 1703 (X64) Language: slovenščina (Slovenija) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\nis.exe (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe () C:\Windows\SysWOW64\ASGT.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Lenovo) C:\Program Files (x86)\Lenovo\LBAI\LBAEvent.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe (Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe (CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe (Intuit) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\nis.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe () C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Helper.exe (ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.584\SSScheduler.exe (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.) C:\Program Files (x86)\Intuit\QuickBooks 2016\QBW32.EXE (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (The Pidgin developer community) C:\Program Files (x86)\Pidgin\pidgin.exe (Microsoft Corporation) C:\Windows\System32\attrib.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe () C:\Users\Uporabnik\AppData\Roaming\ICQ\bin\icq.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [PrintDisp] => C:\WINDOWS\system32\PrintDisp.exe [877568 2013-06-25] (ActMask Co.,Ltd - hxxp://www.all2pdf.com) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-28] (Adobe Systems Incorporated) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION Startup: C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Pošiljanje v OneNote.lnk [2017-07-13] ShortcutTarget: Pošiljanje v OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-07-13] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2017-07-13] ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-13] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.584\SSScheduler.exe (McAfee, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2017-07-13] ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2017-07-13] ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2016\QBW32.EXE (Intuit Inc.) Startup: C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Pošiljanje v OneNote.lnk [2017-07-13] ShortcutTarget: Pošiljanje v OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation) GroupPolicy: Restriction - Windows Defender <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{5b324389-1362-469a-985c-5d316e7330c7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131443293896611588&GUID=59488CFB-A91E-4EC5-AEC1-C59AB2EE3B05 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: YoutubeAdBlock -> {2C6A44CB-AD42-4731-A544-3FBD3D83AB5B} -> C:\Program Files (x86)\YiuAskIE\t9WlcCyc.dll [2017-07-16] () BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-08-16] (Microsoft Corporation) BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation) BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File BHO-x32: YoutubeAdBlock -> {2C6A44CB-AD42-4731-A544-3FBD3D83AB5B} -> C:\Program Files (x86)\YiuAskIE\ktr9tIj.dll [2017-07-16] () BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-07-26] (Microsoft Corporation) BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine32\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-14] (Oracle Corporation) BHO-x32: Foxit PhantomPDF Create PDF ToolBar Helper -> {A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A} -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2017-03-31] () BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-14] (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine32\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) Toolbar: HKLM-x32 - Foxit PhantomPDF Create PDF ToolBar - {BFD9D8A8-57FF-488A-B919-065EC77CF82F} - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2017-03-31] () Toolbar: HKU\S-1-5-21-3349261695-2154521845-2584642868-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler-x32: intu-help-qb9 - {C1252096-0E63-4C06-A38B-03DF9A16AA12} - C:\Program Files (x86)\Intuit\QuickBooks 2016\HelpAsyncPluggableProtocol.dll [2016-03-08] (Intuit, Inc.) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation) Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation) Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2012-06-20] (SAP, Walldorf) Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2012-06-20] (SAP, Walldorf) Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-3349261695-2154521845-2584642868-1001 -> hxxp://www.google.com FireFox: ======== FF ProfilePath: C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670 [2017-07-16] FF user.js: detected! => C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\user.js [2017-05-09] FF NewTab: Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> about:blank FF NetworkProxy: Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> socks", "127.0.0.1" FF NetworkProxy: Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> socks_port", 9951 FF NetworkProxy: Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> type", 0 FF Extension: (Copy Urls Expert) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2017-02-01] FF Extension: (Firebug) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2017-03-01] FF Extension: (User-Agent Switcher) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2016-09-21] FF Extension: (Torrent Tornado) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2017-06-02] FF Extension: ("Popup Virtual Keyboard) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2016-04-27] FF Extension: (Send Tab URLs) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{4aebcd37-f454-4928-9233-174a026ed367}.xpi [2016-07-09] FF Extension: (BetterPrivacy) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-11-01] FF Extension: (User Agent Switcher) - C:\Users\Uporabnik\AppData\Roaming\Mozilla\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2016-04-27] FF ProfilePath: C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670 [2017-02-15] <==== ATTENTION FF Homepage: Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> about:home FF NetworkProxy: Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670 -> type", 0 FF Extension: (Copy Urls Expert) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2017-02-01] FF Extension: (Firebug) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2016-10-11] FF Extension: (User-Agent Switcher) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2016-09-21] FF Extension: (Slovenski jezik Language Pack) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2017-02-14] [not signed] FF Extension: ("Popup Virtual Keyboard) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\[removed] [2016-04-27] FF Extension: (Send Tab URLs) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{4aebcd37-f454-4928-9233-174a026ed367}.xpi [2016-07-09] FF Extension: (BetterPrivacy) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-11-01] FF Extension: (User Agent Switcher) - C:\Users\Uporabnik\AppData\Roaming\Firefox\Firefox\Profiles\t4vp2qx6.default-1446832988670\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2016-04-27] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.7.0.76\coFFAddon FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.7.0.76\coFFAddon [2017-06-02] FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi FF Extension: (Foxit PDF Creator) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi [2017-03-21] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.7.0.76\coFFAddon FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-17] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-17] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2017-04-06] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2017-04-06] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2017-04-06] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2017-04-06] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-14] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-14] (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [2012-05-25] (Yahoo! Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-09-25] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems) StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR HKLM\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2017-03-21] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\Exts\Chrome.crx [2017-06-02] CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2017-03-21] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed] R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3037424 2016-10-04] (Microsoft Corporation) R2 Crypkey License; C:\WINDOWS\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed] R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-11-24] () [File not signed] S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-12-22] (Disc Soft Ltd) R2 FoxitPhantomService; C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe [1659080 2017-04-13] (Foxit Software Inc.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89352 2014-09-15] (Hewlett-Packard Company) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-11] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-01-24] (Intel Corporation) R2 LBAEvent; C:\Program Files (x86)\Lenovo\LBAI\LBAEvent.exe [27464 2013-04-02] (Lenovo) R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584664 2015-12-14] (LENOVO INCORPORATED.) S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (Lenovo) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.584\McCHSvc.exe [404368 2017-06-23] (McAfee, Inc.) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.9.4.8\NIS.exe [326160 2017-05-27] (Symantec Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation) S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] S3 Power Manager DBC Service; C:\Program Files (x86)\Lenovo\PowerMgr\PWMDBSVC.EXE [63744 2015-03-13] (Lenovo) R2 Printer Control; C:\WINDOWS\system32\PrintCtrl.exe [121856 2012-10-21] (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) [File not signed] S3 PwmEWSvc; C:\Program Files (x86)\Lenovo\PowerMgr\PWMEWSVC.EXE [186624 2015-03-13] (Lenovo Group Limited) R2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2016-03-08] (Intuit) [File not signed] S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2016-03-07] (Intuit Inc.) [File not signed] R2 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2016-03-07] (Intuit Inc.) [File not signed] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [28544 2016-09-10] () R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 A38CCID; C:\WINDOWS\system32\DRIVERS\a38ccid.sys [82480 2015-08-20] (Advanced Card Systems Ltd.) S1 arefzzhgq.sys; C:\WINDOWS\system32\drivers\arefzzhgq.sys [15424 2017-07-13] () [File not signed] R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.7.0.76\Definitions\BASHDefs\20170410.001\BHDrvx64.sys [1831064 2017-04-06] (Symantec Corporation) R1 ccSet_NIS; C:\WINDOWS\system32\drivers\NISx64\1609040.008\ccSetx64.sys [174232 2017-05-11] (Symantec Corporation) S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-01-26] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-01-26] (Disc Soft Ltd) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497312 2017-03-27] (Symantec Corporation) R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156824 2017-04-08] (Symantec Corporation) R1 gitbmykra.sys; C:\WINDOWS\system32\drivers\gitbmykra.sys [121200 2017-07-14] () [File not signed] R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.7.0.76\Definitions\IPSDefs\20170408.004\IDSvia64.sys [1036440 2017-04-11] (Symantec Corporation) R3 LBAI; C:\WINDOWS\System32\Drivers\LBAI.sys [16200 2013-04-02] (Lenovo) R1 MpKsl306d2abf; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C3848279-4E0F-48F8-AE8F-0B54D6E8F5D1}\MpKsl306d2abf.sys [44928 2017-07-16] (Microsoft Corporation) R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [28664 2008-03-17] () R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys [14456912 2017-05-19] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation) S1 qlgurlsvn.sys; C:\WINDOWS\system32\drivers\qlgurlsvn.sys [15424 2017-07-12] () [File not signed] S1 rvvhjhog; C:\WINDOWS\system32\drivers\rvvhjhog.sys [55168 2017-07-15] (Microsoft Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R3 SRTSP; C:\WINDOWS\System32\Drivers\NISx64\1609040.008\SRTSP64.SYS [770712 2017-05-11] (Symantec Corporation) R1 SRTSPX; C:\WINDOWS\system32\drivers\NISx64\1609040.008\SRTSPX64.SYS [49304 2017-05-11] (Symantec Corporation) R0 SymEFASI; C:\WINDOWS\System32\drivers\NISx64\1609040.008\SYMEFASI64.SYS [1714328 2017-05-11] (Symantec Corporation) S4 SymELAM; C:\WINDOWS\system32\drivers\NISx64\1609040.008\SymELAM.sys [24608 2017-05-11] (Symantec Corporation) R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-05-18] (Symantec Corporation) R1 SymIRON; C:\WINDOWS\system32\drivers\NISx64\1609040.008\Ironx64.SYS [291480 2017-05-11] (Symantec Corporation) R1 SymNetS; C:\WINDOWS\System32\Drivers\NISx64\1609040.008\SYMNETS.SYS [567496 2017-05-11] (Symantec Corporation) S1 urqrdvlla.sys; C:\WINDOWS\system32\drivers\urqrdvlla.sys [15424 2017-07-14] () [File not signed] S3 VBAudioVACMME; C:\WINDOWS\system32\DRIVERS\vbaudio_cable64_win7.sys [41192 2014-09-02] (Windows (R) Win 7 DDK provider) S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2014-09-21] () [File not signed] R3 VCSVADHWSer; C:\WINDOWS\system32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [124288 2017-07-04] () ========================== Drivers MD5 ======================= C:\WINDOWS\System32\drivers\1394ohci.sys AAB860A5E606B9621E130D8C29D3F305 C:\WINDOWS\System32\drivers\3ware.sys 4140B14929C555E9513D59A2EEB5C471 C:\WINDOWS\system32\DRIVERS\a38ccid.sys 5CB627FF1FCE69E4480F6542CF21BF12 C:\WINDOWS\System32\drivers\ACPI.sys D3DB4E3C096EFF74FB6E73E37CB66DD7 C:\WINDOWS\System32\drivers\AcpiDev.sys 3E5E5DAE5CAEC0209C93D3AD8128D8A0 C:\WINDOWS\System32\Drivers\acpiex.sys F72D7CC7E7A97A09757313F3B4C7E17A C:\WINDOWS\System32\drivers\acpipagr.sys F04B6F53FBDB2B6B0451AE53DE19F0C9 C:\WINDOWS\System32\drivers\acpipmi.sys C347A6095F3BE417D24F1E1349F4AF0F C:\WINDOWS\System32\drivers\acpitime.sys 686BFFC47454DD2F58795C2EE891CA9F C:\WINDOWS\System32\drivers\ADP80XX.SYS FBDA59118E59B3722248C66BAD89CAA9 C:\WINDOWS\system32\drivers\afd.sys AC1928C2F7505BD556C552F153B062AB C:\WINDOWS\System32\DRIVERS\ahcache.sys 1D914C996F2C3134E2344BB74F79BCF6 C:\WINDOWS\System32\drivers\amdk8.sys 9C39FBA94FFEF04561D13ED0D1B50DD0 C:\WINDOWS\System32\drivers\amdppm.sys 395D56FA2E22A10AE4774440D086F559 C:\WINDOWS\System32\drivers\amdsata.sys EB729A9ADCB9F9C406B533F95E2F67D4 C:\WINDOWS\System32\drivers\amdsbs.sys 3B5C5C696F33FE61F1922533B03B9316 C:\WINDOWS\System32\drivers\amdxata.sys A7D45A303FF8A9493C96C4B804051E6E C:\WINDOWS\System32\drivers\appid.sys 5180537517C27375B1F2CB37ED599FAF C:\WINDOWS\System32\drivers\applockerfltr.sys EAF36A714E16A69B8B4ED7591CBA77B6 C:\WINDOWS\system32\drivers\AppvStrm.sys 2D2DF2463FACFBF2FEE39DCCDF49D1B5 C:\WINDOWS\system32\drivers\AppvVemgr.sys B86E646CE67FE9D75C0D762B19B465FC C:\WINDOWS\system32\drivers\AppvVfs.sys 2207D2A001A3C30B825F191CD2A76C91 C:\WINDOWS\System32\drivers\arcsas.sys 6E456A94B9BD7F6B4758729BCEDE40C3 C:\WINDOWS\system32\drivers\arefzzhgq.sys 86971E14CA88010B6507B9327089A392 C:\WINDOWS\System32\drivers\asyncmac.sys 766F3A7E42AFCF74265FAC78987D1665 C:\WINDOWS\System32\drivers\atapi.sys 01733BEEE02E51F712330D5909BD701C C:\WINDOWS\System32\drivers\bxvbda.sys 0914A5E66C0775CE11960452A6434FEC C:\WINDOWS\System32\drivers\BasicDisplay.sys F8129321B1874D4386F7FEB754BC3380 C:\WINDOWS\System32\drivers\BasicRender.sys E2BFD01BD0ECF2BDE9420022147952A4 C:\WINDOWS\System32\drivers\bcmfn2.sys 739D089777D2B66DBE7201E5EA4BA2D7 C:\Windows\System32\Drivers\Beep.sys ED03D2ACE378C9EB8BB957ABBD85B951 C:\Program Files (x86)\Norton Internet Security\NortonData\22.7.0.76\Definitions\BASHDefs\20170410.001\BHDrvx64.sys 00369DB01757AA37CC64D8ECCFF37EC6 C:\WINDOWS\System32\DRIVERS\bowser.sys 2342B8619193B0D9FAC0D02C69DCE74A C:\WINDOWS\System32\drivers\BthAvrcpTg.sys AF57F0B0E284BE06860A7B701341324D C:\WINDOWS\System32\drivers\bthhfenum.sys 729CC10B1658178F0F009FE0E9159281 C:\WINDOWS\System32\drivers\BthHFHid.sys 336A9C0254A0178ED50281B6EDF5B836 C:\WINDOWS\System32\drivers\bthmodem.sys 5428242193611BF91DDBF4F58900A55A C:\WINDOWS\System32\drivers\buttonconverter.sys 102CAA11BA89290D48FBFD2E04274BA0 C:\WINDOWS\System32\drivers\CAD.sys 029434AC0A3935F9125ABBD08BF7C30B C:\WINDOWS\System32\drivers\capimg.sys 307AE8BC9B45772DA02FB952A1D86C35 C:\WINDOWS\system32\drivers\NISx64\1609040.008\ccSetx64.sys AF24D2C05C37790E0039D53634C440F1 C:\WINDOWS\System32\DRIVERS\cdfs.sys B6E5AD7C83A5254DEE9D86023C0E5A81 C:\WINDOWS\System32\drivers\cdrom.sys ABE77AD954BC3D72F559CF0C381E50BC C:\WINDOWS\System32\drivers\cht4sx64.sys 05EA22CFC40EDE05BF6E3BC782E5204C C:\WINDOWS\System32\drivers\cht4vx64.sys 863E1C9F6750446DFB9EDCAEC3531367 C:\WINDOWS\System32\drivers\circlass.sys 3E416539352B007AD0610BF34AC15D31 C:\WINDOWS\System32\drivers\cldflt.sys 616E1ED94FA7F96D429D985FDB203D2E C:\WINDOWS\System32\drivers\CLFS.sys 1BF9D74451B8AF166105E28F1D7A5C27 C:\WINDOWS\System32\drivers\registry.sys 5118CFC33BBB51C7E3ED441B7085AD26 C:\WINDOWS\System32\drivers\CmBatt.sys 232F3A3AC3A2FB32C5C46503A6517073 C:\WINDOWS\System32\Drivers\cng.sys 3413CE81E02C091F33C4C3DD3071630F C:\WINDOWS\System32\DRIVERS\cnghwassist.sys E1BFF774FF67CA951A5DFF0E104FB132 C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys DFDAEDB857BC18764F0D8ECDCC3C1499 C:\WINDOWS\System32\drivers\condrv.sys 04532711732BE9DBC364E88E4A9EC18A C:\WINDOWS\System32\drivers\csc.sys EFB2A77F0CD1B8A79899C1D37B01CA86 C:\WINDOWS\System32\drivers\dam.sys F51953EC4B9AACD92A3B3CE66E05CEF4 C:\WINDOWS\System32\Drivers\dfsc.sys 185A4519B7764F4DEF714D890A7A9FD2 C:\WINDOWS\System32\drivers\disk.sys 1203EA16F36C5BEB2509FB7CC03DC178 C:\WINDOWS\System32\drivers\dmvsc.sys 038B8B76284BC291EC75B005BB3EB13F C:\WINDOWS\system32\DRIVERS\Dot4.sys 27069CFFF29B7F04F4B1BB10154BE52B C:\WINDOWS\System32\drivers\Dot4Prt.sys 0BD906A79F9CE3013F7D9D0AC45F9F9D C:\WINDOWS\system32\DRIVERS\dot4usb.sys B7D595F2F464F7B628AD53F06547792C C:\WINDOWS\System32\drivers\drmkaud.sys 3D934A1C02EB6979CF45C70A71F580EC C:\WINDOWS\System32\drivers\dtlitescsibus.sys 679FF716052109392D870F6A6C4A3535 C:\WINDOWS\System32\drivers\dtliteusbbus.sys E23FDD696839A4790682CA66C48D3F2F C:\WINDOWS\System32\drivers\dxgkrnl.sys D2D4095909DD26445139EC9B7C86DA5D C:\WINDOWS\System32\drivers\e1i63x64.sys 83E4A14F851341C933C3235BFB882ECA C:\WINDOWS\System32\drivers\evbda.sys D64CD3AE93125EDA383190C2AF607E70 C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 6266BAEDF00023684B10E101E9FBB89B C:\WINDOWS\System32\drivers\EhStorClass.sys FFBB37982E6D24AEC7A2E5459098EAC9 C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys ABF38D02E01D6ED87AE1DF65FC5DF62D C:\WINDOWS\system32\drivers\rsdrvx64.sys 4778EEECB75C6FB419745BEED3530B9D C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys E51281CFF277216D41C4FD646A32F139 C:\WINDOWS\System32\drivers\errdev.sys B9A59B4AD516E38C39FA416398B96CCB C:\Windows\System32\Drivers\exfat.sys 9C4D88E8614487AD85A6F18A71A7298F C:\Windows\System32\Drivers\fastfat.sys C61014A176ECAAF97589E6FC979CE786 C:\WINDOWS\System32\drivers\fdc.sys 853081957BA148F38FD8DE4390CFCF4A C:\WINDOWS\System32\drivers\filecrypt.sys 27E764D6460504B7271AFECE7A59FB76 C:\WINDOWS\System32\drivers\fileinfo.sys 3D6087F51110F3CC0DA89385354F8C5E C:\WINDOWS\System32\drivers\filetrace.sys 057E95E53C38260C4EF49B3A077770CD C:\WINDOWS\System32\drivers\flpydisk.sys 90B2983D8495C26345A1DC5F0C3BB07B C:\WINDOWS\System32\drivers\fltmgr.sys A84261F75F490E45CFEDBA77EFE4F67E C:\WINDOWS\System32\drivers\FsDepends.sys D2814848206DFC18EB8D3D069FAE703E C:\Windows\System32\Drivers\Fs_Rec.sys AE7EDF845F41ACA3B74567C3CE20E987 C:\WINDOWS\System32\DRIVERS\fvevol.sys FF0699483185CE3B4E1144DF19AC5E97 C:\WINDOWS\System32\drivers\vmgencounter.sys 4616F61E24B3AEA6E0E4EA7D69531EF4 C:\WINDOWS\System32\drivers\genericusbfn.sys 23174BB6937459B924BB8EF667FB28EF C:\WINDOWS\system32\drivers\gitbmykra.sys EC05872118849676B802F69271A35BB4 C:\WINDOWS\System32\Drivers\msgpioclx.sys 4B11CFBE1D9B73A9D865F6AB26F800BA C:\WINDOWS\System32\drivers\gpuenergydrv.sys 3FC3FCF557D0BE3D724EA10642E1F6FF C:\WINDOWS\System32\drivers\HDAudBus.sys 02B9639D9997E95CDF2F4C4F3BDCC73D C:\WINDOWS\System32\drivers\HidBatt.sys 9F90819E301C70A3A042FC05D3E41B5F C:\WINDOWS\System32\drivers\hidbth.sys 3CA3244C45B25F3B3ED9445C195E40EB C:\WINDOWS\System32\drivers\hidi2c.sys 55DAF856F9633DD2519BA4E942870F02 C:\WINDOWS\System32\drivers\hidinterrupt.sys E34216A190D9BF8EAA666F6903BCD0EF C:\WINDOWS\System32\drivers\hidir.sys 852DBB5185996AD8C73872A43A453729 C:\WINDOWS\System32\drivers\hidusb.sys C1A608120DE0DF52E51B8BAF86AF19F9 C:\WINDOWS\System32\drivers\HpSAMD.sys 8ADD9CA3E0F18CEA11EA6FAED794A228 C:\WINDOWS\System32\drivers\HTTP.sys BB1AE72906564A6E81B79D73A05AE21F C:\WINDOWS\System32\drivers\hvservice.sys F60F8390B635156593F7493AE898AFB0 C:\WINDOWS\System32\drivers\hwpolicy.sys 563F5FC3B46A70A91AB6C8822AC8BF25 C:\WINDOWS\System32\drivers\hyperkbd.sys C082249BC3E972C8A132D9EC6AD9EAD5 C:\WINDOWS\System32\drivers\i8042prt.sys C6C8315E3262FAE460529C6DA2951682 C:\WINDOWS\System32\drivers\iagpio.sys C6B8743B213F06AA60943D8366FE968F C:\WINDOWS\System32\drivers\iai2c.sys 9A2A2F3C69B9A30B6E78536F6D258BAD C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 42962355A7911407026E920E7252E3E5 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys BD47B2FEABFA48C6224D43EE9EA9BC06 C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 2184CB3A65888F446FCD6DBA9F073F4C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys 4126F8DA08CE7924A3AE6F7235F85D5F C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 16A10CCEDCF5AC4CAAE43DC9FC40392F C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys EB82A11613326691508D9ED9A4FE29E7 C:\WINDOWS\System32\drivers\iaStorA.sys B9E489CC1EA3284FEED33799DC70612D C:\WINDOWS\System32\drivers\iaStorAV.sys D820075D3395BED28FC57AEF8FBA666F C:\WINDOWS\System32\drivers\iaStorV.sys A243E0CE8644378C9A9D015ABC3EDA27 C:\WINDOWS\System32\drivers\ibbus.sys E16E4FC9F250E48CB2CAD93E59D010E2 C:\Program Files (x86)\Norton Internet Security\NortonData\22.7.0.76\Definitions\IPSDefs\20170408.004\IDSvia64.sys F3EB9D5BAD4E52A845F7A5791E97BFAB C:\WINDOWS\System32\drivers\IndirectKmd.sys 0E33BC018502E7FDE77C343055D9C626 C:\WINDOWS\system32\drivers\RTKVHD64.sys E2E6FB83D55DF0BDA9D453EABA3F893B C:\WINDOWS\System32\drivers\intelide.sys 4B7F8A1AAC7172DB6918A0E10E1D78A3 C:\WINDOWS\System32\drivers\intelpep.sys 0A3DBE89C965FFB7C0D0E38834E77B90 C:\WINDOWS\System32\drivers\intelppm.sys 64EC687A811DC4F69DF3816F073352AA C:\WINDOWS\System32\drivers\iorate.sys 549C278119FF539C3B219C55B98B0E87 C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys A0F9F2E87F0C751FE164D90EB44A9B63 C:\WINDOWS\System32\drivers\IPMIDrv.sys 656DDB34996A96539BA6E2843B5F2A77 C:\WINDOWS\System32\drivers\ipnat.sys DCC05E5EAA580C97F13B434FAFACED85 C:\WINDOWS\system32\drivers\irda.sys 9035C10C7EB8CF7C87CEA82A62EBB43A C:\WINDOWS\System32\drivers\irenum.sys E7FD479E3298F3C8852A0D2F092BDB35 C:\WINDOWS\System32\drivers\isapnp.sys 7FE3B3A30FA20F27AF7022A01C2266BA C:\WINDOWS\System32\drivers\msiscsi.sys B6BA01EA6B2CCCB90A6FDCFF68F4A992 C:\WINDOWS\System32\drivers\kbdclass.sys D36B404BF979297C6572AEF98B2594F2 C:\WINDOWS\System32\drivers\kbdhid.sys 7E2036A846789D6D6A2EE21915017EE1 C:\WINDOWS\System32\drivers\kdnic.sys 4C054B8E901F41F5743DADE8A29FF256 C:\WINDOWS\System32\Drivers\ksecdd.sys BA7A5838866618A4E82FBC05B8923605 C:\WINDOWS\System32\Drivers\ksecpkg.sys 6629CAA1F157088B9EDD1EAD24C6D753 C:\WINDOWS\system32\drivers\ksthunk.sys 9778205F28DC4F2EFFCC146647FE5CF0 C:\WINDOWS\System32\Drivers\LBAI.sys F980BC9EDC3BB844C6144351B8053581 C:\WINDOWS\System32\drivers\lltdio.sys FC37745959DFA4871759E4DCC836227A C:\WINDOWS\System32\drivers\lsi_sas.sys 16C9D4D822CCA795A72DC88B25A577CC C:\WINDOWS\System32\drivers\lsi_sas2i.sys 920F0CFCED5F28A31B79F1C470649D11 C:\WINDOWS\System32\drivers\lsi_sas3i.sys 0FE63316F1C70A0F759A449FAC64C24B C:\WINDOWS\System32\drivers\lsi_sss.sys 80E82C46B27A923A3744531069B63857 C:\WINDOWS\system32\drivers\luafv.sys 88F5570C04766EE561FF129B2F93030C C:\WINDOWS\System32\drivers\mausbhost.sys C3EED732789052C98A2613A7E1C37CDA C:\WINDOWS\System32\drivers\mausbip.sys 4DCE65116A28488593FF5A6A18B03DB0 C:\WINDOWS\System32\drivers\megasas.sys 0609BF877A2F4DEECC62EEE220AB6242 C:\WINDOWS\System32\drivers\MegaSas2i.sys EEC64C8D498D121607C7615FDFBEE4D0 C:\WINDOWS\System32\drivers\megasr.sys 2B7D3B206833D769218A1F4BE2D73B97 C:\WINDOWS\System32\drivers\HECIx64.sys 2BB3EAE2EA641515D4B205CAB29E1624 C:\WINDOWS\System32\drivers\mlx4_bus.sys 89257B8D3826B5629CF7F73F97DA44F9 C:\WINDOWS\system32\drivers\mmcss.sys 9AE3C0CC0865B1618A3C97744A6A9E9B C:\WINDOWS\System32\drivers\modem.sys 0CD29540C32C2E2E0E3D7E9832752AF3 C:\WINDOWS\System32\drivers\monitor.sys 534477FCAFDFCA6B841BFA06BD26BCC5 C:\WINDOWS\System32\drivers\mouclass.sys F5D4E18A70BA069D479154442CDEB60D C:\WINDOWS\System32\drivers\mouhid.sys 5C09868963B0C076AC3BC7759A46B7B1 C:\WINDOWS\System32\drivers\mountmgr.sys 8BF7039787036529B98E50AE86A0E46B C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C3848279-4E0F-48F8-AE8F-0B54D6E8F5D1}\MpKsl306d2abf.sys AA12FAF01013F63348B722D3588550FF C:\WINDOWS\System32\drivers\mpsdrv.sys AD118EC95E9EF4D5223D681D8F183567 C:\WINDOWS\system32\drivers\mrxdav.sys D14C297933C82B8CB0B5CBBA4DDC830B C:\WINDOWS\System32\DRIVERS\mrxsmb.sys F2AD1B72C5A6475FB5FF332E1980DF88 C:\WINDOWS\System32\DRIVERS\mrxsmb10.sys 84700F40C0E41AEA91F8F3D6218A8A68 C:\WINDOWS\System32\DRIVERS\mrxsmb20.sys B855479BA6A74349CEF8061808C90201 C:\WINDOWS\System32\drivers\bridge.sys 670E6CFDA70C106342C0D63D014B6822 C:\Windows\System32\Drivers\Msfs.sys 92C00BD9616F353CA59A755C33269757 C:\WINDOWS\System32\drivers\msgpiowin32.sys F27EC8F7A0A779276E5DA2E70C2B01EE C:\WINDOWS\System32\drivers\mshidkmdf.sys CBA955A54C9446CAAD28C76789D3B071 C:\WINDOWS\System32\drivers\mshidumdf.sys E8E568EF60677E4534F387C53EE1B35F C:\WINDOWS\System32\drivers\msisadrv.sys 16376B7B0730C04DD1A2C0CC8E09E420 C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys C2939119A17E52D74191EFC1E4CDEE09 C:\WINDOWS\System32\drivers\mslldp.sys E40B960078A15D4901265D32E071C42D C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys B4860AB91DC4E73936F0FF504D6B4B07 C:\WINDOWS\system32\DRIVERS\MSPQM.sys 8EDC45C3F7F64A51C98B59E24648F74B C:\Windows\System32\Drivers\MsRPC.sys 7DA5FAC2A49D30CA5B7B96B8B26281AC C:\WINDOWS\System32\drivers\mssecflt.sys 4369BBFCDDCCE61856DD862C8E5C4E19 C:\WINDOWS\System32\drivers\mssmbios.sys 7E3365C8BC83DCE88D6226BB5C7170C4 C:\WINDOWS\system32\DRIVERS\MSTEE.sys 09D51564E49181E9928910D6B91C920E C:\WINDOWS\System32\drivers\MTConfig.sys 793AE56A3946EAD5F906C28D294FEFE6 C:\WINDOWS\System32\Drivers\mup.sys E35F51C7474A26680627477462715206 C:\WINDOWS\System32\drivers\mvumis.sys 74BD1149BF50F1E24934042A3BD17C90 C:\WINDOWS\System32\DRIVERS\nwifi.sys 39C772E20B8C61858F969E4D60699D89 C:\WINDOWS\System32\drivers\ndfltr.sys 0FFE8AF1B94C5FD54E6ACC6DAE990D31 C:\WINDOWS\System32\drivers\ndis.sys 59F3D5FEF4A24871C07C279762DA8624 C:\WINDOWS\System32\drivers\ndiscap.sys 4EA73CFDEE4A628D387D95464A131F29 C:\WINDOWS\System32\drivers\NdisImPlatform.sys EB127689AF6F24091AB73538A556257F C:\WINDOWS\System32\DRIVERS\ndistapi.sys 73B4C72FB6170A08C64BDA92DE93ECF7 C:\WINDOWS\System32\drivers\ndisuio.sys 6704F27EB15A5B30AA7FA5A4F4D1FD47 C:\WINDOWS\System32\drivers\NdisVirtualBus.sys FE87CCAA89433FC306A80F15E848F4B2 C:\WINDOWS\System32\drivers\ndiswan.sys 94517BC9F29A1B73D377F1BF1C3DCA34 C:\WINDOWS\System32\DRIVERS\ndiswan.sys 94517BC9F29A1B73D377F1BF1C3DCA34 C:\WINDOWS\System32\DRIVERS\NDProxy.sys AC6AC99075732F5C29DB0004DD5B1AC6 C:\WINDOWS\System32\drivers\Ndu.sys 9AC090451D92E6081EB89CDA83D74189 C:\WINDOWS\System32\drivers\NetAdapterCx.sys A115DDB2C7805C41EEC9A5276FF5764E C:\WINDOWS\System32\drivers\netbios.sys F420B6CAB5151A38E4DBBFFB500C11DA C:\WINDOWS\System32\DRIVERS\netbt.sys 30C2F67EC84EB11B22011620107E0325 C:\WINDOWS\System32\drivers\netvsc.sys 8C03F2F5A9E93AEB08B3AEE51552394A C:\WINDOWS\system32\ckldrv.sys 2263727032E9B19231A706046B8C82D3 C:\Windows\System32\Drivers\Npfs.sys 6D8F6A9C53CFB0C49E8251A442B7283F C:\WINDOWS\System32\drivers\npsvctrig.sys BABF7E1757D6908941C9F9CBD66A5EF0 C:\WINDOWS\System32\drivers\nsiproxy.sys 7A6BA778B48DF9FB7AC231D4FF6E3248 C:\Windows\System32\Drivers\NTFS.sys 8D72D5038C5F91AFEF1B160FE524C2D9 C:\Windows\System32\Drivers\Null.sys 4FFB2D5655D10700D5B8E205C4DB86BD C:\WINDOWS\System32\drivers\nvdimmn.sys 99EB6376EC2C03CE5F668577651E3454 C:\WINDOWS\system32\drivers\nvhda64v.sys 6E256C42FD27FADEA9BDD2E98CB53FE4 C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys BD000446F0B4FA1E87E7D10356C49564 C:\WINDOWS\System32\drivers\nvraid.sys 3DB2E9E207358BFBD09B77B5119ECA5B C:\WINDOWS\System32\drivers\nvstor.sys 4C04BFBD4DB2EECCC47F5FA39D65BB6E C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 63734B0FBD8E6DAF841AD3DD47DEFFFB C:\WINDOWS\system32\drivers\nvvad64v.sys 1FE5C1F4CCA8EAEA75C90FB2A85D9CC3 C:\WINDOWS\System32\drivers\parport.sys 2CC6C325B271C7CA60F374F8F868CB45 C:\WINDOWS\System32\drivers\partmgr.sys 664B7DDEE982ADF5EAB480C75B9F6218 C:\WINDOWS\System32\drivers\pci.sys C5B74C6D87E77BC64DEBD1BF57DEB375 C:\WINDOWS\System32\drivers\pciide.sys CFB85CB7A6F6926EA0EB96EDFB3C8A91 C:\WINDOWS\System32\drivers\pcmcia.sys 13B7D84B397A90E82682C47A15C3A98D C:\WINDOWS\System32\drivers\pcw.sys 76EA512FD9D4673CF7A57775EE8922E2 C:\WINDOWS\System32\drivers\pdc.sys 10E48E45A03A7F4C2B7C11738BE87816 C:\WINDOWS\System32\drivers\peauth.sys 4F190BA3C9BD2F0277BCBF480F396091 C:\WINDOWS\System32\drivers\percsas2i.sys FE52FF97A094609429FEF098EDC6FB08 C:\WINDOWS\System32\drivers\percsas3i.sys FCA143274792F12383C35902E801E83A C:\WINDOWS\System32\drivers\pmem.sys 414CA4DCC31D795882B25ADC1DACE779 C:\WINDOWS\System32\drivers\raspptp.sys D292D7FADCEE481CC64A9DE8FE9C3347 C:\WINDOWS\System32\drivers\processr.sys D57CF871B3977731A91FE9611A54C7C1 C:\WINDOWS\System32\drivers\pacer.sys B60431D2A046AD97F8427F6E568370F5 C:\WINDOWS\system32\drivers\qlgurlsvn.sys 86971E14CA88010B6507B9327089A392 C:\WINDOWS\system32\drivers\qwavedrv.sys A2B0F46FBA2521E7E732BDBDB1238515 C:\WINDOWS\System32\DRIVERS\rasacd.sys EA9EB06EFC325CD2ACF5DF2F26A4894E C:\WINDOWS\System32\drivers\AgileVpn.sys 4E9379389D0A851DD19D130C8FAEFBD0 C:\WINDOWS\System32\drivers\rasl2tp.sys 5279EC98F6218D29EADDFECCC0D80E9A C:\WINDOWS\System32\DRIVERS\raspppoe.sys D7FF75ED7A48FD60A573C9E959CF4DB5 C:\WINDOWS\System32\drivers\rassstp.sys 6A4E45A7F17FA0B4B1B48C550E311944 C:\WINDOWS\System32\DRIVERS\rdbss.sys F2C575A9657F7B2E027C6CE7BC8F1A2D C:\WINDOWS\System32\drivers\rdpbus.sys 9414B22E093243636D362BF8C8C12A67 C:\WINDOWS\System32\drivers\rdpdr.sys 53A01D3FDB701AC5D9DDE4140227E3D9 C:\WINDOWS\System32\drivers\rdpvideominiport.sys DF32ED51DC0C3F6F3B1C4CEF71B8B426 C:\WINDOWS\System32\drivers\rdyboost.sys 2369A5B651308E0C3458143976E9B03B C:\Windows\System32\Drivers\ReFS.sys 3581FB9529035F8EC6DB681664CA70B1 C:\Windows\System32\Drivers\ReFSv1.sys 79E1ADE19D8B7C56EF29D098EAF57AD0 C:\WINDOWS\System32\drivers\rspndr.sys E87EECED9287C275B6CF30EB598B1D77 C:\WINDOWS\System32\Drivers\RtsUStor.sys B4B7B646F129E3F3ACE8CBC1B65FC226 C:\WINDOWS\system32\drivers\rvvhjhog.sys 902EEBC81CF2B944ACE35E26C9772A5D C:\WINDOWS\System32\drivers\vms3cap.sys 6308366D3CDEA5F427CFF4BCF0081B4E C:\WINDOWS\System32\drivers\sbp2port.sys 33B2DC5C2F19DA89F862484E23D9833D C:\WINDOWS\System32\DRIVERS\scfilter.sys 5CFEEFCC6FAD1FD09ACCFBD652DDD85B C:\WINDOWS\System32\drivers\scmbus.sys 5C8620FAC0E3C1658C8EF7AD7BB7EA5F C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys 7B4B2DC611AA997D2AE45181FE378A5A C:\WINDOWS\System32\drivers\sdbus.sys 71A494A502F24465317E88E80F6C0C2C C:\WINDOWS\System32\drivers\SDFRd.sys 464B615872981015AC4FEEBDEA83A063 C:\WINDOWS\System32\drivers\sdstor.sys 6BC219F1D9CDE08CEB9084ADB41FBA01 C:\WINDOWS\system32\DRIVERS\ser2pl64.sys 81C4472F297BABE08CEA3A5E3CB3E5B4 C:\WINDOWS\System32\drivers\SerCx.sys 585329F62195A4B7AAD0A95F6EC89751 C:\WINDOWS\System32\drivers\SerCx2.sys C8F4FDA8B3D039D7947344614FF5BFB2 C:\WINDOWS\System32\drivers\serenum.sys E5B450E4E0DC1591254BF9CCF6C57B40 C:\WINDOWS\System32\drivers\serial.sys 628D8DD136F92316BFEB58FA005338B7 C:\WINDOWS\System32\drivers\sermouse.sys E5BA0B7353ADC5C95AB466D2E4DC89B1 C:\WINDOWS\System32\drivers\sfloppy.sys 15CFCC4692DA8887B977CE5FC5181084 C:\WINDOWS\System32\drivers\SiSRaid2.sys 2339F6B45E1D863B1D327F3AFD75A675 C:\WINDOWS\System32\drivers\sisraid4.sys F520D50AD7266ED31D25DF4C8EA6BC2D C:\WINDOWS\System32\drivers\spaceport.sys 2334ED0B61CAE7E7B1B454674206CDAC C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys F3F0B8CAC1F3E6C3382EAFCE762475AD C:\WINDOWS\System32\drivers\SpbCx.sys 83E82B0E292DCDE4C75B9241BF0FB300 C:\WINDOWS\System32\Drivers\NISx64\1609040.008\SRTSP64.SYS DCA26325F46401AA9E1E509D09C0BF95 C:\WINDOWS\system32\drivers\NISx64\1609040.008\SRTSPX64.SYS 730F082876A53B2D13584FA103163BF3 C:\WINDOWS\System32\DRIVERS\srv.sys 36EAC4FE629FC036632F13EC14788FD1 C:\WINDOWS\System32\DRIVERS\srv2.sys A84B05C7C2A233497BE1D518A662C326 C:\WINDOWS\System32\DRIVERS\srvnet.sys 0351B28EEDFBD6C8CC69A7224A098CFA C:\WINDOWS\System32\drivers\stexstor.sys D40C589F80EB1C511263D0547C0259AE C:\WINDOWS\System32\drivers\storahci.sys 576A818562069B1E091CC719C143AED2 C:\WINDOWS\System32\drivers\vmstorfl.sys E5F703788DFA05411F1469E96838F438 C:\WINDOWS\System32\drivers\stornvme.sys 0D0128244FF55EAD3F878D3FE542DBA5 C:\WINDOWS\System32\drivers\storqosflt.sys 3A62FF78619258E6126C5C4B4CC82C8E C:\WINDOWS\System32\drivers\storufs.sys C6097966F8EA3B288070CDF7C3C8C3E8 C:\WINDOWS\System32\drivers\storvsc.sys 3DC3B17E92DA02E36B4138733DF6C1AC C:\WINDOWS\System32\drivers\swenum.sys 2BC4D0EBC2467FE90302AE0AFAF23768 C:\WINDOWS\System32\drivers\NISx64\1609040.008\SYMEFASI64.SYS 16ABF255E11C98E29800E99AAA879388 C:\WINDOWS\system32\drivers\NISx64\1609040.008\SymELAM.sys 3123BDBFE5CF061035D79CB3F3075F82 C:\windows\system32\Drivers\SYMEVENT64x86.SYS B439486A910689B6DA73E96404227783 C:\WINDOWS\system32\drivers\NISx64\1609040.008\Ironx64.SYS B4BFD2C3A2406E3F8DC39C4E7EF5C1F6 C:\WINDOWS\System32\Drivers\NISx64\1609040.008\SYMNETS.SYS 192802618BFA4889818FDD6B2B8CF2B5 C:\WINDOWS\System32\drivers\Synth3dVsc.sys 572F81CF08972D53BAFFC2A110A2A586 C:\WINDOWS\system32\DRIVERS\tap0901.sys 3C32FF010F869BC184DF71290477384E C:\WINDOWS\System32\drivers\tcpip.sys DC0D1B5284152315F81894DAABBB2AF3 C:\WINDOWS\System32\drivers\tcpip.sys DC0D1B5284152315F81894DAABBB2AF3 C:\WINDOWS\System32\drivers\tcpipreg.sys 1C35A5C62D110346379C55E39A3D547C C:\WINDOWS\system32\DRIVERS\tdx.sys 892AB2637603A5E9507C39E61101C3C3 C:\WINDOWS\System32\drivers\terminpt.sys 96A35CDBA661D41C5A3914257CA1D200 C:\WINDOWS\System32\drivers\tpm.sys F76A92975340DAA99939DA297D677EA8 C:\WINDOWS\System32\drivers\tsusbflt.sys 9856BCCD1CD5DE4D17E8DBBA7CEFC688 C:\WINDOWS\System32\drivers\TsUsbGD.sys 837AD2B941E721BCCEB7EF137E2DEE18 C:\WINDOWS\System32\drivers\tsusbhub.sys 5DED9E34D133F4A363652CDB595D83F3 C:\WINDOWS\System32\drivers\tunnel.sys B3142C6118703E98EB0510CF7B43D0F2 C:\WINDOWS\System32\drivers\uaspstor.sys B4C846ABD462558D45CA578C855759C3 C:\WINDOWS\System32\Drivers\UcmCx.sys 5C2C0296D9EE7DC92A3F14642FBE656D C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys 8BB64E04CD97AD8C68543181D93E2AFC C:\WINDOWS\System32\drivers\UcmUcsi.sys 5A7CE114C8DA9060F32633F81A5625E5 C:\WINDOWS\System32\drivers\ucx01000.sys 5D4EAF3D0911338CB8FDB088386D6DCA C:\WINDOWS\System32\drivers\udecx.sys 384E1F0D84B465820416338E52FE7C2B C:\WINDOWS\System32\DRIVERS\udfs.sys C82BE75239D412057C9E3DB1785680C6 C:\WINDOWS\System32\drivers\UEFI.sys CCDF6EFF952BF3BF34DC17600F479397 C:\WINDOWS\system32\drivers\UevAgentDriver.sys 244A80A1A881E2B9303A0364AAB33F16 C:\WINDOWS\System32\drivers\ufx01000.sys 00BEF71C45FD6B06E7525E7B31EFA88C C:\WINDOWS\System32\drivers\UfxChipidea.sys 9450AB15C30CF7D1F23C8A42E778C3A2 C:\WINDOWS\System32\drivers\ufxsynopsys.sys CEE12C7A689BDF448715024A7E0EB9C3 C:\WINDOWS\System32\drivers\umbus.sys F39ED750EDF5948FA8CD99D1F4EC9372 C:\WINDOWS\System32\drivers\umpass.sys 55984D4E64C2F8E4223542CBCC15EDEB C:\WINDOWS\system32\drivers\urqrdvlla.sys 86971E14CA88010B6507B9327089A392 C:\WINDOWS\System32\drivers\urschipidea.sys 4D23214CB8B1C36B82061280EB8FDAB3 C:\WINDOWS\System32\drivers\urscx01000.sys 4329D880DB96B504F0DDC991A7374CCD C:\WINDOWS\System32\drivers\urssynopsys.sys 93FAD0AC5879F274FA248A49E3F3EA33 C:\WINDOWS\system32\drivers\usbaudio.sys FC318082D0793B76C766A8DFD4C247C5 C:\WINDOWS\System32\drivers\usbccgp.sys 6B09AA6A04C8261E787B6523229E7159 C:\WINDOWS\System32\drivers\usbcir.sys ECE3AD18B4C22ED0C4AB1A2AD9AC32C8 C:\WINDOWS\System32\drivers\usbehci.sys F8BCB536866474C6D8008F4C69B778A1 C:\WINDOWS\System32\drivers\usbhub.sys 1F723DA014062DBF3288B408A7611845 C:\WINDOWS\System32\drivers\UsbHub3.sys B9651548CE196186A72CE8C6D0C094FC C:\WINDOWS\System32\drivers\usbohci.sys BE6ED98FD0D3FE5FB11762AD7CCD6C96 C:\WINDOWS\System32\drivers\usbprint.sys CEE43CD5357DB8786CE6E2C430841AE4 C:\WINDOWS\system32\DRIVERS\usbscan.sys 96B48485A7CC2C0A63C196A16403C5F3 C:\WINDOWS\System32\drivers\usbser.sys 99F0738B320B7A8D11351A32F68AA5F1 C:\WINDOWS\System32\drivers\USBSTOR.SYS 67E26F56CF7EACCBD9C9F75343A3D7C2 C:\WINDOWS\System32\drivers\usbuhci.sys 7BA802C9F73A84B75BB22538ADA495BE C:\WINDOWS\System32\drivers\USBXHCI.SYS 50E70B3A95138AA4A30B095270EE0DE6 C:\WINDOWS\system32\DRIVERS\vbaudio_cable64_win7.sys E7204D7FD7362F0EFAA502A4CB91CA1E C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys 87D4E923785CDFA655B53A78DD99BD2B C:\Program Files (x86)\Common Files\Avnex\vcs64.sys 232FCBF4DD9ED3EA809FC610916F6729 C:\WINDOWS\system32\DRIVERS\vcsvad.sys 3A4B01C2BDB07DFEF29B0B369487503A C:\WINDOWS\System32\drivers\vdrvroot.sys C1EC9211C7759D2487FD30934AA3EE96 C:\WINDOWS\System32\drivers\VerifierExt.sys C83F3BC00651448DB127D497CF955089 C:\WINDOWS\System32\drivers\vhdmp.sys 0E12F5F6B1C813D17AFDA197C4394423 C:\WINDOWS\System32\drivers\vhf.sys 1AD096A5C00E522398D0092D875A8CB6 C:\WINDOWS\System32\drivers\vmbus.sys EE9A22CFD9AEDD7B52F98B0272494609 C:\WINDOWS\System32\drivers\VMBusHID.sys BFBD0895926FD98A03AD6BB845B569B7 C:\WINDOWS\System32\drivers\vmgid.sys C123C97D351C56C75FE5335AB18255EE C:\WINDOWS\System32\drivers\volmgr.sys 0AB9C264F13E2A070A8CF10EDD099ED2 C:\WINDOWS\System32\drivers\volmgrx.sys 6EE608257C1137A25B402EF8FC77E83A C:\WINDOWS\System32\drivers\volsnap.sys E3429DBBEA3965BB96E24B16EF4A2551 C:\WINDOWS\System32\drivers\volume.sys 86E790B503C771E674C7DF8FFCBFEFDB C:\WINDOWS\System32\drivers\vpci.sys B25589A0892E6DF8CC07E5CB48BFC954 C:\WINDOWS\System32\drivers\vsmraid.sys AA4466A47D2CA7ECE3DCF5256017DCC3 C:\WINDOWS\System32\drivers\vstxraid.sys 98BB6C9AD39D8F2E883093F28282FAEC C:\WINDOWS\System32\drivers\vwifibus.sys B47026E109828102266CBE2F5F9AD113 C:\WINDOWS\System32\drivers\vwififlt.sys 799ECD541A9B2764B36A22A095885365 C:\WINDOWS\System32\drivers\wacompen.sys F0F477541F7AF67CC05DA1CF4921A500 C:\WINDOWS\System32\DRIVERS\wanarp.sys FDD16EF9177A8A2EF08A7FA3D3EFAA13 C:\WINDOWS\System32\DRIVERS\wanarp.sys FDD16EF9177A8A2EF08A7FA3D3EFAA13 C:\WINDOWS\system32\drivers\wcifs.sys 923200B78F5284D674A3712204D0FEFA C:\WINDOWS\system32\drivers\wcnfs.sys 1737BEF60CA384423CE4B32AF1C2BFFC C:\WINDOWS\System32\drivers\WdBoot.sys 38130C1C5FE0E08820EE57E1B087B659 C:\WINDOWS\System32\drivers\Wdf01000.sys 0C6CBF3490EE5F0D62B5820568CA30B8 C:\WINDOWS\System32\drivers\WdFilter.sys F7B6CB0F9ECD28848E2BDACEAB0D9204 C:\WINDOWS\System32\DRIVERS\wdiwifi.sys BF45B43BA47D0FA769CE5AFBF7104F01 C:\WINDOWS\System32\Drivers\WdNisDrv.sys 82A4F22C884B4BAE8B531640859F9871 C:\WINDOWS\System32\drivers\wfcre.sys A23BF07FCB723AC9F905AF844BDAC181 C:\WINDOWS\System32\drivers\wfplwfs.sys 3C8F0ABD00E197101DCF43FEF8FB0D76 C:\WINDOWS\System32\drivers\wimmount.sys 75014BF6510D4C6C69EEE5B7743A52AF C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys C8EBCFED8FD2CDF725E44AF93016621E C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys D318557F9D7CA3836104F0B8ECB1F32E C:\WINDOWS\System32\drivers\winmad.sys 31DDF1D001336B2DCE7DF24E99EF1D04 C:\WINDOWS\System32\drivers\winnat.sys 2E1A614EFB0523E20860AE7978DDA0A4 C:\WINDOWS\System32\drivers\WinUSB.SYS 03858B18BB6DF6A400D9FC5153FD28A8 C:\WINDOWS\System32\drivers\winverbs.sys 0BF4A43CF1F3A4D50AFA4561C3B4628D C:\WINDOWS\System32\drivers\wmiacpi.sys 0D6E1347A891607759340B1E55BA2A77 C:\Windows\System32\Drivers\Wof.sys 1AE1076034392218EE89D2744EC2A071 C:\WINDOWS\System32\drivers\WpdUpFltr.sys 1FD80CBB192A20375F3664639DEB57B5 C:\WINDOWS\system32\drivers\ws2ifsl.sys DAF4451760B46CB383D287C4FAFFE97D C:\WINDOWS\System32\drivers\WudfPf.sys 455609BF60DA3B57EEAB863DEFCCF14D C:\WINDOWS\System32\drivers\WUDFRd.sys 5068DAA8F67A62E964C9C9F88B159EA9 C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 5068DAA8F67A62E964C9C9F88B159EA9 C:\WINDOWS\System32\drivers\xboxgip.sys B10655A4C2EFDC25483D670EF52A4854 C:\WINDOWS\System32\drivers\xinputhid.sys 2E50A379A8E4F6C5D85E87C26C08D329 ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Three Months Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-07-16 13:50 - 2017-07-16 13:51 - 00058825 _____ C:\Users\Uporabnik\Desktop\FRST.txt 2017-07-16 13:50 - 2017-07-16 13:50 - 00000000 ____D C:\FRST 2017-07-16 13:47 - 2017-07-16 13:47 - 02435584 _____ (Farbar) C:\Users\Uporabnik\Desktop\FRST64.exe 2017-07-16 13:27 - 2017-07-16 13:27 - 00000000 _____ C:\Users\Uporabnik\Desktop\dfdfdf.txt 2017-07-16 13:11 - 2017-07-16 13:11 - 00000000 ____D C:\Program Files (x86)\YiuAskUn 2017-07-16 13:11 - 2017-07-16 13:11 - 00000000 ____D C:\Program Files (x86)\YiuAskU2 2017-07-16 13:11 - 2017-07-16 13:11 - 00000000 ____D C:\Program Files (x86)\YiuAskU 2017-07-16 13:11 - 2017-07-16 13:11 - 00000000 ____D C:\Program Files (x86)\YiuAskIE 2017-07-15 14:41 - 2017-07-15 14:41 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2017-07-15 14:24 - 2017-07-15 14:24 - 00000000 ____D C:\ProgramData\USOPrivate 2017-07-15 14:01 - 2017-07-15 14:01 - 00000000 ____D C:\ProgramData\SQL Anywhere 16 2017-07-15 13:15 - 2017-07-15 13:15 - 00055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rvvhjhog.sys 2017-07-15 00:10 - 2017-07-15 01:12 - 00007178 _____ C:\Users\Uporabnik\Desktop\dark binary.txt 2017-07-14 14:23 - 2017-07-14 14:23 - 113246208 _____ C:\WINDOWS\system32\config\SOFTWARE 2017-07-14 14:21 - 2017-07-14 14:21 - 00000000 ____D C:\WINDOWS\Microsoft Antimalware 2017-07-14 13:42 - 2017-07-14 14:06 - 00000000 ____D C:\Users\Uporabnik\Desktop\W2s 2017-07-14 13:24 - 2017-07-14 13:24 - 00000022 _____ C:\WINDOWS\S.dirmngr 2017-07-14 13:23 - 2017-07-14 13:23 - 00015424 _____ C:\WINDOWS\system32\Drivers\urqrdvlla.sys 2017-07-13 15:06 - 2007-05-10 15:40 - 00597193 _____ C:\Users\Uporabnik\Desktop\Diploma Template.psd 2017-07-13 14:13 - 2017-07-14 13:20 - 00121200 _____ C:\WINDOWS\system32\Drivers\gitbmykra.sys 2017-07-13 14:04 - 2017-07-13 14:04 - 00000000 ____D C:\Program Files\UNP 2017-07-13 14:03 - 2017-07-13 14:03 - 00000000 ____D C:\ProgramData\USOShared 2017-07-13 14:02 - 2017-07-14 13:26 - 00000075 _____ C:\WINDOWS\system32\r6lstmp4.dat 2017-07-13 14:00 - 2017-07-13 14:00 - 00015424 _____ C:\WINDOWS\system32\Drivers\arefzzhgq.sys 2017-07-13 12:05 - 2017-07-13 14:03 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\Intuit 2017-07-13 12:05 - 2017-07-13 12:05 - 00000000 ____D C:\WINDOWS\Intuit 2017-07-13 12:05 - 2017-07-13 12:05 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\SQL Anywhere 16 2017-07-13 12:03 - 2017-07-13 14:03 - 00002195 _____ C:\Users\Public\Desktop\QuickBooks Pro 2016.lnk 2017-07-13 12:03 - 2017-07-13 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickBooks 2017-07-13 12:02 - 2017-07-13 14:01 - 00000000 ____D C:\ProgramData\Intuit 2017-07-13 12:02 - 2017-07-13 12:02 - 00000000 ____D C:\Users\Public\Documents\Intuit 2017-07-13 12:02 - 2017-07-13 12:02 - 00000000 ____D C:\ProgramData\Nuance 2017-07-13 12:01 - 2017-07-13 12:02 - 00000000 ____D C:\Program Files (x86)\Intuit 2017-07-13 11:38 - 2017-07-13 11:43 - 639406623 _____ C:\Users\Uporabnik\Desktop\QuickBooks Desktop Pro 2016 16.0 R6.zip 2017-07-13 11:10 - 2017-07-13 11:10 - 00000000 ____D C:\ProgramData\MetaQuotes 2017-07-12 21:07 - 2017-07-13 14:03 - 00000630 _____ C:\Users\Uporabnik\Desktop\PrintBoss.LNK 2017-07-12 21:07 - 2017-07-12 21:10 - 00000000 ____D C:\PrntBoss 2017-07-12 21:07 - 2017-07-12 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintBoss 2017-07-12 21:05 - 2017-07-12 21:06 - 19417984 _____ C:\Users\Uporabnik\Desktop\PrintBoss setup file.exe 2017-07-12 17:39 - 2017-07-12 17:39 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\DraeCo LLC 2017-07-12 15:44 - 2017-07-12 15:44 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Neos Eureka S.r.l 2017-07-12 15:43 - 2017-07-12 15:43 - 00000000 ____D C:\ProgramData\Wellspring 2017-07-12 14:32 - 2017-07-12 14:32 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ChequeSystem 2017-07-12 14:32 - 2017-07-12 14:32 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\ChequeSystem 2017-07-12 14:32 - 2017-07-12 14:32 - 00000000 ____D C:\Program Files (x86)\ChequeSystem 2017-07-12 14:31 - 2017-07-12 14:31 - 45003360 _____ (Evinco Solutions Limited ) C:\Users\Uporabnik\Desktop\Evinco Solutions - ChequeSystem.exe 2017-07-12 14:17 - 2017-07-07 08:57 - 00626528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-07-12 14:17 - 2017-07-07 08:57 - 00125344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2017-07-12 14:17 - 2017-07-07 08:39 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-07-12 14:17 - 2017-07-07 08:39 - 00096128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2017-07-12 14:17 - 2017-07-07 08:37 - 31652264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll 2017-07-12 14:17 - 2017-07-07 08:37 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-07-12 14:17 - 2017-07-07 08:37 - 01339352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll 2017-07-12 14:17 - 2017-07-07 08:31 - 05820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-07-12 14:17 - 2017-07-07 08:31 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-07-12 14:17 - 2017-07-07 08:31 - 00129184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-07-12 14:17 - 2017-07-07 08:30 - 02165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-07-12 14:17 - 2017-07-07 08:30 - 00949920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2017-07-12 14:17 - 2017-07-07 08:30 - 00750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-07-12 14:17 - 2017-07-07 08:29 - 00349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-07-12 14:17 - 2017-07-07 08:29 - 00123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll 2017-07-12 14:17 - 2017-07-07 08:27 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-07-12 14:17 - 2017-07-07 08:26 - 20373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-07-12 14:17 - 2017-07-07 08:26 - 01529384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-07-12 14:17 - 2017-07-07 08:26 - 01195240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2017-07-12 14:17 - 2017-07-07 08:26 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-07-12 14:17 - 2017-07-07 08:25 - 00035232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll 2017-07-12 14:17 - 2017-07-07 08:24 - 01517472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2017-07-12 14:17 - 2017-07-07 08:23 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-07-12 14:17 - 2017-07-07 08:14 - 02956800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-07-12 14:17 - 2017-07-07 08:14 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-07-12 14:17 - 2017-07-07 08:14 - 00790016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-07-12 14:17 - 2017-07-07 08:13 - 13839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-07-12 14:17 - 2017-07-07 08:12 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-07-12 14:17 - 2017-07-07 08:10 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2017-07-12 14:17 - 2017-07-07 08:10 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll 2017-07-12 14:17 - 2017-07-07 08:09 - 20504576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-07-12 14:17 - 2017-07-07 08:09 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-07-12 14:17 - 2017-07-07 08:07 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll 2017-07-12 14:17 - 2017-07-07 08:06 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 11870720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 05719040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2017-07-12 14:17 - 2017-07-07 08:05 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2017-07-12 14:17 - 2017-07-07 08:04 - 05961216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-07-12 14:17 - 2017-07-07 08:04 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-07-12 14:17 - 2017-07-07 08:04 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-07-12 14:17 - 2017-07-07 08:04 - 00506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-07-12 14:17 - 2017-07-07 08:04 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-07-12 14:17 - 2017-07-07 08:03 - 06123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-07-12 14:17 - 2017-07-07 08:03 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-07-12 14:17 - 2017-07-07 08:03 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2017-07-12 14:17 - 2017-07-07 08:02 - 00952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2017-07-12 14:17 - 2017-07-07 08:02 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr 2017-07-12 14:17 - 2017-07-07 08:01 - 06287360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-07-12 14:17 - 2017-07-07 08:01 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 07596544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 02588160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 01565184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2017-07-12 14:17 - 2017-07-07 08:00 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-07-12 14:17 - 2017-07-07 07:59 - 04417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2017-07-12 14:17 - 2017-07-07 07:59 - 03656704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-07-12 14:17 - 2017-07-07 07:59 - 01494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2017-07-12 14:17 - 2017-07-07 07:59 - 01355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2017-07-12 14:17 - 2017-07-07 07:59 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-07-12 14:17 - 2017-07-07 07:58 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-07-12 14:17 - 2017-07-07 07:58 - 02782720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2017-07-12 14:17 - 2017-07-07 07:58 - 02298368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-07-12 14:17 - 2017-07-07 07:58 - 01237504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2017-07-12 14:17 - 2017-07-07 07:55 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2017-07-12 14:17 - 2017-07-07 07:55 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2017-07-12 14:17 - 2017-07-07 07:53 - 01301504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll 2017-07-12 14:17 - 2017-07-07 07:53 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe 2017-07-12 14:17 - 2017-06-20 07:34 - 00192416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-07-12 14:17 - 2017-06-20 07:15 - 01620368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-07-12 14:17 - 2017-06-20 07:15 - 00455104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2017-07-12 14:17 - 2017-06-20 07:14 - 01150784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2017-07-12 14:17 - 2017-06-20 07:13 - 00787712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-07-12 14:17 - 2017-06-20 07:09 - 00406032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-07-12 14:17 - 2017-06-20 07:08 - 04469840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-07-12 14:17 - 2017-06-20 07:07 - 02475136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-07-12 14:17 - 2017-06-20 07:07 - 00346016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2017-07-12 14:17 - 2017-06-20 07:07 - 00138656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2017-07-12 14:17 - 2017-06-20 07:06 - 00754592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2017-07-12 14:17 - 2017-06-20 07:06 - 00278944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2017-07-12 14:17 - 2017-06-20 07:05 - 00438096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2017-07-12 14:17 - 2017-06-20 07:04 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-07-12 14:17 - 2017-06-20 07:04 - 01178528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-07-12 14:17 - 2017-06-20 07:04 - 01077496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2017-07-12 14:17 - 2017-06-20 07:04 - 00181656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2017-07-12 14:17 - 2017-06-20 07:04 - 00049656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll 2017-07-12 14:17 - 2017-06-20 07:03 - 05806048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-07-12 14:17 - 2017-06-20 07:03 - 00864240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-07-12 14:17 - 2017-06-20 07:03 - 00443728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2017-07-12 14:17 - 2017-06-20 07:02 - 01121928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2017-07-12 14:17 - 2017-06-20 07:02 - 00354400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll 2017-07-12 14:17 - 2017-06-20 07:01 - 00176032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2017-07-12 14:17 - 2017-06-20 06:49 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll 2017-07-12 14:17 - 2017-06-20 06:49 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2017-07-12 14:17 - 2017-06-20 06:46 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll 2017-07-12 14:17 - 2017-06-20 06:45 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll 2017-07-12 14:17 - 2017-06-20 06:45 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-07-12 14:17 - 2017-06-20 06:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2017-07-12 14:17 - 2017-06-20 06:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2017-07-12 14:17 - 2017-06-20 06:41 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2017-07-12 14:17 - 2017-06-20 06:41 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2017-07-12 14:17 - 2017-06-20 06:41 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2017-07-12 14:17 - 2017-06-20 06:41 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2017-07-12 14:17 - 2017-06-20 06:41 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2017-07-12 14:17 - 2017-06-20 06:40 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-07-12 14:17 - 2017-06-20 06:40 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2017-07-12 14:17 - 2017-06-20 06:40 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2017-07-12 14:17 - 2017-06-20 06:40 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2017-07-12 14:17 - 2017-06-20 06:40 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll 2017-07-12 14:17 - 2017-06-20 06:40 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll 2017-07-12 14:17 - 2017-06-20 06:39 - 02814464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll 2017-07-12 14:17 - 2017-06-20 06:39 - 02671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-07-12 14:17 - 2017-06-20 06:39 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2017-07-12 14:17 - 2017-06-20 06:39 - 00646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2017-07-12 14:17 - 2017-06-20 06:39 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll 2017-07-12 14:17 - 2017-06-20 06:39 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-07-12 14:17 - 2017-06-20 06:38 - 01451008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2017-07-12 14:17 - 2017-06-20 06:38 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-07-12 14:17 - 2017-06-20 06:38 - 01171968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-07-12 14:17 - 2017-06-20 06:38 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-07-12 14:17 - 2017-06-20 06:38 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll 2017-07-12 14:17 - 2017-06-20 06:38 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-07-12 14:17 - 2017-06-20 06:37 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-07-12 14:17 - 2017-06-20 06:36 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-07-12 14:17 - 2017-06-20 06:35 - 02679296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2017-07-12 14:17 - 2017-06-20 06:35 - 02132480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-07-12 14:17 - 2017-06-20 06:35 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2017-07-12 14:17 - 2017-06-20 06:34 - 04056576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-07-12 14:17 - 2017-06-20 06:34 - 02750464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-07-12 14:17 - 2017-06-20 06:34 - 02211328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2017-07-12 14:17 - 2017-06-20 06:34 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2017-07-12 14:17 - 2017-06-20 06:34 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2017-07-12 14:17 - 2017-06-20 06:31 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2017-07-12 14:17 - 2017-06-20 06:30 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv 2017-07-12 14:17 - 2017-06-20 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2017-07-12 14:17 - 2017-06-20 06:30 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-07-12 14:17 - 2017-06-20 06:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll 2017-07-12 14:14 - 2017-07-07 09:24 - 00117664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2017-07-12 14:14 - 2017-07-07 09:21 - 32688336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll 2017-07-12 14:14 - 2017-07-07 09:20 - 02021680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2017-07-12 14:14 - 2017-07-07 09:17 - 01017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2017-07-12 14:14 - 2017-07-07 09:14 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-07-12 14:14 - 2017-07-07 09:13 - 00336320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2017-07-12 14:14 - 2017-07-07 09:12 - 00411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-07-12 14:14 - 2017-07-07 09:12 - 00318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2017-07-12 14:14 - 2017-07-07 09:12 - 00228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-07-12 14:14 - 2017-07-07 09:11 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-07-12 14:14 - 2017-07-07 09:11 - 00094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-07-12 14:14 - 2017-07-07 09:10 - 21353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-07-12 14:14 - 2017-07-07 09:10 - 01670496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-07-12 14:14 - 2017-07-07 09:09 - 00041376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll 2017-07-12 14:14 - 2017-07-07 08:27 - 03670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-07-12 14:14 - 2017-07-07 08:27 - 01640448 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-07-12 14:14 - 2017-07-07 08:27 - 01050624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-07-12 14:14 - 2017-07-07 08:27 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll 2017-07-12 14:14 - 2017-07-07 08:23 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2017-07-12 14:14 - 2017-07-07 08:23 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-07-12 14:14 - 2017-07-07 08:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2017-07-12 14:14 - 2017-07-07 08:22 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-07-12 14:14 - 2017-07-07 08:21 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-07-12 14:14 - 2017-07-07 08:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll 2017-07-12 14:14 - 2017-07-07 08:19 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-07-12 14:14 - 2017-07-07 08:19 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2017-07-12 14:14 - 2017-07-07 08:18 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2017-07-12 14:14 - 2017-07-07 08:18 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll 2017-07-12 14:14 - 2017-07-07 08:17 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-07-12 14:14 - 2017-07-07 08:17 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-07-12 14:14 - 2017-07-07 08:17 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-07-12 14:14 - 2017-07-07 08:17 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-07-12 14:14 - 2017-07-07 08:17 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe 2017-07-12 14:14 - 2017-07-07 08:16 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-07-12 14:14 - 2017-07-07 08:16 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-07-12 14:14 - 2017-07-07 08:15 - 08238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-07-12 14:14 - 2017-07-07 08:15 - 00922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-07-12 14:14 - 2017-07-07 08:14 - 08211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-07-12 14:14 - 2017-07-07 08:14 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr 2017-07-12 14:14 - 2017-07-07 08:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 04730880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 02055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-07-12 14:14 - 2017-07-07 08:12 - 01420800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-07-12 14:14 - 2017-07-07 08:12 - 00706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-07-12 14:14 - 2017-07-07 08:11 - 00986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-07-12 14:14 - 2017-07-07 08:11 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-07-12 14:14 - 2017-07-07 08:10 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-07-12 14:14 - 2017-07-07 08:10 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-07-12 14:14 - 2017-07-07 08:08 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-07-12 14:14 - 2017-07-07 08:07 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2017-07-12 14:14 - 2017-07-07 08:07 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2017-07-12 14:14 - 2017-07-07 08:07 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll 2017-07-12 14:14 - 2017-07-07 08:04 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll 2017-07-12 14:14 - 2017-07-02 00:52 - 00031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-07-12 14:14 - 2017-06-20 08:03 - 00820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-07-12 14:14 - 2017-06-20 08:02 - 01055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2017-07-12 14:14 - 2017-06-20 08:00 - 00558920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2017-07-12 14:14 - 2017-06-20 07:59 - 06554928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-07-12 14:14 - 2017-06-20 07:58 - 00833160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2017-07-12 14:14 - 2017-06-20 07:57 - 02681760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-07-12 14:14 - 2017-06-20 07:57 - 00204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2017-07-12 14:14 - 2017-06-20 07:16 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll 2017-07-12 14:14 - 2017-06-20 07:13 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2017-07-12 14:14 - 2017-06-20 07:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll 2017-07-12 14:14 - 2017-06-20 07:13 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2017-07-12 14:14 - 2017-06-20 07:12 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-07-12 14:14 - 2017-06-20 07:12 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll 2017-07-12 14:14 - 2017-06-20 07:11 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-07-12 14:14 - 2017-06-20 07:10 - 00722432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-07-12 14:14 - 2017-06-20 07:10 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-07-12 14:14 - 2017-06-20 07:09 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2017-07-12 14:14 - 2017-06-20 07:08 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2017-07-12 14:14 - 2017-06-20 07:08 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2017-07-12 14:14 - 2017-06-20 07:08 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2017-07-12 14:14 - 2017-06-20 07:08 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2017-07-12 14:14 - 2017-06-20 07:07 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2017-07-12 14:14 - 2017-06-20 07:07 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-07-12 14:14 - 2017-06-20 07:07 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-07-12 14:14 - 2017-06-20 07:06 - 00942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-07-12 14:14 - 2017-06-20 07:06 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll 2017-07-12 14:14 - 2017-06-20 07:05 - 04447744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-07-12 14:14 - 2017-06-20 07:05 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll 2017-07-12 14:14 - 2017-06-20 07:05 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2017-07-12 14:14 - 2017-06-20 07:05 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-07-12 14:14 - 2017-06-20 07:05 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-07-12 14:14 - 2017-06-20 07:05 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-07-12 14:14 - 2017-06-20 07:04 - 01818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2017-07-12 14:14 - 2017-06-20 07:04 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2017-07-12 14:14 - 2017-06-20 07:04 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2017-07-12 14:14 - 2017-06-20 07:04 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-07-12 14:14 - 2017-06-20 07:04 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2017-07-12 14:14 - 2017-06-20 07:03 - 01396224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-07-12 14:14 - 2017-06-20 07:02 - 03377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-07-12 14:14 - 2017-06-20 07:02 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-07-12 14:14 - 2017-06-20 07:01 - 03803136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-07-12 14:14 - 2017-06-20 07:01 - 03332096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-07-12 14:14 - 2017-06-20 07:01 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-07-12 14:14 - 2017-06-20 07:01 - 01076736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2017-07-12 14:14 - 2017-06-20 07:01 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2017-07-12 14:14 - 2017-06-20 07:00 - 03057664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-07-12 14:14 - 2017-06-20 07:00 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-07-12 14:14 - 2017-06-20 06:59 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2017-07-12 14:14 - 2017-06-20 06:56 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-07-12 14:13 - 2017-07-07 09:23 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-07-12 14:13 - 2017-07-07 09:22 - 08318880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-07-12 14:13 - 2017-07-07 09:20 - 00519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2017-07-12 14:13 - 2017-07-07 09:15 - 02444696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-07-12 14:13 - 2017-07-07 09:14 - 07325584 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-07-12 14:13 - 2017-07-07 09:14 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-07-12 14:13 - 2017-07-07 09:10 - 00254168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-07-12 14:13 - 2017-07-07 09:07 - 00058488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2017-07-12 14:13 - 2017-07-07 08:40 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-07-12 14:13 - 2017-07-07 08:27 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2017-07-12 14:13 - 2017-07-07 08:24 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll 2017-07-12 14:13 - 2017-07-07 08:23 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll 2017-07-12 14:13 - 2017-07-07 08:21 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll 2017-07-12 14:13 - 2017-07-07 08:20 - 23681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-07-12 14:13 - 2017-07-07 08:20 - 08331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-07-12 14:13 - 2017-07-07 08:19 - 07149056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-07-12 14:13 - 2017-07-07 08:19 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll 2017-07-12 14:13 - 2017-07-07 08:18 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2017-07-12 14:13 - 2017-07-07 08:16 - 12786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-07-12 14:13 - 2017-07-07 08:14 - 03784704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2017-07-12 14:13 - 2017-07-07 08:14 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2017-07-12 14:13 - 2017-07-07 08:12 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-07-12 14:13 - 2017-07-07 08:12 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2017-07-12 14:13 - 2017-07-07 08:11 - 03139584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2017-07-12 14:13 - 2017-07-07 08:11 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2017-07-12 14:13 - 2017-07-07 08:06 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2017-07-12 14:13 - 2017-07-07 08:06 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll 2017-07-12 14:13 - 2017-07-07 08:05 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe 2017-07-12 14:13 - 2017-06-20 08:11 - 00411992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2017-07-12 14:13 - 2017-06-20 08:10 - 02327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-07-12 14:13 - 2017-06-20 08:10 - 01930320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-07-12 14:13 - 2017-06-20 08:08 - 01242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-07-12 14:13 - 2017-06-20 08:02 - 02645688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-07-12 14:13 - 2017-06-20 07:59 - 01220072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2017-07-12 14:13 - 2017-06-20 07:59 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2017-07-12 14:13 - 2017-06-20 07:58 - 00406072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll 2017-07-12 14:13 - 2017-06-20 07:16 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll 2017-07-12 14:13 - 2017-06-20 07:14 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys 2017-07-12 14:13 - 2017-06-20 07:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2017-07-12 14:13 - 2017-06-20 07:11 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-07-12 14:13 - 2017-06-20 07:10 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-07-12 14:13 - 2017-06-20 07:09 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe 2017-07-12 14:13 - 2017-06-20 07:09 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-07-12 14:13 - 2017-06-20 07:08 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-07-12 14:13 - 2017-06-20 07:08 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-07-12 14:13 - 2017-06-20 07:08 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-07-12 14:13 - 2017-06-20 07:07 - 00823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2017-07-12 14:13 - 2017-06-20 07:07 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-07-12 14:13 - 2017-06-20 07:07 - 00626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2017-07-12 14:13 - 2017-06-20 07:06 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-07-12 14:13 - 2017-06-20 07:06 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2017-07-12 14:13 - 2017-06-20 07:05 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2017-07-12 14:13 - 2017-06-20 07:05 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-07-12 14:13 - 2017-06-20 07:05 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-07-12 14:13 - 2017-06-20 07:01 - 04536320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-07-12 14:13 - 2017-06-20 07:01 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2017-07-12 14:13 - 2017-06-20 06:59 - 02938880 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2017-07-12 14:13 - 2017-06-20 06:56 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2017-07-12 14:12 - 2017-07-07 16:00 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2017-07-12 14:12 - 2017-07-07 09:27 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-07-12 14:12 - 2017-07-07 09:22 - 00119384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2017-07-12 14:12 - 2017-07-07 09:21 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-07-12 14:12 - 2017-07-07 09:20 - 00382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-07-12 14:12 - 2017-07-07 09:14 - 01171032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2017-07-12 14:12 - 2017-07-07 09:10 - 01325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-07-12 14:12 - 2017-07-07 09:10 - 00372128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-07-12 14:12 - 2017-07-07 09:07 - 01106848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2017-07-12 14:12 - 2017-07-07 08:27 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2017-07-12 14:12 - 2017-07-07 08:27 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll 2017-07-12 14:12 - 2017-07-07 08:27 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll 2017-07-12 14:12 - 2017-07-07 08:26 - 17364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-07-12 14:12 - 2017-07-07 08:25 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-07-12 14:12 - 2017-07-07 08:19 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-07-12 14:12 - 2017-07-07 08:18 - 07336448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-07-12 14:12 - 2017-07-07 08:18 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2017-07-12 14:12 - 2017-07-07 08:17 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-07-12 14:12 - 2017-07-07 08:17 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-07-12 14:12 - 2017-07-07 08:14 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-07-12 14:12 - 2017-07-07 08:13 - 05892096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-07-12 14:12 - 2017-07-07 08:12 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-07-12 14:12 - 2017-07-07 08:11 - 02829824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-07-12 14:12 - 2017-07-07 08:11 - 02649600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-07-12 14:12 - 2017-07-07 08:11 - 02177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2017-07-12 14:12 - 2017-07-07 08:11 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-07-12 14:12 - 2017-07-07 08:10 - 04707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2017-07-12 14:12 - 2017-07-07 08:04 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2017-07-12 14:12 - 2017-06-20 08:18 - 01564576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-07-12 14:12 - 2017-06-20 08:18 - 00096672 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-07-12 14:12 - 2017-06-20 08:17 - 00629152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-07-12 14:12 - 2017-06-20 08:17 - 00136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-07-12 14:12 - 2017-06-20 08:17 - 00034720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-07-12 14:12 - 2017-06-20 08:16 - 00335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-07-12 14:12 - 2017-06-20 08:05 - 01057832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2017-07-12 14:12 - 2017-06-20 08:04 - 04847424 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-07-12 14:12 - 2017-06-20 08:04 - 00472728 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-07-12 14:12 - 2017-06-20 08:00 - 00142752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-07-12 14:12 - 2017-06-20 07:58 - 00203168 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2017-07-12 14:12 - 2017-06-20 07:12 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll 2017-07-12 14:12 - 2017-06-20 07:10 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-07-12 14:12 - 2017-06-20 07:09 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll 2017-07-12 14:12 - 2017-06-20 07:08 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll 2017-07-12 14:12 - 2017-06-20 07:06 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2017-07-12 14:12 - 2017-06-20 07:06 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll 2017-07-12 14:12 - 2017-06-20 07:06 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll 2017-07-12 14:12 - 2017-06-20 07:05 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2017-07-12 14:12 - 2017-06-20 07:04 - 01425920 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-07-12 14:12 - 2017-06-20 07:03 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-07-12 14:12 - 2017-06-20 07:02 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll 2017-07-12 14:12 - 2017-06-20 07:01 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-07-12 14:12 - 2017-06-20 07:00 - 02171392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2017-07-12 14:12 - 2017-06-20 06:57 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2017-07-12 14:12 - 2017-06-20 06:57 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll 2017-07-12 14:12 - 2017-06-20 06:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll 2017-07-12 14:11 - 2017-07-07 09:27 - 01147288 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-07-12 14:11 - 2017-07-07 09:27 - 01024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-07-12 14:11 - 2017-07-07 09:27 - 00965024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2017-07-12 14:11 - 2017-07-07 09:27 - 00821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-07-12 14:11 - 2017-07-07 09:26 - 01065104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2017-07-12 14:11 - 2017-07-07 09:25 - 00899824 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2017-07-12 14:11 - 2017-07-07 09:22 - 01186464 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2017-07-12 14:11 - 2017-07-07 09:20 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-07-12 14:11 - 2017-07-07 09:13 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-07-12 14:11 - 2017-07-07 09:13 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll 2017-07-12 14:11 - 2017-07-07 09:10 - 01337848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 02229152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 01693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 01458584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 01100704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00992672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00848280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00846752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2017-07-12 14:11 - 2017-07-07 09:08 - 00844704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00774560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00699808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00672672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00506776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2017-07-12 14:11 - 2017-07-07 09:08 - 00399264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2017-07-12 14:11 - 2017-07-07 08:22 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-07-12 14:11 - 2017-07-07 08:04 - 01703424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-07-12 14:11 - 2017-06-20 08:17 - 00544160 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-07-12 14:11 - 2017-06-20 08:17 - 00334240 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-07-12 14:11 - 2017-06-20 08:16 - 01214880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-07-12 14:11 - 2017-06-20 08:15 - 00233376 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-07-12 14:11 - 2017-06-20 08:11 - 01395152 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2017-07-12 14:11 - 2017-06-20 08:06 - 00279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2017-07-12 14:11 - 2017-06-20 08:03 - 00179608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll 2017-07-12 14:11 - 2017-06-20 08:03 - 00102312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe 2017-07-12 14:11 - 2017-06-20 08:02 - 00426912 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2017-07-12 14:11 - 2017-06-20 08:00 - 00255904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2017-07-12 14:11 - 2017-06-20 07:59 - 01054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-07-12 14:11 - 2017-06-20 07:59 - 00583304 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2017-07-12 14:11 - 2017-06-20 07:13 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll 2017-07-12 14:11 - 2017-06-20 07:12 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2017-07-12 14:11 - 2017-06-20 07:10 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll 2017-07-12 14:11 - 2017-06-20 07:10 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2017-07-12 14:11 - 2017-06-20 07:07 - 00916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2017-07-12 14:11 - 2017-06-20 07:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2017-07-12 14:11 - 2017-06-20 07:06 - 00847872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2017-07-12 14:11 - 2017-06-20 07:06 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2017-07-12 14:11 - 2017-06-20 07:05 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-07-12 14:11 - 2017-06-20 07:05 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-07-12 14:11 - 2017-06-20 07:04 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll 2017-07-12 14:11 - 2017-06-20 07:02 - 03204096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2017-07-12 14:11 - 2017-06-20 07:02 - 02804736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-07-12 14:11 - 2017-06-20 07:02 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-07-12 14:11 - 2017-06-20 06:59 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-07-12 14:11 - 2017-06-20 06:58 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-07-12 14:11 - 2017-06-20 06:56 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv 2017-07-12 14:10 - 2017-07-07 09:13 - 00554392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2017-07-12 14:07 - 2017-07-16 13:49 - 00000000 ____D C:\Users\Uporabnik\AppData\LocalLow\Mozilla 2017-07-12 14:03 - 2017-07-12 14:04 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\ConnectedDevicesPlatform 2017-07-12 13:59 - 2017-07-12 13:59 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2017-07-12 13:41 - 2017-07-12 13:41 - 00000000 ____D C:\WINDOWS\Panther 2017-07-12 12:19 - 2017-07-12 12:19 - 00000286 __RSH C:\Users\Uporabnik\ntuser.pol 2017-07-12 12:14 - 2017-07-12 12:39 - 00097008 _____ (电脑管家) C:\WINDOWS\system32\Drivers\tfsfltX64_ev.sys 2017-07-12 12:13 - 2017-07-12 12:42 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 2017-07-12 12:13 - 2017-07-12 12:13 - 00140800 _____ C:\Users\Uporabnik\AppData\Local\installer.dat 2017-07-12 12:13 - 2017-07-12 12:13 - 00096248 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFltX64.sys 2017-07-12 12:13 - 2017-07-12 12:13 - 00011568 _____ C:\Users\Uporabnik\AppData\Local\InstallationConfiguration.xml 2017-07-12 12:11 - 2017-07-12 12:11 - 00117760 _____ C:\WINDOWS\Manager.exe 2017-07-12 12:11 - 2017-07-12 12:11 - 00015424 _____ C:\WINDOWS\system32\Drivers\qlgurlsvn.sys 2017-07-12 12:11 - 2017-07-12 12:11 - 00000000 ____D C:\WINDOWS\SysWOW64\SSL 2017-07-12 12:10 - 2017-07-13 08:11 - 00187904 _____ C:\WINDOWS\rsrcs.dll 2017-07-12 12:09 - 2017-01-12 21:49 - 02235392 _____ C:\WINDOWS\SysWOW64\cuda_tromp_75.dll 2017-07-12 12:09 - 2017-01-12 21:49 - 00045056 _____ C:\WINDOWS\SysWOW64\cpu_tromp_SSE2.dll 2017-07-12 12:09 - 2017-01-12 21:48 - 02235392 _____ C:\WINDOWS\SysWOW64\cuda_tromp.dll 2017-07-12 12:09 - 2017-01-12 21:48 - 00044032 _____ C:\WINDOWS\SysWOW64\cpu_tromp_AVX.dll 2017-07-12 12:09 - 2017-01-12 19:18 - 00986112 _____ C:\WINDOWS\SysWOW64\cuda_djezo.dll 2017-07-12 12:09 - 2016-09-05 15:51 - 00366016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart64_80.dll 2017-07-12 12:09 - 2016-09-05 15:51 - 00297408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart32_80.dll 2017-07-12 12:09 - 2015-08-16 01:21 - 00360736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart64_75.dll 2017-07-12 12:09 - 2015-08-16 01:21 - 00291632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart32_75.dll 2017-07-12 11:37 - 2012-01-05 12:43 - 04218880 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\SysWOW64\cdintf400.dll 2017-07-12 11:34 - 2017-07-13 12:03 - 00000090 _____ C:\WINDOWS\QBChanUtil_Trigger.ini 2017-07-12 10:28 - 2017-07-12 13:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\System 2017-07-12 10:28 - 2017-07-12 10:28 - 00000000 ____D C:\Users\Public\Documents\XMUpdate 2017-07-11 15:52 - 2016-01-28 20:58 - 05474204 _____ C:\Users\Uporabnik\Desktop\21 Handwritten Signatures.zip 2017-07-11 15:45 - 2017-07-11 23:34 - 84258196 _____ C:\Users\Uporabnik\Desktop\BofA Statement.psd 2017-07-11 10:54 - 2017-07-11 10:54 - 00051625 _____ C:\WINDOWS\uninstaller.dat 2017-07-08 11:37 - 2017-07-08 11:49 - 00000107 _____ C:\Users\Uporabnik\Desktop\rsclub market mnemonic.txt 2017-07-06 11:11 - 2017-07-06 11:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2017-07-06 11:11 - 2017-07-06 11:11 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2017-07-04 12:56 - 2017-07-15 12:56 - 00000000 ____D C:\Users\Uporabnik\Desktop\paystub, w2 2017-07-04 10:46 - 2017-07-04 10:46 - 00124288 _____ C:\WINDOWS\system32\Drivers\wfcre.sys 2017-06-30 11:04 - 2017-07-15 12:55 - 00000000 ____D C:\Users\Uporabnik\Desktop\l 2017-06-28 11:56 - 2017-06-28 11:56 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\Foxit PhantomPDF 2017-06-27 19:12 - 2017-06-27 19:47 - 00000000 ____D C:\Program Files (x86)\Citrix 2017-06-26 01:06 - 2017-07-10 21:14 - 00000000 ____D C:\Users\Uporabnik\Desktop\mass indicators 2017-06-22 00:52 - 2017-06-22 00:52 - 00000000 ____D C:\Users\Uporabnik\Desktop\drops 2017-06-22 00:52 - 2017-06-22 00:52 - 00000000 ____D C:\Foxit Software 2017-06-21 11:25 - 2017-06-21 11:25 - 00000189 _____ C:\Users\Uporabnik\Desktop\AOIs.txt 2017-06-20 10:26 - 2017-06-20 10:50 - 00000000 ____D C:\Users\Uporabnik\Desktop\United Utilities 2017-06-18 22:46 - 2017-06-19 21:21 - 00000000 ____D C:\Users\Uporabnik\Desktop\uk company docs 2017-06-15 07:32 - 2017-06-15 07:32 - 00003402 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration 2017-06-15 04:05 - 2017-06-15 04:05 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2017-06-15 04:04 - 2017-06-03 12:09 - 01003624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2017-06-15 04:04 - 2017-06-03 12:07 - 00119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-15 04:04 - 2017-06-03 12:00 - 00219040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2017-06-15 04:04 - 2017-06-03 11:59 - 01409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-06-15 04:04 - 2017-06-03 11:59 - 00311200 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-06-15 04:04 - 2017-06-03 11:59 - 00259400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2017-06-15 04:04 - 2017-06-03 11:26 - 00266640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capauthz.dll 2017-06-15 04:04 - 2017-06-03 11:23 - 00573856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2017-06-15 04:04 - 2017-06-03 11:14 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2017-06-15 04:04 - 2017-06-03 11:12 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-15 04:04 - 2017-06-03 11:11 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-06-15 04:04 - 2017-06-03 11:11 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-06-15 04:04 - 2017-06-03 11:11 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-06-15 04:04 - 2017-06-03 11:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-15 04:04 - 2017-06-03 11:10 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2017-06-15 04:04 - 2017-06-03 11:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-06-15 04:04 - 2017-06-03 11:07 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-06-15 04:04 - 2017-06-03 11:05 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2017-06-15 04:04 - 2017-06-03 11:05 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devicengccredprov.dll 2017-06-15 04:04 - 2017-06-03 11:03 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-06-15 04:04 - 2017-06-03 11:00 - 00933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-15 04:04 - 2017-06-03 10:58 - 02516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-06-15 04:04 - 2017-06-03 10:58 - 01046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2017-06-15 04:04 - 2017-06-03 10:57 - 06535168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-06-15 04:04 - 2017-06-03 10:57 - 00797184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-06-15 04:04 - 2017-06-03 10:54 - 02341376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-06-15 04:03 - 2017-06-03 12:15 - 01596600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-06-15 04:03 - 2017-06-03 12:15 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-15 04:03 - 2017-06-03 12:10 - 00130464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-15 04:03 - 2017-06-03 12:00 - 00321376 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll 2017-06-15 04:03 - 2017-06-03 11:58 - 00660384 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2017-06-15 04:03 - 2017-06-03 11:14 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll 2017-06-15 04:03 - 2017-06-03 11:14 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-15 04:03 - 2017-06-03 11:11 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-06-15 04:03 - 2017-06-03 11:10 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCredentialDeployment.exe 2017-06-15 04:03 - 2017-06-03 11:09 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2017-06-15 04:03 - 2017-06-03 11:09 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\devicengccredprov.dll 2017-06-15 04:03 - 2017-06-03 11:07 - 00778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2017-06-15 04:03 - 2017-06-03 11:07 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2017-06-15 04:03 - 2017-06-03 11:06 - 00551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-06-15 04:03 - 2017-06-03 11:04 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-06-15 04:03 - 2017-06-03 11:01 - 06726656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-06-15 04:03 - 2017-06-03 11:00 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-06-15 04:03 - 2017-06-03 10:59 - 02625024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-06-15 04:03 - 2017-06-03 10:59 - 00975360 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-15 04:03 - 2017-06-03 10:58 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-15 04:03 - 2017-06-03 10:54 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe 2017-06-15 04:03 - 2017-06-03 10:51 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 04709528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 04672848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 03135488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02730496 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 02604256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02438656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02424016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02347520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01911752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01700408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01506712 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01474800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01459728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01455592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01333136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01266544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01141760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01078272 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00972800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00826368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00730016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00712608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00606960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00543648 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-06-15 02:15 - 2017-06-15 02:15 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-06-15 02:15 - 2017-06-15 02:15 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00370928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00363424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00211872 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00188824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvc.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00144288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveExt.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00112544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00086016 _____ C:\WINDOWS\system32\xboxgipsynthetic.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-06-15 02:15 - 2017-06-15 02:15 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-06-15 02:15 - 2017-06-15 02:15 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00059904 _____ C:\WINDOWS\SysWOW64\xboxgipsynthetic.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksthunk.sys 2017-06-15 02:15 - 2017-06-15 02:15 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-06-15 02:15 - 2017-06-15 02:15 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe 2017-06-15 02:15 - 2017-06-15 02:15 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys 2017-06-15 02:11 - 2017-06-15 02:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-06-15 02:11 - 2017-06-15 01:19 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-06-15 02:09 - 2017-06-15 02:09 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-06-15 02:09 - 2017-06-15 02:09 - 00000000 ____D C:\Program Files\MSBuild 2017-06-15 02:09 - 2017-06-15 02:09 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-06-15 02:09 - 2017-06-15 02:09 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-06-15 02:08 - 2017-06-15 02:08 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-06-15 02:08 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-06-15 02:08 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-06-15 02:08 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-06-15 02:08 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-06-15 02:08 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-06-15 02:08 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-06-15 01:56 - 2017-06-15 01:56 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-06-15 01:55 - 2017-06-15 01:55 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\DBG 2017-06-15 01:53 - 2017-06-15 01:53 - 00000020 ___SH C:\Users\Uporabnik\ntuser.ini 2017-06-15 01:49 - 2017-07-12 13:07 - 00001908 _____ C:\WINDOWS\diagwrn.xml 2017-06-15 01:49 - 2017-07-12 13:07 - 00001908 _____ C:\WINDOWS\diagerr.xml 2017-06-15 01:43 - 2017-07-15 23:38 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Internet Security 2017-06-15 01:43 - 2017-07-15 10:35 - 01128904 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-15 01:39 - 2017-07-14 13:24 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-06-15 01:32 - 2017-07-13 14:04 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-06-15 01:26 - 2017-06-15 01:33 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-06-15 01:24 - 2017-07-13 19:24 - 00000000 ____D C:\Users\Uporabnik 2017-06-15 01:24 - 2017-06-15 01:24 - 00000000 ____D C:\Users\Administrator 2017-06-15 01:23 - 2017-05-01 22:51 - 06437312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 02479552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 00548800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-06-15 01:23 - 2017-05-01 22:51 - 00069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-06-15 01:23 - 2017-04-25 23:11 - 07944687 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-06-15 01:22 - 2017-07-16 01:41 - 00000000 ____D C:\ProgramData\NVIDIA 2017-06-15 01:22 - 2017-06-15 01:27 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-06-15 01:22 - 2017-06-15 01:27 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-06-15 01:22 - 2017-06-15 01:27 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-06-15 01:22 - 2017-06-15 01:22 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-06-15 01:22 - 2017-06-15 01:22 - 00000000 ____D C:\Program Files\Realtek 2017-06-15 01:22 - 2017-05-01 22:52 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-06-15 01:22 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-06-15 01:21 - 2017-06-15 01:21 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2017-06-15 01:19 - 2017-07-16 12:41 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-06-15 01:19 - 2017-07-13 14:01 - 05019680 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-15 00:56 - 2017-06-15 00:56 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-06-15 00:13 - 2017-06-15 00:13 - 09508116 _____ C:\Users\Uporabnik\Desktop\Resumes.pdf 2017-06-13 11:42 - 2017-06-13 11:42 - 00092672 _____ C:\Users\Uporabnik\Desktop\TSYS Business Information Sheet.xls 2017-06-10 10:12 - 2017-06-10 10:32 - 00010584 _____ C:\Users\Uporabnik\Desktop\uk addresses.xlsx 2017-06-02 17:23 - 2017-06-15 01:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF 2017-06-02 17:23 - 2017-06-02 17:23 - 00000000 ____D C:\Users\Public\Foxit Software 2017-06-02 17:23 - 2017-06-02 17:23 - 00000000 ____D C:\ProgramData\Foxit Software 2017-06-02 17:21 - 2017-06-02 17:21 - 00000000 ____D C:\Program Files (x86)\Foxit Software 2017-06-02 16:27 - 2017-07-16 11:30 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\CrashDumps 2017-06-02 16:13 - 2017-07-12 11:54 - 00000000 ____D C:\Users\Uporabnik\Desktop\Foxit PhantomPDF Business 8.3.0.14878 2017-06-01 23:57 - 2017-07-10 11:34 - 00000000 ____D C:\Users\Uporabnik\Desktop\cmails 2017-06-01 20:01 - 2017-07-13 14:03 - 00001267 _____ C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nastavitve posodabljanja in zasebnosti.lnk 2017-06-01 20:01 - 2017-06-01 20:01 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\UNP 2017-06-01 19:35 - 2017-06-15 01:33 - 00000000 ____D C:\WINDOWS\system32\UNP 2017-05-23 17:55 - 2017-07-14 23:38 - 00000000 ____D C:\Users\Uporabnik\Desktop\offshore 2017-05-19 18:05 - 2017-05-19 18:05 - 35397528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 28632152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00969624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00920664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-05-19 18:04 - 2017-05-19 18:04 - 00507984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01996696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01609232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01598360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 01062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00999832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00829848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00659864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2017-05-19 18:03 - 2017-05-19 18:03 - 00226712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-05-19 18:03 - 2017-05-19 18:03 - 00054680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 40210512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 35290192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 03800984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-05-19 18:02 - 2017-05-19 18:02 - 03256408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 11161992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 10648512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 09102480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 08891160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00791792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00703880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00633040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00626384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-05-19 17:48 - 2017-05-19 17:48 - 00591672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 11129704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 09335520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 04136736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 03647864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 01298696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-05-19 17:47 - 2017-05-19 17:47 - 01013344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-05-19 14:22 - 2017-05-19 14:22 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb 2017-05-19 14:22 - 2017-05-19 14:22 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-05-19 14:22 - 2017-05-19 14:22 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-05-11 16:39 - 2017-07-13 14:02 - 00001121 _____ C:\Users\Uporabnik\Desktop\Electrum.lnk 2017-05-11 16:39 - 2017-06-15 01:33 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electrum 2017-05-11 16:38 - 2017-05-11 16:39 - 00000000 ____D C:\Program Files (x86)\Electrum 2017-05-10 23:18 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-05-10 16:43 - 2017-05-09 07:13 - 00000083 _____ C:\Users\Uporabnik\Desktop\token, u-p.txt 2017-04-28 16:54 - 2017-07-14 14:31 - 00000000 ____D C:\Program Files (x86)\IQ Option 2017-04-28 16:54 - 2017-07-13 14:03 - 00001103 _____ C:\Users\Public\Desktop\IQ Option.lnk 2017-04-28 16:54 - 2017-06-15 01:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IQ Option 2017-04-28 16:54 - 2017-04-28 16:54 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\IQ Option 2017-04-28 16:52 - 2017-04-28 16:52 - 09052688 _____ (IQOption) C:\Users\Uporabnik\Desktop\IQOption.exe 2017-04-25 21:26 - 2017-07-01 11:06 - 00001102 _____ C:\Users\Uporabnik\Desktop\mb.txt ==================== Three Months Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-07-16 13:47 - 2014-09-21 00:17 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Skype 2017-07-16 13:27 - 2014-10-12 10:24 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\.purple 2017-07-16 01:13 - 2014-11-26 00:02 - 00000000 ____D C:\Users\Uporabnik\Documents\Outlookove datoteke 2017-07-15 21:40 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-07-15 16:32 - 2016-02-03 13:37 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Zoiper 2017-07-15 12:44 - 2015-02-28 20:46 - 00000045 _____ C:\Users\Uporabnik\Desktop\sets.txt 2017-07-15 10:35 - 2016-10-03 06:54 - 01034440 _____ C:\WINDOWS\system32\perfh024.dat 2017-07-15 10:35 - 2016-10-03 06:54 - 00319800 _____ C:\WINDOWS\system32\perfc024.dat 2017-07-14 22:18 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-07-14 22:15 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF 2017-07-14 13:20 - 2017-03-18 13:40 - 03145728 _____ C:\WINDOWS\system32\config\BBI 2017-07-14 13:12 - 2016-04-27 23:05 - 00004864 __RSH C:\ProgramData\ntuser.pol 2017-07-13 14:28 - 2016-02-24 18:51 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Electrum 2017-07-13 14:20 - 2014-09-21 22:56 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe 2017-07-13 14:07 - 2014-09-08 22:17 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\VirtualStore 2017-07-13 14:04 - 2016-08-01 14:39 - 00001140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk 2017-07-13 14:04 - 2016-08-01 14:37 - 00001386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015 (32 Bit).lnk 2017-07-13 14:04 - 2016-08-01 14:34 - 00001394 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Update Management Tool.lnk 2017-07-13 14:04 - 2016-08-01 14:29 - 00001630 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2017-07-13 14:04 - 2014-09-22 19:40 - 00001332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk 2017-07-13 14:03 - 2016-12-13 18:39 - 00002086 _____ C:\Users\Public\Desktop\ForTrade MetaTrader 4.lnk 2017-07-13 14:03 - 2016-09-28 20:30 - 00001495 _____ C:\Users\Uporabnik\Desktop\X1.lnk 2017-07-13 14:03 - 2016-02-03 13:36 - 00001155 _____ C:\Users\Public\Desktop\Zoiper.lnk 2017-07-13 14:03 - 2015-12-07 11:13 - 00002433 _____ C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-07-13 14:03 - 2014-10-01 21:59 - 00000303 _____ C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Domača skupina.lnk 2017-07-13 14:03 - 2014-09-22 23:23 - 00001010 _____ C:\Users\Uporabnik\Desktop\Slovarji.lnk 2017-07-13 14:03 - 2014-09-22 12:09 - 00001409 _____ C:\Users\Uporabnik\Desktop\X-Lite.lnk 2017-07-13 14:03 - 2014-09-22 10:37 - 00000283 _____ C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Koš.lnk 2017-07-13 14:03 - 2014-09-21 07:57 - 00000966 _____ C:\Users\Uporabnik\Desktop\Sure Delete.lnk 2017-07-13 14:03 - 2014-09-21 01:37 - 00001088 _____ C:\Users\Uporabnik\Desktop\Tor.lnk 2017-07-13 14:03 - 2014-09-21 00:22 - 00001846 _____ C:\Users\Uporabnik\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2017-07-13 14:02 - 2017-01-26 20:39 - 00001063 _____ C:\Users\Uporabnik\Desktop\msr.lnk 2017-07-13 14:02 - 2016-09-28 20:32 - 00001091 _____ C:\Users\Uporabnik\Desktop\Cardpeek.lnk 2017-07-13 14:02 - 2016-06-13 11:18 - 00001589 _____ C:\Users\Uporabnik\Desktop\MorphVOX Pro.lnk 2017-07-13 14:02 - 2014-09-21 11:39 - 00001409 _____ C:\Users\Uporabnik\Desktop\Pidgin.lnk 2017-07-13 14:02 - 2014-09-21 01:28 - 00001614 _____ C:\Users\Uporabnik\Desktop\AV Voice Changer.lnk 2017-07-13 13:52 - 2014-12-06 16:00 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\vlc 2017-07-13 13:49 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Performance 2017-07-13 13:37 - 2014-09-21 00:33 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-07-13 08:53 - 2016-05-31 09:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefoxkfs 2017-07-13 08:40 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache 2017-07-13 08:19 - 2014-09-21 11:22 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-07-12 18:58 - 2014-09-08 22:15 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-07-12 18:55 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-07-12 18:53 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-07-12 15:59 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-07-12 14:42 - 2016-05-11 23:51 - 00000000 ____D C:\Users\Public\Documents\Halfpricesoft 2017-07-12 14:20 - 2014-09-21 11:21 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-07-12 13:40 - 2016-03-10 23:07 - 00000000 ____D C:\WINDOWS\ACR38SDK 2017-07-12 12:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-07-12 12:36 - 2014-09-08 22:17 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\Packages 2017-07-12 12:09 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-07-12 09:39 - 2014-09-22 21:39 - 00000000 ____D C:\Users\Uporabnik\Documents\Prošnje 2017-07-11 10:19 - 2017-01-03 11:10 - 00001096 _____ C:\Users\Uporabnik\Desktop\Nov dokument z besedilom.txt 2017-07-10 10:49 - 2014-08-13 21:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2017-07-06 11:11 - 2015-11-19 11:50 - 00000000 ____D C:\Program Files\McAfee Security Scan 2017-07-02 18:42 - 2017-04-06 18:22 - 00001464 _____ C:\Users\Uporabnik\Desktop\reship.txt 2017-06-30 16:47 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-06-30 16:47 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-06-29 09:27 - 2015-09-17 20:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-06-27 19:12 - 2015-04-27 15:37 - 00000000 ____D C:\Users\Uporabnik\AppData\Local\Citrix 2017-06-26 01:05 - 2016-11-24 00:52 - 00000000 ____D C:\Users\Uporabnik\Desktop\Indicators 2017-06-23 14:15 - 2017-04-06 00:44 - 00000112 _____ C:\Users\Uporabnik\Desktop\phone.txt 2017-06-23 00:43 - 2017-01-06 15:34 - 00045598 _____ C:\Users\Uporabnik\Desktop\Andrei0.txt 2017-06-22 01:24 - 2015-12-07 11:13 - 00000000 ___RD C:\Users\Uporabnik\OneDrive 2017-06-19 14:24 - 2014-10-08 15:52 - 00000000 ____D C:\Users\Uporabnik\AppData\Roaming\Foxit Software 2017-06-17 10:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-06-17 10:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed ==================== Files in the root of some directories ======= 2015-10-22 00:01 - 2015-10-22 00:12 - 0000133 _____ () C:\Users\Uporabnik\AppData\Roaming\Camdata.ini 2015-10-22 00:01 - 2015-10-22 00:12 - 0000408 _____ () C:\Users\Uporabnik\AppData\Roaming\CamLayout.ini 2015-10-22 00:01 - 2015-10-22 00:12 - 0000408 _____ () C:\Users\Uporabnik\AppData\Roaming\CamShapes.ini 2015-10-22 00:01 - 2015-10-22 00:12 - 0004574 _____ () C:\Users\Uporabnik\AppData\Roaming\CamStudio.cfg 2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\Uporabnik\AppData\Roaming\GUJHN 2014-09-01 10:18 - 2015-06-06 19:33 - 0000365 _____ () C:\Users\Uporabnik\AppData\Roaming\RFPXK 2015-10-21 23:40 - 2015-10-22 00:06 - 0000096 _____ () C:\Users\Uporabnik\AppData\Roaming\version2.xml 2016-10-23 12:26 - 2016-10-23 12:26 - 1209817 _____ () C:\Users\Uporabnik\AppData\Local\ars.cache 2016-10-23 12:26 - 2016-10-23 12:26 - 1207453 _____ () C:\Users\Uporabnik\AppData\Local\census.cache 2016-10-23 11:45 - 2016-10-23 11:45 - 0000036 _____ () C:\Users\Uporabnik\AppData\Local\housecall.guid.cache 2017-07-12 12:13 - 2017-07-12 12:13 - 0011568 _____ () C:\Users\Uporabnik\AppData\Local\InstallationConfiguration.xml 2017-07-12 12:13 - 2017-07-12 12:13 - 0140800 _____ () C:\Users\Uporabnik\AppData\Local\installer.dat 2017-01-26 21:47 - 2017-01-26 21:47 - 0000218 _____ () C:\Users\Uporabnik\AppData\Local\recently-used.xbel 2014-09-08 22:19 - 2015-04-25 14:37 - 0000282 _____ () C:\Users\Uporabnik\AppData\Local\RegisteredPackageInformation.xml 2016-08-10 18:03 - 2016-08-10 18:03 - 0000017 _____ () C:\Users\Uporabnik\AppData\Local\resmon.resmoncfg 2016-10-23 11:55 - 2016-10-23 11:55 - 0000010 _____ () C:\Users\Uporabnik\AppData\Local\sponge.last.runtime.cache Some files in TEMP: ==================== 2017-07-16 13:17 - 2017-07-16 13:17 - 0734720 _____ () C:\Users\Uporabnik\AppData\Local\Temp\AFP__7428_il1.exe 2017-07-16 13:11 - 2017-07-16 13:11 - 2378151 _____ () C:\Users\Uporabnik\AppData\Local\Temp\gib_1_m_baty.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== BCD ================================ Firmware Boot Manager --------------------- identifier {fwbootmgr} displayorder {bootmgr} {7a55a0f8-3794-11e4-be71-806e6f6e6963} {7a55a0f9-3794-11e4-be71-806e6f6e6963} {f25f6375-2323-11e4-86d5-806e6f6e6963} {f25f6376-2323-11e4-86d5-806e6f6e6963} timeout 1 Windows Boot Manager -------------------- identifier {bootmgr} device partition=\Device\HarddiskVolume2 path \EFI\Microsoft\Boot\bootmgfw.efi description Windows Boot Manager locale sl-SI inherit {globalsettings} default {current} resumeobject {cc756160-3794-11e4-be71-448a5bc0eecc} displayorder {current} toolsdisplayorder {memdiag} timeout 0 Firmware Application (101fffff) ------------------------------- identifier {7a55a0f8-3794-11e4-be71-806e6f6e6963} description UEFI: IP4 Intel(R) Ethernet Connection I217-LM Firmware Application (101fffff) ------------------------------- identifier {7a55a0f9-3794-11e4-be71-806e6f6e6963} description UEFI: IP6 Intel(R) Ethernet Connection I217-LM Firmware Application (101fffff) ------------------------------- identifier {f25f6375-2323-11e4-86d5-806e6f6e6963} description Generic Usb Device Firmware Application (101fffff) ------------------------------- identifier {f25f6376-2323-11e4-86d5-806e6f6e6963} description CD/DVD Device Windows Boot Loader ------------------- identifier {current} device partition=C: path \WINDOWS\system32\winload.efi description Windows 10 locale sl-SI inherit {bootloadersettings} recoverysequence {cc756162-3794-11e4-be71-448a5bc0eecc} displaymessageoverride Recovery recoveryenabled Yes isolatedcontext Yes allowedinmemorysettings 0x15000075 osdevice partition=C: systemroot \WINDOWS resumeobject {cc756160-3794-11e4-be71-448a5bc0eecc} nx OptIn bootmenupolicy Standard Windows Boot Loader ------------------- identifier {cc756162-3794-11e4-be71-448a5bc0eecc} device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cc756163-3794-11e4-be71-448a5bc0eecc} path \windows\system32\winload.efi description Windows Recovery Environment locale sl-SI inherit {bootloadersettings} displaymessage Recovery osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cc756163-3794-11e4-be71-448a5bc0eecc} systemroot \windows nx OptIn bootmenupolicy Standard winpe Yes Resume from Hibernate --------------------- identifier {cc756160-3794-11e4-be71-448a5bc0eecc} device partition=C: path \WINDOWS\system32\winresume.efi description Windows Resume Application locale sl-SI inherit {resumeloadersettings} recoverysequence {cc756162-3794-11e4-be71-448a5bc0eecc} recoveryenabled Yes isolatedcontext Yes allowedinmemorysettings 0x15000075 filedevice partition=C: filepath \hiberfil.sys bootmenupolicy Standard debugoptionenabled No Windows Memory Tester --------------------- identifier {memdiag} device partition=\Device\HarddiskVolume2 path \EFI\Microsoft\Boot\memtest.efi description Windows Memory Diagnostic locale sl-SI inherit {globalsettings} badmemoryaccess Yes EMS Settings ------------ identifier {emssettings} bootems No Debugger Settings ----------------- identifier {dbgsettings} debugtype Serial debugport 1 baudrate 115200 RAM Defects ----------- identifier {badmemory} Global Settings --------------- identifier {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Boot Loader Settings -------------------- identifier {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Hypervisor Settings ------------------- identifier {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Resume Loader Settings ---------------------- identifier {resumeloadersettings} inherit {globalsettings} Device options -------------- identifier {cc756163-3794-11e4-be71-448a5bc0eecc} description Windows Recovery ramdisksdidevice partition=\Device\HarddiskVolume5 ramdisksdipath \Recovery\WindowsRE\boot.sdi LastRegBack: 2017-07-10 11:02 ==================== End of FRST.txt ============================