No log file ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated) S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] () S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-13] () S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.) S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.) S4 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.) R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe [72024 2017-02-07] (Google Inc.) S4 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2016-12-23] (Creative Labs) [File not signed] S4 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () [File not signed] S4 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [142632 2016-06-14] (GIGA-BYTE TECHNOLOGY CO., LTD.) R2 ExpressVpnService; C:\program files (x86)\expressvpn\bootstrap\AMD64\nssm.exe [331264 2017-07-06] () [File not signed] S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed] S4 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed] S4 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [457432 2016-11-01] (Rivet Networks) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-07-10] (Logitech Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes) R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2012-07-31] (Hewlett-Packard) [File not signed] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-08-21] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-09-19] (NVIDIA Corporation) S4 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [127272 2016-06-14] (GIGA-BYTE TECHNOLOGY CO., LTD.) S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2169696 2017-07-05] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3149664 2017-07-05] (Electronic Arts) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1451336 2017-10-17] (Overwolf LTD) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2012-07-31] (Hewlett-Packard) [File not signed] S4 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2016-06-27] () S4 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2016-07-22] () R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [401024 2017-07-02] (Razer Inc.) R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [179840 2017-06-20] (Razer Inc.) S4 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-24] () S4 RipsawUSBPortChecker; C:\Program Files (x86)\Razer\Razer_Ripsaw_Driver\RipsawUSBPortChecker.exe [186904 2016-06-23] () R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [133376 2016-09-28] (Razer Inc.) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197768 2017-04-12] (Sandboxie Holdings, LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2017-08-08] (Microsoft Corporation) S4 SpotfluxConnectionManager; C:\Program Files (x86)\Spotflux\services\SpotfluxConnectionManager.exe [105984 2015-07-30] (Spotflux) [File not signed] S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-27] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2017-08-08] (Microsoft Corporation) S4 OracleJobSchedulerORCL; c:\app\lucas\product\12.1.0\dbhome_1\Bin\extjob.exe ORCL [X] S4 OracleOraDB12Home1MTSRecoveryService; C:\app\Lucas\product\12.1.0\dbhome_1\bin\omtsreco.exe OracleOraDB12Home1MTSRecoveryService [X] S4 OracleOraDB12Home1TNSListener; C:\app\Lucas\product\12.1.0\dbhome_1\BIN\TNSLSNR [X] S4 OracleServiceORCL; c:\app\lucas\product\12.1.0\dbhome_1\bin\ORACLE.EXE ORCL [X] S4 OracleVssWriterORCL; c:\app\lucas\product\12.1.0\dbhome_1\bin\OraVSSW.exe ORCL [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] () S3 b06diag; C:\WINDOWS\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation) R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [145736 2016-09-19] (Rivet Networks, LLC.) S3 BFN7x64; C:\WINDOWS\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc.) S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77440 2017-10-04] () S3 EtronSTOR; C:\WINDOWS\System32\Drivers\EtronSTOR.sys [32512 2012-07-24] (Etron Technology Inc) S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.) S3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] () R3 KillerEth; C:\WINDOWS\System32\drivers\e2xw10x64.sys [162120 2016-09-16] (Qualcomm Atheros, Inc.) R3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45192 2017-07-10] (Logitech Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-07-10] (Logitech Inc.) R0 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [192952 2017-10-23] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2017-10-23] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [45504 2017-10-23] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-23] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2017-10-23] (Malwarebytes) R1 MpKsl3452987c; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EBEA18F0-CE27-46AB-92AB-D78C2E1F9A36}\MpKsl3452987c.sys [58120 2017-10-23] (Microsoft Corporation) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [53520 2015-07-30] (Windows (R) Win 7 DDK provider) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ce1961376673184c\nvlddmkm.sys [15600248 2017-08-22] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-09-19] (NVIDIA Corporation) S3 RIPSAWHC64; C:\WINDOWS\system32\drivers\Ripsawx64.sys [690072 2016-06-23] (Razer Inc) S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [52240 2016-10-30] (Razer Inc) R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [44144 2016-09-16] (Razer, Inc.) R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.) S3 RZSURROUNDVADService; C:\WINDOWS\system32\drivers\RzSurroundVAD.sys [40640 2015-07-28] (Windows (R) Win 7 DDK provider) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [206984 2017-04-12] (Sandboxie Holdings, LLC) R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45048 2017-07-06] (The OpenVPN Project) R3 tapSF0901; C:\WINDOWS\System32\drivers\tapSF0901.sys [39104 2015-07-30] (Spotflux, Inc.) R1 tmcomm; C:\WINDOWS\system32\DRIVERS\tmcomm.sys [334488 2017-10-17] (Trend Micro Inc.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S1 UsbCharger; C:\WINDOWS\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] () S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) R3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-10-23] (WiseCleaner.com) R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2016-06-15] (SplitmediaLabs Limited) U3 idsvc; no ImagePath S3 SWDUMon; \SystemRoot\system32\DRIVERS\SWDUMon.sys [X] S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X] S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-23 05:20 - 2017-10-23 05:20 - 000000501 _____ C:\Users\Public\Desktop\Overwatch.lnk 2017-10-23 05:02 - 2017-10-23 05:01 - 000748192 _____ (TechGuy, Inc.) C:\Users\Lucas\Desktop\SysInfo.exe 2017-10-23 05:00 - 2017-10-23 05:00 - 000000127 _____ C:\Users\Lucas\Desktop\ckfiles.txt 2017-10-23 04:54 - 2017-10-23 04:54 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2017-10-23 04:54 - 2017-10-23 04:54 - 000000000 ____D C:\Program Files\Unlocker 2017-10-23 04:50 - 2017-10-23 04:50 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys 2017-10-23 04:50 - 2017-10-23 04:50 - 000001268 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk 2017-10-23 04:50 - 2017-10-23 04:50 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Wise Force Deleter 2017-10-23 04:50 - 2017-10-23 04:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter 2017-10-23 04:50 - 2017-10-23 04:50 - 000000000 ____D C:\Program Files (x86)\Wise 2017-10-23 04:45 - 2016-07-16 06:42 - 000232960 _____ (Microsoft Corporation) C:\Program Files\cmd.exe 2017-10-23 04:40 - 2017-10-23 04:40 - 000000201 _____ C:\Users\Lucas\Desktop\backup.txt 2017-10-23 04:33 - 2017-10-23 04:33 - 000468480 _____ () C:\Users\Lucas\Desktop\CKScanner (1).exe 2017-10-23 04:04 - 2017-10-23 05:30 - 000011084 _____ C:\Users\Lucas\Desktop\FRST.txt 2017-10-23 04:04 - 2017-10-23 05:30 - 000000000 ____D C:\FRST 2017-10-23 04:04 - 2017-10-23 04:04 - 002402816 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe 2017-10-23 03:59 - 2017-10-23 03:59 - 000000036 _____ C:\Users\Lucas\AppData\Local\housecall.guid.cache 2017-10-23 03:59 - 2017-10-17 11:40 - 000334488 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys 2017-10-23 03:53 - 2017-10-23 04:57 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-10-23 03:53 - 2017-10-23 03:53 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2017-10-23 03:53 - 2017-10-23 03:53 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2017-10-23 03:53 - 2017-10-23 03:53 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-10-23 03:53 - 2017-10-23 03:53 - 000045504 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-10-23 03:53 - 2017-10-23 03:53 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-10-23 03:53 - 2017-10-23 03:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-10-23 03:53 - 2017-10-23 03:53 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-10-23 03:53 - 2017-10-04 13:15 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-10-23 03:51 - 2017-10-23 03:52 - 000000000 ____D C:\Users\Lucas\Desktop\mbar 2017-10-23 03:51 - 2017-10-23 03:52 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2017-10-23 03:48 - 2017-10-23 03:48 - 000000000 ___HD C:\$WINDOWS.~BT 2017-10-21 19:52 - 2017-10-21 19:52 - 000003516 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily 2017-10-21 19:52 - 2017-10-21 19:52 - 000003380 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine 2017-10-14 01:12 - 2017-10-14 01:12 - 000042853 _____ C:\Users\Lucas\Desktop\getPdfContent.pdf 2017-10-11 08:45 - 2017-10-11 08:45 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2017-10-11 08:45 - 2017-09-17 22:27 - 001651552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.AppAgent.dll 2017-10-11 08:45 - 2017-09-17 22:27 - 000218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-10-11 08:45 - 2017-09-17 22:22 - 001470816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2017-10-11 08:45 - 2017-09-17 22:05 - 000497424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-10-11 08:45 - 2017-09-17 22:04 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2017-10-11 08:45 - 2017-09-17 22:03 - 000791272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2017-10-11 08:45 - 2017-09-17 21:59 - 000341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-10-11 08:45 - 2017-09-17 21:55 - 005722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2017-10-11 08:45 - 2017-09-17 21:55 - 001431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2017-10-11 08:45 - 2017-09-17 21:54 - 001980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 020967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 006672680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 004023560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 001845512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 001360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 001277856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-10-11 08:45 - 2017-09-17 21:52 - 000981888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-10-11 08:45 - 2017-09-17 21:51 - 000178016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2017-10-11 08:45 - 2017-09-17 21:49 - 001435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-10-11 08:45 - 2017-09-17 21:49 - 001412128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-10-11 08:45 - 2017-09-17 21:49 - 001260784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-10-11 08:45 - 2017-09-17 21:34 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-10-11 08:45 - 2017-09-17 21:31 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2017-10-11 08:45 - 2017-09-17 21:31 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2017-10-11 08:45 - 2017-09-17 21:30 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2017-10-11 08:45 - 2017-09-17 21:30 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2017-10-11 08:45 - 2017-09-17 21:29 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2017-10-11 08:45 - 2017-09-17 21:28 - 000406016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2017-10-11 08:45 - 2017-09-17 21:28 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-10-11 08:45 - 2017-09-17 21:27 - 004615168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-10-11 08:45 - 2017-09-17 21:26 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll 2017-10-11 08:45 - 2017-09-17 21:26 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2017-10-11 08:45 - 2017-09-17 21:26 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-10-11 08:45 - 2017-09-17 21:26 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-10-11 08:45 - 2017-09-17 21:26 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-10-11 08:45 - 2017-09-17 21:25 - 002333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2017-10-11 08:45 - 2017-09-17 21:25 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2017-10-11 08:45 - 2017-09-17 21:24 - 007626240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-10-11 08:45 - 2017-09-17 21:24 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2017-10-11 08:45 - 2017-09-17 21:24 - 000755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-10-11 08:45 - 2017-09-17 21:23 - 000857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2017-10-11 08:45 - 2017-09-17 21:23 - 000816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2017-10-11 08:45 - 2017-09-17 21:23 - 000636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-10-11 08:45 - 2017-09-17 21:23 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2017-10-11 08:45 - 2017-09-17 21:23 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-10-11 08:45 - 2017-09-17 21:23 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2017-10-11 08:45 - 2017-09-17 21:22 - 001323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2017-10-11 08:45 - 2017-09-17 21:22 - 001137664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2017-10-11 08:45 - 2017-09-17 21:20 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-10-11 08:45 - 2017-09-17 21:20 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2017-10-11 08:45 - 2017-09-17 21:19 - 002750976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2017-10-11 08:45 - 2017-09-17 21:18 - 007470592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-10-11 08:45 - 2017-09-17 21:17 - 000641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 002997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-10-11 08:45 - 2017-09-17 21:14 - 002740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 002682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 002649600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 002483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 001599488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 001556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2017-10-11 08:45 - 2017-09-17 21:14 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2017-10-11 08:45 - 2017-09-17 21:13 - 001013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2017-10-11 08:45 - 2017-09-17 21:13 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-10-11 08:45 - 2017-09-17 21:13 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-10-11 08:45 - 2017-09-17 21:13 - 000751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2017-10-11 08:45 - 2017-09-17 21:13 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2017-10-11 08:45 - 2017-09-17 21:13 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2017-10-11 08:45 - 2017-09-17 21:11 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2017-10-11 08:45 - 2017-09-17 21:11 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-10-11 08:45 - 2017-09-14 17:49 - 001202936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-10-11 08:45 - 2017-09-14 17:31 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-10-11 08:45 - 2017-09-14 17:30 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll 2017-10-11 08:45 - 2017-09-14 17:28 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2017-10-11 08:45 - 2017-09-14 17:26 - 000636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll 2017-10-11 08:45 - 2017-09-14 17:15 - 003106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2017-10-11 08:45 - 2017-09-13 21:04 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-10-11 08:45 - 2017-03-04 01:28 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-10-11 08:45 - 2017-03-04 01:24 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll 2017-10-11 08:45 - 2017-03-04 01:23 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2017-10-11 08:45 - 2017-03-04 01:18 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2017-10-11 08:45 - 2017-03-04 01:16 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2017-10-11 08:45 - 2017-03-04 01:00 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-10-11 08:45 - 2017-03-04 01:00 - 000711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-10-11 08:44 - 2017-09-17 22:18 - 002414432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.AppAgent.dll 2017-10-11 08:44 - 2017-09-17 22:17 - 001564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-10-11 08:44 - 2017-09-17 22:17 - 000245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-10-11 08:44 - 2017-09-17 22:17 - 000136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 001408352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 001054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000766304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000699232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2017-10-11 08:44 - 2017-09-17 22:14 - 000076128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe 2017-10-11 08:44 - 2017-09-17 22:13 - 002170720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2017-10-11 08:44 - 2017-09-17 22:13 - 001670496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2017-10-11 08:44 - 2017-09-17 22:13 - 000704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-10-11 08:44 - 2017-09-17 22:13 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll 2017-10-11 08:44 - 2017-09-17 22:13 - 000241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe 2017-10-11 08:44 - 2017-09-17 22:13 - 000202592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll 2017-10-11 08:44 - 2017-09-17 22:09 - 007780192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-10-11 08:44 - 2017-09-17 22:09 - 002213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-10-11 08:44 - 2017-09-17 22:09 - 000646688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-10-11 08:44 - 2017-09-17 22:09 - 000133984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-10-11 08:44 - 2017-09-17 22:08 - 002253664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-10-11 08:44 - 2017-09-17 22:08 - 000998920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2017-10-11 08:44 - 2017-09-17 22:05 - 001177688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2017-10-11 08:44 - 2017-09-17 22:05 - 000172536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-10-11 08:44 - 2017-09-17 22:05 - 000168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2017-10-11 08:44 - 2017-09-17 22:04 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-10-11 08:44 - 2017-09-17 22:04 - 000404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-10-11 08:44 - 2017-09-17 22:02 - 007213464 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2017-10-11 08:44 - 2017-09-17 22:02 - 001860288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2017-10-11 08:44 - 2017-09-17 22:01 - 002446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2017-10-11 08:44 - 2017-09-17 22:01 - 000624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-10-11 08:44 - 2017-09-17 22:01 - 000431456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-10-11 08:44 - 2017-09-17 22:01 - 000223072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-10-11 08:44 - 2017-09-17 22:00 - 001072248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 022220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 008173672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 004260072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 001983408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-10-11 08:44 - 2017-09-17 21:59 - 000241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-10-11 08:44 - 2017-09-17 21:58 - 001600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-10-11 08:44 - 2017-09-17 21:58 - 000206688 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2017-10-11 08:44 - 2017-09-17 21:57 - 001566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-10-11 08:44 - 2017-09-17 21:57 - 001460696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-10-11 08:44 - 2017-09-17 21:57 - 001415712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-10-11 08:44 - 2017-09-17 21:56 - 000057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2017-10-11 08:44 - 2017-09-17 21:48 - 000117792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-10-11 08:44 - 2017-09-17 21:36 - 022570496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-10-11 08:44 - 2017-09-17 21:35 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2017-10-11 08:44 - 2017-09-17 21:33 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2017-10-11 08:44 - 2017-09-17 21:33 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-10-11 08:44 - 2017-09-17 21:33 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransliterationRanker.dll 2017-10-11 08:44 - 2017-09-17 21:32 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2017-10-11 08:44 - 2017-09-17 21:32 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpninputrouter.dll 2017-10-11 08:44 - 2017-09-17 21:32 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmojiDS.dll 2017-10-11 08:44 - 2017-09-17 21:32 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-10-11 08:44 - 2017-09-17 21:32 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2017-10-11 08:44 - 2017-09-17 21:31 - 006288384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-10-11 08:44 - 2017-09-17 21:31 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-10-11 08:44 - 2017-09-17 21:31 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-10-11 08:44 - 2017-09-17 21:31 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuleBasedDS.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshProxy.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpnranker.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000174592 _____ C:\WINDOWS\system32\IHDS.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\VocabRoamingHandler.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\StaticDictDS.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2017-10-11 08:44 - 2017-09-17 21:30 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxranker.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 009129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChsStrokeDS.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 000360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshBroker.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2017-10-11 08:44 - 2017-09-17 21:29 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2017-10-11 08:44 - 2017-09-17 21:28 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshSession.exe 2017-10-11 08:44 - 2017-09-17 21:28 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshSftp.exe 2017-10-11 08:44 - 2017-09-17 21:28 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtHkStrokeDS.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChsPinyinRanker.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtfDecoder.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2017-10-11 08:44 - 2017-09-17 21:28 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-10-11 08:44 - 2017-09-17 21:27 - 000641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxAPDS.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimeChsPinyinMainDS.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxHAPDS.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtCangjieDS.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtQuickDS.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2017-10-11 08:44 - 2017-09-17 21:27 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpndecoder.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxinputrouter.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2017-10-11 08:44 - 2017-09-17 21:27 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2017-10-11 08:44 - 2017-09-17 21:26 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-10-11 08:44 - 2017-09-17 21:26 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2017-10-11 08:44 - 2017-09-17 21:26 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-10-11 08:44 - 2017-09-17 21:25 - 001914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2017-10-11 08:44 - 2017-09-17 21:25 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-10-11 08:44 - 2017-09-17 21:25 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll 2017-10-11 08:44 - 2017-09-17 21:25 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll 2017-10-11 08:44 - 2017-09-17 21:24 - 013107712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-10-11 08:44 - 2017-09-17 21:24 - 002103808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2017-10-11 08:44 - 2017-09-17 21:24 - 001589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2017-10-11 08:44 - 2017-09-17 21:24 - 001584640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2017-10-11 08:44 - 2017-09-17 21:24 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-10-11 08:44 - 2017-09-17 21:24 - 000409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-10-11 08:44 - 2017-09-17 21:23 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2017-10-11 08:44 - 2017-09-17 21:22 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-10-11 08:44 - 2017-09-17 21:22 - 003291648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2017-10-11 08:44 - 2017-09-17 21:22 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-10-11 08:44 - 2017-09-17 21:22 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2017-10-11 08:44 - 2017-09-17 21:22 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2017-10-11 08:44 - 2017-09-17 21:21 - 018364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-10-11 08:44 - 2017-09-17 21:20 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-10-11 08:44 - 2017-09-17 21:20 - 019414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-10-11 08:44 - 2017-09-17 21:20 - 000937984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-10-11 08:44 - 2017-09-17 21:20 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2017-10-11 08:44 - 2017-09-17 21:19 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2017-10-11 08:44 - 2017-09-17 21:19 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-10-11 08:44 - 2017-09-17 21:19 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2017-10-11 08:44 - 2017-09-17 21:19 - 000303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2017-10-11 08:44 - 2017-09-17 21:19 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 012204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 008114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 008077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 001145344 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 000932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-10-11 08:44 - 2017-09-17 21:18 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2017-10-11 08:44 - 2017-09-17 21:17 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-10-11 08:44 - 2017-09-17 21:17 - 002279424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-10-11 08:44 - 2017-09-17 21:17 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-10-11 08:44 - 2017-09-17 21:17 - 000779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll 2017-10-11 08:44 - 2017-09-17 21:16 - 004743168 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-10-11 08:44 - 2017-09-17 21:16 - 004596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2017-10-11 08:44 - 2017-09-17 21:16 - 003520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2017-10-11 08:44 - 2017-09-17 21:16 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 006065152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 003202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 002919936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 001282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 001231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2017-10-11 08:44 - 2017-09-17 21:15 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 006474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-10-11 08:44 - 2017-09-17 21:14 - 003663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 003615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-10-11 08:44 - 2017-09-17 21:14 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 002321408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 001518080 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-10-11 08:44 - 2017-09-17 21:14 - 001328640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 001040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000983552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-10-11 08:44 - 2017-09-17 21:14 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-10-11 08:44 - 2017-09-17 21:14 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-10-11 08:44 - 2017-09-17 21:13 - 001726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-10-11 08:44 - 2017-09-17 21:13 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-10-11 08:44 - 2017-09-17 21:13 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2017-10-11 08:44 - 2017-09-17 21:13 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2017-10-11 08:44 - 2017-09-17 21:13 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll 2017-10-11 08:44 - 2017-09-17 21:12 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-10-11 08:44 - 2017-09-17 21:12 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-10-11 08:44 - 2017-09-17 21:12 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe 2017-10-11 08:44 - 2017-09-17 21:11 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\trie.dll 2017-10-11 08:44 - 2017-09-17 21:11 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFFuzzyDS.dll 2017-10-11 08:44 - 2017-09-17 21:11 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFSpellcheckDS.dll 2017-10-11 08:44 - 2017-09-14 18:14 - 000119328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2017-10-11 08:44 - 2017-09-14 18:05 - 001302136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-10-11 08:44 - 2017-09-14 17:59 - 000096064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2017-10-11 08:44 - 2017-09-14 17:52 - 000136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 001227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AgentService.exe 2017-10-11 08:44 - 2017-09-14 17:39 - 001222144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 001165824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe 2017-10-11 08:44 - 2017-09-14 17:39 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 000744960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2013CustomActions.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2013CustomActions.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CscUnpinTool.exe 2017-10-11 08:44 - 2017-09-14 17:39 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ConfigWrapper.dll 2017-10-11 08:44 - 2017-09-14 17:39 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2010CustomActions.dll 2017-10-11 08:44 - 2017-09-14 17:38 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2010CustomActions.dll 2017-10-11 08:44 - 2017-09-14 17:34 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys 2017-10-11 08:44 - 2017-09-14 17:32 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll 2017-10-11 08:44 - 2017-09-14 17:32 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll 2017-10-11 08:44 - 2017-09-14 17:32 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll 2017-10-11 08:44 - 2017-09-14 17:32 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll 2017-10-11 08:44 - 2017-09-14 17:32 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll 2017-10-11 08:44 - 2017-09-14 17:31 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-10-11 08:44 - 2017-09-14 17:31 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll 2017-10-11 08:44 - 2017-09-14 17:30 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-10-11 08:44 - 2017-09-14 17:30 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll 2017-10-11 08:44 - 2017-09-14 17:30 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll 2017-10-11 08:44 - 2017-09-14 17:30 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll 2017-10-11 08:44 - 2017-09-14 17:30 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll 2017-10-11 08:44 - 2017-09-14 17:29 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2017-10-11 08:44 - 2017-09-14 17:28 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll 2017-10-11 08:44 - 2017-09-14 17:27 - 000662528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2017-10-11 08:44 - 2017-09-14 17:26 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-10-11 08:44 - 2017-09-14 17:26 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe 2017-10-11 08:44 - 2017-09-14 17:25 - 000821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll 2017-10-11 08:44 - 2017-09-14 17:25 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll 2017-10-11 08:44 - 2017-09-14 17:25 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2017-10-11 08:44 - 2017-09-14 17:24 - 000981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2017-10-11 08:44 - 2017-09-14 17:24 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe 2017-10-11 08:44 - 2017-09-14 17:23 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2017-10-11 08:44 - 2017-09-14 17:22 - 000987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll 2017-10-11 08:44 - 2017-09-14 17:22 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2017-10-11 08:44 - 2017-09-14 17:22 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2017-10-11 08:44 - 2017-09-14 17:21 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll 2017-10-11 08:44 - 2017-09-14 17:20 - 002852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2017-10-11 08:44 - 2017-09-14 17:19 - 001421824 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-10-11 08:44 - 2017-09-14 17:19 - 000928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll 2017-10-11 08:44 - 2017-09-14 17:18 - 003299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2017-10-11 08:44 - 2017-09-14 17:18 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll 2017-10-11 08:44 - 2017-09-14 17:17 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tsusbhub.sys 2017-10-11 08:44 - 2017-09-14 17:16 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys 2017-10-11 08:44 - 2017-09-13 21:04 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-10-11 08:44 - 2017-09-13 21:04 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-10-11 08:44 - 2017-03-04 02:10 - 000360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2017-10-11 08:44 - 2017-03-04 01:25 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2017-10-11 08:44 - 2017-03-04 01:23 - 001184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2017-10-11 08:44 - 2017-03-04 01:11 - 001643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2017-10-11 08:44 - 2017-03-04 01:07 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-10-11 08:44 - 2017-03-04 01:03 - 000119808 ____R (Microsoft Corporation) C:\WINDOWS\system32\SecureAssessmentHandlers.dll 2017-10-11 08:44 - 2016-08-27 00:12 - 000244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-10-11 08:44 - 2016-08-05 23:16 - 000026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2017-10-11 08:44 - 2016-08-02 03:13 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-10-11 04:26 - 2017-10-11 04:38 - 000000000 ____D C:\Users\Lucas\AppData\LocalLow\BitTorrent 2017-10-11 04:14 - 2017-10-11 04:15 - 000000000 ____D C:\Users\Lucas\Downloads\John.Wick.2014.1080p.BluRay.AC3.x264-tomcat12[ETRG] 2017-10-11 04:12 - 2017-10-18 23:33 - 000000000 ____D C:\Users\Lucas\Downloads\John.Wick.Chapter.2.2017.1080p.WEB-DL.DD5.1.H264-FGT 2017-10-10 14:13 - 2017-10-10 14:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-10-02 14:13 - 2017-10-17 20:07 - 000000000 ____D C:\Users\Lucas\Downloads\A Day To Remember-Common Courtesy 2017-10-02 14:13 - 2017-10-02 14:14 - 000000000 ____D C:\Users\Lucas\Downloads\A Day To Remember - Bad Vibrations (Deluxe) (2016) [MP3~320Kbps]~[Hunter] [FRG] 2017-10-02 14:12 - 2017-10-02 14:12 - 000000000 ____D C:\Users\Lucas\Downloads\NF - Therapy Session (2016)~[MP3~320kbps]~[Hunter] [FRG] 2017-10-02 14:12 - 2017-10-02 14:12 - 000000000 ____D C:\Users\Lucas\Downloads\NF - Mansion (2015) [MP3~320Kbps]~[Hunter] [FRG] 2017-10-01 21:27 - 2017-10-03 21:36 - 000000000 ____D C:\Users\Lucas\AppData\Local\Alt1Toolkit 2017-10-01 21:27 - 2017-10-01 21:27 - 000002687 _____ C:\Users\Lucas\Desktop\Alt1 Toolkit.lnk 2017-10-01 21:27 - 2017-10-01 21:27 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneApps 2017-09-28 23:20 - 2017-09-28 23:21 - 000000000 ____D C:\Users\Lucas\OSBuddy 2017-09-28 18:18 - 2017-09-28 18:18 - 000000914 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2017-09-28 16:10 - 2017-10-12 19:59 - 000000000 ____D C:\Program Files\rempl 2017-09-27 22:55 - 2017-09-27 22:55 - 000002110 _____ C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape.lnk 2017-09-27 22:55 - 2017-09-27 22:55 - 000002080 _____ C:\Users\Lucas\Desktop\OldSchool RuneScape.lnk 2017-09-27 22:55 - 2017-09-27 22:55 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape 2017-09-27 22:49 - 2017-09-27 22:49 - 000000177 _____ C:\Users\Public\Desktop\RuneScape Launcher.url ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-23 05:28 - 2017-07-18 04:34 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\.minecraft 2017-10-23 05:19 - 2016-02-28 01:14 - 000000000 ____D C:\Users\Lucas\AppData\Local\Battle.net 2017-10-23 05:19 - 2016-02-28 01:13 - 000000000 ____D C:\Program Files (x86)\Battle.net 2017-10-23 05:18 - 2017-06-15 05:51 - 000000000 ___HD C:\$SysReset 2017-10-23 05:16 - 2016-09-29 11:22 - 000000000 ____D C:\inetpub 2017-10-23 04:47 - 2017-08-06 21:41 - 000000000 ____D C:\Program Files\KMSpico 2017-10-23 04:05 - 2016-07-16 06:45 - 000000000 ____D C:\WINDOWS\INF 2017-10-23 03:59 - 2016-09-29 08:30 - 004376726 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-10-23 03:54 - 2016-09-29 08:29 - 000000000 ____D C:\ProgramData\NVIDIA 2017-10-23 03:53 - 2017-01-07 00:52 - 000000000 ____D C:\Program Files\Malwarebytes 2017-10-23 03:52 - 2016-12-23 10:15 - 000026192 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys 2017-10-23 03:52 - 2016-09-29 08:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-10-23 03:52 - 2016-07-16 01:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2017-10-23 03:48 - 2017-08-15 02:32 - 000000000 ____D C:\WINDOWS\Panther 2017-10-23 03:42 - 2015-11-25 17:09 - 000000000 ____D C:\Users\Lucas\AppData\Local\CrashDumps 2017-10-23 02:58 - 2016-09-29 08:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-10-22 19:06 - 2015-10-17 00:44 - 000000000 ____D C:\Program Files (x86)\Steam 2017-10-22 18:13 - 2016-08-02 23:04 - 000000000 ____D C:\Users\Lucas\AppData\Local\Jagex 2017-10-22 18:13 - 2016-08-02 23:04 - 000000000 ____D C:\ProgramData\Jagex 2017-10-21 20:02 - 2016-11-27 05:08 - 000770048 ___SH C:\Users\Lucas\Desktop\Thumbs.db 2017-10-21 19:52 - 2016-05-07 20:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo 2017-10-21 19:52 - 2016-05-07 20:10 - 000000000 ____D C:\Program Files (x86)\Gyazo 2017-10-20 08:08 - 2017-08-17 00:08 - 000000000 ____D C:\Program Files (x86)\Overwolf 2017-10-20 00:46 - 2017-02-03 01:17 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\vlc 2017-10-19 15:21 - 2016-06-04 14:26 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Google Play Music Desktop Player 2017-10-18 23:12 - 2016-07-16 06:47 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-10-17 20:09 - 2016-10-07 15:16 - 000000000 ____D C:\Users\Lucas\AppData\Local\GPMDP_3 2017-10-17 20:09 - 2016-06-04 14:26 - 000000000 ____D C:\Users\Lucas\AppData\Local\SquirrelTemp 2017-10-17 20:08 - 2016-07-16 06:47 - 000000000 ___HD C:\Program Files\WindowsApps 2017-10-17 20:02 - 2016-07-16 06:36 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-10-16 20:25 - 2017-02-16 22:31 - 000000000 ___RD C:\Users\purpl\OneDrive 2017-10-14 23:42 - 2015-09-10 00:44 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-10-13 21:44 - 2016-07-16 06:47 - 000000000 ____D C:\WINDOWS\rescache 2017-10-12 17:27 - 2016-07-16 06:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-10-12 17:27 - 2016-07-16 06:49 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-10-11 21:12 - 2016-09-29 08:29 - 000439312 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-10-11 15:11 - 2016-07-16 06:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-10-11 15:11 - 2016-07-16 06:47 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-10-11 15:11 - 2016-07-16 06:47 - 000000000 ____D C:\WINDOWS\ShellExperiences 2017-10-11 08:48 - 2015-10-17 00:54 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-10-11 08:45 - 2015-10-17 00:54 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-10-10 14:26 - 2015-10-17 00:45 - 000000000 ____D C:\Users\Lucas\AppData\Roaming\Skype 2017-10-10 14:13 - 2015-10-17 00:44 - 000000000 ___RD C:\Program Files (x86)\Skype 2017-10-10 14:13 - 2015-10-17 00:44 - 000000000 ____D C:\ProgramData\Skype 2017-10-06 03:18 - 2017-08-17 00:07 - 000000000 ____D C:\Users\Lucas\AppData\Local\Overwolf 2017-10-02 23:19 - 2017-03-16 23:01 - 000000000 ____D C:\Users\purpl\AppData\Local\NVIDIA Corporation 2017-10-01 00:42 - 2017-08-15 02:33 - 000003366 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3154826165-2591789761-3766887662-1020 2017-10-01 00:42 - 2017-02-16 22:31 - 000002405 _____ C:\Users\purpl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-10-01 00:42 - 2017-02-16 22:30 - 000000000 ____D C:\Users\purpl\AppData\Local\Packages 2017-09-30 06:55 - 2016-09-29 08:29 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-09-28 23:22 - 2016-02-27 22:06 - 000000044 _____ C:\Users\Lucas\jagex_cl_oldschool_LIVE.dat 2017-09-28 23:20 - 2016-09-29 08:31 - 000000000 ____D C:\Users\Lucas 2017-09-28 18:18 - 2016-06-03 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2017-09-28 18:18 - 2016-06-03 18:49 - 000000000 ____D C:\Program Files\CPUID 2017-09-28 18:16 - 2016-09-29 08:29 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-09-28 18:15 - 2017-05-25 04:53 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-12-22 20:44 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:24 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:23 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:23 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:23 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:23 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-11-24 20:23 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-28 18:15 - 2016-09-29 08:29 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-09-28 16:20 - 2016-07-16 06:47 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2017-09-27 23:01 - 2016-02-27 21:54 - 000000024 ____R C:\Users\Lucas\random.dat 2017-09-27 23:00 - 2016-02-27 21:54 - 000000024 _____ C:\Users\Lucas\jagexappletviewer.preferences 2017-09-27 22:55 - 2016-02-27 21:54 - 000000000 ____D C:\Users\Lucas\jagexcache 2017-09-27 22:49 - 2016-08-02 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jagex ==================== Files in the root of some directories ======= 2017-10-23 04:45 - 2016-07-16 06:42 - 000232960 _____ (Microsoft Corporation) C:\Program Files\cmd.exe 2017-08-16 18:09 - 2017-08-16 18:09 - 000000101 _____ () C:\Users\Lucas\AppData\Roaming\net.telestream.gameshow.app_user_guid.xml 2017-08-16 18:09 - 2017-08-16 18:28 - 000008756 _____ () C:\Users\Lucas\AppData\Roaming\net.telestream.gameshow.xml 2017-08-16 18:15 - 2017-08-16 18:24 - 000000364 _____ () C:\Users\Lucas\AppData\Roaming\pc-capture-log.txt 2017-08-23 21:25 - 2017-08-23 21:25 - 000001456 _____ () C:\Users\Lucas\AppData\Local\Adobe Save for Web 13.0 Prefs 2016-12-23 10:06 - 2017-01-10 07:38 - 000000000 _____ () C:\Users\Lucas\AppData\Local\Driver_LOM_8171Present.flag 2017-10-23 03:59 - 2017-10-23 03:59 - 000000036 _____ () C:\Users\Lucas\AppData\Local\housecall.guid.cache 2016-02-19 02:49 - 2016-02-19 02:49 - 000000600 _____ () C:\Users\Lucas\AppData\Local\PUTTY.RND 2015-10-26 17:03 - 2015-10-26 17:03 - 000004607 _____ () C:\Users\Lucas\AppData\Local\recently-used.xbel 2016-01-18 22:24 - 2017-06-13 19:51 - 000007602 _____ () C:\Users\Lucas\AppData\Local\Resmon.ResmonCfg 2015-10-19 16:51 - 2015-10-19 16:51 - 000000003 _____ () C:\Users\Lucas\AppData\Local\updater.log 2015-10-19 16:51 - 2017-02-01 04:31 - 000000059 _____ () C:\Users\Lucas\AppData\Local\UserProducts.xml 2016-12-22 20:44 - 2017-01-10 06:46 - 000005307 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-22 20:44 - 2017-01-09 06:47 - 000006686 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 Some files in TEMP: ==================== 2016-09-29 08:43 - 2017-08-15 19:28 - 000619616 _____ () C:\Users\Lucas\AppData\Local\Temp\0Kraken71ChromaDevProps.dll 2017-08-15 21:23 - 2017-08-27 22:14 - 000000000 _____ () C:\Users\Lucas\AppData\Local\Temp\JIntellitype.dll 2017-10-23 03:51 - 2017-10-23 03:50 - 071535032 _____ (Malwarebytes ) C:\Users\Lucas\AppData\Local\Temp\mb3-setup-consumer-3.2.2.2029-1.0.212-1.0.2951.exe 2017-01-31 01:09 - 2017-07-18 17:38 - 000758472 _____ (NVIDIA Corporation) C:\Users\Lucas\AppData\Local\Temp\nvSCPAPI.dll 2017-01-31 01:09 - 2017-07-18 17:38 - 000873136 _____ (NVIDIA Corporation) C:\Users\Lucas\AppData\Local\Temp\nvSCPAPI64.dll 2017-02-14 20:49 - 2017-07-18 17:38 - 000368760 _____ (NVIDIA Corporation) C:\Users\Lucas\AppData\Local\Temp\nvStInst.exe 2017-10-10 14:11 - 2017-10-10 14:12 - 058881488 _____ (Skype Technologies S.A.) C:\Users\Lucas\AppData\Local\Temp\SkypeSetup.exe 2017-08-17 00:07 - 2017-08-17 00:07 - 000065280 _____ () C:\Users\Lucas\AppData\Local\Temp\utils.dll 2017-09-22 04:18 - 2017-09-22 04:18 - 014175232 _____ () C:\Users\Lucas\AppData\Local\Temp\vlc-2.2.6-win32.exe 2017-02-16 22:31 - 2017-08-15 02:32 - 000619616 _____ () C:\Users\purpl\AppData\Local\Temp\0Kraken71ChromaDevProps.dll ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-10-21 15:26 ==================== End of FRST.txt ============================