Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 30

Thread: TinyWaLlet 1.0 seems difficult to remove?

  1. #11
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default suggested actions cont

    2015-01-05 12:58 - 2014-10-29 13:09 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanui2.dll
    2015-01-05 12:58 - 2014-10-29 13:08 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
    2015-01-05 12:58 - 2014-10-29 13:08 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DFDWiz.exe
    2015-01-05 12:58 - 2014-10-29 13:08 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe
    2015-01-05 12:58 - 2014-10-29 13:08 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
    2015-01-05 12:58 - 2014-10-29 13:08 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
    2015-01-05 12:58 - 2014-10-29 13:07 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorPwdMgr.dll
    2015-01-05 12:58 - 2014-10-29 13:06 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
    2015-01-05 12:58 - 2014-10-29 13:06 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll
    2015-01-05 12:58 - 2014-10-29 13:05 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\keymgr.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
    2015-01-05 12:58 - 2014-10-29 13:04 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\srhelper.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScanProxy.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcirt.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
    2015-01-05 12:58 - 2014-10-29 13:04 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
    2015-01-05 12:58 - 2014-10-29 13:03 - 00241152 ____C (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
    2015-01-05 12:58 - 2014-10-29 13:03 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
    2015-01-05 12:58 - 2014-10-29 13:03 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
    2015-01-05 12:58 - 2014-10-29 13:03 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetProxyCredential.dll
    2015-01-05 12:58 - 2014-10-29 13:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\brdgcfg.dll
    2015-01-05 12:58 - 2014-10-29 13:02 - 00423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl
    2015-01-05 12:58 - 2014-10-29 13:02 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
    2015-01-05 12:58 - 2014-10-29 13:02 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll
    2015-01-05 12:58 - 2014-10-29 13:02 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\signdrv.dll
    2015-01-05 12:58 - 2014-10-29 13:02 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe
    2015-01-05 12:58 - 2014-10-29 13:02 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll
    2015-01-05 12:58 - 2014-10-29 13:01 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptuiwizard.dll
    2015-01-05 12:58 - 2014-10-29 13:01 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\irftp.exe
    2015-01-05 12:58 - 2014-10-29 13:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAuthn.exe
    2015-01-05 12:58 - 2014-10-29 13:01 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOM.dll
    2015-01-05 12:58 - 2014-10-29 13:01 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HelpPaneProxy.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00594944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dramp.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spfileq.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows6Compat.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\uicom.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmcompc.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows61.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortServer2003Compat.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\idndl.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Nlsdl.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shgina.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmutil.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimgvw.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shunimpl.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpxl32.dLL
    2015-01-05 12:58 - 2014-10-29 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbios.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscat32.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browseui.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensApi.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softpub.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nddeapi.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssip32.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_32.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_32.ax
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OskSupport.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qcx.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qc.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qcx.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qc.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir32_32.dll
    2015-01-05 12:58 - 2014-10-29 13:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getuname.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 02013696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsnmp32.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmocx.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regini.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\htui.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpui.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtffilt.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidserv.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsutil.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmpbk32.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comp.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lsmproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fc.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sisbkup.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\replace.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vdmdbg.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsock32.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\doskey.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\find.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clb.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subst.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\print.exe
    2015-01-05 12:58 - 2014-10-29 12:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlS0WndH.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput9_1_0.dll
    2015-01-05 12:58 - 2014-10-29 12:59 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxex.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00857088 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSST.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00069120 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm
    2015-01-05 12:58 - 2014-10-29 12:58 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NapiNSP.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iyuv_32.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rrinstaller.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drttransport.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcbcp.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmmon32.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvidc32.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShextAutoplay.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
    2015-01-05 12:58 - 2014-10-29 12:58 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ureg.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbtugc.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osbaseln.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\umdmxfrm.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\midimap.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnmpntw.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkntfs.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\convert.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WINSRPC.DLL
    2015-01-05 12:58 - 2014-10-29 12:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
    2015-01-05 12:58 - 2014-10-29 12:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiltcfg.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasctrs.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcomp.com
    2015-01-05 12:58 - 2014-10-29 12:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshrm.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\label.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrle32.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwinsat.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\recover.exe
    2015-01-05 12:58 - 2014-10-29 12:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
    2015-01-05 12:58 - 2014-10-29 12:58 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcopy.com
    2015-01-05 12:58 - 2014-10-29 12:58 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapiperf.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeDateMUICallback.dll
    2015-01-05 12:58 - 2014-10-29 12:58 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acledit.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expand.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp
    2015-01-05 12:58 - 2014-10-29 12:57 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syskey.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmintf.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serwvdrv.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcacli.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlprovi.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcmsetup.exe
    2015-01-05 12:58 - 2014-10-29 12:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syssetup.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\panmap.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutilx.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbperf.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshirda.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaPs.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcico.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IconCodecService.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spnet.dll
    2015-01-05 12:58 - 2014-10-29 12:57 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shfolder.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmui.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx5.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capisp.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructureps.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irclass.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dispex.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSChannel.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx6.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx7.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx3.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHostps.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx4.dll
    2015-01-05 12:58 - 2014-10-29 12:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmcodecdspps.dll
    2015-01-05 12:58 - 2014-10-29 12:55 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwutl.dll
    2015-01-05 12:58 - 2014-10-29 12:55 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
    2015-01-05 12:58 - 2014-10-29 12:55 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pid.dll
    2015-01-05 12:58 - 2014-10-29 12:55 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 15784448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDORes.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUTILITY.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcshext.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfp.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drtprov.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsauth.dll
    2015-01-05 12:58 - 2014-10-29 12:54 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\extrac32.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
    2015-01-05 12:58 - 2014-10-29 12:54 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secinit.exe
    2015-01-05 12:58 - 2014-10-29 12:54 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VscMgrPS.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlaySndSrv.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnification.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\traffic.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcnsh.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzSqlExt.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qmgrprxy.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmutil.exe
    2015-01-05 12:58 - 2014-10-29 12:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsunattend.exe
    2015-01-05 12:58 - 2014-10-29 12:53 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsprx2.dll
    2015-01-05 12:58 - 2014-10-29 12:53 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verclsid.exe
    2015-01-05 12:58 - 2014-10-29 12:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ocsetapi.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventvwr.exe
    2015-01-05 12:58 - 2014-10-29 12:52 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.exe
    2015-01-05 12:58 - 2014-10-29 12:52 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3dlg.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdhui.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmutil.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToStatusProvider.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmib.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscisvif.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe
    2015-01-05 12:58 - 2014-10-29 12:52 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
    2015-01-05 12:58 - 2014-10-29 12:52 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdext.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiSysprep.dll
    2015-01-05 12:58 - 2014-10-29 12:52 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\takeown.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasphone.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msports.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthExt.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmband.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\where.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialer.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olesvr32.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timeout.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clip.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\at.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dswave.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshcon.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winusb.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorSvc.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uniplat.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdial.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
    2015-01-05 12:58 - 2014-10-29 12:51 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetmon.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcmonitor.dll
    2015-01-05 12:58 - 2014-10-29 12:51 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LAPRXY.DLL
    2015-01-05 12:58 - 2014-10-29 12:50 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsRdpWebAccess.dll
    2015-01-05 12:58 - 2014-10-29 12:50 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttunesvr.exe
    2015-01-05 12:58 - 2014-10-29 12:50 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Apphlpdm.dll
    2015-01-05 12:58 - 2014-10-29 12:50 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxsstore.dll
    2015-01-05 12:58 - 2014-10-29 12:50 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagnhost.exe
    2015-01-05 12:58 - 2014-10-29 12:49 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
    2015-01-05 12:58 - 2014-10-29 12:49 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PkgMgr.exe
    2015-01-05 12:58 - 2014-10-29 12:49 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutilext.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciqtz32.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceDisplayStatusManager.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlaninst.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
    2015-01-05 12:58 - 2014-10-29 12:49 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
    2015-01-05 12:58 - 2014-10-29 12:49 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CHxReadingStringIME.dll
    2015-01-05 12:58 - 2014-10-29 12:48 - 01497600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskcopy.dll
    2015-01-05 12:58 - 2014-10-29 12:48 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl
    2015-01-05 12:58 - 2014-10-29 12:48 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
    2015-01-05 12:58 - 2014-10-29 12:48 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicli.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whoami.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdl32.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdchange.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\forfiles.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcreate.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\waitfor.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\choice.exe
    2015-01-05 12:58 - 2014-10-29 12:48 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsCtfMonitor.dll
    2015-01-05 12:58 - 2014-10-29 12:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshelper.dll
    2015-01-05 12:58 - 2014-10-29 12:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RmClient.exe
    2015-01-05 12:58 - 2014-10-29 12:47 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\console.dll
    2015-01-05 12:58 - 2014-10-29 12:47 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
    2015-01-05 12:58 - 2014-10-29 12:47 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll
    2015-01-05 12:58 - 2014-10-29 12:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSTheme.exe
    2015-01-05 12:58 - 2014-10-29 12:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddodiag.exe
    2015-01-05 12:58 - 2014-10-29 12:46 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
    2015-01-05 12:58 - 2014-10-29 12:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll
    2015-01-05 12:58 - 2014-10-29 12:46 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmci.dll
    2015-01-05 12:58 - 2014-10-29 12:46 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtsh.dll
    2015-01-05 12:58 - 2014-10-29 12:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serialui.dll
    2015-01-05 12:58 - 2014-10-29 12:45 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.dll
    2015-01-05 12:58 - 2014-10-29 12:45 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bidispl.dll
    2015-01-05 12:58 - 2014-10-29 12:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cipher.exe
    2015-01-05 12:58 - 2014-10-29 12:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\napipsec.dll
    2015-01-05 12:58 - 2014-10-29 12:45 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll
    2015-01-05 12:58 - 2014-10-29 12:44 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.exe
    2015-01-05 12:58 - 2014-10-29 12:44 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontview.exe
    2015-01-05 12:58 - 2014-10-29 12:44 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmcfg32.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizard.exe
    2015-01-05 12:58 - 2014-10-29 12:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capiprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe
    2015-01-05 12:58 - 2014-10-29 12:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcaApi.dll
    2015-01-05 12:58 - 2014-10-29 12:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
    2015-01-05 12:58 - 2014-10-29 12:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radarrs.dll
    2015-01-05 12:58 - 2014-10-29 12:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapiprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmps.dll
    2015-01-05 12:58 - 2014-10-29 12:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndproxystub.dll
    2015-01-05 12:58 - 2014-10-29 12:40 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl
    2015-01-05 12:58 - 2014-10-29 12:40 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
    2015-01-05 12:58 - 2014-10-29 12:40 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingWizard.exe
    2015-01-05 12:58 - 2014-10-29 12:40 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe
    2015-01-05 12:58 - 2014-10-29 12:40 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskadp.dll
    2015-01-05 12:58 - 2014-10-29 12:40 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhsetup.dll
    2015-01-05 12:58 - 2014-10-29 12:40 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\docprop.dll
    2015-01-05 12:58 - 2014-10-29 12:40 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmlog.dll
    2015-01-05 12:58 - 2014-10-29 12:40 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shutdown.exe
    2015-01-05 12:58 - 2014-10-29 12:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\proquota.exe
    2015-01-05 12:58 - 2014-10-29 12:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultDeviceManager.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWGP.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mydocs.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\control.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\isoburn.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\napdsnap.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskmon.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RegCtrl.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHost.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ThumbnailExtractionHost.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdupgrd.exe
    2015-01-05 12:58 - 2014-10-29 12:39 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcdProp.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultPrinterProvider.dll
    2015-01-05 12:58 - 2014-10-29 12:39 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prevhost.exe
    2015-01-05 12:58 - 2014-10-29 12:38 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl
    2015-01-05 12:58 - 2014-10-29 12:38 - 00212480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cleanmgr.exe
    2015-01-05 12:58 - 2014-10-29 12:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbctrac.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsadu.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mobsync.exe
    2015-01-05 12:58 - 2014-10-29 12:38 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2nacp.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucmhc.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmlua.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runonce.exe
    2015-01-05 12:58 - 2014-10-29 12:38 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hcproviders.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcsPlugInService.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tvratings.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfetw.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shpafact.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grpconv.exe
    2015-01-05 12:58 - 2014-10-29 12:38 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstplua.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDACLSys.dll
    2015-01-05 12:58 - 2014-10-29 12:38 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceElevated.dll
    2015-01-05 12:58 - 2014-10-29 12:37 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabview.dll
    2015-01-05 12:58 - 2014-10-29 12:37 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprnext.dll
    2015-01-05 12:58 - 2014-10-29 12:37 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
    2015-01-05 12:58 - 2014-10-29 12:37 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
    2015-01-05 12:58 - 2014-10-29 12:36 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll
    2015-01-05 12:58 - 2014-10-29 12:35 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfmon.exe
    2015-01-05 12:58 - 2014-10-29 12:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwreg.dll
    2015-01-05 12:58 - 2014-10-29 12:34 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shrpubw.exe
    2015-01-05 12:58 - 2014-10-29 12:34 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll
    2015-01-05 12:58 - 2014-10-29 12:34 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
    2015-01-05 12:58 - 2014-10-29 12:34 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FdDevQuery.dll
    2015-01-05 12:58 - 2014-10-29 12:34 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsui.exe
    2015-01-05 12:58 - 2014-10-29 12:33 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uireng.dll
    2015-01-05 12:58 - 2014-10-29 12:33 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.dll
    2015-01-05 12:58 - 2014-10-29 12:33 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\btpanui.dll
    2015-01-05 12:58 - 2014-10-29 12:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmonui.dll
    2015-01-05 12:58 - 2014-10-29 12:32 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\unregmp2.exe
    2015-01-05 12:58 - 2014-10-29 12:32 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
    2015-01-05 12:58 - 2014-10-29 12:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceContextHandler.dll
    2015-01-05 12:58 - 2014-10-29 12:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanui2.dll
    2015-01-05 12:58 - 2014-10-29 12:31 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorPwdMgr.dll
    2015-01-05 12:58 - 2014-10-29 12:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimefilt.dll
    2015-01-05 12:58 - 2014-10-29 12:31 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credwiz.exe
    2015-01-05 12:58 - 2014-10-29 12:30 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe
    2015-01-05 12:58 - 2014-10-29 12:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keymgr.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe
    2015-01-05 12:58 - 2014-10-29 12:29 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gptext.dll
    2015-01-05 12:58 - 2014-10-29 12:29 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileAppxStreamingDataSource.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatchc.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hbaapi.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sc.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfscli.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\scext.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax
    2015-01-05 12:58 - 2014-10-29 12:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnikeapi.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\icacls.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcsubs.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpapi.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinit.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsperf.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\attrib.exe
    2015-01-05 12:58 - 2014-10-29 12:28 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotcli.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\PATHPING.EXE
    2015-01-05 12:58 - 2014-10-29 12:28 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
    2015-01-05 12:58 - 2014-10-29 12:28 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidle.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\system32\elslad.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl
    2015-01-05 12:58 - 2014-10-29 12:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\loadperf.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\netsh.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentprf.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\setx.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HelpPaneProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatcha.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\signdrv.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
    2015-01-05 12:58 - 2014-10-29 12:27 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\findstr.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EventAggregation.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com
    2015-01-05 12:58 - 2014-10-29 12:27 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ARP.EXE
    2015-01-05 12:58 - 2014-10-29 12:27 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedcli.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
    2015-01-05 12:58 - 2014-10-29 12:27 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Register-CimProvider.exe
    2015-01-05 12:58 - 2014-10-29 12:27 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAuthn.exe
    2015-01-05 12:58 - 2014-10-29 12:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
    2015-01-05 12:58 - 2014-10-29 12:26 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
    2015-01-05 12:58 - 2014-10-29 12:26 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidnsp.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.Fontgroups.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSEXT32.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetEvtFwdr.exe
    2015-01-05 12:58 - 2014-10-29 12:26 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MirrorDrvCompat.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypttpmeksvc.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uicom.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\pots.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkdsk.exe
    2015-01-05 12:58 - 2014-10-29 12:26 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinitext.dll
    2015-01-05 12:58 - 2014-10-29 12:26 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimgvw.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipsec.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogonext.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tpmcompc.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rrinstaller.exe
    2015-01-05 12:58 - 2014-10-29 12:25 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtffilt.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShextAutoplay.exe
    2015-01-05 12:58 - 2014-10-29 12:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncuprov.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
    2015-01-05 12:58 - 2014-10-29 12:25 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsext.dll
    2015-01-05 12:58 - 2014-10-29 12:24 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
    2015-01-05 12:58 - 2014-10-29 12:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanext.exe
    2015-01-05 12:58 - 2014-10-29 12:24 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
    2015-01-05 12:58 - 2014-10-29 12:24 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
    2015-01-05 12:58 - 2014-10-29 12:23 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
    2015-01-05 12:58 - 2014-10-29 12:23 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.ps.dll
    2015-01-05 12:58 - 2014-10-29 12:23 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.ps.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskSchdPS.dll
    2015-01-05 12:58 - 2014-10-29 12:22 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngcredui.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Portable.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifs.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
    2015-01-05 12:58 - 2014-10-29 12:21 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\elsTrans.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Display.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemManufacturers.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.RemoteDesktop.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHostProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeSyncTask.dll
    2015-01-05 12:58 - 2014-10-29 12:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifsproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapimig.exe
    2015-01-05 12:58 - 2014-10-29 12:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimtf.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\NETSTAT.EXE
    2015-01-05 12:58 - 2014-10-29 12:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsjob.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommonPal.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentTask.dll
    2015-01-05 12:58 - 2014-10-29 12:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:19 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
    2015-01-05 12:58 - 2014-10-29 12:19 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll
    2015-01-05 12:58 - 2014-10-29 12:19 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmbmgr.dll
    2015-01-05 12:58 - 2014-10-29 12:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
    2015-01-05 12:58 - 2014-10-29 12:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll
    2015-01-05 12:58 - 2014-10-29 12:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpauto.dll
    2015-01-05 12:58 - 2014-10-29 12:18 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
    2015-01-05 12:58 - 2014-10-29 12:18 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RoamingSecurity.dll
    2015-01-05 12:58 - 2014-10-29 12:18 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
    2015-01-05 12:58 - 2014-10-29 12:17 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll
    2015-01-05 12:58 - 2014-10-29 12:17 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll
    2015-01-05 12:58 - 2014-10-29 12:17 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
    2015-01-05 12:58 - 2014-10-29 12:16 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
    2015-01-05 12:58 - 2014-10-29 12:16 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetmib1.dll
    2015-01-05 12:58 - 2014-10-29 12:16 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
    2015-01-05 12:58 - 2014-10-29 12:15 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\FDResPub.dll
    2015-01-05 12:58 - 2014-10-29 12:15 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrshost.exe
    2015-01-05 12:58 - 2014-10-29 12:14 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\certCredProvider.dll
    2015-01-05 12:58 - 2014-10-29 12:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
    2015-01-05 12:58 - 2014-10-29 12:14 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityServicePal.dll
    2015-01-05 12:58 - 2014-10-29 12:14 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\nci.dll
    2015-01-05 12:58 - 2014-10-29 12:13 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\umb.dll
    2015-01-05 12:58 - 2014-10-29 12:13 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll
    2015-01-05 12:58 - 2014-10-29 12:12 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
    2015-01-05 12:58 - 2014-10-29 12:12 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwaninst.dll
    2015-01-05 12:58 - 2014-10-29 12:11 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsadu.dll
    2015-01-05 12:58 - 2014-10-29 12:11 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
    2015-01-05 12:58 - 2014-10-29 12:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifmon.dll
    2015-01-05 12:58 - 2014-10-29 12:08 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrs.exe
    2015-01-05 12:58 - 2014-10-29 12:06 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
    2015-01-05 12:58 - 2014-10-29 12:06 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiclnt.dll
    2015-01-05 12:58 - 2014-10-29 12:06 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
    2015-01-05 12:58 - 2014-10-29 12:06 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll
    2015-01-05 12:58 - 2014-10-29 12:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll
    2015-01-05 12:58 - 2014-10-29 12:06 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprext.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elslad.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
    2015-01-05 12:58 - 2014-10-29 12:05 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrscmd.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hbaapi.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatchc.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sc.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndiscapCfg.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotect.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lodctr.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfscli.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatcha.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unlodctr.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax
    2015-01-05 12:58 - 2014-10-29 12:05 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icacls.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32topl.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vpnikeapi.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcsubs.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpapi.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com
    2015-01-05 12:58 - 2014-10-29 12:05 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinit.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsperf.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schedcli.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE
    2015-01-05 12:58 - 2014-10-29 12:05 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\attrib.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotcli.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshqos.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mountvol.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\finger.exe
    2015-01-05 12:58 - 2014-10-29 12:05 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whhelper.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
    2015-01-05 12:58 - 2014-10-29 12:05 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrssrv.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBthProxy.dll
    2015-01-05 12:58 - 2014-10-29 12:05 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidle.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netsh.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentprf.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setx.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecEdit.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findstr.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pots.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cacls.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ARP.EXE
    2015-01-05 12:58 - 2014-10-29 12:04 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinitext.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Register-CimProvider.exe
    2015-01-05 12:58 - 2014-10-29 12:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
    2015-01-05 12:58 - 2014-10-29 12:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HOSTNAME.EXE
    2015-01-05 12:58 - 2014-10-29 12:03 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
    2015-01-05 12:58 - 2014-10-29 12:03 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidnsp.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.Fontgroups.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
    2015-01-05 12:58 - 2014-10-29 12:03 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MirrorDrvCompat.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypttpmeksvc.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
    2015-01-05 12:58 - 2014-10-29 12:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkdsk.exe
    2015-01-05 12:58 - 2014-10-29 12:03 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityRtapiPal.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanext.exe
    2015-01-05 12:58 - 2014-10-29 12:02 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipsec.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
    2015-01-05 12:58 - 2014-10-29 12:02 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
    2015-01-05 12:58 - 2014-10-29 12:01 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
    2015-01-05 12:58 - 2014-10-29 12:01 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
    2015-01-05 12:58 - 2014-10-29 12:01 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vss_ps.dll
    2015-01-05 12:58 - 2014-10-29 12:01 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\slpts.dll
    2015-01-05 12:58 - 2014-10-29 12:01 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngcredui.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\luainstall.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.Extensions.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Portable.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NETSTAT.EXE
    2015-01-05 12:58 - 2014-10-29 12:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipconfig.exe
    2015-01-05 12:58 - 2014-10-29 12:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsjob.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxlegih.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
    2015-01-05 12:58 - 2014-10-29 12:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifs.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxdm.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elsTrans.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvps.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Display.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemManufacturers.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ROUTE.EXE
    2015-01-05 12:58 - 2014-10-29 12:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.RemoteDesktop.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsExt.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommonPal.dll
    2015-01-05 12:58 - 2014-10-29 12:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifsproxy.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpclnt.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pautoenr.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stclient.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschapext.dll
    2015-01-05 12:58 - 2014-10-29 11:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSModuleDiscoveryProvider.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimtf.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPHost.dll
    2015-01-05 12:58 - 2014-10-29 11:58 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxshared.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetmib1.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\datusage.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
    2015-01-05 12:58 - 2014-10-29 11:57 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrshost.exe
    2015-01-05 12:58 - 2014-10-29 11:57 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll
    2015-01-05 12:58 - 2014-10-29 11:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
    2015-01-05 12:58 - 2014-10-29 11:56 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certCredProvider.dll
    2015-01-05 12:58 - 2014-10-29 11:56 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationProxy.dll
    2015-01-05 12:58 - 2014-10-29 11:56 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
    2015-01-05 12:58 - 2014-10-29 11:56 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nci.dll
    2015-01-05 12:58 - 2014-10-29 11:55 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll
    2015-01-05 12:58 - 2014-10-29 11:55 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CheckNetIsolation.exe
    2015-01-05 12:58 - 2014-10-29 11:55 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe
    2015-01-05 12:58 - 2014-10-29 11:54 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaUacHelper.exe
    2015-01-05 12:58 - 2014-10-29 11:53 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
    2015-01-05 12:58 - 2014-10-29 11:53 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
    2015-01-05 12:58 - 2014-10-29 11:53 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifmon.dll
    2015-01-05 12:58 - 2014-10-29 11:52 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrs.exe
    2015-01-05 12:58 - 2014-10-29 11:51 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndiscapCfg.dll
    2015-01-05 12:58 - 2014-10-29 11:50 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
    2015-01-05 12:58 - 2014-10-29 11:49 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
    2015-01-05 12:58 - 2014-10-29 11:48 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slpts.dll
    2015-01-05 12:58 - 2014-10-29 11:47 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpclnt.dll
    2015-01-05 12:58 - 2014-10-29 11:46 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
    2015-01-05 12:58 - 2014-10-29 11:46 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSModuleDiscoveryProvider.dll
    2015-01-05 12:58 - 2014-10-29 11:46 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
    2015-01-05 12:58 - 2014-10-29 11:46 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Startupscan.dll
    2015-01-05 12:58 - 2014-10-29 11:45 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
    2015-01-05 12:58 - 2014-10-29 11:45 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
    2015-01-05 12:58 - 2014-10-29 11:44 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CheckNetIsolation.exe
    2015-01-05 12:58 - 2014-10-29 11:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaUacHelper.exe
    2015-01-05 12:58 - 2014-10-29 11:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe
    2015-01-05 12:58 - 2014-10-29 11:43 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
    2015-01-05 12:58 - 2014-10-29 11:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
    2015-01-05 12:58 - 2014-10-29 11:35 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
    2015-01-05 12:58 - 2014-10-15 19:32 - 00921920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
    2015-01-05 12:58 - 2014-10-07 17:54 - 00324928 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
    2015-01-05 12:58 - 2014-10-07 17:54 - 00189248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
    2015-01-05 12:58 - 2014-10-07 17:44 - 00069952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
    2015-01-05 12:58 - 2014-06-21 18:33 - 00212736 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
    2015-01-05 12:57 - 2014-10-29 14:54 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll
    2015-01-05 12:57 - 2014-10-29 14:54 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWWizFwk.dll
    2015-01-05 12:57 - 2014-10-29 14:07 - 05120000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll
    2015-01-05 12:57 - 2014-10-29 14:07 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWWizFwk.dll
    2015-01-05 12:57 - 2014-10-29 13:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
    2015-01-05 12:57 - 2014-10-29 13:50 - 02628608 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
    2015-01-05 12:57 - 2014-10-29 13:49 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUxRes.dll
    2015-01-05 12:57 - 2014-10-29 13:49 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
    2015-01-05 12:57 - 2014-10-29 13:49 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl
    2015-01-05 12:57 - 2014-10-29 13:49 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2help.dll
    2015-01-05 12:57 - 2014-10-29 13:49 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
    2015-01-05 12:57 - 2014-10-29 13:49 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rnr20.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys
    2015-01-05 12:57 - 2014-10-29 13:48 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL
    2015-01-05 12:57 - 2014-10-29 13:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\txfw32.dll
    2015-01-05 12:57 - 2014-10-29 13:48 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys
    2015-01-05 12:57 - 2014-10-29 13:48 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Locator.exe
    2015-01-05 12:57 - 2014-10-29 13:48 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmi.dll
    2015-01-05 12:57 - 2014-10-29 13:47 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
    2015-01-05 12:57 - 2014-10-29 13:47 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys
    2015-01-05 12:57 - 2014-10-29 13:47 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\qwavedrv.sys
    2015-01-05 12:57 - 2014-10-29 13:47 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc63.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
    2015-01-05 12:57 - 2014-10-29 13:46 - 00057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiscap.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
    2015-01-05 12:57 - 2014-10-29 13:46 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys
    2015-01-05 12:57 - 2014-10-29 13:45 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\miguiresource.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
    2015-01-05 12:57 - 2014-10-29 13:45 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
    2015-01-05 12:57 - 2014-10-29 13:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows6Compat.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mslldp.sys
    2015-01-05 12:57 - 2014-10-29 13:45 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows61.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensApi.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\browseui.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoWorkplaceN.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\osuninst.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
    2015-01-05 12:57 - 2014-10-29 13:45 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
    2015-01-05 12:57 - 2014-10-29 13:45 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSchedExe.exe
    2015-01-05 12:57 - 2014-10-29 13:44 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\fthsvc.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortServer2003Compat.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe
    2015-01-05 12:57 - 2014-10-29 13:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Nlsdl.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\clb.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsock32.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidcrl40.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sas.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlS0WndH.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiwer.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscat32.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\nddeapi.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput9_1_0.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\softpub.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OskSupport.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched32.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssip32.dll
    2015-01-05 12:57 - 2014-10-29 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\comcat.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl
    2015-01-05 12:57 - 2014-10-29 13:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzutil.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sort.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\hh.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdkey.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwinsat.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\recover.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiperf.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdplay.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeDateMUICallback.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsied.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\help.exe
    2015-01-05 12:57 - 2014-10-29 13:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spmpm.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\acledit.dll
    2015-01-05 12:57 - 2014-10-29 13:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorcpl.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDOIProxy.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\syskey.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsbyuv.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiUnattend.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshnetbs.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbperf.dll
    2015-01-05 12:57 - 2014-10-29 13:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonUI.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe
    2015-01-05 12:57 - 2014-10-29 13:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcNs4.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysclass.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe
    2015-01-05 12:57 - 2014-10-29 13:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
    2015-01-05 12:57 - 2014-10-29 13:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\syssetup.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
    2015-01-05 12:57 - 2014-10-29 13:41 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcmsetup.exe
    2015-01-05 12:57 - 2014-10-29 13:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshirda.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcico.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\panmap.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmcodecdspps.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr
    2015-01-05 12:57 - 2014-10-29 13:41 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\spnet.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\CIRCoInst.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shfolder.dll
    2015-01-05 12:57 - 2014-10-29 13:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sccls.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.proxystub.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx3.dll
    2015-01-05 12:57 - 2014-10-29 13:40 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbRedirectionGroupPolicyExtension.dll
    2015-01-05 12:57 - 2014-10-29 13:38 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\capisp.dll
    2015-01-05 12:57 - 2014-10-29 13:38 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstorec.dll
    2015-01-05 12:57 - 2014-10-29 13:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime
    2015-01-05 12:57 - 2014-10-29 13:37 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\secinit.exe
    2015-01-05 12:57 - 2014-10-29 13:37 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctfmon.exe
    2015-01-05 12:57 - 2014-10-29 13:36 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\extrac32.exe
    2015-01-05 12:57 - 2014-10-29 13:36 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcnsh.dll
    2015-01-05 12:57 - 2014-10-29 13:36 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmutil.exe
    2015-01-05 12:57 - 2014-10-29 13:36 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\acproxy.dll
    2015-01-05 12:57 - 2014-10-29 13:35 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPutil.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventvwr.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winver.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\where.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialer.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\timeout.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\clip.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofire.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdial.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsavailux.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiSysprep.dll
    2015-01-05 12:57 - 2014-10-29 13:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
    2015-01-05 12:57 - 2014-10-29 13:34 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\write.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\regedt32.exe
    2015-01-05 12:57 - 2014-10-29 13:34 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\systray.exe
    2015-01-05 12:57 - 2014-10-29 13:33 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
    2015-01-05 12:57 - 2014-10-29 13:33 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Apphlpdm.dll
    2015-01-05 12:57 - 2014-10-29 13:33 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetppui.dll
    2015-01-05 12:57 - 2014-10-29 13:33 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\runas.exe
    2015-01-05 12:57 - 2014-10-29 13:33 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\svsvc.dll
    2015-01-05 12:57 - 2014-10-29 13:33 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LAPRXY.DLL
    2015-01-05 12:57 - 2014-10-29 13:33 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\InfDefaultInstall.exe
    2015-01-05 12:57 - 2014-10-29 13:31 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlaninst.dll
    2015-01-05 12:57 - 2014-10-29 13:30 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\sigverif.exe
    2015-01-05 12:57 - 2014-10-29 13:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\forfiles.exe
    2015-01-05 12:57 - 2014-10-29 13:30 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcreate.exe
    2015-01-05 12:57 - 2014-10-29 13:30 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\choice.exe
    2015-01-05 12:57 - 2014-10-29 13:30 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\RmClient.exe
    2015-01-05 12:57 - 2014-10-29 13:29 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicli.exe
    2015-01-05 12:57 - 2014-10-29 13:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\waitfor.exe
    2015-01-05 12:57 - 2014-10-29 13:29 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\setspn.exe
    2015-01-05 12:57 - 2014-10-29 13:28 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe
    2015-01-05 12:57 - 2014-10-29 13:27 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmci.dll
    2015-01-05 12:57 - 2014-10-29 13:27 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\serialui.dll
    2015-01-05 12:57 - 2014-10-29 13:25 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrreg.exe
    2015-01-05 12:57 - 2014-10-29 13:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontview.exe
    2015-01-05 12:57 - 2014-10-29 13:25 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resmon.exe
    2015-01-05 12:57 - 2014-10-29 13:25 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
    2015-01-05 12:57 - 2014-10-29 13:24 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.exe
    2015-01-05 12:57 - 2014-10-29 13:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationNotifications.exe
    2015-01-05 12:57 - 2014-10-29 13:23 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerWizardElev.exe
    2015-01-05 12:57 - 2014-10-29 13:23 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wowreg32.exe
    2015-01-05 12:57 - 2014-10-29 13:22 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssocPrx.dll
    2015-01-05 12:57 - 2014-10-29 13:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFCoinstaller.dll
    2015-01-05 12:57 - 2014-10-29 13:22 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgwdi.dll
    2015-01-05 12:57 - 2014-10-29 13:20 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\proquota.exe
    2015-01-05 12:57 - 2014-10-29 13:20 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WallpaperHost.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\control.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceProperties.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesRemote.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesProtection.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesPerformance.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesHardware.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesComputerName.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesAdvanced.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Netplwiz.exe
    2015-01-05 12:57 - 2014-10-29 13:19 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Eap3Host.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartScreenSettings.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OptionalFeatures.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Fondue.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DpiScaling.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RunLegacyCPLElevated.exe
    2015-01-05 12:57 - 2014-10-29 13:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
    2015-01-05 12:57 - 2014-10-29 13:17 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdSched.exe
    2015-01-05 12:57 - 2014-10-29 13:17 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll
    2015-01-05 12:57 - 2014-10-29 13:17 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUNATD.exe
    2015-01-05 12:57 - 2014-10-29 13:17 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDACLSys.dll
    2015-01-05 12:57 - 2014-10-29 13:12 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsui.exe
    2015-01-05 12:57 - 2014-10-29 13:09 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthudtask.exe
    2015-01-05 12:57 - 2014-10-29 13:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\credwiz.exe
    2015-01-05 12:57 - 2014-10-29 13:08 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
    2015-01-05 12:57 - 2014-10-29 13:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
    2015-01-05 12:57 - 2014-10-29 13:05 - 02628608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
    2015-01-05 12:57 - 2014-10-29 13:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gptext.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00638976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceUxRes.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2help.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
    2015-01-05 12:57 - 2014-10-29 13:04 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rnr20.dll
    2015-01-05 12:57 - 2014-10-29 13:03 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
    2015-01-05 12:57 - 2014-10-29 13:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll
    2015-01-05 12:57 - 2014-10-29 13:03 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txfw32.dll
    2015-01-05 12:57 - 2014-10-29 13:03 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wship6.dll
    2015-01-05 12:57 - 2014-10-29 13:03 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSHTCPIP.DLL
    2015-01-05 12:57 - 2014-10-29 13:03 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmi.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OobeFldr.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miguiresource.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiwer.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osuninst.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
    2015-01-05 12:57 - 2014-10-29 13:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll
    2015-01-05 12:57 - 2014-10-29 13:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprop.dll
    2015-01-05 12:57 - 2014-10-29 12:59 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidcrl40.dll
    2015-01-05 12:57 - 2014-10-29 12:59 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\help.exe
    2015-01-05 12:57 - 2014-10-29 12:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sas.dll
    2015-01-05 12:57 - 2014-10-29 12:59 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comcat.dll
    2015-01-05 12:57 - 2014-10-29 12:58 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl
    2015-01-05 12:57 - 2014-10-29 12:58 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorcpl.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzutil.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msyuv.dll
    2015-01-05 12:57 - 2014-10-29 12:58 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sort.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hh.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdkey.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsbyuv.dll
    2015-01-05 12:57 - 2014-10-29 12:58 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiUnattend.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdplay.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsied.dll
    2015-01-05 12:57 - 2014-10-29 12:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomcnfg.exe
    2015-01-05 12:57 - 2014-10-29 12:58 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll
    2015-01-05 12:57 - 2014-10-29 12:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDOIProxy.dll
    2015-01-05 12:57 - 2014-10-29 12:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr
    2015-01-05 12:57 - 2014-10-29 12:57 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcNs4.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pstorec.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcji32.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odtext32.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odpdx32.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odfox32.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oddbse32.dll
    2015-01-05 12:57 - 2014-10-29 12:56 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odexl32.dll
    2015-01-05 12:57 - 2014-10-29 12:55 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime
    2015-01-05 12:57 - 2014-10-29 12:54 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ctfmon.exe
    2015-01-05 12:57 - 2014-10-29 12:53 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapimig.exe
    2015-01-05 12:57 - 2014-10-29 12:53 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\winhlp32.exe
    2015-01-05 12:57 - 2014-10-29 12:52 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.exe
    2015-01-05 12:57 - 2014-10-29 12:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msra.exe
    2015-01-05 12:57 - 2014-10-29 12:52 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winver.exe
    2015-01-05 12:57 - 2014-10-29 12:52 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedt32.exe
    2015-01-05 12:57 - 2014-10-29 12:52 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\write.exe
    2015-01-05 12:57 - 2014-10-29 12:51 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runas.exe
    2015-01-05 12:57 - 2014-10-29 12:51 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InfDefaultInstall.exe
    2015-01-05 12:57 - 2014-10-29 12:51 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systray.exe
    2015-01-05 12:57 - 2014-10-29 12:46 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcad32.exe
    2015-01-05 12:57 - 2014-10-29 12:45 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resmon.exe
    2015-01-05 12:57 - 2014-10-29 12:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
    2015-01-05 12:57 - 2014-10-29 12:44 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Narrator.exe
    2015-01-05 12:57 - 2014-10-29 12:44 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationNotifications.exe
    2015-01-05 12:57 - 2014-10-29 12:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe
    2015-01-05 12:57 - 2014-10-29 12:40 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Netplwiz.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartScreenSettings.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Fondue.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceProperties.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesProtection.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesComputerName.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesAdvanced.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DpiScaling.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe
    2015-01-05 12:57 - 2014-10-29 12:39 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
    2015-01-05 12:57 - 2014-10-29 12:32 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthudtask.exe
    2015-01-05 12:57 - 2014-10-29 12:32 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
    2015-01-05 12:57 - 2014-10-29 12:29 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll
    2015-01-05 12:57 - 2014-10-29 12:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprext.dll
    2015-01-05 12:57 - 2014-10-29 12:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll
    2015-01-05 12:57 - 2014-10-29 12:29 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_ISCII.DLL
    2015-01-05 12:57 - 2014-10-29 12:28 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
    2015-01-05 12:57 - 2014-10-29 12:28 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprmsg.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe
    2015-01-05 12:57 - 2014-10-29 12:28 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdhcinst.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mountvol.exe
    2015-01-05 12:57 - 2014-10-29 12:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
    2015-01-05 12:57 - 2014-10-29 12:28 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrssrv.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\whhelper.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBthProxy.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TCPSVCS.EXE
    2015-01-05 12:57 - 2014-10-29 12:28 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TcpipSetup.dll
    2015-01-05 12:57 - 2014-10-29 12:28 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
    2015-01-05 12:57 - 2014-10-29 12:28 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
    2015-01-05 12:57 - 2014-10-29 12:27 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\lodctr.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\unlodctr.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecEdit.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cacls.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\PING.EXE
    2015-01-05 12:57 - 2014-10-29 12:27 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll
    2015-01-05 12:57 - 2014-10-29 12:27 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TRACERT.EXE
    2015-01-05 12:57 - 2014-10-29 12:27 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe
    2015-01-05 12:57 - 2014-10-29 12:27 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\HOSTNAME.EXE
    2015-01-05 12:57 - 2014-10-29 12:27 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringIeProvider.dll
    2015-01-05 12:57 - 2014-10-29 12:26 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
    2015-01-05 12:57 - 2014-10-29 12:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
    2015-01-05 12:57 - 2014-10-29 12:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
    2015-01-05 12:57 - 2014-10-29 12:26 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VaultCmd.exe
    2015-01-05 12:57 - 2014-10-29 12:26 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRINFO.EXE
    2015-01-05 12:57 - 2014-10-29 12:26 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityRtapiPal.dll
    2015-01-05 12:57 - 2014-10-29 12:26 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpcsvc.dll
    2015-01-05 12:57 - 2014-10-29 12:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\procinst.dll
    2015-01-05 12:57 - 2014-10-29 12:23 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll
    2015-01-05 12:57 - 2014-10-29 12:23 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxStreamingDataSourcePS.dll
    2015-01-05 12:57 - 2014-10-29 12:21 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
    2015-01-05 12:57 - 2014-10-29 12:21 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipconfig.exe
    2015-01-05 12:57 - 2014-10-29 12:21 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.ProxyStub.dll
    2015-01-05 12:57 - 2014-10-29 12:21 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ROUTE.EXE
    2015-01-05 12:57 - 2014-10-29 12:21 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhst3g.exe
    2015-01-05 12:57 - 2014-10-29 12:19 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschapext.dll
    2015-01-05 12:57 - 2014-10-29 12:19 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
    2015-01-05 12:57 - 2014-10-29 12:12 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
    2015-01-05 12:57 - 2014-10-29 12:06 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_ISCII.DLL
    2015-01-05 12:57 - 2014-10-29 12:06 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dabapi.dll
    2015-01-05 12:57 - 2014-10-29 12:05 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprmsg.dll
    2015-01-05 12:57 - 2014-10-29 12:05 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PATHPING.EXE
    2015-01-05 12:57 - 2014-10-29 12:05 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TRACERT.EXE
    2015-01-05 12:57 - 2014-10-29 12:05 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TCPSVCS.EXE
    2015-01-05 12:57 - 2014-10-29 12:05 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\backgroundTaskHost.exe
    2015-01-05 12:57 - 2014-10-29 12:05 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
    2015-01-05 12:57 - 2014-10-29 12:04 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
    2015-01-05 12:57 - 2014-10-29 12:04 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpcsvc.dll
    2015-01-05 12:57 - 2014-10-29 12:03 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe
    2015-01-05 12:57 - 2014-10-29 12:03 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MRINFO.EXE
    2015-01-05 12:57 - 2014-10-29 12:01 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskSchdPS.dll
    2015-01-05 12:57 - 2014-10-29 12:01 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
    2015-01-05 12:57 - 2014-10-29 12:01 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.ps.dll
    2015-01-05 12:57 - 2014-10-29 12:01 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll
    2015-01-05 12:57 - 2014-10-29 12:01 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.ps.dll
    2015-01-05 12:57 - 2014-10-29 12:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.ProxyStub.dll
    2015-01-05 12:57 - 2014-10-29 11:58 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Startupscan.dll
    2015-01-05 12:57 - 2014-10-29 11:58 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootim.exe
    2015-01-05 12:57 - 2014-10-29 11:50 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe
    2015-01-05 12:53 - 2014-10-31 15:50 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
    2015-01-05 12:53 - 2014-10-31 14:30 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
    2015-01-05 12:53 - 2014-10-31 14:22 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
    2015-01-05 12:53 - 2014-10-31 13:12 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
    2015-01-05 12:39 - 2015-01-05 12:39 - 00000000 ____D () C:\ProgramData\Sun
    2015-01-05 12:39 - 2015-01-05 12:38 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2015-01-05 12:38 - 2015-01-05 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2015-01-05 12:37 - 2015-01-05 12:37 - 00000000 ____D () C:\ProgramData\Oracle
    2015-01-05 12:37 - 2015-01-05 12:37 - 00000000 ____D () C:\Program Files (x86)\Java
    2015-01-05 12:33 - 2015-01-13 14:01 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2015-01-05 12:33 - 2015-01-07 11:05 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
    2015-01-05 12:33 - 2015-01-05 13:14 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
    2015-01-05 12:33 - 2015-01-05 12:34 - 00638888 _____ (Oracle Corporation) C:\Users\John\Downloads\chromeinstall-8u25.exe
    2015-01-05 12:33 - 2015-01-05 12:33 - 00003864 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
    2015-01-05 12:26 - 2014-11-16 06:05 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
    2015-01-05 12:26 - 2014-11-15 17:29 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
    2015-01-05 12:26 - 2014-11-15 01:36 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2015-01-05 12:26 - 2014-11-14 18:10 - 03558400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2015-01-05 12:26 - 2014-11-14 17:58 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
    2015-01-05 12:26 - 2014-11-14 17:57 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
    2015-01-05 12:26 - 2014-11-14 17:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
    2015-01-05 12:26 - 2014-11-14 17:54 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
    2015-01-05 12:26 - 2014-11-14 17:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
    2015-01-05 12:26 - 2014-11-14 17:53 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2015-01-05 12:26 - 2014-11-14 17:52 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
    2015-01-05 12:26 - 2014-11-14 16:04 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
    2015-01-05 12:26 - 2014-11-14 16:03 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
    2015-01-05 12:26 - 2014-11-14 16:03 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
    2015-01-05 12:26 - 2014-11-14 16:01 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2015-01-05 12:26 - 2014-11-14 16:01 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
    2015-01-05 12:26 - 2014-11-11 11:39 - 22290560 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2015-01-05 12:26 - 2014-11-11 11:17 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
    2015-01-05 12:26 - 2014-11-11 05:06 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
    2015-01-05 12:26 - 2014-11-11 05:06 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
    2015-01-05 12:26 - 2014-11-11 05:06 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
    2015-01-05 12:26 - 2014-11-11 05:06 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
    2015-01-05 12:26 - 2014-11-10 13:57 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
    2015-01-05 12:26 - 2014-11-10 12:37 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
    2015-01-05 12:26 - 2014-11-10 12:34 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
    2015-01-05 12:26 - 2014-11-10 12:26 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
    2015-01-05 12:26 - 2014-11-10 12:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
    2015-01-05 12:26 - 2014-11-10 12:09 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
    2015-01-05 12:26 - 2014-11-10 12:08 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
    2015-01-05 12:26 - 2014-11-10 12:06 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
    2015-01-05 12:26 - 2014-11-10 11:57 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
    2015-01-05 12:26 - 2014-11-10 11:57 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
    2015-01-05 12:26 - 2014-11-08 21:42 - 01390928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
    2015-01-05 12:26 - 2014-11-08 21:23 - 01127976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
    2015-01-05 12:26 - 2014-11-08 15:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
    2015-01-05 12:26 - 2014-11-08 15:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
    2015-01-05 12:26 - 2014-11-08 14:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
    2015-01-05 12:26 - 2014-11-08 14:58 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
    2015-01-05 12:26 - 2014-11-08 14:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
    2015-01-05 12:26 - 2014-11-08 14:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
    2015-01-05 12:26 - 2014-11-08 14:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
    2015-01-05 12:26 - 2014-11-08 14:24 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
    2015-01-05 12:26 - 2014-11-08 14:13 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
    2015-01-05 12:26 - 2014-11-08 14:13 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
    2015-01-05 12:26 - 2014-11-08 14:13 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
    2015-01-05 12:26 - 2014-11-08 13:48 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
    2015-01-05 12:26 - 2014-11-08 13:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
    2015-01-05 12:26 - 2014-11-08 13:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
    2015-01-05 12:26 - 2014-11-08 13:09 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
    2015-01-05 12:26 - 2014-11-08 13:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
    2015-01-05 12:26 - 2014-11-08 12:59 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
    2015-01-05 12:26 - 2014-11-08 12:58 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
    2015-01-05 12:26 - 2014-11-08 12:49 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
    2015-01-05 12:26 - 2014-11-07 14:58 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
    2015-01-05 12:26 - 2014-11-07 14:20 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
    2015-01-05 12:26 - 2014-11-05 13:12 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
    2015-01-05 12:26 - 2014-11-05 13:12 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL
    2015-01-05 12:26 - 2014-11-05 13:06 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
    2015-01-05 12:26 - 2014-11-05 12:44 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
    2015-01-05 12:26 - 2014-11-05 12:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
    2015-01-05 12:26 - 2014-11-05 12:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
    2015-01-05 12:26 - 2014-11-05 12:39 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL
    2015-01-05 12:26 - 2014-11-05 12:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL
    2015-01-05 12:26 - 2014-11-05 12:33 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
    2015-01-05 12:26 - 2014-11-05 12:21 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
    2015-01-05 12:26 - 2014-11-05 12:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
    2015-01-05 12:26 - 2014-11-05 12:18 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
    2015-01-05 12:26 - 2014-11-05 12:14 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
    2015-01-05 12:26 - 2014-11-05 12:06 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
    2015-01-05 12:26 - 2014-11-05 06:33 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
    2015-01-05 12:26 - 2014-11-05 06:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
    2015-01-05 12:26 - 2014-11-05 06:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
    2015-01-05 12:26 - 2014-11-04 17:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
    2015-01-05 12:26 - 2014-11-04 17:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
    2015-01-05 12:26 - 2014-11-04 17:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
    2015-01-05 12:26 - 2014-11-04 17:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
    2015-01-05 12:26 - 2014-11-04 17:27 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
    2015-01-05 12:26 - 2014-11-04 16:01 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
    2015-01-05 12:26 - 2014-10-31 11:51 - 18823168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2015-01-05 12:26 - 2014-10-31 11:10 - 15158784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2015-01-05 12:26 - 2014-10-30 16:55 - 07473472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2015-01-05 12:26 - 2014-10-30 16:47 - 01499384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
    2015-01-05 12:26 - 2014-10-30 16:41 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
    2015-01-05 12:26 - 2014-10-29 14:05 - 00551232 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
    2015-01-05 12:26 - 2014-10-29 13:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
    2015-01-05 12:26 - 2014-10-29 13:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
    2015-01-05 12:26 - 2014-10-29 12:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
    2015-01-05 12:26 - 2014-10-29 12:55 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
    2015-01-05 12:26 - 2014-10-29 12:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
    2015-01-05 12:26 - 2014-10-29 12:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
    2015-01-05 12:26 - 2014-10-29 12:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
    2015-01-05 12:26 - 2014-10-29 12:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
    2015-01-05 12:26 - 2014-10-29 12:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
    2015-01-05 12:26 - 2014-10-29 12:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
    2015-01-05 12:26 - 2014-10-27 09:10 - 00390841 _____ () C:\WINDOWS\system32\ApnDatabase.xml
    2015-01-05 12:26 - 2014-10-21 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
    2015-01-05 12:26 - 2014-10-21 12:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
    2015-01-05 12:26 - 2014-10-21 11:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
    2015-01-05 12:26 - 2014-10-21 11:31 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
    2015-01-05 12:26 - 2014-10-21 11:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
    2015-01-05 12:26 - 2014-10-21 11:30 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
    2015-01-05 12:26 - 2014-10-21 11:20 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
    2015-01-05 12:26 - 2014-10-17 15:56 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
    2015-01-05 12:26 - 2014-10-17 15:56 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
    2015-01-05 12:26 - 2014-10-17 15:56 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
    2015-01-05 12:26 - 2014-10-17 14:35 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
    2015-01-05 12:25 - 2014-11-18 07:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
    2015-01-05 12:25 - 2014-11-18 07:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
    2015-01-05 12:25 - 2014-11-14 17:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
    2015-01-05 12:25 - 2014-11-14 17:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
    2015-01-05 12:25 - 2014-11-14 17:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
    2015-01-05 12:25 - 2014-11-14 17:46 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
    2015-01-05 12:25 - 2014-11-14 17:39 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
    2015-01-05 12:25 - 2014-11-14 15:53 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
    2015-01-05 12:20 - 2015-01-05 12:20 - 00000000 ____D () C:\Users\John\AppData\Local\Intel_Corporation
    2015-01-04 18:44 - 2015-01-04 18:44 - 00000000 ___HD () C:\ProgramData\CanonBJ
    2015-01-04 18:44 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMAU.DLL
    2015-01-04 16:27 - 2014-10-31 10:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
    2015-01-04 16:27 - 2014-10-31 10:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
    2014-12-26 01:12 - 2015-01-07 09:02 - 00000000 ____D () C:\WINDOWS\pss
    2014-12-26 00:34 - 2014-12-26 00:34 - 00000000 __SHD () C:\Users\John\AppData\Local\EmieBrowserModeList
    2014-12-22 18:17 - 2014-10-31 09:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
    2014-12-22 18:17 - 2014-10-31 09:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
    2014-12-15 08:59 - 2014-11-10 13:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
    2014-12-15 08:59 - 2014-11-10 12:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
    2014-12-15 08:44 - 2014-11-27 08:10 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2014-12-15 08:44 - 2014-11-27 08:10 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-01-13 14:28 - 2014-04-01 20:58 - 01523010 _____ () C:\WINDOWS\WindowsUpdate.log
    2015-01-13 14:26 - 2013-11-14 20:04 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3979661825-3157004422-1321400577-1001
    2015-01-13 14:12 - 2013-11-14 18:28 - 00958356 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
    2015-01-13 14:11 - 2012-09-27 03:53 - 00000950 _____ () C:\WINDOWS\SysWOW64\bscs.ini
    2015-01-13 14:08 - 2014-07-12 23:10 - 00000000 ___DO () C:\Users\John\OneDrive
    2015-01-13 14:08 - 2013-06-19 11:33 - 00003620 _____ () C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
    2015-01-13 14:08 - 2013-06-19 11:33 - 00000043 _____ () C:\WINDOWS\SysWOW64\LOCALDEVICE.INI
    2015-01-13 14:04 - 2013-11-14 18:20 - 01091426 _____ () C:\WINDOWS\PFRO.log
    2015-01-13 14:04 - 2013-08-23 01:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
    2015-01-13 14:03 - 2013-08-23 00:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
    2015-01-13 14:02 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\sru
    2015-01-13 13:52 - 2013-12-30 18:34 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype
    2015-01-13 13:12 - 2013-08-23 00:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
    2015-01-09 04:22 - 2014-04-01 20:42 - 00000000 ____D () C:\Users\John
    2015-01-09 03:47 - 2014-08-08 15:35 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
    2015-01-08 16:36 - 2014-10-10 14:18 - 00003158 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForJohn
    2015-01-08 16:36 - 2014-10-10 14:18 - 00000346 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForJohn.job
    2015-01-07 15:43 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\rescache
    2015-01-07 12:19 - 2013-11-21 10:47 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
    2015-01-07 11:19 - 2013-08-23 02:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
    2015-01-07 11:18 - 2013-08-23 01:44 - 00494656 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
    2015-01-07 11:12 - 2013-11-14 18:17 - 00000000 ____D () C:\Program Files\Windows Journal
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\WINDOWS\ToastData
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\WinStore
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\sppui
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\inetsrv
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\FileManager
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\Camera
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
    2015-01-07 11:12 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files\Common Files\System
    2015-01-07 11:12 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe
    2015-01-07 11:12 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
    2015-01-07 11:12 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\servicing
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ___SD () C:\WINDOWS\system32\dsc
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\sppui
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\setup
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\migwiz
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\inetsrv
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\Com
    2015-01-07 11:11 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\IME
    2015-01-07 11:11 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
    2015-01-07 11:11 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
    2015-01-07 11:11 - 2013-08-23 00:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
    2015-01-07 11:10 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files\WindowsPowerShell
    2015-01-07 11:10 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
    2015-01-07 11:10 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
    2015-01-07 11:10 - 2013-08-23 02:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform
    2015-01-07 11:05 - 2014-04-27 13:20 - 00000000 ____D () C:\Users\John\AppData\Local\Adobe
    2015-01-07 09:51 - 2012-07-26 18:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
    2015-01-07 09:49 - 2013-08-23 02:36 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
    2015-01-07 09:49 - 2013-08-23 02:36 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
    2015-01-07 09:42 - 2013-06-19 11:20 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
    2015-01-07 09:26 - 2014-01-03 11:01 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
    2015-01-07 09:25 - 2013-06-19 11:24 - 00000000 ____D () C:\Program Files (x86)\Realtek
    2015-01-07 09:25 - 2012-08-04 11:02 - 00000000 ____D () C:\SWSetup
    2015-01-07 09:24 - 2014-01-03 11:00 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
    2015-01-07 03:43 - 2013-08-23 01:46 - 00317608 _____ () C:\WINDOWS\setupact.log
    2015-01-07 03:43 - 2013-06-19 11:19 - 00000000 ____D () C:\Program Files (x86)\Intel
    2015-01-07 03:42 - 2012-12-02 08:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
    2015-01-07 03:33 - 2013-11-21 16:07 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
    2015-01-07 03:27 - 2013-11-21 16:07 - 00016152 _____ () C:\WINDOWS\system32\Drivers\SWDUMon.sys
    2015-01-06 14:04 - 2013-11-14 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-01-06 13:37 - 2014-08-03 22:16 - 00001338 _____ () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
    2015-01-06 13:34 - 2014-04-01 21:10 - 00000999 _____ () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-01-06 13:34 - 2012-12-02 08:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-01-06 05:38 - 2013-11-21 10:46 - 00000000 ____D () C:\Program Files (x86)\epson
    2015-01-06 05:07 - 2013-11-21 10:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
    2015-01-06 05:06 - 2013-11-21 10:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
    2015-01-06 05:04 - 2013-11-21 10:46 - 00000000 ____D () C:\ProgramData\EPSON
    2015-01-06 04:49 - 2013-12-31 13:28 - 00000000 ____D () C:\Users\John\AppData\Roaming\Azureus
    2015-01-06 04:49 - 2013-12-31 13:04 - 00000000 ____D () C:\Program Files (x86)\Vuze
    2015-01-06 04:49 - 2013-11-14 16:22 - 00000000 ____D () C:\Users\John\AppData\Roaming\hpqlog
    2015-01-06 04:49 - 2012-12-02 08:04 - 00000000 ____D () C:\ProgramData\Temp
    2015-01-06 04:13 - 2012-07-26 19:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
    2015-01-06 04:04 - 2013-11-14 19:56 - 00000000 ____D () C:\Users\John\AppData\Local\Packages
    2015-01-05 15:26 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\InputMethod
    2015-01-05 15:25 - 2014-07-24 21:18 - 00000000 ____D () C:\Users\John\AppData\Local\com
    2015-01-05 15:05 - 2014-08-08 15:35 - 00001078 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2015-01-05 15:05 - 2014-08-08 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2015-01-05 15:05 - 2014-08-08 15:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-01-05 14:27 - 2013-06-19 11:25 - 00000000 ____D () C:\ProgramData\Validity
    2015-01-05 13:14 - 2013-08-23 02:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
    2015-01-05 13:13 - 2014-01-03 11:40 - 1004040395 _____ () C:\WINDOWS\MEMORY.DMP
    2015-01-05 12:40 - 2014-04-27 13:21 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2015-01-04 18:52 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
    2015-01-04 16:33 - 2013-11-21 10:53 - 00000000 ____D () C:\ProgramData\ABBYY
    2014-12-26 00:22 - 2013-12-29 19:05 - 00000000 ____D () C:\WINDOWS\system32\MRT
    2014-12-26 00:18 - 2013-12-29 19:05 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2014-12-15 20:58 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
    2014-12-15 20:58 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
    2014-12-15 08:42 - 2013-08-23 02:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

    Some content of TEMP:
    ====================
    C:\Users\John\AppData\Local\Temp\Extract.exe
    C:\Users\John\AppData\Local\Temp\PidGenX.dll
    C:\Users\John\AppData\Local\Temp\Quarantine.exe
    C:\Users\John\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-01-13 14:26

    ==================== End Of Log ============================

  2. #12
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default Result of suggested actions so far

    Chrome is only usable for a few brief minutes before hanging up as it tries to do whatever it is trying to do.
    I've had to resort to IE to make any reply. IE does not seem to have tineywallet ads.
    Q. Should I try uninstalling Chrome. Running all the adware + virus programs. Reboot. Install Chrome again?
    I look forward to hearing from you.

  3. #13
    Security Expert Satchfan's Avatar
    Join Date
    Feb 2009
    Location
    Exeter, UK
    Posts
    259

    Default

    There were still some signs showing even after the scans you ran so there’s more work to be done.

    We may have to uninstall Chrome but let’s do some more first.


    Run Farbar Recovery Scan Tool

    Open notepad. Please copy the contents of the code box below.

    Code:
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    Toolbar: HKU\S-1-5-21-3979661825-3157004422-1321400577-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    FF HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\...\Firefox\Extensions: [{40EBC51D-E7E8-9819-F18E-CCBB89702950}] - C:\Program Files (x86)\di5BlockAndSurf\175.xpi
    FF HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\...\Firefox\Extensions: [{944D8A04-15F5-5089-4AD4-EF35C4D412C8}] - C:\Program Files (x86)\ver3BlockAndSurf\178.xpi
    CHR dev: Chrome dev build detected! <======= ATTENTION
    CHR Extension: (TinyWaLlet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gooaceoegmeflfhfoagmgnemddpffebg [2014-09-26]
    C:\Program Files (x86)\di5BlockAndSurf

    NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    • save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
    • run FRST64 then click Fix just once and wait
    • it will create a log (Fixlog.txt); please post it to your reply.

    ================================================

    Run Malwarebytes’ Anti-Malware

    I noticed that you had MBAM on your system: if you no longer have it, you can download it from here:

    • start Malwarebytes-Anti-Malware and update it, (“Update” tab}
    • once it is updated, click on “Scan” tab, select Threat Scan, then click Scan.
    • when the scan is complete, if no malicious items are found you can close the program
    • if malicious items are found be sure that everything is checked and click Quarantine
    • when removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
    • the log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
    • copy and paste the contents of that report in your next reply and exit MBAM.


    NOTE: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

    Logs to include with the next post:

    Fixlog.txt
    Mbam.txt


    Can you tell me if there are any improvements.

    Satchfan

  4. #14
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default Farbar fix log

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015
    Ran by John at 2015-01-14 03:05:09 Run:1
    Running from C:\Users\John\Downloads
    Loaded Profile: John (Available profiles: John)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    Toolbar: HKU\S-1-5-21-3979661825-3157004422-1321400577-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    FF HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\...\Firefox\Extensions: [{40EBC51D-E7E8-9819-F18E-CCBB89702950}] - C:\Program Files (x86)\di5BlockAndSurf\175.xpi
    FF HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\...\Firefox\Extensions: [{944D8A04-15F5-5089-4AD4-EF35C4D412C8}] - C:\Program Files (x86)\ver3BlockAndSurf\178.xpi
    CHR dev: Chrome dev build detected! <======= ATTENTION
    CHR Extension: (TinyWaLlet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gooaceoegmeflfhfoagmgnemddpffebg [2014-09-26]
    C:\Program Files (x86)\di5BlockAndSurf

    *****************

    "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
    HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.
    HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
    HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\Software\Mozilla\Firefox\Extensions\\{40EBC51D-E7E8-9819-F18E-CCBB89702950} => value deleted successfully.
    HKU\S-1-5-21-3979661825-3157004422-1321400577-1001\Software\Mozilla\Firefox\Extensions\\{944D8A04-15F5-5089-4AD4-EF35C4D412C8} => value deleted successfully.
    CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
    C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gooaceoegmeflfhfoagmgnemddpffebg => Moved successfully.
    "C:\Program Files (x86)\di5BlockAndSurf" => File/Directory not found.

    ==== End of Fixlog 03:05:09 ====

  5. #15
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default Malwarebytes bscan result

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 14/01/2015
    Scan Time: 3:13:47 AM
    Logfile:
    Administrator: Yes

    Version: 2.00.4.1028
    Malware Database: v2015.01.13.12
    Rootkit Database: v2015.01.07.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 8.1
    CPU: x64
    File System: NTFS
    User: John

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 376477
    Time Elapsed: 29 min, 8 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 2
    PUP.Optional.SoftPulse, C:\Users\John\Downloads\Setup.exe, , [0ce4de187f0a3afc9a600400ab579d63],
    PUP.Optional.WebInstr.A, C:\Windows\System32\drivers\Msft_Kernel_webinstr_01009.Wdf, , [36bab73fc6c3ed4995136b0060a3f907],

    Physical Sectors: 0
    (No malicious items detected)


    (end)

    #############################
    Am about to reboot and then try chrome again

  6. #16
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default Success?

    While the laptop was shutting down, there was a brief message about something trying to access an invalid memory location... I think. The message flassed past very quickly before I got a chance to read it.
    After restarting without anything unusual happening, I've run chrome and get no tinywallet ads for the first time.
    Spent a couple of minutes doing searches etc on various subjects and only get what I expect. No ads or anything unusual.

    Any further suggestions?
    Everything seems much faster and .... No ADS !!!!!!!!!!!!!! <so far>

  7. #17
    Security Expert Satchfan's Avatar
    Join Date
    Feb 2009
    Location
    Exeter, UK
    Posts
    259

    Default

    Good that Chrome seems to be sorted.

    trying to access an invalid memory location
    A Windows problem and beyond my capabilities. If it persists, you could start a new topic and hopefully someone with more knowledge of the Windows operating system will be able to help.

    Let’s have a final scan to check that we’ve got rid of everything.

    This scan will take a while so please be patient.


    Run ESET Online Scan

    IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

    Note: You can use Internet Explorer, FireFox or Chrome for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

    Hold down Control and click on the following link to open ESET OnlineScan in a new window.

    ESET OnlineScan

    • click the Eset online Scanner button
    • for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)


      o click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
      o double click on the Eset installer icon on your desktop.
    • check Yes, I accept the Terms of Use
    • click the Start button
    • accept any security warnings from your browser
    • check Enable detection of potentially unwanted applications
    • click Advanced settings and select the following:


      o scan archives
      o scan for potentially unsafe applications
      o enable Anti-Stealth technology


      Note: Do not check Remove found threats
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • when the scan completes, push List of found threats
    • push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.


      Note - if ESET doesn't find any threats, no report will be created.
    • push the back button.
    • push Finish


    When the scan is complete:

    If no threats were found:


    o put a checkmark in "Uninstall application on close"
    o close program
    o report to me that nothing was found

    If threats were found:


    o click on "list of threats found"
    o click on "export to text file" and save it as ESET results and save to the desktop
    o Click on back
    o put a checkmark in "Uninstall application on close"
    o click on finish
    o close program
    o copy and paste the report here

    Thanks

    Satchfan

  8. #18
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default ESET Result

    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir Win32/Toolbar.Conduit.Y potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\chrome-links.exe.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\chromelauncher.dll.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\chromelauncher.exe.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\chromelauncherx64.dll.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\chromelauncherx64.exe.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Program Files (x86)\Techsnab\Chrome Launcher\tasks.dll.vir a variant of Win32/Techsnab.A potentially unwanted application
    C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\Multi\CT3283135\UninstallerUI.exe.vir a variant of Win32/Toolbar.Conduit.AJ potentially unwanted application
    C:\AdwCleaner\Quarantine\C\Users\John\AppData\Local\iLivid\Helper.dll.vir a variant of Win32/Toolbar.SearchSuite.P potentially unwanted application
    C:\Program Files (x86)\Vuze\.install4j\i4j_extf_20_5p83tu.exe Win32/Somoto.F potentially unwanted application
    C:\Users\John\Downloads\FLVPlayer-Chrome.exe NSIS/TrojanDownloader.Adload.AA trojan
    #################
    Re invalid memory location?
    => Ran checkdsk /f without errors. message not repeated since. will monitor state for repeat. Q. Something to do with Tinywallet last gasp?
    #################

  9. #19
    Security Expert Satchfan's Avatar
    Join Date
    Feb 2009
    Location
    Exeter, UK
    Posts
    259

    Default

    Only a couple of things to deal with because most of those entries have already been dealt with.

    Please copy all text in the code box below and paste it into Notepad:

    Code:
    @echo off
    del /f /s /q "C:\Program Files (x86)\Vuze” 
    del /f /s /q “C:\Users\John\Downloads\FLVPlayer-Chrome.exe NSIS”
    del %0

    • save the Notepad file to your desktop and name it delfiles.bat
    • save type as "All Files"
    • on your desktop, double-click on delfiles.bat to run it, (a black CMD window will flash, then disappear - this is normal).

    The files/folders, if found, will have been deleted and the "delfile.bat" file will also be deleted.

    Can you tell me if all is still OK.

    Satchfan

  10. #20
    Junior Member
    Join Date
    Jan 2015
    Posts
    17

    Default Delfiles result

    Done. Ran as administrator.
    All seems ok so far. Seems to work just like it should. Anything else to do next?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •