"History open" Google chrome virus

"History open" Google chrome virus

offline
  • LoXo  Male
  • Super građanin
  • Pridružio: 14 Okt 2011
  • Poruke: 1212

Adware.
U chrome stoji ekstenzija History Open koja se ne moze obrisati.
To je sve pocelo danas, verovatno je neko skinuo nesto na racunar.
Skenirano sa Malwarebytes i Windows Defenderom, nista nije pronadjeno.
Windows je tek instaliran pre par dana tako da nema mnogo gluposti na racunaru.



Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-08-2017
Ran by LM (administrator) on DESKTOP-T9C3PI4 (15-08-2017 21:48:40)
Running from C:\Users\LM\Desktop
Loaded Profiles: LM (Available Profiles: LM)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1706.1862.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\Gramblr\gramblr.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9217024 2017-08-12] (Realtek Semiconductor)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
HKU\S-1-5-21-2357756121-1706681312-1353586218-1001\...\Run: [Steam] => f:\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
HKU\S-1-5-21-2357756121-1706681312-1353586218-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.50
Tcpip\..\Interfaces\{dcaf2814-c5ae-4870-a03c-323f1d1597ce}: [DhcpNameServer] 89.216.1.30 89.216.1.50

Internet Explorer:
==================

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> f:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default [2017-08-15]
CHR Extension: (Google документи) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-12]
CHR Extension: (Google диск) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-12]
CHR Extension: (YouTube) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-12]
CHR Extension: (Chrome IG Story) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bojgejgifofondahckoaahkilneffhmf [2017-08-12]
CHR Extension: (Google табеле) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-12]
CHR Extension: (Google документи офлајн) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-12]
CHR Extension: (History Open) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-15]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-12]
CHR Extension: (Gmail) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-12]
CHR Extension: (Chrome Media Router) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-12]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [11762768 2017-08-14] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-19] (NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-19] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-15] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-15] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-15] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-15] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-15] (Malwarebytes)
R1 MpKsl32436156; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{15DA42B1-C5C8-40E1-B971-D705FD703F8A}\MpKsl32436156.sys [44928 2017-08-15] (Microsoft Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_c0f7a2f5b2e4e6e0\nvlddmkm.sys [15668664 2017-08-12] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-15 21:48 - 2017-08-15 21:48 - 002395648 _____ (Farbar) C:\Users\LM\Downloads\FRST64.exe
2017-08-15 21:48 - 2017-08-15 21:48 - 002395648 _____ (Farbar) C:\Users\LM\Desktop\FRST64.exe
2017-08-15 21:48 - 2017-08-15 21:48 - 000009556 _____ C:\Users\LM\Desktop\FRST.txt
2017-08-15 21:48 - 2017-08-15 21:48 - 000000000 ____D C:\FRST
2017-08-15 21:33 - 2017-08-15 21:36 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-15 21:33 - 2017-08-15 21:36 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-15 21:33 - 2017-08-15 21:36 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-15 21:33 - 2017-08-15 21:36 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-15 21:33 - 2017-08-15 21:36 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-15 21:33 - 2017-08-15 21:36 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-15 21:33 - 2017-08-15 21:33 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-15 21:33 - 2017-08-15 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-15 21:33 - 2017-08-15 21:33 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 21:33 - 2017-08-15 21:33 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-15 21:32 - 2017-08-15 21:32 - 064025992 _____ (Malwarebytes ) C:\Users\LM\Downloads\mb3-setup-35891.35891-3.1.2.1733-1.0.139-1.0.2060.exe
2017-08-15 21:24 - 2017-08-15 21:32 - 524288000 _____ C:\Users\LM\Downloads\Nicholas Kusmich - Anadomy.part2.rar
2017-08-15 21:24 - 2017-08-15 21:31 - 524288000 _____ C:\Users\LM\Downloads\Nicholas Kusmich - Anadomy.part1.rar
2017-08-15 21:24 - 2017-08-15 21:30 - 410132071 _____ C:\Users\LM\Downloads\Nicholas Kusmich - Anadomy.part3.rar
2017-08-15 21:20 - 2017-08-15 21:20 - 015811320 _____ C:\Users\LM\Downloads\hbbh.zip
2017-08-15 21:13 - 2017-08-15 21:13 - 000000000 ____D C:\Users\LM\Documents\Lightshot
2017-08-15 21:11 - 2017-08-15 21:11 - 002732544 _____ (Skillbrains ) C:\Users\LM\Downloads\setup-lightshot.exe
2017-08-15 21:11 - 2017-08-15 21:11 - 000003398 _____ C:\WINDOWS\System32\Tasks\update-S-1-5-21-2357756121-1706681312-1353586218-1001
2017-08-15 21:11 - 2017-08-15 21:11 - 000003340 _____ C:\WINDOWS\System32\Tasks\update-sys
2017-08-15 21:11 - 2017-08-15 21:11 - 000000425 _____ C:\Users\LM\AppData\Local\UserProducts.xml
2017-08-15 21:11 - 2017-08-15 21:11 - 000000414 _____ C:\WINDOWS\Tasks\update-sys.job
2017-08-15 21:11 - 2017-08-15 21:11 - 000000414 _____ C:\WINDOWS\Tasks\update-S-1-5-21-2357756121-1706681312-1353586218-1001.job
2017-08-15 21:11 - 2017-08-15 21:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2017-08-15 21:11 - 2017-08-15 21:11 - 000000000 ____D C:\Program Files (x86)\Skillbrains
2017-08-15 21:04 - 2017-08-15 21:07 - 000000409 _____ C:\Users\LM\Desktop\New Text Document.txt
2017-08-15 14:53 - 2017-08-15 14:53 - 000000000 ___HD C:\OneDriveTemp
2017-08-15 05:05 - 2017-08-15 05:05 - 000000000 ____D C:\Users\LM\Downloads\FL Studio 12.5 - (zabranjeno) ONLY [JS]
2017-08-15 05:04 - 2017-08-15 21:31 - 000000560 __RSH C:\ProgramData\ntuser.pol
2017-08-15 04:16 - 2017-08-15 04:16 - 000000868 _____ C:\Users\LM\Desktop\ASIO4ALL v2 Instruction Manual.lnk
2017-08-15 04:16 - 2017-08-15 04:16 - 000000000 ____D C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2017-08-15 04:15 - 2017-08-15 21:38 - 000000000 ____D C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2017-08-15 04:15 - 2017-08-15 04:15 - 000001000 _____ C:\Users\LM\Desktop\FL Studio 12 (64bit).lnk
2017-08-15 04:15 - 2017-08-15 04:15 - 000000988 _____ C:\Users\LM\Desktop\FL Studio 12.lnk
2017-08-15 04:15 - 2017-08-15 04:15 - 000000000 ____D C:\Users\LM\Documents\Image-Line
2017-08-15 04:15 - 2017-08-15 04:15 - 000000000 ____D C:\Users\LM\AppData\Roaming\Image-Line
2017-08-15 04:15 - 2017-08-15 04:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2017-08-15 04:15 - 2017-08-15 04:15 - 000000000 ____D C:\Program Files\Image-Line
2017-08-15 04:15 - 2017-08-15 04:15 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software
2017-08-15 04:12 - 2017-08-15 04:16 - 000000000 ____D C:\Program Files (x86)\Image-Line
2017-08-15 00:05 - 2017-08-15 00:31 - 000000000 ____D C:\Users\LM\AppData\Roaming\vlc
2017-08-15 00:04 - 2017-08-15 00:04 - 000000828 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-08-15 00:04 - 2017-08-15 00:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-08-14 23:13 - 2017-08-14 23:13 - 000000885 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2017-08-14 23:13 - 2017-08-14 23:13 - 000000000 ____D C:\Users\LM\AppData\Local\Wondershare
2017-08-14 23:13 - 2017-08-14 23:13 - 000000000 ____D C:\Users\LM\AppData\Local\PeerDistRepub
2017-08-14 23:13 - 2017-08-14 23:13 - 000000000 ____D C:\ProgramData\Wondershare
2017-08-14 23:13 - 2017-08-14 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-08-14 23:12 - 2017-08-14 23:13 - 000000000 ____D C:\Users\LM\Documents\Wondershare Filmora
2017-08-14 23:12 - 2017-08-14 23:12 - 000000000 ____D C:\ProgramData\Wondershare Video Editor
2017-08-14 23:12 - 2017-03-17 11:43 - 001250304 _____ (CineForm Inc.) C:\WINDOWS\system32\CFDecode64.ax
2017-08-14 23:10 - 2017-08-14 23:12 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2017-08-14 03:58 - 2017-08-15 21:09 - 000000000 ____D C:\Users\LM\Desktop\New folder
2017-08-14 01:20 - 2017-08-15 21:49 - 000000000 ____D C:\ProgramData\Gramblr
2017-08-14 01:20 - 2017-08-14 01:20 - 000001024 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gramblr.lnk
2017-08-14 01:20 - 2017-08-14 01:20 - 000000000 ____D C:\Program Files\Gramblr
2017-08-14 00:19 - 2017-08-14 01:37 - 000001026 _____ C:\Users\LM\Desktop\New Text Document (2).txt
2017-08-13 07:34 - 2017-08-13 07:34 - 000000000 ____D C:\Windows.old
2017-08-13 07:33 - 2017-08-13 07:33 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-13 07:33 - 2017-08-13 07:33 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-13 07:33 - 2017-08-13 07:33 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-13 07:33 - 2017-08-13 07:33 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-13 07:33 - 2017-08-13 07:33 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-13 07:33 - 2017-08-13 07:33 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-13 07:33 - 2017-08-13 07:33 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-13 07:33 - 2017-08-13 07:33 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-13 07:30 - 2017-08-13 07:30 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-13 07:30 - 2017-08-13 07:30 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-13 07:30 - 2017-08-13 07:30 - 000000000 ____D C:\Program Files\MSBuild
2017-08-13 07:30 - 2017-08-13 07:30 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-13 07:30 - 2017-08-13 07:30 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-13 07:30 - 2017-03-18 07:58 - 007043072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons081a.dll
2017-08-13 07:30 - 2017-03-18 07:55 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData081a.dll
2017-08-13 07:30 - 2017-03-18 07:54 - 001914368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS2.dll
2017-08-13 07:30 - 2017-03-18 07:43 - 007043072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons081a.dll
2017-08-13 07:30 - 2017-03-18 07:40 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData081a.dll
2017-08-13 07:30 - 2017-03-18 07:39 - 001868288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS2.dll
2017-08-13 07:29 - 2017-02-10 21:26 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-08-13 07:29 - 2017-02-10 21:26 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-08-13 07:29 - 2017-02-10 21:26 - 000035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-08-13 07:29 - 2017-02-10 21:21 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-08-13 07:29 - 2017-02-10 21:21 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-08-13 07:29 - 2017-02-10 21:21 - 000035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-08-13 00:45 - 2017-08-13 00:45 - 000000202 _____ C:\Users\LM\Desktop\Mortal Kombat Komplete Edition.url
2017-08-12 22:19 - 2017-08-12 22:19 - 000000000 ____D C:\Users\LM\AppData\Local\DBG
2017-08-12 21:43 - 2017-08-12 21:43 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-12 21:42 - 2017-08-12 21:43 - 000000000 ____D C:\Users\LM\AppData\Local\ConnectedDevicesPlatform
2017-08-12 21:42 - 2017-08-12 21:42 - 000000020 ___SH C:\Users\LM\ntuser.ini
2017-08-12 21:42 - 2017-08-12 21:42 - 000000000 ____D C:\ProgramData\USOShared
2017-08-12 21:40 - 2017-08-12 21:40 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2017-08-12 21:40 - 2017-08-12 21:40 - 000007623 _____ C:\WINDOWS\diagerr.xml
2017-08-12 21:39 - 2017-08-12 21:43 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2357756121-1706681312-1353586218-1001
2017-08-12 21:39 - 2017-08-12 21:39 - 000022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-08-12 21:39 - 2017-08-12 21:39 - 000003376 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-12 21:39 - 2017-08-12 21:39 - 000003152 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-12 21:39 - 2017-08-12 21:39 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-12 21:39 - 2017-08-12 21:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-12 21:38 - 2017-08-15 05:08 - 000000000 ____D C:\Users\LM
2017-08-12 21:38 - 2017-08-12 21:38 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-08-12 21:38 - 2017-08-12 21:38 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-08-12 21:38 - 2017-03-18 22:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____D C:\WINDOWS\system32\DAX3
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____D C:\Program Files\Realtek
2017-08-12 21:36 - 2017-08-15 05:08 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-12 21:36 - 2017-08-12 21:39 - 000217000 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-12 21:36 - 2017-08-12 21:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-12 21:36 - 2017-08-12 21:38 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-12 21:36 - 2017-08-12 21:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-12 21:36 - 2017-08-12 21:36 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-12 21:36 - 2017-08-12 21:36 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-12 21:36 - 2017-07-19 01:24 - 006463608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 002479040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 001762936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 000549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 000392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 000081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-08-12 21:36 - 2017-07-19 01:24 - 000069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-08-12 21:36 - 2017-07-19 00:54 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-08-12 21:36 - 2017-07-13 03:37 - 008095171 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-08-12 20:57 - 2017-08-12 21:41 - 000002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-12 20:57 - 2017-08-12 21:41 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-12 20:57 - 2017-08-12 20:57 - 001964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437653.dll
2017-08-12 20:57 - 2017-08-12 20:57 - 001600056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437653.dll
2017-08-12 20:56 - 2017-08-12 20:57 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-12 20:56 - 2017-08-12 14:07 - 000000000 ____D C:\Users\LM\AppData\Local\Google
2017-08-12 20:55 - 2017-08-12 20:56 - 000000000 ____D C:\Users\LM\AppData\Local\MicrosoftEdge
2017-08-12 20:55 - 2017-08-12 20:55 - 072520712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-12 20:55 - 2017-08-12 20:55 - 012261649 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-12 20:55 - 2017-08-12 20:55 - 007172912 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 007096184 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 006264632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2017-08-12 20:55 - 2017-08-12 20:55 - 005721088 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-12 20:55 - 2017-08-12 20:55 - 005346992 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003677184 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-12 20:55 - 2017-08-12 20:55 - 003503040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003498400 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003299816 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 003086192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 002444680 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 002209784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 002190976 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001965808 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001959600 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001780616 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001591056 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001520008 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001508928 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001382232 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001353272 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001337632 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001326424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001170872 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001133064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 001015864 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000965024 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000876400 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000873456 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000867152 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000865104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000852128 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000743952 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000736936 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000727424 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000708312 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000680544 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000604792 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000525256 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000504304 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000445392 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000441264 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000416504 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000406448 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000381400 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000378376 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000366120 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000362048 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000360344 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000327448 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000321704 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000310416 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000272704 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000253896 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000253864 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000252864 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000231912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000221960 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000209528 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000203840 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000179592 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000158688 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000154360 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000151784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000134192 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000118584 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000105304 _____ C:\WINDOWS\system32\audioLibVc.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000090912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000088336 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000088320 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000083616 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000075536 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2017-08-12 20:55 - 2017-08-12 20:55 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-12 20:52 - 2017-08-12 20:52 - 000000000 ____D C:\Users\LM\AppData\Roaming\Skype
2017-08-12 17:29 - 2017-08-12 17:29 - 000000000 ____D C:\NVIDIA
2017-08-12 17:28 - 2017-08-12 21:41 - 000000000 ___DC C:\WINDOWS\Panther
2017-08-12 15:42 - 2017-08-14 23:21 - 000000000 ____D C:\Users\LM\Documents\League of Legends
2017-08-12 15:33 - 2017-08-13 00:45 - 000000000 ____D C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-08-12 15:33 - 2017-08-12 15:33 - 000000199 _____ C:\Users\LM\Desktop\Counter-Strike Global Offensive.url
2017-08-12 15:31 - 2017-08-12 15:31 - 000000000 ____D C:\Users\LM\AppData\Local\Steam
2017-08-12 15:26 - 2017-08-12 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-08-12 15:26 - 2017-08-12 15:26 - 000000549 _____ C:\Users\Public\Desktop\Steam.lnk
2017-08-12 15:24 - 2017-08-12 15:24 - 000000000 ____D C:\ProgramData\Riot Games
2017-08-12 15:21 - 2017-08-12 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-08-12 15:21 - 2017-08-12 15:42 - 000000877 _____ C:\Users\Public\Desktop\League of Legends.lnk
2017-08-12 15:21 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2017-08-12 15:21 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2017-08-12 15:21 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2017-08-12 15:20 - 2017-08-12 15:20 - 000000000 ____D C:\Users\LM\AppData\Roaming\Riot Games
2017-08-12 15:13 - 2017-08-12 15:13 - 000000000 ____D C:\Users\LM\AppData\Local\CEF
2017-08-12 15:12 - 2017-08-12 15:13 - 000000000 ____D C:\Users\LM\Documents\Rockstar Games
2017-08-12 15:12 - 2017-08-12 15:13 - 000000000 ____D C:\Program Files\Rockstar Games
2017-08-12 15:12 - 2017-08-12 15:13 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2017-08-12 15:12 - 2017-08-12 15:12 - 000000000 ____D C:\Users\LM\AppData\Local\Rockstar Games
2017-08-12 15:12 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2017-08-12 15:12 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2017-08-12 15:12 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2017-08-12 15:12 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2017-08-12 15:12 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2017-08-12 15:12 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2017-08-12 15:12 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2017-08-12 15:12 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2017-08-12 15:12 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2017-08-12 15:12 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2017-08-12 15:12 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2017-08-12 15:12 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2017-08-12 15:12 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2017-08-12 15:12 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2017-08-12 15:12 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2017-08-12 15:12 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2017-08-12 15:12 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2017-08-12 15:12 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2017-08-12 15:12 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2017-08-12 15:12 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2017-08-12 15:12 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2017-08-12 15:12 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2017-08-12 15:12 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2017-08-12 15:12 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2017-08-12 15:12 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2017-08-12 15:12 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2017-08-12 15:12 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2017-08-12 15:12 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2017-08-12 15:12 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2017-08-12 15:12 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2017-08-12 15:12 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2017-08-12 15:12 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2017-08-12 15:12 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2017-08-12 15:12 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2017-08-12 15:12 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2017-08-12 15:12 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2017-08-12 15:12 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2017-08-12 15:12 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2017-08-12 15:12 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2017-08-12 15:12 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2017-08-12 15:12 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2017-08-12 15:12 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2017-08-12 15:12 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2017-08-12 15:12 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2017-08-12 15:12 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2017-08-12 15:12 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2017-08-12 15:12 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2017-08-12 15:12 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2017-08-12 15:12 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2017-08-12 15:12 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2017-08-12 15:11 - 2017-08-12 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-08-12 15:11 - 2017-08-12 15:11 - 000000606 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk
2017-08-12 15:11 - 2017-08-12 15:11 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-12 15:11 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2017-08-12 15:11 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2017-08-12 15:11 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2017-08-12 15:11 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2017-08-12 15:11 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2017-08-12 15:11 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2017-08-12 15:11 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2017-08-12 15:11 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2017-08-12 15:11 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2017-08-12 15:11 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2017-08-12 15:11 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2017-08-12 15:11 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2017-08-12 15:11 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2017-08-12 15:11 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2017-08-12 15:11 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2017-08-12 15:11 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2017-08-12 15:11 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2017-08-12 15:11 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2017-08-12 15:11 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2017-08-12 15:11 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2017-08-12 15:11 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2017-08-12 15:11 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2017-08-12 15:11 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2017-08-12 15:11 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2017-08-12 15:11 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2017-08-12 15:11 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2017-08-12 15:11 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2017-08-12 15:11 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2017-08-12 15:11 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2017-08-12 15:11 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2017-08-12 15:11 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2017-08-12 15:11 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2017-08-12 15:11 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2017-08-12 15:11 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2017-08-12 15:11 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2017-08-12 15:11 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2017-08-12 15:11 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2017-08-12 15:11 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2017-08-12 15:11 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2017-08-12 15:11 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2017-08-12 15:11 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2017-08-12 15:11 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2017-08-12 15:11 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2017-08-12 15:11 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2017-08-12 15:11 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2017-08-12 15:11 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2017-08-12 15:11 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2017-08-12 15:11 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2017-08-12 15:11 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2017-08-12 15:11 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2017-08-12 15:11 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2017-08-12 15:11 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2017-08-12 15:11 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2017-08-12 15:11 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2017-08-12 15:11 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2017-08-12 15:11 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2017-08-12 15:11 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2017-08-12 15:11 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2017-08-12 15:11 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2017-08-12 15:11 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2017-08-12 15:11 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2017-08-12 15:11 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2017-08-12 15:05 - 2017-08-12 15:07 - 000000036 _____ C:\WINDOWS\progress.ini
2017-08-12 15:04 - 2017-08-12 15:05 - 000000000 ___HD C:\$GetCurrent
2017-08-12 15:04 - 2017-08-12 15:04 - 000000809 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 Update Assistant.lnk
2017-08-12 15:04 - 2017-08-12 15:04 - 000000797 _____ C:\Users\LM\Desktop\Windows 10 Update Assistant.lnk
2017-08-12 15:04 - 2017-08-12 15:04 - 000000000 ____D C:\Windows10Upgrade
2017-08-12 14:56 - 2017-08-15 05:08 - 000000000 ____D C:\Users\LM\AppData\Roaming\BitTorrent
2017-08-12 14:56 - 2017-08-12 14:56 - 000000913 _____ C:\Users\LM\Desktop\BitTorrent.lnk
2017-08-12 14:56 - 2017-08-12 14:56 - 000000893 _____ C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2017-08-12 14:40 - 2017-08-13 13:09 - 000000000 ____D C:\Users\LM\AppData\Local\Comms
2017-08-12 14:10 - 2017-08-12 14:13 - 000000000 ____D C:\Users\LM\AppData\Local\game-debate
2017-08-12 14:10 - 2017-08-12 14:10 - 000000000 ____D C:\Users\LM\AppData\Roaming\SocialWebTechLTD
2017-08-12 14:09 - 2017-05-30 22:45 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-12 14:08 - 2017-08-12 14:18 - 000000000 ____D C:\Program Files\rempl
2017-08-12 14:08 - 2017-08-12 14:08 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-12 14:08 - 2017-08-12 14:08 - 040248440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 035853432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 035323000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 028969080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 026642048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 022570256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 018443800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 015119512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 013783968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 012569200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 012248048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 011701872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 010588440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 010079112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 004255760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 004172224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 003752696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 003604600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001996920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438494.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001624152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001606776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438494.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001298728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001297192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001076848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001014408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001013696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 001013056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000981616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000932984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000797392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000733816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000704936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000633080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000631784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000622448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000618616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000593016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000592032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000507840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000506536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000227416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-08-12 14:08 - 2017-08-12 14:08 - 000207360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000183720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000180136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000154624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000054680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-08-12 14:08 - 2017-08-12 14:08 - 000046463 _____ C:\WINDOWS\system32\nvinfo.pb
2017-08-12 14:08 - 2017-08-12 14:08 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2017-08-12 14:08 - 2017-08-12 14:08 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json
2017-08-12 14:08 - 2017-08-12 14:08 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-12 14:07 - 2017-08-12 14:07 - 000000000 ____D C:\WINDOWS\UpdateAssistant
2017-08-12 14:05 - 2017-08-15 21:38 - 000000000 ____D C:\Program Files\CCleaner
2017-08-12 14:05 - 2017-08-12 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-12 14:05 - 2017-08-12 14:05 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-12 14:05 - 2016-09-30 05:28 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-08-12 14:04 - 2016-09-07 06:22 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2017-08-12 14:02 - 2017-08-12 14:02 - 000001051 _____ C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optional Features.lnk
2017-08-12 14:01 - 2017-08-12 14:01 - 000203368 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2017-08-12 04:25 - 2017-08-12 21:45 - 000889694 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-12 04:20 - 2017-08-15 14:53 - 000000000 ___RD C:\Users\LM\OneDrive
2017-08-12 04:20 - 2017-08-12 21:43 - 000002358 _____ C:\Users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-12 04:20 - 2017-08-12 21:11 - 000000000 ____D C:\Program Files\KMSpico
2017-08-12 04:20 - 2017-08-12 04:20 - 000004608 _____ C:\WINDOWS\SECOH-QAD.exe
2017-08-12 04:20 - 2017-08-12 04:20 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll
2017-08-12 04:20 - 2017-08-12 04:20 - 000000000 ____D C:\WINDOWS\CSC
2017-08-12 04:19 - 2017-08-12 04:19 - 000000000 ____D C:\Users\LM\AppData\Local\Publishers
2017-08-12 04:18 - 2017-08-12 22:18 - 000000000 ____D C:\Users\LM\AppData\Local\Packages
2017-08-12 04:18 - 2017-08-12 21:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-12 04:18 - 2017-08-12 04:18 - 000016148 _____ C:\WINDOWS\system32\DESKTOP-T9C3PI4_defaultuser0_HistoryPrediction.bin
2017-08-12 04:18 - 2017-08-12 04:18 - 000000000 ____D C:\Users\LM\AppData\Roaming\Adobe
2017-08-12 04:18 - 2017-08-12 04:18 - 000000000 ____D C:\Users\LM\AppData\Local\VirtualStore
2017-08-12 04:18 - 2017-08-12 04:18 - 000000000 ____D C:\Users\LM\AppData\Local\TileDataLayer
2017-08-12 04:15 - 2017-08-12 04:15 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-15 19:17 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-15 19:17 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-15 14:55 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-15 14:52 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-08-15 05:04 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-15 05:04 - 2015-07-10 13:04 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-08-13 07:35 - 2017-03-18 23:03 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-13 07:34 - 2017-03-18 23:06 - 000000000 ____D C:\WINDOWS\Setup
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-13 07:34 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-13 03:01 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-12 21:43 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-12 21:42 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-12 21:42 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-12 21:40 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-12 21:40 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\Registration
2017-08-12 21:40 - 2017-03-18 13:40 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-12 21:40 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-08-12 21:39 - 2017-03-18 23:03 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-12 21:39 - 2017-03-18 13:40 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-08-12 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-12 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-12 21:37 - 2017-03-19 04:31 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-12 21:37 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-12 21:37 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-12 21:37 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-12 21:37 - 2017-03-18 13:40 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-12 21:36 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\Help
2017-08-12 21:25 - 2017-07-11 08:54 - 000000000 ___HD C:\$WINDOWS.~BT
2017-08-12 13:59 - 2015-07-10 13:01 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-08-12 13:59 - 2015-07-10 13:01 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-07-31 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-07-31 17:15 - 2017-03-18 23:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2017-08-15 21:11 - 2017-08-15 21:11 - 000000003 _____ () C:\Users\LM\AppData\Local\updater.log
2017-08-15 21:11 - 2017-08-15 21:11 - 000000425 _____ () C:\Users\LM\AppData\Local\UserProducts.xml
2017-08-12 21:37 - 2017-08-12 21:37 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



https://www.mycity.rs/must-login.png

offline
  • Pridružio: 14 Jun 2016
  • Poruke: 535

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR Extension: (History Open) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-15]
EmptyTemp:


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

offline
  • LoXo  Male
  • Super građanin
  • Pridružio: 14 Okt 2011
  • Poruke: 1212

Fix result of Farbar Recovery Scan Tool (x64) Version: 16-08-2017
Ran by LM (16-08-2017 22:26:00) Run:1
Running from C:\Users\LM\Desktop
Loaded Profiles: LM (Available Profiles: LM)
Boot Mode: Normal
==============================================

fixlist content:
*****************
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR Extension: (History Open) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-15]
EmptyTemp:
*****************

C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Google => key removed successfully
CHR Extension: (History Open) - C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-15] => Error: No automatic fix found for this entry.

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 64239720 B
Java, Flash, Steam htmlcache => 6404387 B
Windows/system/drivers => 862982 B
Edge => 42513530 B
Chrome => 612014752 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 352 B
LocalService => 0 B
NetworkService => 9862 B
LM => 343781566 B

RecycleBin => 28936964 B
EmptyTemp: => 1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 22:26:10 ====

offline
  • Pridružio: 14 Jun 2016
  • Poruke: 535

Otvori Chrome, u adresnu traku gore napiši: chrome://extensions/ i pritisni Enter.
Kad se pojave ekstenzije na popisu nađi:

History Open

Klikni na ikonu kante za smeće kraj svake i potvrdi uklanjanje.


Nakon toga ugasi Chrome i isprati sledeća uputstva:


Preuzmi Malwarebytes Anti-Malware sa ovog ili ovog ili ovog linka i instaliraj aplikaciju.
Pokreni mb3-setup-consumer-{verzija}.exe i isprati uputstva za instalaciju programa. Nakon instalacije, klikni na Finish

Prilikom prvog pokretanja, program će prikazati prozor "dobrodošlice". Slobodno zatvori taj prozor.
Napomena: Premium funkcije programa su već aktivirane i važe 13 dana od trenutka instalacije. Premium funkcije možeš isključiti preko Settings > My Account tab podešavanja.

• Podešavanja skenera - u Settings, klikni na Protection tab. Ispod Scan Options sekcije, uključi "Scan for rootkits" opciju.
• Pripremi podešavanja za Threat Scan - u Dashboard , klikni na Scan Now dugme. MBAM će ažurirati bazu i započeti skeniranje.

Kada se skeniranje završi, ako je infekcija detektovana, obrati pažnju da je sve označeno, pa klikni na Remove Selected. Restartuj računar ako program upita za restart.
• Dostavi log: Pod Reports izaberi trenutni datum izveštaja Scan Report i potom klikni na View Report.

Izvezi log na Desktop;
- Klikni na Export dugme na dnu, pa onda izaberi 'Text file (*.txt)'
# U Save File dijalogu koji se pojavi, klikni na Desktop. U File name: polje, upiši "mbam" (bez navodnika) i klikni na Save.
- Pojaviće se poruka "Your file has been successfully exported", klikni Ok i zatvori prozor.



• U odgovoru prikači mbam.txt log koristeći "Prikači fajl" opciju.



Zatim:

Preuzmi AdwCleaner i sačuvaj ga na Desktop
Dvoklikom pokreni program.
U EULA prozoru klikni na I agree.
U Tools odaberi Options.
U dijaloškom okviru koji se pojavi isključi Reset Winsock settings ako je uključen.
Klikni na dugme Scan i sačekaj da se završi skeniranje.
Ako ti javi da postoji novija verzija, postaraj se da je preuzmeš.

Klikni na dugme Clean i pričekaj da program završi.
Program će zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni OK kao potvrdu.
Pojavit će se poruka da računar treba restartovati. Klikni OK

Računar će se restartovati, a potom otvoriti Notepad (C:\Adwcleaner\AdwCleaner[C0].txt) sa izvještajem.
Sačuvaj taj izvještaj na Desktop i okači ga uz poruku koristeći opciju "Prikači fajl"


Da li je sada bolje?

offline
  • LoXo  Male
  • Super građanin
  • Pridružio: 14 Okt 2011
  • Poruke: 1212

Napisano: 17 Avg 2017 23:12

https://www.mycity.rs/must-login.png

Dopuna: 17 Avg 2017 23:13

https://www.mycity.rs/must-login.png

Dopuna: 17 Avg 2017 23:14

History open nema u ekstenzijama, uklonjen je nakon onog fix-a.
Sada je sve okej.

offline
  • Pridružio: 14 Jun 2016
  • Poruke: 535

Sledeća procedura će implementirati završno čišćenje.



Arrow Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.

Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;
Remove disinfection tools
Create registry backup
Purge System Restore


Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.

Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Ukoliko neki alat ili izveštaj nije uklonjen, slobodno ih obriši ručno.


Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)
- Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
- DelFix briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

offline
  • LoXo  Male
  • Super građanin
  • Pridružio: 14 Okt 2011
  • Poruke: 1212

Hvala na pomoci!

Ko je trenutno na forumu
 

Ukupno su 1275 korisnika na forumu :: 56 registrovanih, 8 sakrivenih i 1211 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., Acivi, amaterSRB, Andrija357, armor, ArmyBoss, Battlehammer, Bobrock1, bojankrstc, BRATORIII, comi_pfc, crnitrn, Dannyboy, darcaud, darkangel, Denaya, Dimitrije Paunovic, Djole, dragoljub11987, Georgius, havoc995, hyla, karevski, Kibice, Kubovac, Levi, Lieutenant, mgolub, Mi lao shu, Misirac, Mixelotti, Ne doznajem se u oružje, nebkv, ObelixSRB, operniki, Oscar, ozzy, Parker, pein, Rakenica, royst33, ruger357, savaskytec, slonic_tonic, SR-3m, Srki94, Srle993, suton, Tragač, VJ, vlad4, Vlada1389, voja64, VP6919, YugoSlav, 1107