OTL logfile created on: 2014-12-12 20:38:02 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Devex1\Desktop
 Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17416)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 1,39 Gb Available Physical Memory | 46,38% Memory free
6,00 Gb Paging File | 3,89 Gb Available in Paging File | 64,93% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 199,90 Gb Total Space | 143,32 Gb Free Space | 71,70% Space Free | Partition Type: NTFS
Drive D: | 731,51 Gb Total Space | 714,78 Gb Free Space | 97,71% Space Free | Partition Type: NTFS
Drive E: | 465,65 Gb Total Space | 381,76 Gb Free Space | 81,99% Space Free | Partition Type: FAT32
Drive H: | 297,59 Gb Total Space | 201,65 Gb Free Space | 67,76% Space Free | Partition Type: NTFS
 
Computer Name: DEVEX | User Name: Devex1 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-12-12 20:37:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Devex1\Desktop\OTL.exe
PRC - [2014-12-03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014-10-29 04:18:49 | 000,067,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe
PRC - [2014-10-29 04:10:54 | 002,207,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2014-10-29 04:10:01 | 000,029,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe
PRC - [2014-10-29 01:59:34 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe
PRC - [2014-10-29 01:31:31 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWAHost.exe
PRC - [2014-08-19 22:15:38 | 001,795,872 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014-07-02 20:42:26 | 000,940,320 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2014-07-02 20:42:25 | 001,818,968 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2014-07-02 18:39:15 | 000,413,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013-10-28 18:02:16 | 001,680,088 | ---- | M] (Broadcom Corporation.) -- C:\Windows\System32\BtwRSupportService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-12-06 02:50:51 | 014,913,352 | ---- | M] () -- C:\Users\Devex1\AppData\Local\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll
MOD - [2014-12-06 02:50:50 | 009,009,480 | ---- | M] () -- C:\Users\Devex1\AppData\Local\Google\Chrome\Application\39.0.2171.95\pdf.dll
MOD - [2014-12-06 02:50:46 | 001,077,064 | ---- | M] () -- C:\Users\Devex1\AppData\Local\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
MOD - [2014-12-06 02:50:45 | 000,211,272 | ---- | M] () -- C:\Users\Devex1\AppData\Local\Google\Chrome\Application\39.0.2171.95\libegl.dll
MOD - [2014-12-06 02:50:44 | 001,677,128 | ---- | M] () -- C:\Users\Devex1\AppData\Local\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2014-12-03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014-10-31 04:12:14 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014-10-29 04:18:09 | 000,076,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
SRV - [2014-10-29 04:13:19 | 002,948,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WSService.dll -- (WSService)
SRV - [2014-10-29 04:06:51 | 002,472,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
SRV - [2014-10-29 02:57:59 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
SRV - [2014-10-29 02:57:46 | 000,028,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
SRV - [2014-10-29 02:52:18 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
SRV - [2014-10-29 02:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2014-10-29 02:51:28 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
SRV - [2014-10-29 02:47:57 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
SRV - [2014-10-29 02:33:49 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2014-10-29 02:23:51 | 000,250,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\BthHFSrv.dll -- (BthHFSrv)
SRV - [2014-10-29 02:17:53 | 000,142,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
SRV - [2014-10-29 02:14:41 | 000,423,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
SRV - [2014-10-29 02:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
SRV - [2014-10-29 02:03:04 | 000,207,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV - [2014-10-29 02:02:21 | 000,103,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV - [2014-10-29 02:01:27 | 000,046,592 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
SRV - [2014-10-29 01:59:46 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker)
SRV - [2014-10-29 01:59:06 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
SRV - [2014-10-29 01:57:20 | 000,126,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
SRV - [2014-10-29 01:57:04 | 000,667,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
SRV - [2014-10-29 01:55:58 | 000,305,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
SRV - [2014-10-29 01:55:34 | 000,209,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
SRV - [2014-10-29 01:55:15 | 000,312,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
SRV - [2014-10-29 01:54:57 | 000,206,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
SRV - [2014-10-29 01:54:38 | 001,245,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
SRV - [2014-10-29 01:54:23 | 000,189,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV - [2014-10-29 01:53:11 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014-10-29 01:50:55 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
SRV - [2014-10-29 01:47:09 | 001,845,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2014-10-29 01:45:46 | 000,064,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV - [2014-10-29 01:40:35 | 000,425,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
SRV - [2014-10-29 01:38:57 | 001,175,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
SRV - [2014-10-29 01:30:24 | 001,269,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
SRV - [2014-09-22 03:40:38 | 000,288,128 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV - [2014-09-22 03:40:38 | 000,022,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV - [2014-07-02 18:39:15 | 000,413,128 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014-04-03 19:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-10-28 18:02:16 | 001,680,088 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Windows\System32\BtwRSupportService.exe -- (BcmBtRSupport)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2014-12-07 17:38:03 | 000,039,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F7F5DEE6-9F9D-4486-84F3-4C807D29149C}\MpKsl2a9567f4.sys -- (MpKsl2a9567f4)
DRV - [2014-10-29 04:12:35 | 000,069,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV - [2014-10-29 04:12:15 | 000,362,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport)
DRV - [2014-10-29 04:10:54 | 000,045,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr)
DRV - [2014-10-29 04:10:13 | 000,022,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2014-10-29 04:10:05 | 000,091,792 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus)
DRV - [2014-10-29 04:10:05 | 000,044,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt)
DRV - [2014-10-29 03:01:34 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV - [2014-10-29 03:01:33 | 000,026,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2014-10-29 03:01:08 | 000,071,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\netvsc63.sys -- (netvsc)
DRV - [2014-10-29 03:00:54 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV - [2014-10-29 03:00:52 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp)
DRV - [2014-10-29 03:00:32 | 000,090,112 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu)
DRV - [2014-10-13 03:47:56 | 000,076,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc)
DRV - [2014-10-13 03:47:55 | 000,036,160 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\intelpep.sys -- (intelpep)
DRV - [2014-10-08 09:17:36 | 000,376,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV - [2014-10-07 05:13:02 | 000,259,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV - [2014-10-07 05:13:01 | 000,163,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000)
DRV - [2014-09-22 03:40:16 | 000,219,968 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter)
DRV - [2014-09-22 03:40:16 | 000,084,800 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\WdNisDrv.sys -- (WdNisDrv)
DRV - [2014-09-22 03:39:37 | 000,029,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot)
DRV - [2014-08-19 22:16:26 | 010,681,176 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2014-08-15 00:35:51 | 000,122,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV - [2014-03-20 02:09:47 | 000,283,992 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS)
DRV - [2014-03-18 08:45:21 | 000,120,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx2.sys -- (SerCx2)
DRV - [2014-03-18 08:45:14 | 000,142,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt)
DRV - [2014-03-18 08:45:14 | 000,064,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor)
DRV - [2014-03-18 08:45:14 | 000,047,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\stornvme.sys -- (stornvme)
DRV - [2014-03-18 08:45:14 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender)
DRV - [2014-03-18 08:33:36 | 000,019,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\kbldfltr.sys -- (kbldfltr)
DRV - [2014-03-18 08:33:27 | 000,030,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt)
DRV - [2014-03-13 11:12:46 | 000,138,584 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\wof.sys -- (Wof)
DRV - [2013-10-28 18:02:14 | 000,175,320 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcbtums.sys -- (bcbtums)
DRV - [2013-08-22 07:13:53 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv)
DRV - [2013-08-22 06:35:21 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam)
DRV - [2013-08-22 06:35:20 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex)
DRV - [2013-08-22 06:34:52 | 000,133,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM)
DRV - [2013-08-22 06:33:32 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis)
DRV - [2013-08-22 06:33:31 | 000,033,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV - [2013-08-22 06:33:30 | 000,068,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV - [2013-08-22 06:33:29 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV - [2013-08-22 06:33:26 | 000,086,368 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware)
DRV - [2013-08-22 06:33:25 | 000,773,472 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\adp80xx.sys -- (ADP80XX)
DRV - [2013-08-22 06:33:25 | 000,100,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV - [2013-08-22 06:33:24 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass)
DRV - [2013-08-22 06:33:01 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV - [2013-08-22 06:32:57 | 000,090,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci)
DRV - [2013-08-22 06:32:57 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx)
DRV - [2013-08-22 06:32:57 | 000,058,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx)
DRV - [2013-08-22 06:32:57 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor)
DRV - [2013-08-22 06:32:38 | 000,031,584 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist)
DRV - [2013-08-22 06:24:56 | 000,023,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uefi.sys -- (UEFI)
DRV - [2013-08-22 06:24:36 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV - [2013-08-22 06:20:22 | 000,042,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc)
DRV - [2013-08-22 05:11:29 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\ahcache.sys -- (ahcache)
DRV - [2013-08-22 05:11:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV - [2013-08-22 05:10:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo)
DRV - [2013-08-22 05:10:37 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf)
DRV - [2013-08-22 05:10:28 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime)
DRV - [2013-08-22 05:10:21 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr)
DRV - [2013-08-22 05:10:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig)
DRV - [2013-08-22 05:10:01 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV - [2013-08-22 05:09:59 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic)
DRV - [2013-08-22 05:09:57 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap)
DRV - [2013-08-22 05:09:50 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter)
DRV - [2013-08-22 05:09:37 | 000,023,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid)
DRV - [2013-08-22 05:09:09 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd)
DRV - [2013-08-22 05:09:03 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013-08-22 05:09:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c)
DRV - [2013-08-22 05:09:01 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2013-08-22 05:08:37 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc)
DRV - [2013-08-22 05:08:06 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV - [2013-08-22 02:58:35 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM)
DRV - [2013-08-13 00:25:32 | 000,016,088 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcmfn2.sys -- (bcmfn2)
DRV - [2013-08-10 01:39:44 | 000,524,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\iaStorAV.sys -- (iaStorAV)
DRV - [2013-07-23 22:18:30 | 000,061,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaioi2c.sys -- (iaioi2c)
DRV - [2013-07-23 22:18:30 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaiogpio.sys -- (GPIO)
DRV - [2013-06-18 13:23:26 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2013-06-18 13:23:13 | 000,490,496 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168)
DRV - [2012-10-19 04:52:32 | 000,022,432 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Dot4Prt.sys -- (Dot4Print)
DRV - [2012-10-19 04:52:30 | 000,137,632 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Dot4.sys -- (dot4)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 91 4E 63 CE B5 10 D0 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Devex1\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Devex1\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Devex1\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall\1.7_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff\3.1.38_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.14.4_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlhbmnfdcklajeaeikfinieljfegamko\2.2_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb\1.9.38_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcceagdollnkjlogmdckgjakjapmkdjf\4.0.0.2_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\3.1_0\
CHR - Extension: No name found = C:\Users\Devex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2013-08-22 07:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
O4 - HKLM..\Run: [NvBackend] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B2637E4F-DAA3-4114-90AF-553873A5A025}: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-12-12 20:37:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Devex1\Desktop\OTL.exe
[2014-12-12 20:31:40 | 000,000,000 | ---D | C] -- C:\FRST
[2014-12-12 20:31:22 | 001,111,040 | ---- | C] (Farbar) -- C:\Users\Devex1\Desktop\FRST.exe
[2014-12-12 00:40:28 | 000,000,000 | ---D | C] -- C:\Users\Devex1\Desktop\Jay30k - Decennium
[2014-12-10 18:40:02 | 000,000,000 | ---D | C] -- C:\Users\Devex1\Desktop\C# Wykłady Barona
[2014-12-07 21:36:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
[2014-12-07 21:26:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2014-12-07 18:36:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2014-12-07 18:36:20 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2014-12-07 18:36:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014-12-07 18:34:25 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Adobe
[2014-12-06 20:55:49 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\EmieBrowserModeList
[2014-12-06 18:49:01 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\TS3Client
[2014-12-06 18:48:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2014-12-06 18:48:48 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2014-12-05 23:11:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2014-12-05 23:09:37 | 001,823,320 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\WavesGUILib.dll
[2014-12-05 23:09:37 | 001,783,056 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\WavesLib.dll
[2014-12-05 23:09:37 | 001,379,760 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\tosade.dll
[2014-12-05 23:09:37 | 000,058,264 | ---- | C] (TOSHIBA CORPORATION.) -- C:\WINDOWS\System32\TepeqAPO.dll
[2014-12-05 23:09:36 | 000,819,648 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\tadefxapo2.dll
[2014-12-05 23:09:36 | 000,134,584 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\tadefxapo.dll
[2014-12-05 23:09:35 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\System32\SRSTSXT.dll
[2014-12-05 23:09:35 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\System32\SRSTSHD.dll
[2014-12-05 23:09:35 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\System32\SRSHP360.dll
[2014-12-05 23:09:35 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\System32\SRSWOW.dll
[2014-12-05 23:09:34 | 000,606,968 | ---- | C] (DTS, Inc.) -- C:\WINDOWS\System32\sltech32.dll
[2014-12-05 23:09:34 | 000,219,896 | ---- | C] (TODO: <Company name>) -- C:\WINDOWS\System32\slprp32.dll
[2014-12-05 23:09:33 | 000,966,904 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\System32\slcnt32.dll
[2014-12-05 23:09:32 | 000,919,600 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\SFSS_APO.dll
[2014-12-05 23:09:32 | 000,818,936 | ---- | C] (DTS, Inc.) -- C:\WINDOWS\System32\sl3apo32.dll
[2014-12-05 23:09:32 | 000,214,368 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\System32\SFNHK.dll
[2014-12-05 23:09:31 | 001,892,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.cpl
[2014-12-05 23:09:31 | 000,074,080 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\System32\SFCOM.dll
[2014-12-05 23:09:31 | 000,068,960 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\System32\SFAPO.dll
[2014-12-05 23:09:30 | 002,566,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkPgExt.dll
[2014-12-05 23:09:29 | 000,916,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstII.dll
[2014-12-05 23:09:29 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoLDR.dll
[2014-12-05 23:09:28 | 000,782,040 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkApoApi.dll
[2014-12-05 23:09:26 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RTEEP32A.dll
[2014-12-05 23:09:26 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RTEED32A.dll
[2014-12-05 23:09:26 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RTEEL32A.dll
[2014-12-05 23:09:26 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RTEEG32A.dll
[2014-12-05 23:09:25 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RP3DHT32.dll
[2014-12-05 23:09:24 | 002,474,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RltkAPO.dll
[2014-12-05 23:09:24 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\System32\RP3DAA32.dll
[2014-12-05 23:09:18 | 060,636,160 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RCoRes.dat
[2014-12-05 23:09:18 | 007,162,128 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\R4EEP32A.dll
[2014-12-05 23:09:18 | 000,106,768 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\R4EEL32A.dll
[2014-12-05 23:09:17 | 000,352,016 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\R4EED32A.dll
[2014-12-05 23:09:17 | 000,091,920 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\R4EEA32A.dll
[2014-12-05 23:09:17 | 000,062,224 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\R4EEG32A.dll
[2014-12-05 23:09:16 | 005,086,984 | ---- | C] (Nahimic Inc) -- C:\WINDOWS\System32\NAHIMICAPOlfx.dll
[2014-12-05 23:09:16 | 000,890,160 | ---- | C] (Nahimic Inc) -- C:\WINDOWS\System32\NAHIMICAPOSettingsIPC.dll
[2014-12-05 23:09:15 | 000,852,016 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\MISS_APO.dll
[2014-12-05 23:09:15 | 000,509,184 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxVolumeSDAPO.dll
[2014-12-05 23:09:14 | 011,821,656 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxVoiceAPO30.dll
[2014-12-05 23:09:14 | 000,948,336 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxSpeechAPO.dll
[2014-12-05 23:09:14 | 000,798,296 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxVoiceAPO20.dll
[2014-12-05 23:09:13 | 003,683,416 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioVnN.dll
[2014-12-05 23:09:07 | 028,062,296 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioVnA.dll
[2014-12-05 23:09:06 | 001,691,224 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioRealtek2.dll
[2014-12-05 23:09:05 | 014,585,432 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioRealtek.dll
[2014-12-05 23:09:05 | 001,940,056 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioEQ.dll
[2014-12-05 23:09:04 | 001,116,248 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO60.dll
[2014-12-05 23:09:04 | 000,987,224 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO50.dll
[2014-12-05 23:09:04 | 000,966,744 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO40.dll
[2014-12-05 23:09:04 | 000,900,696 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPOShell.dll
[2014-12-05 23:09:04 | 000,509,184 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO30.dll
[2014-12-05 23:09:03 | 000,232,792 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO20.dll
[2014-12-05 23:09:03 | 000,132,368 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\System32\MaxxAudioAPO.dll
[2014-12-05 23:09:02 | 000,357,712 | ---- | C] (Knowles Acoustics ) -- C:\WINDOWS\System32\KAAPORT.dll
[2014-12-05 23:09:02 | 000,265,376 | ---- | C] (ICEpower a/s) -- C:\WINDOWS\System32\ICEsoundAPO.dll
[2014-12-05 23:08:53 | 002,421,792 | ---- | C] (Fortemedia Corporation) -- C:\WINDOWS\System32\FMAPO.dll
[2014-12-05 23:08:53 | 000,601,704 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSVoiceClarityDLL.dll
[2014-12-05 23:08:53 | 000,426,944 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSU2PLFX32.dll
[2014-12-05 23:08:53 | 000,403,392 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSU2PGFX32.dll
[2014-12-05 23:08:53 | 000,346,048 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSU2PREC32.dll
[2014-12-05 23:08:51 | 001,509,480 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSS2SpeakerDLL.dll
[2014-12-05 23:08:51 | 001,292,904 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSS2HeadphoneDLL.dll
[2014-12-05 23:08:51 | 000,631,400 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSSymmetryDLL.dll
[2014-12-05 23:08:51 | 000,458,344 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSNeoPCDLL.dll
[2014-12-05 23:08:51 | 000,375,400 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSLimiterDLL.dll
[2014-12-05 23:08:50 | 000,218,728 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSGFXAPONS.dll
[2014-12-05 23:08:50 | 000,218,216 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSLFXAPO.dll
[2014-12-05 23:08:49 | 000,389,736 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSGainCompensatorDLL.dll
[2014-12-05 23:08:49 | 000,218,728 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSGFXAPO.dll
[2014-12-05 23:08:48 | 001,220,200 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSBoostDLL.dll
[2014-12-05 23:08:48 | 000,654,952 | ---- | C] (DTS) -- C:\WINDOWS\System32\DTSBassEnhancementDLL.dll
[2014-12-05 23:08:47 | 006,177,624 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\DDPP32A.dll
[2014-12-05 23:08:47 | 001,490,264 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\DDPD32A.dll
[2014-12-05 23:08:47 | 000,274,264 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\DDPO32A.dll
[2014-12-05 23:08:47 | 000,221,528 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\System32\DDPA32.dll
[2014-12-05 23:08:46 | 000,092,584 | ---- | C] (Real Sound Lab SIA) -- C:\WINDOWS\System32\CONEQMSAPOGUILibrary.dll
[2014-12-05 23:08:45 | 000,182,472 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\AERTACap.dll
[2014-12-05 23:08:45 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\AERTARen.dll
[2014-12-05 23:08:39 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2014-12-05 23:08:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2014-12-05 22:45:09 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2014-12-05 22:45:09 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2014-12-05 22:45:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2014-12-05 22:44:01 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationNative_v0300.dll
[2014-12-05 22:44:01 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationCFFRasterizerNative_v0300.dll
[2014-12-05 22:44:01 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TsWpfWrp.exe
[2014-12-05 22:11:43 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Identities
[2014-12-05 22:09:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2014-12-05 22:05:56 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\CompatTel
[2014-12-05 22:05:47 | 000,000,000 | R--D | C] -- C:\WINDOWS\BrowserChoice
[2014-12-05 21:50:28 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2014-12-05 21:49:57 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2014-12-05 21:49:53 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll
[2014-12-05 21:20:54 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\WinRAR
[2014-12-05 21:20:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2014-12-05 21:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2014-12-05 21:20:26 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Skype
[2014-12-05 21:20:23 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Skype
[2014-12-05 21:20:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014-12-05 21:20:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2014-12-05 21:20:15 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2014-12-05 21:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2014-12-05 21:19:27 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\RHEng
[2014-12-05 21:19:24 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\OpenCandy
[2014-12-05 21:18:57 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\uTorrent
[2014-12-05 21:18:55 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014-12-05 21:18:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014-12-05 21:18:48 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014-12-05 21:04:14 | 015,157,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.dll
[2014-12-05 21:04:13 | 005,769,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe
[2014-12-05 21:04:13 | 000,362,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\spaceport.sys
[2014-12-05 21:03:45 | 012,749,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.dll
[2014-12-05 21:03:45 | 001,826,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Display.dll
[2014-12-05 21:03:34 | 005,267,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\glcndFilter.dll
[2014-12-05 21:03:34 | 002,948,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSService.dll
[2014-12-05 21:03:33 | 005,264,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Data.Pdf.dll
[2014-12-05 21:03:33 | 002,236,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingsHandlers.dll
[2014-12-05 21:03:32 | 006,386,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Search.dll
[2014-12-05 21:03:30 | 002,890,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msmpeg2vdec.dll
[2014-12-05 21:03:25 | 002,484,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msftedit.dll
[2014-12-05 21:03:24 | 004,067,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d2d1.dll
[2014-12-05 21:03:24 | 001,907,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d9.dll
[2014-12-05 21:03:23 | 003,561,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIRibbon.dll
[2014-12-05 21:03:20 | 003,273,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcore.dll
[2014-12-05 21:03:20 | 002,324,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcore.dll
[2014-12-05 21:03:19 | 002,689,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVCORE.DLL
[2014-12-05 21:03:19 | 000,424,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioEng.dll
[2014-12-05 21:03:19 | 000,344,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AUDIOKSE.dll
[2014-12-05 21:03:18 | 002,749,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tquery.dll
[2014-12-05 21:03:17 | 001,922,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssrch.dll
[2014-12-05 21:03:16 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ExplorerFrame.dll
[2014-12-05 21:03:14 | 002,984,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbgeng.dll
[2014-12-05 21:03:14 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanmsm.dll
[2014-12-05 21:03:14 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2014-12-05 21:03:14 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanhlp.dll
[2014-12-05 21:03:13 | 002,528,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVDECOD.DLL
[2014-12-05 21:03:13 | 002,174,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10warp.dll
[2014-12-05 21:03:13 | 001,269,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\workfolderssvc.dll
[2014-12-05 21:03:13 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioEndpointBuilder.dll
[2014-12-05 21:03:12 | 001,564,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\combase.dll
[2014-12-05 21:03:10 | 001,945,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmcore.dll
[2014-12-05 21:03:10 | 001,653,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltux.dll
[2014-12-05 21:03:10 | 001,024,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSAudDecMFT.dll
[2014-12-05 21:03:10 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2014-12-05 21:03:10 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUSettingsProvider.dll
[2014-12-05 21:03:09 | 002,207,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2014-12-05 21:03:09 | 001,946,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d11.dll
[2014-12-05 21:03:08 | 002,975,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcorets.dll
[2014-12-05 21:03:08 | 000,809,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgent.dll
[2014-12-05 21:03:08 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReInfo.dll
[2014-12-05 21:03:07 | 002,317,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertEnroll.dll
[2014-12-05 21:03:06 | 001,490,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GdiPlus.dll
[2014-12-05 21:03:06 | 001,175,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentServer.dll
[2014-12-05 21:03:05 | 002,364,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcndmgr.dll
[2014-12-05 21:03:05 | 001,461,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dui70.dll
[2014-12-05 21:03:04 | 002,469,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Wpc.dll
[2014-12-05 21:03:03 | 002,447,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVENCOD.DLL
[2014-12-05 21:03:03 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Immersive.dll
[2014-12-05 21:03:02 | 001,500,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\quartz.dll
[2014-12-05 21:03:00 | 003,553,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsrchvw.exe
[2014-12-05 21:03:00 | 001,560,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWrite.dll
[2014-12-05 21:02:59 | 002,459,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authui.dll
[2014-12-05 21:02:59 | 001,115,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfnetsrc.dll
[2014-12-05 21:02:58 | 000,959,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfasfsrcsnk.dll
[2014-12-05 21:02:58 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aclui.dll
[2014-12-05 21:02:57 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsservices.dll
[2014-12-05 21:02:57 | 001,291,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpmde.dll
[2014-12-05 21:02:57 | 000,954,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.appcore.dll
[2014-12-05 21:02:57 | 000,618,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\blackbox.dll
[2014-12-05 21:02:56 | 001,812,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SRH.dll
[2014-12-05 21:02:56 | 001,178,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\webservices.dll
[2014-12-05 21:02:55 | 001,845,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistSvc.dll
[2014-12-05 21:02:54 | 001,402,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OpcServices.dll
[2014-12-05 21:02:54 | 001,321,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmde.dll
[2014-12-05 21:02:54 | 001,063,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mispace.dll
[2014-12-05 21:02:53 | 003,442,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_47.dll
[2014-12-05 21:02:53 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsAdminFlowUI.dll
[2014-12-05 21:02:53 | 001,021,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIAutomationCore.dll
[2014-12-05 21:02:53 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atlthunk.dll
[2014-12-05 21:02:52 | 002,163,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcMon.exe
[2014-12-05 21:02:52 | 001,245,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidsvc.dll
[2014-12-05 21:02:52 | 000,785,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmp4srcsnk.dll
[2014-12-05 21:02:51 | 000,857,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsrcsnk.dll
[2014-12-05 21:02:50 | 001,563,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmc.exe
[2014-12-05 21:02:50 | 000,890,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drmv2clt.dll
[2014-12-05 21:02:49 | 001,482,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storagewmi.dll
[2014-12-05 21:02:48 | 001,102,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Streaming.dll
[2014-12-05 21:02:47 | 001,478,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMPDMC.exe
[2014-12-05 21:02:47 | 001,105,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diagperf.dll
[2014-12-05 21:02:46 | 000,705,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmpeg2srcsnk.dll
[2014-12-05 21:02:46 | 000,069,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wfplwfs.sys
[2014-12-05 21:02:45 | 002,033,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WpcWebSync.dll
[2014-12-05 21:02:45 | 001,324,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2014-12-05 21:02:45 | 000,829,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sbe.dll
[2014-12-05 21:02:44 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMNetMgr.dll
[2014-12-05 21:02:44 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFMediaEngine.dll
[2014-12-05 21:02:44 | 000,700,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfnetcore.dll
[2014-12-05 21:02:43 | 003,354,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSAT.exe
[2014-12-05 21:02:43 | 000,811,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSShared.dll
[2014-12-05 21:02:43 | 000,801,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfplat.dll
[2014-12-05 21:02:42 | 000,742,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlceqp40.dll
[2014-12-05 21:02:41 | 001,037,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMADMOD.DLL
[2014-12-05 21:02:41 | 001,015,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.dll
[2014-12-05 21:02:41 | 000,674,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uDWM.dll
[2014-12-05 21:02:40 | 001,265,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RacEngn.dll
[2014-12-05 21:02:39 | 000,918,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NaturalLanguage6.dll
[2014-12-05 21:02:38 | 000,868,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Globalization.dll
[2014-12-05 21:02:38 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkfoldersControl.dll
[2014-12-05 21:02:38 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsm.dll
[2014-12-05 21:02:38 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWAHost.exe
[2014-12-05 21:02:37 | 001,262,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsPrint.dll
[2014-12-05 21:02:36 | 002,310,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpccpl.dll
[2014-12-05 21:02:36 | 000,848,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskschd.dll
[2014-12-05 21:02:36 | 000,584,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\evr.dll
[2014-12-05 21:02:35 | 000,560,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SHCore.dll
[2014-12-05 21:02:35 | 000,551,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mf.dll
[2014-12-05 21:02:34 | 001,096,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ogldrv.dll
[2014-12-05 21:02:34 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d8.dll
[2014-12-05 21:02:33 | 000,482,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdrmdev.dll
[2014-12-05 21:02:32 | 006,465,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2014-12-05 21:02:32 | 000,983,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RecoveryDrive.exe
[2014-12-05 21:02:32 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncCore.dll
[2014-12-05 21:02:31 | 001,323,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdc.dll
[2014-12-05 21:02:31 | 001,060,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certutil.exe
[2014-12-05 21:02:31 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdosys.dll
[2014-12-05 21:02:30 | 001,070,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPEG2ENC.DLL
[2014-12-05 21:02:30 | 000,881,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WebcamUi.dll
[2014-12-05 21:02:30 | 000,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MrmIndexer.dll
[2014-12-05 21:02:29 | 000,809,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSWorkspace.dll
[2014-12-05 21:02:29 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinapi.dll
[2014-12-05 21:02:29 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msTextPrediction.dll
[2014-12-05 21:02:28 | 000,866,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perftrack.dll
[2014-12-05 21:02:28 | 000,827,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Web.Http.dll
[2014-12-05 21:02:28 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CPFilters.dll
[2014-12-05 21:02:28 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingFacility.dll
[2014-12-05 21:02:28 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2014-12-05 21:02:27 | 000,982,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2014-12-05 21:02:27 | 000,914,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMADMOE.DLL
[2014-12-05 21:02:27 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qedit.dll
[2014-12-05 21:02:27 | 000,555,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDApi.dll
[2014-12-05 21:02:27 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncHost.exe
[2014-12-05 21:02:27 | 000,370,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioSes.dll
[2014-12-05 21:02:27 | 000,213,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\audiodg.exe
[2014-12-05 21:02:27 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFoldersShell.dll
[2014-12-05 21:02:27 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WavDest.dll
[2014-12-05 21:02:26 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMSPDMOD.DLL
[2014-12-05 21:02:26 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdvidcrl.dll
[2014-12-05 21:02:26 | 000,832,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autoconv.exe
[2014-12-05 21:02:26 | 000,409,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfreadwrite.dll
[2014-12-05 21:02:26 | 000,312,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storport.sys
[2014-12-05 21:02:25 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werconcpl.dll
[2014-12-05 21:02:25 | 000,967,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srmclient.dll
[2014-12-05 21:02:25 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2014-12-05 21:02:25 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlsrv32.dll
[2014-12-05 21:02:24 | 000,697,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PurchaseWindowsLicense.dll
[2014-12-05 21:02:24 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSync.dll
[2014-12-05 21:02:24 | 000,492,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinapi.appcore.dll
[2014-12-05 21:02:24 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdrmnet.dll
[2014-12-05 21:02:23 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveapi.dll
[2014-12-05 21:02:23 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Authentication.OnlineId.dll
[2014-12-05 21:02:23 | 000,573,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceApi.dll
[2014-12-05 21:02:23 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdrmsdk.dll
[2014-12-05 21:02:23 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfds.dll
[2014-12-05 21:02:22 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usercpl.dll
[2014-12-05 21:02:22 | 000,760,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFx.dll
[2014-12-05 21:02:22 | 000,616,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10level9.dll
[2014-12-05 21:02:22 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSync.dll
[2014-12-05 21:02:21 | 000,761,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi2fs.dll
[2014-12-05 21:02:21 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printfilterpipelinesvc.exe
[2014-12-05 21:02:21 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpncore.dll
[2014-12-05 21:02:21 | 000,492,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVSDECD.DLL
[2014-12-05 21:02:21 | 000,444,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wer.dll
[2014-12-05 21:02:21 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlcese40.dll
[2014-12-05 21:02:20 | 002,597,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gameux.dll
[2014-12-05 21:02:20 | 001,054,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartcardCredentialProvider.dll
[2014-12-05 21:02:19 | 000,512,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psisdecd.dll
[2014-12-05 21:02:19 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\untfs.dll
[2014-12-05 21:02:19 | 000,488,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpeffects.dll
[2014-12-05 21:02:19 | 000,399,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsvr.dll
[2014-12-05 21:02:19 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssph.dll
[2014-12-05 21:02:18 | 000,768,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentExtensions.dll
[2014-12-05 21:02:18 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsound.dll
[2014-12-05 21:02:18 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EncDec.dll
[2014-12-05 21:02:18 | 000,430,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxgi.dll
[2014-12-05 21:02:18 | 000,425,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppReadiness.dll
[2014-12-05 21:02:18 | 000,331,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MMDevAPI.dll
[2014-12-05 21:02:17 | 000,544,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddraw.dll
[2014-12-05 21:02:17 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hgcpl.dll
[2014-12-05 21:02:17 | 000,277,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomp.dll
[2014-12-05 21:02:16 | 001,984,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certmgr.dll
[2014-12-05 21:02:16 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\opengl32.dll
[2014-12-05 21:02:16 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Web.dll
[2014-12-05 21:02:16 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB70804.dll
[2014-12-05 21:02:16 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB70404.dll
[2014-12-05 21:02:16 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB7001E.dll
[2014-12-05 21:02:16 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB70011.dll
[2014-12-05 21:02:16 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qdvd.dll
[2014-12-05 21:02:15 | 002,213,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncCenter.dll
[2014-12-05 21:02:15 | 001,065,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10.dll
[2014-12-05 21:02:15 | 000,565,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DMRServer.exe
[2014-12-05 21:02:15 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFx02000.dll
[2014-12-05 21:02:15 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Connectivity.dll
[2014-12-05 21:02:14 | 001,058,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpedit.dll
[2014-12-05 21:02:14 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tdh.dll
[2014-12-05 21:02:14 | 000,730,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pmcsnap.dll
[2014-12-05 21:02:14 | 000,454,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdrm.dll
[2014-12-05 21:02:14 | 000,367,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsmf.dll
[2014-12-05 21:02:14 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc.dll
[2014-12-05 21:02:13 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reseteng.dll
[2014-12-05 21:02:13 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.BackgroundTransfer.dll
[2014-12-05 21:02:13 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GeofenceMonitorService.dll
[2014-12-05 21:02:13 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswmdm.dll
[2014-12-05 21:02:13 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_isv.dll
[2014-12-05 21:02:13 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSAC3ENC.DLL
[2014-12-05 21:02:12 | 001,390,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.efi
[2014-12-05 21:02:12 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Bluetooth.dll
[2014-12-05 21:02:12 | 000,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprofmsvc.dll
[2014-12-05 21:02:12 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\webio.dll
[2014-12-05 21:02:11 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistCacheProvider.dll
[2014-12-05 21:02:11 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.SmartCards.dll
[2014-12-05 21:02:11 | 000,547,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinTypes.dll
[2014-12-05 21:02:11 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msra.exe
[2014-12-05 21:02:11 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.dll
[2014-12-05 21:02:11 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.dll
[2014-12-05 21:02:10 | 001,411,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMSPDMOE.DLL
[2014-12-05 21:02:10 | 000,872,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapi3.dll
[2014-12-05 21:02:10 | 000,816,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2014-12-05 21:02:10 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpksetup.exe
[2014-12-05 21:02:10 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FirewallAPI.dll
[2014-12-05 21:02:09 | 002,551,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\themecpl.dll
[2014-12-05 21:02:09 | 001,335,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsecedit.dll
[2014-12-05 21:02:09 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscms.dll
[2014-12-05 21:02:09 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\puiobj.dll
[2014-12-05 21:02:09 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
[2014-12-05 21:02:09 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msihnd.dll
[2014-12-05 21:02:08 | 001,580,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMALFXGFXDSP.dll
[2014-12-05 21:02:08 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provcore.dll
[2014-12-05 21:02:08 | 000,579,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaaut.dll
[2014-12-05 21:02:08 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_isv.exe
[2014-12-05 21:02:08 | 000,320,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFCaptureEngine.dll
[2014-12-05 21:02:08 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIAnimation.dll
[2014-12-05 21:02:07 | 001,281,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.exe
[2014-12-05 21:02:07 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsdyn.dll
[2014-12-05 21:02:07 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Graphics.Printing.dll
[2014-12-05 21:02:07 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbemcomn.dll
[2014-12-05 21:02:07 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msscp.dll
[2014-12-05 21:02:07 | 000,319,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgmms1.sys
[2014-12-05 21:02:06 | 000,806,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WFS.exe
[2014-12-05 21:02:06 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxPackaging.dll
[2014-12-05 21:02:06 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxApplicabilityEngine.dll
[2014-12-05 21:02:06 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysmon.ocx
[2014-12-05 21:02:06 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsGdiConverter.dll
[2014-12-05 21:02:06 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ninput.dll
[2014-12-05 21:02:06 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsRasterService.dll
[2014-12-05 21:02:05 | 007,331,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NL7Data0011.dll
[2014-12-05 21:02:05 | 004,945,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0009.dll
[2014-12-05 21:02:05 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate.exe
[2014-12-05 21:02:05 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsmsnap.dll
[2014-12-05 21:02:04 | 001,271,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winresume.efi
[2014-12-05 21:02:04 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdt.exe
[2014-12-05 21:02:04 | 000,887,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dim700.dll
[2014-12-05 21:02:04 | 000,794,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2014-12-05 21:02:04 | 000,320,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtapi.dll
[2014-12-05 21:02:04 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsku.dll
[2014-12-05 21:02:03 | 001,168,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winresume.exe
[2014-12-05 21:02:03 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wvc.dll
[2014-12-05 21:02:03 | 000,463,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MP4SDECD.DLL
[2014-12-05 21:02:03 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi2.dll
[2014-12-05 21:02:03 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOMPOSE.dll
[2014-12-05 21:02:03 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vmrdvcore.dll
[2014-12-05 21:02:03 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdvvmtransport.dll
[2014-12-05 21:02:02 | 000,900,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2014-12-05 21:02:02 | 000,621,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsFilt.dll
[2014-12-05 21:02:02 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhotoScreensaver.scr
[2014-12-05 21:02:02 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appmgr.dll
[2014-12-05 21:02:02 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2014-12-05 21:02:02 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSNP.ax
[2014-12-05 21:02:01 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssvp.dll
[2014-12-05 21:02:01 | 000,560,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wimgapi.dll
[2014-12-05 21:02:01 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MDMAgent.exe
[2014-12-05 21:02:01 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wimserv.exe
[2014-12-05 21:02:01 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvsc.dll
[2014-12-05 21:02:01 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncInfrastructure.dll
[2014-12-05 21:02:01 | 000,333,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\netio.sys
[2014-12-05 21:02:01 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2014-12-05 21:02:01 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdmregistration.dll
[2014-12-05 21:02:00 | 000,773,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvewiz.dll
[2014-12-05 21:02:00 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdohlp.dll
[2014-12-05 21:02:00 | 000,336,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvproc.dll
[2014-12-05 21:02:00 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MDEServer.exe
[2014-12-05 21:01:59 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasgcw.dll
[2014-12-05 21:01:59 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogs.dll
[2014-12-05 21:01:59 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qdv.dll
[2014-12-05 21:01:59 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WindowsCodecsExt.dll
[2014-12-05 21:01:59 | 000,245,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMASF.DLL
[2014-12-05 21:01:59 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wisp.dll
[2014-12-05 21:01:59 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfdvdec.dll
[2014-12-05 21:01:58 | 002,036,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0007.dll
[2014-12-05 21:01:58 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskcomp.dll
[2014-12-05 21:01:58 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.PointOfService.dll
[2014-12-05 21:01:58 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpg2splt.ax
[2014-12-05 21:01:57 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prnfldr.dll
[2014-12-05 21:01:57 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Usb.dll
[2014-12-05 21:01:57 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssphtb.dll
[2014-12-05 21:01:57 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offfilt.dll
[2014-12-05 21:01:57 | 000,222,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsAdminFlows.exe
[2014-12-05 21:01:57 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msls31.dll
[2014-12-05 21:01:57 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DscCore.dll
[2014-12-05 21:01:56 | 000,770,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsecsnp.dll
[2014-12-05 21:01:56 | 000,743,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFWMAAEC.DLL
[2014-12-05 21:01:56 | 000,550,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserLanguagesCpl.dll
[2014-12-05 21:01:56 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\filemgmt.dll
[2014-12-05 21:01:56 | 000,437,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdri.dll
[2014-12-05 21:01:56 | 000,435,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\glmf32.dll
[2014-12-05 21:01:56 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PhotoMetadataHandler.dll
[2014-12-05 21:01:56 | 000,361,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidprov.dll
[2014-12-05 21:01:56 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2014-12-05 21:01:55 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpprefcl.dll
[2014-12-05 21:01:55 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOMEX.dll
[2014-12-05 21:01:55 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WLanConn.dll
[2014-12-05 21:01:55 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroleui.dll
[2014-12-05 21:01:55 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncryptprov.dll
[2014-12-05 21:01:55 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncsi.dll
[2014-12-05 21:01:55 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2014-12-05 21:01:55 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Sensors.dll
[2014-12-05 21:01:55 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TetheringMgr.dll
[2014-12-05 21:01:55 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmime.dll
[2014-12-05 21:01:54 | 009,604,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData000a.dll
[2014-12-05 21:01:54 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidcli.dll
[2014-12-05 21:01:54 | 000,407,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StikyNot.exe
[2014-12-05 21:01:54 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemEventsBrokerServer.dll
[2014-12-05 21:01:54 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Profile.HardwareId.dll
[2014-12-05 21:01:53 | 004,531,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0416.dll
[2014-12-05 21:01:53 | 004,530,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData001d.dll
[2014-12-05 21:01:53 | 000,736,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVXENCD.DLL
[2014-12-05 21:01:53 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nettrace.dll
[2014-12-05 21:01:53 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AdmTmpl.dll
[2014-12-05 21:01:53 | 000,416,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWanAPI.dll
[2014-12-05 21:01:53 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sharemediacpl.dll
[2014-12-05 21:01:53 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Proximity.dll
[2014-12-05 21:01:53 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSATAPI.dll
[2014-12-05 21:01:52 | 004,530,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0010.dll
[2014-12-05 21:01:52 | 004,530,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0414.dll
[2014-12-05 21:01:52 | 004,529,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0816.dll
[2014-12-05 21:01:52 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdelta.dll
[2014-12-05 21:01:52 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpencom.dll
[2014-12-05 21:01:51 | 002,387,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData000d.dll
[2014-12-05 21:01:51 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdbui.dll
[2014-12-05 21:01:51 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srmscan.dll
[2014-12-05 21:01:51 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMVSENCD.DLL
[2014-12-05 21:01:51 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dim.dll
[2014-12-05 21:01:51 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\P2PGraph.dll
[2014-12-05 21:01:51 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BCP47Langs.dll
[2014-12-05 21:01:51 | 000,260,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFPlay.dll
[2014-12-05 21:01:51 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscandui.dll
[2014-12-05 21:01:51 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedynos.dll
[2014-12-05 21:01:51 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Graphics.dll
[2014-12-05 21:01:51 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qasf.dll
[2014-12-05 21:01:50 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnidui.dll
[2014-12-05 21:01:50 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\conhost.exe
[2014-12-05 21:01:50 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcsvDevice.dll
[2014-12-05 21:01:49 | 002,307,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData000c.dll
[2014-12-05 21:01:49 | 000,608,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvstore.dll
[2014-12-05 21:01:49 | 000,558,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\objsel.dll
[2014-12-05 21:01:49 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrptadm.dll
[2014-12-05 21:01:49 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlangpui.dll
[2014-12-05 21:01:49 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iassdo.dll
[2014-12-05 21:01:49 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmsvc.dll
[2014-12-05 21:01:49 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti.dll
[2014-12-05 21:01:49 | 000,202,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mftranscode.dll
[2014-12-05 21:01:49 | 000,191,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.MediaControl.dll
[2014-12-05 21:01:49 | 000,019,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2014-12-05 21:01:48 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_ssp_isv.exe
[2014-12-05 21:01:48 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMActivate_ssp.exe
[2014-12-05 21:01:48 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dlnashext.dll
[2014-12-05 21:01:48 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DXP.dll
[2014-12-05 21:01:48 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\termmgr.dll
[2014-12-05 21:01:48 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10_1core.dll
[2014-12-05 21:01:47 | 000,865,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FirewallControlPanel.dll
[2014-12-05 21:01:47 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfh264enc.dll
[2014-12-05 21:01:47 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devmgr.dll
[2014-12-05 21:01:47 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwizards.dll
[2014-12-05 21:01:47 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwizeng.dll
[2014-12-05 21:01:47 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vpnike.dll
[2014-12-05 21:01:47 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certreq.exe
[2014-12-05 21:01:47 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drmmgrtn.dll
[2014-12-05 21:01:47 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netjoin.dll
[2014-12-05 21:01:46 | 002,238,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NL7Data0404.dll
[2014-12-05 21:01:46 | 001,389,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DxpTaskSync.dll
[2014-12-05 21:01:46 | 000,340,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcryptprimitives.dll
[2014-12-05 21:01:46 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPDSp.dll
[2014-12-05 21:01:46 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WmpDui.dll
[2014-12-05 21:01:46 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsldp.dll
[2014-12-05 21:01:46 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsApi.dll
[2014-12-05 21:01:46 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmvdspa.dll
[2014-12-05 21:01:45 | 001,906,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DisplaySwitch.exe
[2014-12-05 21:01:45 | 000,839,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionCenter.dll
[2014-12-05 21:01:45 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanconn.dll
[2014-12-05 21:01:45 | 000,364,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PCPTpm12.dll
[2014-12-05 21:01:45 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efscore.dll
[2014-12-05 21:01:45 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprddm.dll
[2014-12-05 21:01:45 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskraid.exe
[2014-12-05 21:01:45 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Store.TestingFramework.dll
[2014-12-05 21:01:45 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2014-12-05 21:01:44 | 003,355,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NL7Data0804.dll
[2014-12-05 21:01:44 | 001,170,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistSh.dll
[2014-12-05 21:01:44 | 000,957,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlanMM.dll
[2014-12-05 21:01:44 | 000,732,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanpref.dll
[2014-12-05 21:01:44 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnapps.dll
[2014-12-05 21:01:44 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2014-12-05 21:01:44 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sensrsvc.dll
[2014-12-05 21:01:43 | 002,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData000f.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0c1a.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData081a.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData001b.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0018.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0003.dll
[2014-12-05 21:01:43 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0002.dll
[2014-12-05 21:01:43 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recimg.exe
[2014-12-05 21:01:43 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmicmiplugin.dll
[2014-12-05 21:01:43 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DfpCommon.dll
[2014-12-05 21:01:43 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.dll
[2014-12-05 21:01:43 | 000,292,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Classpnp.sys
[2014-12-05 21:01:43 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToDevice.dll
[2014-12-05 21:01:42 | 002,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0026.dll
[2014-12-05 21:01:42 | 001,999,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0027.dll
[2014-12-05 21:01:42 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0024.dll
[2014-12-05 21:01:42 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData001a.dll
[2014-12-05 21:01:42 | 000,364,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authfwcfg.dll
[2014-12-05 21:01:42 | 000,347,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_8.dll
[2014-12-05 21:01:42 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10core.dll
[2014-12-05 21:01:42 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmd.exe
[2014-12-05 21:01:41 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdial32.dll
[2014-12-05 21:01:41 | 000,351,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energy.dll
[2014-12-05 21:01:41 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\das.dll
[2014-12-05 21:01:41 | 000,272,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpendp.dll
[2014-12-05 21:01:41 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2014-12-05 21:01:41 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Vpn.dll
[2014-12-05 21:01:41 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\miutils.dll
[2014-12-05 21:01:41 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ubpm.dll
[2014-12-05 21:01:41 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpchttp.dll
[2014-12-05 21:01:41 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsClassExtension.dll
[2014-12-05 21:01:40 | 003,149,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0039.dll
[2014-12-05 21:01:40 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData004b.dll
[2014-12-05 21:01:40 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0020.dll
[2014-12-05 21:01:40 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msinfo32.exe
[2014-12-05 21:01:40 | 000,294,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdeunlock.exe
[2014-12-05 21:01:40 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsnt.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData004e.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData004c.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData004a.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0049.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0047.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0046.dll
[2014-12-05 21:01:39 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0045.dll
[2014-12-05 21:01:39 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifsutil.dll
[2014-12-05 21:01:38 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData003e.dll
[2014-12-05 21:01:38 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData002a.dll
[2014-12-05 21:01:38 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0021.dll
[2014-12-05 21:01:38 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osk.exe
[2014-12-05 21:01:38 | 000,265,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDMon.dll
[2014-12-05 21:01:38 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasmontr.dll
[2014-12-05 21:01:38 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmWmiPl.dll
[2014-12-05 21:01:38 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dxpserver.exe
[2014-12-05 21:01:38 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Store.dll
[2014-12-05 21:01:38 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapisrv.dll
[2014-12-05 21:01:38 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lltdapi.dll
[2014-12-05 21:01:37 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0022.dll
[2014-12-05 21:01:37 | 001,005,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DiagCpl.dll
[2014-12-05 21:01:37 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IasMigPlugin.dll
[2014-12-05 21:01:37 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VAN.dll
[2014-12-05 21:01:37 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2014-12-05 21:01:37 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppXDeploymentClient.dll
[2014-12-05 21:01:37 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PackageStateRoaming.dll
[2014-12-05 21:01:36 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mblctr.exe
[2014-12-05 21:01:36 | 000,724,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfuimanager.dll
[2014-12-05 21:01:36 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartCardSimulator.dll
[2014-12-05 21:01:36 | 000,423,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsvc.dll
[2014-12-05 21:01:36 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nshipsec.dll
[2014-12-05 21:01:36 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cscobj.dll
[2014-12-05 21:01:36 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mbsmsapi.dll
[2014-12-05 21:01:36 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlceoledb40.dll
[2014-12-05 21:01:35 | 000,758,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iuilp.dll
[2014-12-05 21:01:35 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WMPhoto.dll
[2014-12-05 21:01:35 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcfg.dll
[2014-12-05 21:01:35 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationApi.dll
[2014-12-05 21:01:35 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeApiPublic.dll
[2014-12-05 21:01:35 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cewmdm.dll
[2014-12-05 21:01:35 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Geolocation.dll
[2014-12-05 21:01:35 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeBrokerServer.dll
[2014-12-05 21:01:35 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dwmredir.dll
[2014-12-05 21:01:34 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srchadmin.dll
[2014-12-05 21:01:34 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iprtrmgr.dll
[2014-12-05 21:01:34 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdprint.dll
[2014-12-05 21:01:34 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NAPMONTR.DLL
[2014-12-05 21:01:34 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netdiagfx.dll
[2014-12-05 21:01:34 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rascustom.dll
[2014-12-05 21:01:34 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vaultsvc.dll
[2014-12-05 21:01:34 | 000,196,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityUxHost.exe
[2014-12-05 21:01:34 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpresult.exe
[2014-12-05 21:01:34 | 000,187,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVideoDSP.dll
[2014-12-05 21:01:34 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSSync.dll
[2014-12-05 21:01:34 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmvdsitf.dll
[2014-12-05 21:01:33 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcnwiz.dll
[2014-12-05 21:01:33 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcjt32.dll
[2014-12-05 21:01:33 | 000,241,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqmapi.dll
[2014-12-05 21:01:33 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdskmgr.dll
[2014-12-05 21:01:33 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceaccess.dll
[2014-12-05 21:01:33 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ulib.dll
[2014-12-05 21:01:32 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NL7Data001E.dll
[2014-12-05 21:01:32 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceCenter.dll
[2014-12-05 21:01:32 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DaOtpCredentialProvider.dll
[2014-12-05 21:01:32 | 000,250,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSAPI.dll
[2014-12-05 21:01:32 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedyn.dll
[2014-12-05 21:01:32 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrobj.dll
[2014-12-05 21:01:32 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtutil.exe
[2014-12-05 21:01:32 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dinput8.dll
[2014-12-05 21:01:32 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sbeio.dll
[2014-12-05 21:01:32 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srumsvc.dll
[2014-12-05 21:01:32 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\riched32.dll
[2014-12-05 21:01:31 | 003,788,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accessibilitycpl.dll
[2014-12-05 21:01:31 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmdlgs.dll
[2014-12-05 21:01:31 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertEnrollUI.dll
[2014-12-05 21:01:31 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdscore.dll
[2014-12-05 21:01:31 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InputSwitch.dll
[2014-12-05 21:01:31 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidcredprov.dll
[2014-12-05 21:01:31 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSyncMetastore.dll
[2014-12-05 21:01:31 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveapibase.dll
[2014-12-05 21:01:31 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSClient.dll
[2014-12-05 21:01:31 | 000,164,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Storage.ApplicationData.dll
[2014-12-05 21:01:31 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafWfdProvider.dll
[2014-12-05 21:01:31 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WwaApi.dll
[2014-12-05 21:01:31 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2014-12-05 21:01:30 | 000,831,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certca.dll
[2014-12-05 21:01:30 | 000,413,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFault.exe
[2014-12-05 21:01:30 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcpl.dll
[2014-12-05 21:01:30 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wow32.dll
[2014-12-05 21:01:30 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esentutl.exe
[2014-12-05 21:01:30 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwtpdui.dll
[2014-12-05 21:01:30 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.SpeechSynthesis.dll
[2014-12-05 21:01:30 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CryptoWinRT.dll
[2014-12-05 21:01:30 | 000,119,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncrypt.dll
[2014-12-05 21:01:29 | 001,548,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsData0000.dll
[2014-12-05 21:01:29 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TabletPC.cpl
[2014-12-05 21:01:29 | 000,348,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verifier.dll
[2014-12-05 21:01:29 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wincorlib.dll
[2014-12-05 21:01:29 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netiohlp.dll
[2014-12-05 21:01:29 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\itircl.dll
[2014-12-05 21:01:29 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmidx.dll
[2014-12-05 21:01:29 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskpart.exe
[2014-12-05 21:01:29 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasrecst.dll
[2014-12-05 21:01:28 | 000,454,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\localsec.dll
[2014-12-05 21:01:28 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdiagn.dll
[2014-12-05 21:01:28 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scansetting.dll
[2014-12-05 21:01:28 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TtlsCfg.dll
[2014-12-05 21:01:28 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bisrv.dll
[2014-12-05 21:01:28 | 000,183,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VIDRESZR.DLL
[2014-12-05 21:01:28 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rascfg.dll
[2014-12-05 21:01:28 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToManager.dll
[2014-12-05 21:01:28 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Input.Inking.dll
[2014-12-05 21:01:28 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IDStore.dll
[2014-12-05 21:01:27 | 000,779,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Magnify.exe
[2014-12-05 21:01:27 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiadefui.dll
[2014-12-05 21:01:27 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tracerpt.exe
[2014-12-05 21:01:27 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityService.dll
[2014-12-05 21:01:27 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcbuilder.exe
[2014-12-05 21:01:27 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Scanners.dll
[2014-12-05 21:01:27 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shacct.dll
[2014-12-05 21:01:27 | 000,147,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthHost.exe
[2014-12-05 21:01:27 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uudf.dll
[2014-12-05 21:01:27 | 000,140,288 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\System32\DscCoreConfProv.dll
[2014-12-05 21:01:27 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmstyle.dll
[2014-12-05 21:01:27 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\csrstub.exe
[2014-12-05 21:01:26 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psr.exe
[2014-12-05 21:01:26 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SnippingTool.exe
[2014-12-05 21:01:26 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanui.dll
[2014-12-05 21:01:26 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvecpl.dll
[2014-12-05 21:01:26 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iassam.dll
[2014-12-05 21:01:26 | 000,184,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COLORCNV.DLL
[2014-12-05 21:01:26 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.HumanInterfaceDevice.dll
[2014-12-05 21:01:26 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceTypes.dll
[2014-12-05 21:01:26 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAFWSD.dll
[2014-12-05 21:01:26 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mibincodec.dll
[2014-12-05 21:01:26 | 000,116,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxva2.dll
[2014-12-05 21:01:25 | 001,296,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\connect.dll
[2014-12-05 21:01:25 | 001,144,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aitstatic.exe
[2014-12-05 21:01:25 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srcore.dll
[2014-12-05 21:01:25 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wksprt.exe
[2014-12-05 21:01:25 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdiag.exe
[2014-12-05 21:01:25 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wavemsp.dll
[2014-12-05 21:01:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOVER.exe
[2014-12-05 21:01:25 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiageng.dll
[2014-12-05 21:01:25 | 000,111,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RTWorkQ.dll
[2014-12-05 21:01:24 | 001,119,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanmm.dll
[2014-12-05 21:01:24 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RADCUI.dll
[2014-12-05 21:01:24 | 000,275,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MPG4DECD.DLL
[2014-12-05 21:01:24 | 000,274,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MP43DECD.DLL
[2014-12-05 21:01:24 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\migflt.dll
[2014-12-05 21:01:24 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InkEd.dll
[2014-12-05 21:01:24 | 000,223,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkspbroker.exe
[2014-12-05 21:01:24 | 000,190,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SndVol.exe
[2014-12-05 21:01:24 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrdc.dll
[2014-12-05 21:01:24 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingMonitor.dll
[2014-12-05 21:01:24 | 000,134,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmmbase.dll
[2014-12-05 21:01:24 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psisrndr.ax
[2014-12-05 21:01:24 | 000,026,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintDialogHost.exe
[2014-12-05 21:01:23 | 002,118,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SensorsCpl.dll
[2014-12-05 21:01:23 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SpaceControl.dll
[2014-12-05 21:01:23 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsqmcons.exe
[2014-12-05 21:01:23 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wbadmin.exe
[2014-12-05 21:01:23 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppIdPolicyEngineApi.dll
[2014-12-05 21:01:23 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2014-12-05 21:01:23 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlancfg.dll
[2014-12-05 21:01:23 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceregistration.dll
[2014-12-05 21:01:23 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msnetobj.dll
[2014-12-05 21:01:23 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ufat.dll
[2014-12-05 21:01:22 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shwebsvc.dll
[2014-12-05 21:01:22 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2014-12-05 21:01:22 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\provthrd.dll
[2014-12-05 21:01:22 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFPlatform.dll
[2014-12-05 21:01:22 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2014-12-05 21:01:22 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhengine.dll
[2014-12-05 21:01:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnprv.dll
[2014-12-05 21:01:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdd.dll
[2014-12-05 21:01:22 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmitomi.dll
[2014-12-05 21:01:22 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\softkbd.dll
[2014-12-05 21:01:22 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msctfui.dll
[2014-12-05 21:01:21 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SysFxUI.dll
[2014-12-05 21:01:21 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcore6.dll
[2014-12-05 21:01:21 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DafPrintProvider.dll
[2014-12-05 21:01:21 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasrad.dll
[2014-12-05 21:01:21 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srmstormod.dll
[2014-12-05 21:01:21 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schtasks.exe
[2014-12-05 21:01:21 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasnap.dll
[2014-12-05 21:01:21 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsprop.dll
[2014-12-05 21:01:21 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fundisc.dll
[2014-12-05 21:01:21 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSyncProviders.dll
[2014-12-05 21:01:21 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\negoexts.dll
[2014-12-05 21:01:20 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpui.dll
[2014-12-05 21:01:20 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ppcsnap.dll
[2014-12-05 21:01:20 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unattend.dll
[2014-12-05 21:01:20 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionQueue.dll
[2014-12-05 21:01:20 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\els.dll
[2014-12-05 21:01:20 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netcorehc.dll
[2014-12-05 21:01:20 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Enumeration.dll
[2014-12-05 21:01:20 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceSyncProvider.dll
[2014-12-05 21:01:20 | 000,115,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpapi.dll
[2014-12-05 21:01:20 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmusic.dll
[2014-12-05 21:01:19 | 000,865,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdclt.exe
[2014-12-05 21:01:19 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairing.dll
[2014-12-05 21:01:19 | 000,371,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Faultrep.dll
[2014-12-05 21:01:19 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eudcedit.exe
[2014-12-05 21:01:19 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsbas.dll
[2014-12-05 21:01:19 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWB7.dll
[2014-12-05 21:01:19 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWSD.dll
[2014-12-05 21:01:19 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windows.immersiveshell.serviceprovider.dll
[2014-12-05 21:01:18 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\intl.cpl
[2014-12-05 21:01:18 | 000,229,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RESAMPLEDMO.DLL
[2014-12-05 21:01:18 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drt.dll
[2014-12-05 21:01:18 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidpolicyconverter.exe
[2014-12-05 21:01:18 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msched.dll
[2014-12-05 21:01:17 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsadmin.exe
[2014-12-05 21:01:17 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VBICodec.ax
[2014-12-05 21:01:16 | 001,157,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netcenter.dll
[2014-12-05 21:01:16 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveui.dll
[2014-12-05 21:01:16 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hotspotauth.dll
[2014-12-05 21:01:16 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ssText3d.scr
[2014-12-05 21:01:16 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcat.dll
[2014-12-05 21:01:16 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpipcfg.dll
[2014-12-05 21:01:16 | 000,130,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcrypt.dll
[2014-12-05 21:01:16 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudStorageWizard.exe
[2014-12-05 21:01:16 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\biwinrt.dll
[2014-12-05 21:01:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetworkStatus.dll
[2014-12-05 21:01:16 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\brdgcfg.dll
[2014-12-05 21:01:15 | 003,277,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootux.dll
[2014-12-05 21:01:15 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.Handlers.dll
[2014-12-05 21:01:15 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\polstore.dll
[2014-12-05 21:01:15 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hgprint.dll
[2014-12-05 21:01:15 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prncache.dll
[2014-12-05 21:01:15 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cscript.exe
[2014-12-05 21:01:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imapi.dll
[2014-12-05 21:01:15 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContent.dll
[2014-12-05 21:01:15 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efswrt.dll
[2014-12-05 21:01:15 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AltTab.dll
[2014-12-05 21:01:15 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Management.Workplace.WorkplaceSettings.dll
[2014-12-05 21:01:14 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthHFSrv.dll
[2014-12-05 21:01:14 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prnntfy.dll
[2014-12-05 21:01:14 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cic.dll
[2014-12-05 21:01:14 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Tabbtn.dll
[2014-12-05 21:01:14 | 000,148,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscapi.dll
[2014-12-05 21:01:14 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettings.DeviceEncryptionHandlers.dll
[2014-12-05 21:01:14 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profsvcext.dll
[2014-12-05 21:01:14 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsDatabase.dll
[2014-12-05 21:01:14 | 000,081,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\embeddedapplauncher.exe
[2014-12-05 21:01:13 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Vault.dll
[2014-12-05 21:01:13 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercpl.dll
[2014-12-05 21:01:13 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apds.dll
[2014-12-05 21:01:13 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDist.dll
[2014-12-05 21:01:13 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easwrt.dll
[2014-12-05 21:01:13 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistWSDDiscoProv.dll
[2014-12-05 21:01:13 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dinput.dll
[2014-12-05 21:01:13 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncbservice.dll
[2014-12-05 21:01:13 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbnetlib.dll
[2014-12-05 21:01:13 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscinterop.dll
[2014-12-05 21:01:13 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\txflog.dll
[2014-12-05 21:01:13 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSTPager.ax
[2014-12-05 21:01:13 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amstream.dll
[2014-12-05 21:01:12 | 000,376,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS
[2014-12-05 21:01:12 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys
[2014-12-05 21:01:12 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elshyph.dll
[2014-12-05 21:01:12 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IdListen.dll
[2014-12-05 21:01:12 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlhtml.dll
[2014-12-05 21:01:12 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpinput.exe
[2014-12-05 21:01:12 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtstocom.exe
[2014-12-05 21:01:12 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psmsrv.dll
[2014-12-05 21:01:12 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olethk32.dll
[2014-12-05 21:01:12 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmcompos.dll
[2014-12-05 21:01:11 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasplap.dll
[2014-12-05 21:01:11 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoncli.dll
[2014-12-05 21:01:11 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fde.dll
[2014-12-05 21:01:11 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtm.dll
[2014-12-05 21:01:11 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sqlcecompact40.dll
[2014-12-05 21:01:11 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Kswdmcap.ax
[2014-12-05 21:01:11 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpprxm.dll
[2014-12-05 21:01:11 | 000,099,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MP3DMOD.DLL
[2014-12-05 21:01:11 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2014-12-05 21:01:11 | 000,094,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RestoreOptIn.exe
[2014-12-05 21:01:11 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Mpeg2Data.ax
[2014-12-05 21:01:11 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cca.dll
[2014-12-05 21:01:11 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllhst3g.exe
[2014-12-05 21:01:10 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\timedate.cpl
[2014-12-05 21:01:10 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BioCredProv.dll
[2014-12-05 21:01:10 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pnetsh.dll
[2014-12-05 21:01:10 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\QAGENT.DLL
[2014-12-05 21:01:10 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SimCfg.dll
[2014-12-05 21:01:10 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceWiaCompat.dll
[2014-12-05 21:01:10 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iassvcs.dll
[2014-12-05 21:01:10 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2014-12-05 21:01:10 | 000,089,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncryptsslp.dll
[2014-12-05 21:01:10 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wudriver.dll
[2014-12-05 21:01:10 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSDvbNP.ax
[2014-12-05 21:01:10 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdprov.dll
[2014-12-05 21:01:09 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mycomput.dll
[2014-12-05 21:01:09 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\puiapi.dll
[2014-12-05 21:01:09 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxAllUserStore.dll
[2014-12-05 21:01:09 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmidcom.dll
[2014-12-05 21:01:09 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll
[2014-12-05 21:01:09 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BitLockerDeviceEncryption.exe
[2014-12-05 21:01:08 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcbase.dll
[2014-12-05 21:01:08 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntprint.dll
[2014-12-05 21:01:08 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NAPSTAT.EXE
[2014-12-05 21:01:08 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10_1.dll
[2014-12-05 21:01:08 | 000,081,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devenum.dll
[2014-12-05 21:01:07 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndfapi.dll
[2014-12-05 21:01:07 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SndVolSSO.dll
[2014-12-05 21:01:07 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storewuauth.dll
[2014-12-05 21:01:07 | 000,165,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntasn1.dll
[2014-12-05 21:01:07 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TtlsAuth.dll
[2014-12-05 21:01:07 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmgp.dll
[2014-12-05 21:01:07 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TetheringStation.dll
[2014-12-05 21:01:07 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\QSHVHOST.DLL
[2014-12-05 21:01:07 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhshl.dll
[2014-12-05 21:01:07 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevPropMgr.dll
[2014-12-05 21:01:07 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxSip.dll
[2014-12-05 21:01:07 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmscript.dll
[2014-12-05 21:01:06 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sud.dll
[2014-12-05 21:01:06 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptuiwizard.dll
[2014-12-05 21:01:06 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\input.dll
[2014-12-05 21:01:06 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\P2P.dll
[2014-12-05 21:01:06 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagprv.dll
[2014-12-05 21:01:06 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdeploy.dll
[2014-12-05 21:01:06 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\net1.exe
[2014-12-05 21:01:06 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rekeywiz.exe
[2014-12-05 21:01:06 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiadss.dll
[2014-12-05 21:01:06 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chartv.dll
[2014-12-05 21:01:06 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
[2014-12-05 21:01:06 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\loadperf.dll
[2014-12-05 21:01:06 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\radardt.dll
[2014-12-05 21:01:06 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\asycfilt.dll
[2014-12-05 21:01:05 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicpl.dll
[2014-12-05 21:01:05 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthprops.cpl
[2014-12-05 21:01:05 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceWMDRM.dll
[2014-12-05 21:01:05 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rgb9rast.dll
[2014-12-05 21:01:05 | 000,131,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dumpsd.sys
[2014-12-05 21:01:05 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Storage.Compression.dll
[2014-12-05 21:01:05 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetSetupApi.dll
[2014-12-05 21:01:05 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwtpw32.dll
[2014-12-05 21:01:05 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2014-12-05 21:01:05 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dskquota.dll
[2014-12-05 21:01:05 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adsmsext.dll
[2014-12-05 21:01:04 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nshwfp.dll
[2014-12-05 21:01:04 | 000,528,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ActionCenterCPL.dll
[2014-12-05 21:01:04 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2014-12-05 21:01:04 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PresentationSettings.exe
[2014-12-05 21:01:04 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.cpl
[2014-12-05 21:01:04 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unregmp2.exe
[2014-12-05 21:01:04 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowslivelogin.dll
[2014-12-05 21:01:04 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconfig.exe
[2014-12-05 21:01:04 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmTasks.dll
[2014-12-05 21:01:04 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeHdCfgLib.dll
[2014-12-05 21:01:04 | 000,076,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfvdsp.dll
[2014-12-05 21:01:03 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\newdev.dll
[2014-12-05 21:01:03 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verifier.exe
[2014-12-05 21:01:03 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WiFiDisplay.dll
[2014-12-05 21:01:03 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfupgd.dll
[2014-12-05 21:01:03 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
[2014-12-05 21:01:03 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafBth.dll
[2014-12-05 21:01:03 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax
[2014-12-05 21:01:02 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rstrui.exe
[2014-12-05 21:01:02 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\manage-bde.exe
[2014-12-05 21:01:02 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\auditcse.dll
[2014-12-05 21:01:02 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsrv.dll
[2014-12-05 21:01:02 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srmshell.dll
[2014-12-05 21:01:02 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msaatext.dll
[2014-12-05 21:01:02 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SSShim.dll
[2014-12-05 21:01:02 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvscmgr.exe
[2014-12-05 21:01:02 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccp32.dll
[2014-12-05 21:01:02 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptcatsvc.dll
[2014-12-05 21:01:02 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdSSDP.dll
[2014-12-05 21:01:02 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSWbPrxy.exe
[2014-12-05 21:01:02 | 000,070,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskhost.exe
[2014-12-05 21:01:01 | 000,644,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dccw.exe
[2014-12-05 21:01:01 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceSetupManager.dll
[2014-12-05 21:01:01 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WLanHC.dll
[2014-12-05 21:01:01 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafupnp.dll
[2014-12-05 21:01:01 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleprn.dll
[2014-12-05 21:01:01 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSetupUI.dll
[2014-12-05 21:01:01 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2014-12-05 21:01:01 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkspbrokerAx.dll
[2014-12-05 21:01:01 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmifw.dll
[2014-12-05 21:01:01 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RMapi.dll
[2014-12-05 21:01:00 | 000,272,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FWPUCLNT.DLL
[2014-12-05 21:01:00 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smbwmiv2.dll
[2014-12-05 21:01:00 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppnp.dll
[2014-12-05 21:01:00 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BootMenuUX.dll
[2014-12-05 21:01:00 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CscMig.dll
[2014-12-05 21:01:00 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uexfat.dll
[2014-12-05 21:01:00 | 000,073,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Credentials.UI.CredentialPicker.dll
[2014-12-05 21:00:59 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSXP32.dll
[2014-12-05 21:00:59 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthBroker.dll
[2014-12-05 21:00:59 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fms.dll
[2014-12-05 21:00:59 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shsetup.dll
[2014-12-05 21:00:59 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SPInf.dll
[2014-12-05 21:00:59 | 000,076,800 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\VaultRoaming.dll
[2014-12-05 21:00:58 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Winlangdb.dll
[2014-12-05 21:00:58 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\modemui.dll
[2014-12-05 21:00:58 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsdmo.dll
[2014-12-05 21:00:58 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\desk.cpl
[2014-12-05 21:00:58 | 000,168,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\basecsp.dll
[2014-12-05 21:00:58 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SoundRecorder.exe
[2014-12-05 21:00:58 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\raserver.exe
[2014-12-05 21:00:58 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adrclient.dll
[2014-12-05 21:00:58 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrahc.dll
[2014-12-05 21:00:58 | 000,099,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptxml.dll
[2014-12-05 21:00:58 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmjpegdec.dll
[2014-12-05 21:00:58 | 000,090,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfAACEnc.dll
[2014-12-05 21:00:58 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Devices.dll
[2014-12-05 21:00:58 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontsub.dll
[2014-12-05 21:00:58 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CallButtons.dll
[2014-12-05 21:00:58 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ELSCore.dll
[2014-12-05 21:00:57 | 000,450,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RASMM.dll
[2014-12-05 21:00:57 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\discan.dll
[2014-12-05 21:00:57 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\globinputhost.dll
[2014-12-05 21:00:57 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Robocopy.exe
[2014-12-05 21:00:57 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.HostName.dll
[2014-12-05 21:00:57 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinRtTracing.dll
[2014-12-05 21:00:57 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskkill.exe
[2014-12-05 21:00:56 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceStatus.dll
[2014-12-05 21:00:56 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2014-12-05 21:00:56 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msorcl32.dll
[2014-12-05 21:00:56 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceClassExtension.dll
[2014-12-05 21:00:56 | 000,110,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfps.dll
[2014-12-05 21:00:56 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinMsoIrmProtector.dll
[2014-12-05 21:00:56 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\immersivetpmvscmgrsvr.exe
[2014-12-05 21:00:56 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinOpcIrmProtector.dll
[2014-12-05 21:00:56 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmvscmgrsvr.exe
[2014-12-05 21:00:56 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rmttpmvscmgrsvr.exe
[2014-12-05 21:00:56 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winethc.dll
[2014-12-05 21:00:56 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wevtfwd.dll
[2014-12-05 21:00:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.WiFiDirect.dll
[2014-12-05 21:00:56 | 000,018,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompPkgSup.dll
[2014-12-05 21:00:55 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpd_ci.dll
[2014-12-05 21:00:55 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfrgui.exe
[2014-12-05 21:00:55 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistCleaner.dll
[2014-12-05 21:00:55 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmAuto.dll
[2014-12-05 21:00:55 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityCommon.dll
[2014-12-05 21:00:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupugc.exe
[2014-12-05 21:00:55 | 000,085,504 | ---- | C] (Microsoft) -- C:\WINDOWS\System32\SMBHelperClass.dll
[2014-12-05 21:00:55 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systeminfo.exe
[2014-12-05 21:00:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TabbtnEx.dll
[2014-12-05 21:00:55 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2014-12-05 21:00:54 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsigd.dll
[2014-12-05 21:00:54 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvenotify.exe
[2014-12-05 21:00:54 | 000,172,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systemreset.exe
[2014-12-05 21:00:54 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\glu32.dll
[2014-12-05 21:00:54 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mimofcodec.dll
[2014-12-05 21:00:54 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdart.dll
[2014-12-05 21:00:54 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vssadmin.exe
[2014-12-05 21:00:54 | 000,108,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\consent.exe
[2014-12-05 21:00:54 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdBth.dll
[2014-12-05 21:00:54 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWCN.dll
[2014-12-05 21:00:54 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logagent.exe
[2014-12-05 21:00:54 | 000,067,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskhostex.exe
[2014-12-05 21:00:54 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Networking.Sockets.PushEnabledApplication.dll
[2014-12-05 21:00:54 | 000,030,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ploptin.dll
[2014-12-05 21:00:53 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cttune.exe
[2014-12-05 21:00:53 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingFolder.dll
[2014-12-05 21:00:53 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceSetupManagerAPI.dll
[2014-12-05 21:00:53 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IdCtrls.dll
[2014-12-05 21:00:53 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vaultcli.dll
[2014-12-05 21:00:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccu32.dll
[2014-12-05 21:00:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbccr32.dll
[2014-12-05 21:00:53 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDSAppXHelper.dll
[2014-12-05 21:00:53 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AepRoam.dll
[2014-12-05 21:00:52 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RstrtMgr.dll
[2014-12-05 21:00:52 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3mm.dll
[2014-12-05 21:00:52 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SimAuth.dll
[2014-12-05 21:00:52 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeApi.dll
[2014-12-05 21:00:52 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmview.ocx
[2014-12-05 21:00:52 | 000,091,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OpenWith.exe
[2014-12-05 21:00:52 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnshc.dll
[2014-12-05 21:00:52 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eqossnap.dll
[2014-12-05 21:00:52 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsiwmi.dll
[2014-12-05 21:00:52 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthRadioMedia.dll
[2014-12-05 21:00:51 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irftp.exe
[2014-12-05 21:00:51 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveprompt.exe
[2014-12-05 21:00:51 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmcsp.dll
[2014-12-05 21:00:51 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logman.exe
[2014-12-05 21:00:51 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tasklist.exe
[2014-12-05 21:00:51 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConsentUX.dll
[2014-12-05 21:00:51 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xcopy.exe
[2014-12-05 21:00:50 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Bubbles.scr
[2014-12-05 21:00:50 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\compstui.dll
[2014-12-05 21:00:50 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdadiag.dll
[2014-12-05 21:00:50 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Mystify.scr
[2014-12-05 21:00:50 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Ribbons.scr
[2014-12-05 21:00:50 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mi.dll
[2014-12-05 21:00:50 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\QSVRMGMT.DLL
[2014-12-05 21:00:50 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TpmInit.exe
[2014-12-05 21:00:50 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmstp.exe
[2014-12-05 21:00:50 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFoldersGPExt.dll
[2014-12-05 21:00:50 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConfigureExpandedStorage.dll
[2014-12-05 21:00:50 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\basesrv.dll
[2014-12-05 21:00:49 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlandlg.dll
[2014-12-05 21:00:49 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\t2embed.dll
[2014-12-05 21:00:49 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profprov.dll
[2014-12-05 21:00:49 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceElementSource.dll
[2014-12-05 21:00:49 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fphc.dll
[2014-12-05 21:00:49 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_ssp_isv.dll
[2014-12-05 21:00:49 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secproc_ssp.dll
[2014-12-05 21:00:49 | 000,076,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KeyboardFilterSvc.dll
[2014-12-05 21:00:49 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertPolEng.dll
[2014-12-05 21:00:49 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Syncreg.dll
[2014-12-05 21:00:49 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Custom.dll
[2014-12-05 21:00:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umb.dll
[2014-12-05 21:00:49 | 000,047,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kdusb.dll
[2014-12-05 21:00:48 | 001,129,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscui.cpl
[2014-12-05 21:00:48 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdedit.exe
[2014-12-05 21:00:48 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icm32.dll
[2014-12-05 21:00:48 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddpchunk.dll
[2014-12-05 21:00:48 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2014-12-05 21:00:48 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\korwbrkr.dll
[2014-12-05 21:00:48 | 000,142,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kd_02_8086.dll
[2014-12-05 21:00:48 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuwebv.dll
[2014-12-05 21:00:48 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasacct.dll
[2014-12-05 21:00:48 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndishc.dll
[2014-12-05 21:00:48 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getmac.exe
[2014-12-05 21:00:48 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scripto.dll
[2014-12-05 21:00:48 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prvdmofcomp.dll
[2014-12-05 21:00:48 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\g711codc.ax
[2014-12-05 21:00:47 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colorui.dll
[2014-12-05 21:00:47 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwlauncher.dll
[2014-12-05 21:00:47 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SNTSearch.dll
[2014-12-05 21:00:47 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\autoplay.dll
[2014-12-05 21:00:47 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsutil.dll
[2014-12-05 21:00:47 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iashlpr.dll
[2014-12-05 21:00:47 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olecli32.dll
[2014-12-05 21:00:47 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\synceng.dll
[2014-12-05 21:00:47 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\packager.dll
[2014-12-05 21:00:47 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WABSyncProvider.dll
[2014-12-05 21:00:47 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fmifs.dll
[2014-12-05 21:00:46 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbceip.dll
[2014-12-05 21:00:46 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndfhcdiscovery.dll
[2014-12-05 21:00:46 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\correngine.dll
[2014-12-05 21:00:46 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\driverquery.exe
[2014-12-05 21:00:46 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsrchapi.dll
[2014-12-05 21:00:46 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netprovisionsp.dll
[2014-12-05 21:00:46 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsrchph.dll
[2014-12-05 21:00:46 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpninprc.dll
[2014-12-05 21:00:45 | 000,383,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlansec.dll
[2014-12-05 21:00:45 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systemcpl.dll
[2014-12-05 21:00:45 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scksp.dll
[2014-12-05 21:00:45 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2014-12-05 21:00:45 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAMM.dll
[2014-12-05 21:00:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NdisImPlatform.dll
[2014-12-05 21:00:45 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnApi.dll
[2014-12-05 21:00:45 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BrokerLib.dll
[2014-12-05 21:00:45 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\loghours.dll
[2014-12-05 21:00:45 | 000,066,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sessionmsg.exe
[2014-12-05 21:00:45 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wecapi.dll
[2014-12-05 21:00:45 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Background.dll
[2014-12-05 21:00:45 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\threadpoolwinrt.dll
[2014-12-05 21:00:44 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskbarcpl.dll
[2014-12-05 21:00:44 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aitagent.exe
[2014-12-05 21:00:44 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorAPI.dll
[2014-12-05 21:00:44 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MicrosoftAccountTokenProvider.dll
[2014-12-05 21:00:44 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apprepsync.dll
[2014-12-05 21:00:44 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsutil.exe
[2014-12-05 21:00:44 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmsynth.dll
[2014-12-05 21:00:44 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlgpclnt.dll
[2014-12-05 21:00:44 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dafWCN.dll
[2014-12-05 21:00:44 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiascanprofiles.dll
[2014-12-05 21:00:44 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cliconfg.dll
[2014-12-05 21:00:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\makecab.exe
[2014-12-05 21:00:44 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasads.dll
[2014-12-05 21:00:44 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\udhisapi.dll
[2014-12-05 21:00:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\playlistfolder.dll
[2014-12-05 21:00:44 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\net.exe
[2014-12-05 21:00:44 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddrawex.dll
[2014-12-05 21:00:43 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\L2SecHC.dll
[2014-12-05 21:00:43 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdboot.exe
[2014-12-05 21:00:43 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeParserTask.exe
[2014-12-05 21:00:43 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciavi32.dll
[2014-12-05 21:00:43 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.exe
[2014-12-05 21:00:43 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsockhc.dll
[2014-12-05 21:00:43 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2014-12-05 21:00:43 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Storprop.dll
[2014-12-05 21:00:43 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mbussdapi.dll
[2014-12-05 21:00:43 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2014-12-05 21:00:43 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devrtl.dll
[2014-12-05 21:00:43 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vbisurf.ax
[2014-12-05 21:00:42 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2014-12-05 21:00:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EAPQEC.DLL
[2014-12-05 21:00:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\igdDiag.dll
[2014-12-05 21:00:42 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\frprov.dll
[2014-12-05 21:00:42 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unimdmat.dll
[2014-12-05 21:00:42 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StorageContextHandler.dll
[2014-12-05 21:00:42 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iasdatastore.dll
[2014-12-05 21:00:42 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssign32.dll
[2014-12-05 21:00:42 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3hc.dll
[2014-12-05 21:00:42 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpowmi.dll
[2014-12-05 21:00:42 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ustprov.dll
[2014-12-05 21:00:41 | 000,186,368 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\l3codecp.acm
[2014-12-05 21:00:41 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werui.dll
[2014-12-05 21:00:41 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpclean.dll
[2014-12-05 21:00:41 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapistub.dll
[2014-12-05 21:00:41 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2014-12-05 21:00:41 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidfdp.dll
[2014-12-05 21:00:41 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wecutil.exe
[2014-12-05 21:00:41 | 000,080,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcd.dll
[2014-12-05 21:00:41 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2014-12-05 21:00:41 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispdiag.exe
[2014-12-05 21:00:41 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Renewal.dll
[2014-12-05 21:00:41 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingHost.exe
[2014-12-05 21:00:41 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wkscli.dll
[2014-12-05 21:00:41 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSManMigrationPlugin.dll
[2014-12-05 21:00:41 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fveskybackup.dll
[2014-12-05 21:00:41 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiMigPlugin.dll
[2014-12-05 21:00:41 | 000,021,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsrole.dll
[2014-12-05 21:00:40 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uxlib.dll
[2014-12-05 21:00:40 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dsui.dll
[2014-12-05 21:00:40 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\splwow64.exe
[2014-12-05 21:00:40 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsvc.dll
[2014-12-05 21:00:40 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvinst.exe
[2014-12-05 21:00:40 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootcfg.exe
[2014-12-05 21:00:40 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlahc.dll
[2014-12-05 21:00:40 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Utilman.exe
[2014-12-05 21:00:40 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSROUTE.dll
[2014-12-05 21:00:40 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2014-12-05 21:00:40 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ftp.exe
[2014-12-05 21:00:40 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\networkitemfactory.dll
[2014-12-05 21:00:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsigd.dll
[2014-12-05 21:00:39 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onexui.dll
[2014-12-05 21:00:39 | 000,297,472 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\atmfd.dll
[2014-12-05 21:00:39 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddputils.dll
[2014-12-05 21:00:39 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsquirt.exe
[2014-12-05 21:00:39 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsiwmiv2.dll
[2014-12-05 21:00:39 | 000,085,504 | ---- | C] (Radius Inc.) -- C:\WINDOWS\System32\iccvid.dll
[2014-12-05 21:00:39 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\w32tm.exe
[2014-12-05 21:00:39 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WfHC.dll
[2014-12-05 21:00:39 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PortableDeviceConnectApi.dll
[2014-12-05 21:00:39 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Groupinghc.dll
[2014-12-05 21:00:39 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2014-12-05 21:00:39 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msident.dll
[2014-12-05 21:00:39 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nduprov.dll
[2014-12-05 21:00:39 | 000,043,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wldp.dll
[2014-12-05 21:00:39 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsdwmdr.dll
[2014-12-05 21:00:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ConnectedAccountState.dll
[2014-12-05 21:00:38 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXST30.dll
[2014-12-05 21:00:38 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdminst.dll
[2014-12-05 21:00:38 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSUTILITY.dll
[2014-12-05 21:00:38 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gcdef.dll
[2014-12-05 21:00:38 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scavengeui.dll
[2014-12-05 21:00:38 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dasHost.exe
[2014-12-05 21:00:38 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Pnrphc.dll
[2014-12-05 21:00:38 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WwanRadioManager.dll
[2014-12-05 21:00:38 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gacinstall.dll
[2014-12-05 21:00:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\format.com
[2014-12-05 21:00:37 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EaseOfAccessDialog.exe
[2014-12-05 21:00:37 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netid.dll
[2014-12-05 21:00:37 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recovery.dll
[2014-12-05 21:00:37 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fwcfg.dll
[2014-12-05 21:00:37 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\remotesp.tsp
[2014-12-05 21:00:37 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSCOM.dll
[2014-12-05 21:00:37 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nslookup.exe
[2014-12-05 21:00:37 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adhsvc.dll
[2014-12-05 21:00:37 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\QCLIPROV.DLL
[2014-12-05 21:00:37 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dxof.dll
[2014-12-05 21:00:37 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlanRadioManager.dll
[2014-12-05 21:00:37 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmloader.dll
[2014-12-05 21:00:36 | 000,736,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adtschema.dll
[2014-12-05 21:00:36 | 000,305,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wusa.exe
[2014-12-05 21:00:36 | 000,178,688 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\System32\Defrag.exe
[2014-12-05 21:00:36 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keymgr.dll
[2014-12-05 21:00:36 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcaSvc.dll
[2014-12-05 21:00:36 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWWIN.EXE
[2014-12-05 21:00:36 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ScDeviceEnum.dll
[2014-12-05 21:00:36 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwreg.dll
[2014-12-05 21:00:36 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrscmd.dll
[2014-12-05 21:00:36 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BluetoothApis.dll
[2014-12-05 21:00:36 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DHCPQEC.DLL
[2014-12-05 21:00:36 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avicap32.dll
[2014-12-05 21:00:36 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MaintenanceUI.dll
[2014-12-05 21:00:36 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortWindows6Compat.dll
[2014-12-05 21:00:36 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\findnetprinters.dll
[2014-12-05 21:00:36 | 000,054,272 | ---- | C] (Twain Working Group) -- C:\WINDOWS\twain_32.dll
[2014-12-05 21:00:36 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmlfilter.dll
[2014-12-05 21:00:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagschd.dll
[2014-12-05 21:00:36 | 000,036,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContentServer.exe
[2014-12-05 21:00:35 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2014-12-05 21:00:35 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apprepapi.dll
[2014-12-05 21:00:35 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isoburn.exe
[2014-12-05 21:00:35 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsadu.dll
[2014-12-05 21:00:35 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spfileq.dll
[2014-12-05 21:00:35 | 000,076,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.exe
[2014-12-05 21:00:35 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SMSRouter.dll
[2014-12-05 21:00:35 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuditPolicyGPInterop.dll
[2014-12-05 21:00:35 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2nacp.dll
[2014-12-05 21:00:35 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhtask.dll
[2014-12-05 21:00:35 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcleanup.dll
[2014-12-05 21:00:35 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bidispl.dll
[2014-12-05 21:00:34 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\McxDriv.dll
[2014-12-05 21:00:34 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PNPXAssoc.dll
[2014-12-05 21:00:34 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netsh.exe
[2014-12-05 21:00:34 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2014-12-05 21:00:34 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsRdpWebAccess.dll
[2014-12-05 21:00:34 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pdhui.dll
[2014-12-05 21:00:34 | 000,036,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EmbeddedAppLauncherConfig.dll
[2014-12-05 21:00:34 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Shell.Search.UriHandler.dll
[2014-12-05 21:00:34 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmband.dll
[2014-12-05 21:00:34 | 000,034,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CredentialUIBroker.exe
[2014-12-05 21:00:34 | 000,030,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountBroker.exe
[2014-12-05 21:00:34 | 000,028,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CameraSettingsUIHost.exe
[2014-12-05 21:00:34 | 000,026,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PickerHost.exe
[2014-12-05 21:00:33 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uireng.dll
[2014-12-05 21:00:33 | 000,136,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wermgr.exe
[2014-12-05 21:00:33 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcwutl.dll
[2014-12-05 21:00:33 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevDispItemProvider.dll
[2014-12-05 21:00:33 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaacmgr.exe
[2014-12-05 21:00:33 | 000,064,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidapi.dll
[2014-12-05 21:00:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasdiag.dll
[2014-12-05 21:00:33 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2014-12-05 21:00:33 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsvd.dll
[2014-12-05 21:00:33 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2014-12-05 21:00:33 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwancfg.dll
[2014-12-05 21:00:33 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\offreg.dll
[2014-12-05 21:00:33 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RegCtrl.dll
[2014-12-05 21:00:33 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncHost.exe
[2014-12-05 21:00:33 | 000,040,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CloudNotifications.exe
[2014-12-05 21:00:33 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cnvfat.dll
[2014-12-05 21:00:32 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shrpubw.exe
[2014-12-05 21:00:32 | 000,150,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpps.dll
[2014-12-05 21:00:32 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EncDump.dll
[2014-12-05 21:00:32 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SpaceAgent.exe
[2014-12-05 21:00:32 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spbcd.dll
[2014-12-05 21:00:32 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountControlSettings.dll
[2014-12-05 21:00:32 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintBrmUi.exe
[2014-12-05 21:00:32 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\btpanui.dll
[2014-12-05 21:00:32 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setbcdlocale.dll
[2014-12-05 21:00:32 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acppage.dll
[2014-12-05 21:00:32 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdPnp.dll
[2014-12-05 21:00:32 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\luainstall.dll
[2014-12-05 21:00:32 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Printers.Extensions.dll
[2014-12-05 21:00:32 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
[2014-12-05 21:00:31 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nltest.exe
[2014-12-05 21:00:31 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RelPost.exe
[2014-12-05 21:00:31 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dab.dll
[2014-12-05 21:00:31 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\console.dll
[2014-12-05 21:00:31 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srhelper.dll
[2014-12-05 21:00:31 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DFDWiz.exe
[2014-12-05 21:00:31 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srmtrace.dll
[2014-12-05 21:00:31 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\openfiles.exe
[2014-12-05 21:00:31 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pautoenr.dll
[2014-12-05 21:00:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UXInit.dll
[2014-12-05 21:00:31 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ucmhc.dll
[2014-12-05 21:00:31 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdl32.exe
[2014-12-05 21:00:31 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HelpPaneProxy.dll
[2014-12-05 21:00:31 | 000,039,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdmo.dll
[2014-12-05 21:00:31 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciqtz32.dll
[2014-12-05 21:00:31 | 000,038,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\utildll.dll
[2014-12-05 21:00:31 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rrinstaller.exe
[2014-12-05 21:00:31 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msimtf.dll
[2014-12-05 21:00:31 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mimefilt.dll
[2014-12-05 21:00:31 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndfetw.dll
[2014-12-05 21:00:30 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSST.dll
[2014-12-05 21:00:30 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\takeown.exe
[2014-12-05 21:00:30 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keyiso.dll
[2014-12-05 21:00:30 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxSysprep.dll
[2014-12-05 21:00:30 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\signdrv.dll
[2014-12-05 21:00:30 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoveDeviceContextHandler.dll
[2014-12-05 21:00:29 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfmon.exe
[2014-12-05 21:00:29 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorAuthn.exe
[2014-12-05 21:00:29 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbio.dll
[2014-12-05 21:00:29 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcirt.dll
[2014-12-05 21:00:29 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpremove.exe
[2014-12-05 21:00:29 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhlisten.dll
[2014-12-05 21:00:29 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeUISrv.exe
[2014-12-05 21:00:29 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAConn.dll
[2014-12-05 21:00:29 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SetNetworkLocation.dll
[2014-12-05 21:00:29 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthExt.dll
[2014-12-05 21:00:29 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceDisplayStatusManager.dll
[2014-12-05 21:00:29 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CredentialMigrationHandler.dll
[2014-12-05 21:00:28 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WWanHC.dll
[2014-12-05 21:00:28 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RDSPnf.exe
[2014-12-05 21:00:28 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setx.exe
[2014-12-05 21:00:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hhsetup.dll
[2014-12-05 21:00:28 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mskeyprotect.dll
[2014-12-05 21:00:28 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MbaeXmlParser.dll
[2014-12-05 21:00:28 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\traffic.dll
[2014-12-05 21:00:28 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlayToStatusProvider.dll
[2014-12-05 21:00:28 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FdDevQuery.dll
[2014-12-05 21:00:28 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmsDeviceAccessRevocation.dll
[2014-12-05 21:00:27 | 000,466,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\main.cpl
[2014-12-05 21:00:27 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdechangepin.exe
[2014-12-05 21:00:27 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hdwwiz.cpl
[2014-12-05 21:00:27 | 000,069,120 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\l3codeca.acm
[2014-12-05 21:00:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sigverif.exe
[2014-12-05 21:00:27 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cngprovider.dll
[2014-12-05 21:00:27 | 000,054,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlrmdr.exe
[2014-12-05 21:00:27 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capiprovider.dll
[2014-12-05 21:00:27 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaui.dll
[2014-12-05 21:00:27 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapiprovider.dll
[2014-12-05 21:00:27 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wincredprovider.dll
[2014-12-05 21:00:27 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2014-12-05 21:00:26 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elslad.dll
[2014-12-05 21:00:26 | 000,286,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS
[2014-12-05 21:00:26 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddptrace.dll
[2014-12-05 21:00:26 | 000,092,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootsect.exe
[2014-12-05 21:00:26 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SCardDlg.dll
[2014-12-05 21:00:26 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpmonui.dll
[2014-12-05 21:00:26 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\whoami.exe
[2014-12-05 21:00:26 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PnPUnattend.exe
[2014-12-05 21:00:26 | 000,051,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwapi.dll
[2014-12-05 21:00:26 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2014-12-05 21:00:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bderepair.dll
[2014-12-05 21:00:26 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dataclen.dll
[2014-12-05 21:00:26 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistAD.dll
[2014-12-05 21:00:26 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hcproviders.dll
[2014-12-05 21:00:26 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Portable.dll
[2014-12-05 21:00:26 | 000,029,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PasswordOnWakeSettingFlyout.exe
[2014-12-05 21:00:26 | 000,025,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemSettingsRemoveDevice.exe
[2014-12-05 21:00:26 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msisip.dll
[2014-12-05 21:00:25 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSTIFF.dll
[2014-12-05 21:00:25 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SrpUxNativeSnapIn.dll
[2014-12-05 21:00:25 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpsapi.dll
[2014-12-05 21:00:25 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EhStorPwdMgr.dll
[2014-12-05 21:00:25 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hbaapi.dll
[2014-12-05 21:00:25 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reg.exe
[2014-12-05 21:00:25 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fmapi.dll
[2014-12-05 21:00:25 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\auditpol.exe
[2014-12-05 21:00:25 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adprovider.dll
[2014-12-05 21:00:25 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndiscapCfg.dll
[2014-12-05 21:00:25 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msports.dll
[2014-12-05 21:00:25 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortServer2003Compat.dll
[2014-12-05 21:00:25 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdchange.exe
[2014-12-05 21:00:25 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RoamingSecurity.dll
[2014-12-05 21:00:25 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\olesvr32.dll
[2014-12-05 21:00:25 | 000,031,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avrt.dll
[2014-12-05 21:00:25 | 000,029,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RuntimeBroker.exe
[2014-12-05 21:00:25 | 000,024,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vmbuspipe.dll
[2014-12-05 21:00:24 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2014-12-05 21:00:24 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcdAutoSetup.dll
[2014-12-05 21:00:24 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hotplug.dll
[2014-12-05 21:00:24 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsidsc.dll
[2014-12-05 21:00:24 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispci.dll
[2014-12-05 21:00:24 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mf3216.dll
[2014-12-05 21:00:24 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Globalization.Fontgroups.dll
[2014-12-05 21:00:24 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Wwanpref.dll
[2014-12-05 21:00:24 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSTheme.exe
[2014-12-05 21:00:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PSModuleDiscoveryProvider.dll
[2014-12-05 21:00:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmmon32.exe
[2014-12-05 21:00:24 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2014-12-05 21:00:24 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintIsolationProxy.dll
[2014-12-05 21:00:24 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cttunesvr.exe
[2014-12-05 21:00:24 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printfilterpipelineprxy.dll
[2014-12-05 21:00:24 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityServicePal.dll
[2014-12-05 21:00:24 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nshhttp.dll
[2014-12-05 21:00:24 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ThumbnailExtractionHost.exe
[2014-12-05 21:00:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceDriverRetrievalClient.dll
[2014-12-05 21:00:24 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AzSqlExt.dll
[2014-12-05 21:00:24 | 000,026,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfpmp.exe
[2014-12-05 21:00:24 | 000,026,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SysResetErr.exe
[2014-12-05 21:00:24 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\elsTrans.dll
[2014-12-05 21:00:24 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxsstore.dll
[2014-12-05 21:00:23 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sethc.exe
[2014-12-05 21:00:23 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cleanmgr.exe
[2014-12-05 21:00:23 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys
[2014-12-05 21:00:23 | 000,091,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vmbus.sys
[2014-12-05 21:00:23 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PlaySndSrv.dll
[2014-12-05 21:00:23 | 000,070,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys
[2014-12-05 21:00:23 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhautoplay.dll
[2014-12-05 21:00:23 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clfsw32.dll
[2014-12-05 21:00:23 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmutil.dll
[2014-12-05 21:00:23 | 000,044,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vmstorfl.sys
[2014-12-05 21:00:23 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\feclient.dll
[2014-12-05 21:00:23 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uicom.dll
[2014-12-05 21:00:23 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\htui.dll
[2014-12-05 21:00:23 | 000,034,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KeyboardFilterCore.dll
[2014-12-05 21:00:23 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpscript.dll
[2014-12-05 21:00:23 | 000,032,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFaultSecure.exe
[2014-12-05 21:00:23 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwsso.dll
[2014-12-05 21:00:23 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmiprop.dll
[2014-12-05 21:00:22 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irprops.cpl
[2014-12-05 21:00:22 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certCredProvider.dll
[2014-12-05 21:00:22 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vmictimeprovider.dll
[2014-12-05 21:00:22 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SrTasks.exe
[2014-12-05 21:00:22 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\forfiles.exe
[2014-12-05 21:00:22 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RotMgr.dll
[2014-12-05 21:00:22 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scext.dll
[2014-12-05 21:00:22 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpprnext.dll
[2014-12-05 21:00:22 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventcreate.exe
[2014-12-05 21:00:22 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnNetsh.dll
[2014-12-05 21:00:22 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tvratings.dll
[2014-12-05 21:00:22 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dtsh.dll
[2014-12-05 21:00:22 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbrand.dll
[2014-12-05 21:00:22 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rtffilt.dll
[2014-12-05 21:00:22 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceSetupStatusProvider.dll
[2014-12-05 21:00:22 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mode.com
[2014-12-05 21:00:22 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LockScreenContentHost.dll
[2014-12-05 21:00:22 | 000,017,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SlideToShutDown.exe
[2014-12-05 21:00:21 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicli.exe
[2014-12-05 21:00:21 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhmanagew.exe
[2014-12-05 21:00:21 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti_ci.dll
[2014-12-05 21:00:21 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDPrintProxy.DLL
[2014-12-05 21:00:21 | 000,056,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\winhv.sys
[2014-12-05 21:00:21 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsnmp32.dll
[2014-12-05 21:00:21 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasmbmgr.dll
[2014-12-05 21:00:21 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drttransport.dll
[2014-12-05 21:00:21 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnppolicy.dll
[2014-12-05 21:00:21 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfctrs.dll
[2014-12-05 21:00:21 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSEXT32.dll
[2014-12-05 21:00:21 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSa.exe
[2014-12-05 21:00:21 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sfc.exe
[2014-12-05 21:00:21 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msscntrs.dll
[2014-12-05 21:00:21 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\where.exe
[2014-12-05 21:00:21 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fc.exe
[2014-12-05 21:00:20 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWGP.dll
[2014-12-05 21:00:20 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\repair-bde.exe
[2014-12-05 21:00:20 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspatchc.dll
[2014-12-05 21:00:20 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDScanProxy.dll
[2014-12-05 21:00:20 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhevents.dll
[2014-12-05 21:00:20 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiarpc.dll
[2014-12-05 21:00:20 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2014-12-05 21:00:20 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasphone.exe
[2014-12-05 21:00:20 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cipher.exe
[2014-12-05 21:00:20 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpkinstall.exe
[2014-12-05 21:00:20 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MirrorDrvCompat.dll
[2014-12-05 21:00:20 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxssrv.dll
[2014-12-05 21:00:20 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\choice.exe
[2014-12-05 21:00:20 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netcfg.exe
[2014-12-05 21:00:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\timeout.exe
[2014-12-05 21:00:20 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clip.exe
[2014-12-05 21:00:20 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\more.com
[2014-12-05 21:00:20 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dswave.dll
[2014-12-05 21:00:20 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comp.exe
[2014-12-05 21:00:19 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuditNativeSnapIn.dll
[2014-12-05 21:00:19 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\joy.cpl
[2014-12-05 21:00:19 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Media.Streaming.ps.dll
[2014-12-05 21:00:19 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KdsCli.dll
[2014-12-05 21:00:19 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napdsnap.dll
[2014-12-05 21:00:19 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\radarrs.dll
[2014-12-05 21:00:19 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PCPKsp.dll
[2014-12-05 21:00:19 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\typeperf.exe
[2014-12-05 21:00:19 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iaspolcy.dll
[2014-12-05 21:00:19 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umpoext.dll
[2014-12-05 21:00:19 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdrleakdiag.exe
[2014-12-05 21:00:19 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\runonce.exe
[2014-12-05 21:00:19 | 000,032,768 | ---- | C] (Twain Working Group) -- C:\WINDOWS\twunk_32.exe
[2014-12-05 21:00:19 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dialer.exe
[2014-12-05 21:00:19 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2014-12-05 21:00:19 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpscript.exe
[2014-12-05 21:00:19 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ByteCodeGenerator.exe
[2014-12-05 21:00:19 | 000,026,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winnsi.dll
[2014-12-05 21:00:19 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthMtpContextHandler.dll
[2014-12-05 21:00:19 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2014-12-05 21:00:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Dot3Conn.dll
[2014-12-05 21:00:19 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsCtfMonitor.dll
[2014-12-05 21:00:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshcon.dll
[2014-12-05 21:00:18 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompMgmtLauncher.exe
[2014-12-05 21:00:18 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drtprov.dll
[2014-12-05 21:00:18 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetmib1.dll
[2014-12-05 21:00:18 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\expand.exe
[2014-12-05 21:00:18 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tlscsp.dll
[2014-12-05 21:00:18 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energyprov.dll
[2014-12-05 21:00:18 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwrshplugin.dll
[2014-12-05 21:00:18 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Magnification.dll
[2014-12-05 21:00:18 | 000,035,840 | ---- | C] (Adobe Systems) -- C:\WINDOWS\System32\atmlib.dll
[2014-12-05 21:00:18 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdmlog.dll
[2014-12-05 21:00:18 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\waitfor.exe
[2014-12-05 21:00:18 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfmifs.dll
[2014-12-05 21:00:18 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2014-12-05 21:00:18 | 000,023,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\streamci.dll
[2014-12-05 21:00:18 | 000,020,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PurchaseWindowsLicense.exe
[2014-12-05 21:00:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Background.TimeBroker.dll
[2014-12-05 21:00:17 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tabcal.exe
[2014-12-05 21:00:17 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\profext.dll
[2014-12-05 21:00:17 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certenc.dll
[2014-12-05 21:00:17 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfscli.dll
[2014-12-05 21:00:17 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcicda.dll
[2014-12-05 21:00:17 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\relog.exe
[2014-12-05 21:00:17 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srumapi.dll
[2014-12-05 21:00:17 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmlua.dll
[2014-12-05 21:00:17 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aecache.dll
[2014-12-05 21:00:17 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmcfg32.dll
[2014-12-05 21:00:17 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pwlauncher.exe
[2014-12-05 21:00:17 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncPolicy.dll
[2014-12-05 21:00:17 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ureg.dll
[2014-12-05 21:00:17 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkwudrv.dll
[2014-12-05 21:00:16 | 000,083,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kdnet.dll
[2014-12-05 21:00:16 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sc.exe
[2014-12-05 21:00:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fthsvc.dll
[2014-12-05 21:00:16 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrs.exe
[2014-12-05 21:00:16 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SetProxyCredential.dll
[2014-12-05 21:00:16 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\crypttpmeksvc.dll
[2014-12-05 21:00:16 | 000,029,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kernel.appcore.dll
[2014-12-05 21:00:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\w32topl.dll
[2014-12-05 21:00:16 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcadm.dll
[2014-12-05 21:00:16 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmpbk32.dll
[2014-12-05 21:00:16 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LldpNotify.dll
[2014-12-05 21:00:15 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PkgMgr.exe
[2014-12-05 21:00:15 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssitlb.dll
[2014-12-05 21:00:15 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bcdsrv.dll
[2014-12-05 21:00:15 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SubscriptionMgr.dll
[2014-12-05 21:00:15 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwanprotdim.dll
[2014-12-05 21:00:15 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvcfg.exe
[2014-12-05 21:00:15 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msauserext.dll
[2014-12-05 21:00:15 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browcli.dll
[2014-12-05 21:00:15 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pid.dll
[2014-12-05 21:00:15 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\findstr.exe
[2014-12-05 21:00:15 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\datusage.dll
[2014-12-05 21:00:15 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfp.exe
[2014-12-05 21:00:15 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdWNet.dll
[2014-12-05 21:00:15 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Display.dll
[2014-12-05 21:00:15 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscisvif.dll
[2014-12-05 21:00:15 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storagewmi_passthru.dll
[2014-12-05 21:00:15 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easconsent.dll
[2014-12-05 21:00:15 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\convert.exe
[2014-12-05 21:00:14 | 000,163,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UCX01000.SYS
[2014-12-05 21:00:14 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupcln.dll
[2014-12-05 21:00:14 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmci.dll
[2014-12-05 21:00:14 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\djoin.exe
[2014-12-05 21:00:14 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PeerDistHttpTrans.dll
[2014-12-05 21:00:14 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AtBroker.exe
[2014-12-05 21:00:14 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efslsaext.dll
[2014-12-05 21:00:14 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Websocket.dll
[2014-12-05 21:00:14 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsiCofire.dll
[2014-12-05 21:00:14 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rfxvmt.dll
[2014-12-05 21:00:14 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shutdown.exe
[2014-12-05 21:00:14 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsjob.dll
[2014-12-05 21:00:14 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpui.dll
[2014-12-05 21:00:14 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsutil.dll
[2014-12-05 21:00:14 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WPDShextAutoplay.exe
[2014-12-05 21:00:14 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WofTasks.dll
[2014-12-05 21:00:14 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthpanapi.dll
[2014-12-05 21:00:14 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsdchngr.dll
[2014-12-05 21:00:14 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tbs.dll
[2014-12-05 21:00:14 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.Profile.SystemManufacturers.dll
[2014-12-05 21:00:14 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkdsk.exe
[2014-12-05 21:00:14 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\serwvdrv.dll
[2014-12-05 21:00:13 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MuiUnattend.exe
[2014-12-05 21:00:13 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcsvc6.dll
[2014-12-05 21:00:13 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VmdCoinstall.dll
[2014-12-05 21:00:13 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetVscCoinstall.dll
[2014-12-05 21:00:13 | 000,045,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wpcfltr.sys
[2014-12-05 21:00:13 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSMON.dll
[2014-12-05 21:00:13 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NETSTAT.EXE
[2014-12-05 21:00:13 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksetup.exe
[2014-12-05 21:00:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cryptdlg.dll
[2014-12-05 21:00:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MemoryDiagnostic.dll
[2014-12-05 21:00:13 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapprovp.dll
[2014-12-05 21:00:13 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcdProp.dll
[2014-12-05 21:00:13 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DefaultPrinterProvider.dll
[2014-12-05 21:00:13 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wfapigp.dll
[2014-12-05 21:00:13 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tree.com
[2014-12-05 21:00:12 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeHdCfg.exe
[2014-12-05 21:00:12 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cngcredui.dll
[2014-12-05 21:00:12 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmocx.dll
[2014-12-05 21:00:12 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dfdts.dll
[2014-12-05 21:00:12 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmiclnt.dll
[2014-12-05 21:00:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSManHTTPConfig.exe
[2014-12-05 21:00:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sscore.dll
[2014-12-05 21:00:12 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcpmib.dll
[2014-12-05 21:00:12 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icacls.exe
[2014-12-05 21:00:12 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\witnesswmiv2provider.dll
[2014-12-05 21:00:12 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsium.dll
[2014-12-05 21:00:12 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdsldr.exe
[2014-12-05 21:00:12 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\userinit.exe
[2014-12-05 21:00:12 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaProxy.exe
[2014-12-05 21:00:12 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srwmi.dll
[2014-12-05 21:00:12 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\encapi.dll
[2014-12-05 21:00:12 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\replace.exe
[2014-12-05 21:00:12 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hnetmon.dll
[2014-12-05 21:00:11 | 000,259,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS
[2014-12-05 21:00:11 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthci.dll
[2014-12-05 21:00:11 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PrintIsolationHost.exe
[2014-12-05 21:00:11 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SecEdit.exe
[2014-12-05 21:00:11 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpcnsh.dll
[2014-12-05 21:00:11 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapilua.dll
[2014-12-05 21:00:11 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsparse.dll
[2014-12-05 21:00:11 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmutil.dll
[2014-12-05 21:00:10 | 000,076,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pdc.sys
[2014-12-05 21:00:10 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\esentprf.dll
[2014-12-05 21:00:10 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsutilext.dll
[2014-12-05 21:00:10 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddodiag.exe
[2014-12-05 21:00:10 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hwrcomp.exe
[2014-12-05 21:00:10 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XInput1_4.dll
[2014-12-05 21:00:10 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapp.exe
[2014-12-05 21:00:10 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdeui.dll
[2014-12-05 21:00:10 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cacls.exe
[2014-12-05 21:00:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnscacheugc.exe
[2014-12-05 21:00:10 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsepno.dll
[2014-12-05 21:00:10 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wfdprov.dll
[2014-12-05 21:00:10 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrshost.exe
[2014-12-05 21:00:10 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\delegatorprovider.dll
[2014-12-05 21:00:10 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsperf.dll
[2014-12-05 21:00:10 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sspisrv.dll
[2014-12-05 21:00:10 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\attrib.exe
[2014-12-05 21:00:10 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shpafact.dll
[2014-12-05 21:00:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\doskey.exe
[2014-12-05 21:00:09 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xwizard.exe
[2014-12-05 21:00:09 | 000,036,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\intelpep.sys
[2014-12-05 21:00:09 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasmxs.dll
[2014-12-05 21:00:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\proquota.exe
[2014-12-05 21:00:09 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efssvc.dll
[2014-12-05 21:00:09 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cofiredm.dll
[2014-12-05 21:00:09 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\snmpapi.dll
[2014-12-05 21:00:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WsmAgent.dll
[2014-12-05 21:00:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CheckNetIsolation.exe
[2014-12-05 21:00:09 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netiougc.exe
[2014-12-05 21:00:09 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ias.dll
[2014-12-05 21:00:09 | 000,022,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys
[2014-12-05 21:00:09 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EventAggregation.dll
[2014-12-05 21:00:09 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbnmpntw.dll
[2014-12-05 21:00:09 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\compact.exe
[2014-12-05 21:00:09 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chkntfs.exe
[2014-12-05 21:00:09 | 000,018,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tbs.sys
[2014-12-05 21:00:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.System.RemoteDesktop.dll
[2014-12-05 21:00:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\find.exe
[2014-12-05 21:00:08 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lodctr.exe
[2014-12-05 21:00:08 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsmprovhost.exe
[2014-12-05 21:00:08 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipconfig.exe
[2014-12-05 21:00:08 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dsauth.dll
[2014-12-05 21:00:08 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinFax.dll
[2014-12-05 21:00:08 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcconf.dll
[2014-12-05 21:00:08 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifmon.dll
[2014-12-05 21:00:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dvdupgrd.exe
[2014-12-05 21:00:08 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgentc.exe
[2014-12-05 21:00:08 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fvecerts.dll
[2014-12-05 21:00:08 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jnwmon.dll
[2014-12-05 21:00:08 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kernelceip.dll
[2014-12-05 21:00:08 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prevhost.exe
[2014-12-05 21:00:08 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\procinst.dll
[2014-12-05 21:00:07 | 000,138,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wof.sys
[2014-12-05 21:00:07 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUDFCoinstaller.dll
[2014-12-05 21:00:07 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2014-12-05 21:00:07 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfproc.dll
[2014-12-05 21:00:07 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NetEvtFwdr.exe
[2014-12-05 21:00:07 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credwiz.exe
[2014-12-05 21:00:07 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxstrace.exe
[2014-12-05 21:00:07 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appsruprov.dll
[2014-12-05 21:00:07 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RpcPing.exe
[2014-12-05 21:00:07 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setspn.exe
[2014-12-05 21:00:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcconf.exe
[2014-12-05 21:00:07 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysntfy.dll
[2014-12-05 21:00:07 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\energytask.dll
[2014-12-05 21:00:07 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icsunattend.exe
[2014-12-05 21:00:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgentTask.dll
[2014-12-05 21:00:07 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeSyncTask.dll
[2014-12-05 21:00:07 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regidle.dll
[2014-12-05 21:00:06 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WorkFolders.exe
[2014-12-05 21:00:06 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FwRemoteSvr.dll
[2014-12-05 21:00:06 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vds_ps.dll
[2014-12-05 21:00:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2014-12-05 21:00:06 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdiasqmmodule.dll
[2014-12-05 21:00:06 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2014-12-05 21:00:06 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BthSQM.dll
[2014-12-05 21:00:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnsruprov.dll
[2014-12-05 21:00:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netbtugc.exe
[2014-12-05 21:00:06 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sisbkup.dll
[2014-12-05 21:00:06 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bridgeunattend.exe
[2014-12-05 21:00:06 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshqos.dll
[2014-12-05 21:00:06 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FileAppxStreamingDataSource.dll
[2014-12-05 21:00:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sscoreext.dll
[2014-12-05 21:00:05 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ocsetapi.dll
[2014-12-05 21:00:05 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fontview.exe
[2014-12-05 21:00:05 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlidnsp.dll
[2014-12-05 21:00:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\extrac32.exe
[2014-12-05 21:00:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdbinst.exe
[2014-12-05 21:00:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\davhlpr.dll
[2014-12-05 21:00:05 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winusb.dll
[2014-12-05 21:00:05 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mgmtapi.dll
[2014-12-05 21:00:05 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\StorSvc.dll
[2014-12-05 21:00:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmlprovi.dll
[2014-12-05 21:00:04 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssprxy.dll
[2014-12-05 21:00:04 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winlogonext.dll
[2014-12-05 21:00:04 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\idndl.dll
[2014-12-05 21:00:04 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\klist.exe
[2014-12-05 21:00:04 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Apphlpdm.dll
[2014-12-05 21:00:04 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syskey.exe
[2014-12-05 21:00:04 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BackgroundTransferHost.exe
[2014-12-05 21:00:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdiagnhost.exe
[2014-12-05 21:00:04 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wephostsvc.dll
[2014-12-05 21:00:04 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlaninst.dll
[2014-12-05 21:00:04 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shunimpl.dll
[2014-12-05 21:00:04 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capisp.dll
[2014-12-05 21:00:04 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxshared.dll
[2014-12-05 21:00:04 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mskeyprotcli.dll
[2014-12-05 21:00:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmstplua.dll
[2014-12-05 21:00:04 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshelper.dll
[2014-12-05 21:00:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\netbios.dll
[2014-12-05 21:00:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
[2014-12-05 21:00:04 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityCommonPal.dll
[2014-12-05 21:00:04 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pstask.dll
[2014-12-05 21:00:03 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CertEnrollCtrl.exe
[2014-12-05 21:00:03 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\at.exe
[2014-12-05 21:00:03 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaUacHelper.exe
[2014-12-05 21:00:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nci.dll
[2014-12-05 21:00:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ARP.EXE
[2014-12-05 21:00:03 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cofire.exe
[2014-12-05 21:00:03 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PnPutil.exe
[2014-12-05 21:00:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bi.dll
[2014-12-05 21:00:03 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regsvr32.exe
[2014-12-05 21:00:03 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fixmapi.exe
[2014-12-05 21:00:03 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskcomp.com
[2014-12-05 21:00:03 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\print.exe
[2014-12-05 21:00:03 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dciman32.dll
[2014-12-05 21:00:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IconCodecService.dll
[2014-12-05 21:00:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskcopy.com
[2014-12-05 21:00:02 | 015,784,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDORes.dll
[2014-12-05 21:00:02 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\virtdisk.dll
[2014-12-05 21:00:02 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2014-12-05 21:00:02 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2014-12-05 21:00:02 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasser.dll
[2014-12-05 21:00:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\userinitext.dll
[2014-12-05 21:00:02 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\label.exe
[2014-12-05 21:00:02 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DefaultDeviceManager.dll
[2014-12-05 21:00:01 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GlobCollationHost.dll
[2014-12-05 21:00:01 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventvwr.exe
[2014-12-05 21:00:01 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werdiagcontroller.dll
[2014-12-05 21:00:01 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceassociation.dll
[2014-12-05 21:00:01 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OnDemandConnRouteHelper.dll
[2014-12-05 21:00:01 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\upnpcont.exe
[2014-12-05 21:00:01 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedcli.dll
[2014-12-05 21:00:01 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wwaninst.dll
[2014-12-05 21:00:01 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wksprtPS.dll
[2014-12-05 21:00:01 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasctrs.dll
[2014-12-05 21:00:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WofUtil.dll
[2014-12-05 21:00:01 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlansvcpal.dll
[2014-12-05 21:00:01 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\slpts.dll
[2014-12-05 21:00:01 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clb.dll
[2014-12-05 21:00:01 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TtlsExt.dll
[2014-12-05 21:00:01 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nrpsrv.dll
[2014-12-05 21:00:01 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shfolder.dll
[2014-12-05 21:00:00 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hwrreg.exe
[2014-12-05 21:00:00 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\baaupdate.exe
[2014-12-05 21:00:00 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sxproxy.dll
[2014-12-05 21:00:00 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pots.dll
[2014-12-05 21:00:00 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ddp_ps.dll
[2014-12-05 21:00:00 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcacli.dll
[2014-12-05 21:00:00 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ROUTE.EXE
[2014-12-05 21:00:00 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PING.EXE
[2014-12-05 21:00:00 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spopk.dll
[2014-12-05 21:00:00 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaui.exe
[2014-12-05 21:00:00 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ktmutil.exe
[2014-12-05 21:00:00 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ifsutilx.dll
[2014-12-05 21:00:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CHxReadingStringIME.dll
[2014-12-05 20:59:59 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbctrac.dll
[2014-12-05 20:59:59 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MultiDigiMon.exe
[2014-12-05 20:59:59 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tpmcompc.dll
[2014-12-05 20:59:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wcmapi.dll
[2014-12-05 20:59:59 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciwave.dll
[2014-12-05 20:59:59 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnEapPeerProxy.dll
[2014-12-05 20:59:59 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2014-12-05 20:59:59 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gptext.dll
[2014-12-05 20:59:59 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINSRPC.DLL
[2014-12-05 20:59:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnpinst.exe
[2014-12-05 20:59:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vdmdbg.dll
[2014-12-05 20:59:59 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2014-12-05 20:59:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eventcls.dll
[2014-12-05 20:59:59 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaext.dll
[2014-12-05 20:59:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\syssetup.dll
[2014-12-05 20:59:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\subst.exe
[2014-12-05 20:59:59 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\finger.exe
[2014-12-05 20:59:59 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\panmap.dll
[2014-12-05 20:59:59 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpcmonitor.dll
[2014-12-05 20:59:59 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\HOSTNAME.EXE
[2014-12-05 20:59:59 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pnpts.dll
[2014-12-05 20:59:59 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshooks.dll
[2014-12-05 20:59:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcji32.dll
[2014-12-05 20:59:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbc32gt.dll
[2014-12-05 20:59:58 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dramp.dll
[2014-12-05 20:59:58 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SortWindows61.dll
[2014-12-05 20:59:58 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vpnikeapi.dll
[2014-12-05 20:59:58 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Nlsdl.dll
[2014-12-05 20:59:58 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WcnEapAuthProxy.dll
[2014-12-05 20:59:58 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\quser.exe
[2014-12-05 20:59:58 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2014-12-05 20:59:58 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncuprov.dll
[2014-12-05 20:59:58 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\npmproxy.dll
[2014-12-05 20:59:58 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetppui.dll
[2014-12-05 20:59:58 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\montr_ci.dll
[2014-12-05 20:59:58 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\diskperf.exe
[2014-12-05 20:59:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\grpconv.exe
[2014-12-05 20:59:58 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeBrokerClient.dll
[2014-12-05 20:59:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dispex.dll
[2014-12-05 20:59:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDACLSys.dll
[2014-12-05 20:59:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CSystemEventsBrokerClient.dll
[2014-12-05 20:59:58 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\serialui.dll
[2014-12-05 20:59:58 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmsprep.dll
[2014-12-05 20:59:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserLanguageProfileCallback.dll
[2014-12-05 20:59:57 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysclass.dll
[2014-12-05 20:59:57 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osbaseln.dll
[2014-12-05 20:59:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscpxl32.dLL
[2014-12-05 20:59:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mpnotify.exe
[2014-12-05 20:59:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapi.dll
[2014-12-05 20:59:57 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcico.dll
[2014-12-05 20:59:57 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\raschapext.dll
[2014-12-05 20:59:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rastlsext.dll
[2014-12-05 20:59:56 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dpapimig.exe
[2014-12-05 20:59:56 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2014-12-05 20:59:56 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfnet.dll
[2014-12-05 20:59:56 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chgport.exe
[2014-12-05 20:59:56 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NcaApi.dll
[2014-12-05 20:59:56 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx5.dll
[2014-12-05 20:59:56 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gpupdate.exe
[2014-12-05 20:59:56 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RmClient.exe
[2014-12-05 20:59:56 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mountvol.exe
[2014-12-05 20:59:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcwrun.exe
[2014-12-05 20:59:56 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2014-12-05 20:59:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\recover.exe
[2014-12-05 20:59:56 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smphost.dll
[2014-12-05 20:59:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\svsvc.dll
[2014-12-05 20:59:56 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acproxy.dll
[2014-12-05 20:59:55 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\control.exe
[2014-12-05 20:59:55 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdSched.exe
[2014-12-05 20:59:55 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSCollect.exe
[2014-12-05 20:59:55 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\newdev.exe
[2014-12-05 20:59:55 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndadmin.exe
[2014-12-05 20:59:55 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\umdmxfrm.dll
[2014-12-05 20:59:55 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxpps.dll
[2014-12-05 20:59:55 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\adhapi.dll
[2014-12-05 20:59:55 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srm_ps.dll
[2014-12-05 20:59:55 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasautou.exe
[2014-12-05 20:59:55 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Startupscan.dll
[2014-12-05 20:59:55 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\localui.dll
[2014-12-05 20:59:55 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\muifontsetup.dll
[2014-12-05 20:59:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmsgapi.dll
[2014-12-05 20:59:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LangCleanupSysprepAction.dll
[2014-12-05 20:59:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d8thk.dll
[2014-12-05 20:59:55 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscat32.dll
[2014-12-05 20:59:55 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe
[2014-12-05 20:59:55 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\softpub.dll
[2014-12-05 20:59:55 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdext.dll
[2014-12-05 20:59:55 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssip32.dll
[2014-12-05 20:59:54 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MdRes.exe
[2014-12-05 20:59:54 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unlodctr.exe
[2014-12-05 20:59:54 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VaultCmd.exe
[2014-12-05 20:59:54 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\blb_ps.dll
[2014-12-05 20:59:54 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceEject.exe
[2014-12-05 20:59:54 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2014-12-05 20:59:54 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2014-12-05 20:59:54 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininitext.dll
[2014-12-05 20:59:54 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncInfrastructureps.dll
[2014-12-05 20:59:54 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\FXSUNATD.exe
[2014-12-05 20:59:54 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\httpprxp.dll
[2014-12-05 20:59:54 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxgwdi.dll
[2014-12-05 20:59:54 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiatrace.dll
[2014-12-05 20:59:54 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tcmsetup.exe
[2014-12-05 20:59:54 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fsavailux.exe
[2014-12-05 20:59:54 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ndproxystub.dll
[2014-12-05 20:59:54 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Register-CimProvider.exe
[2014-12-05 20:59:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwinsat.dll
[2014-12-05 20:59:54 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\whhelper.dll
[2014-12-05 20:59:54 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\keepaliveprovider.dll
[2014-12-05 20:59:54 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiSysprep.dll
[2014-12-05 20:59:53 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_G18030.DLL
[2014-12-05 20:59:53 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UserAccountControlSettings.exe
[2014-12-05 20:59:53 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingWizard.exe
[2014-12-05 20:59:53 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hdwwiz.exe
[2014-12-05 20:59:53 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmdmps.dll
[2014-12-05 20:59:53 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dmintf.dll
[2014-12-05 20:59:53 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsmproxy.dll
[2014-12-05 20:59:53 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2014-12-05 20:59:53 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2014-12-05 20:59:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nlmproxy.dll
[2014-12-05 20:59:53 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshrm.dll
[2014-12-05 20:59:53 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\perfts.dll
[2014-12-05 20:59:53 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\defragproxy.dll
[2014-12-05 20:59:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VscMgrPS.dll
[2014-12-05 20:59:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chcp.com
[2014-12-05 20:59:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshnetbs.dll
[2014-12-05 20:59:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MUILanguageCleanup.dll
[2014-12-05 20:59:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfmifsproxy.dll
[2014-12-05 20:59:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthHostProxy.dll
[2014-12-05 20:59:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RdpSaPs.dll
[2014-12-05 20:59:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncHostps.dll
[2014-12-05 20:59:53 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LAPRXY.DLL
[2014-12-05 20:59:53 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oleacchooks.dll
[2014-12-05 20:59:53 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tapiperf.dll
[2014-12-05 20:59:52 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TsUsbGDCoInstaller.dll
[2014-12-05 20:59:52 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vss_ps.dll
[2014-12-05 20:59:52 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMC.exe
[2014-12-05 20:59:52 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevicePairingProxy.dll
[2014-12-05 20:59:52 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chgusr.exe
[2014-12-05 20:59:52 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nbtstat.exe
[2014-12-05 20:59:52 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhsvcctl.dll
[2014-12-05 20:59:52 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasdial.exe
[2014-12-05 20:59:52 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TSChannel.dll
[2014-12-05 20:59:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntvdmcpl.dll
[2014-12-05 20:59:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprext.dll
[2014-12-05 20:59:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbperf.dll
[2014-12-05 20:59:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProximityRtapiPal.dll
[2014-12-05 20:59:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx6.dll
[2014-12-05 20:59:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2014-12-05 20:59:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshirda.dll
[2014-12-05 20:59:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dnsext.dll
[2014-12-05 20:59:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx7.dll
[2014-12-05 20:59:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2014-12-05 20:59:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RemoveDeviceElevated.dll
[2014-12-05 20:59:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Eap3Host.exe
[2014-12-05 20:59:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2014-12-05 20:59:52 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmcodecdspps.dll
[2014-12-05 20:59:52 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VmApplicationHealthMonitorProxy.dll
[2014-12-05 20:59:52 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdeSysprep.dll
[2014-12-05 20:59:51 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\telephon.cpl
[2014-12-05 20:59:51 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ncpa.cpl
[2014-12-05 20:59:51 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PNPXAssocPrx.dll
[2014-12-05 20:59:51 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sort.exe
[2014-12-05 20:59:51 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2014-12-05 20:59:51 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chglogon.exe
[2014-12-05 20:59:51 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appidcertstorecheck.exe
[2014-12-05 20:59:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemEventsBrokerClient.dll
[2014-12-05 20:59:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\secinit.exe
[2014-12-05 20:59:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wsmplpxy.dll
[2014-12-05 20:59:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\efsui.exe
[2014-12-05 20:59:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_IS2022.DLL
[2014-12-05 20:59:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscproxystub.dll
[2014-12-05 20:59:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winrssrv.dll
[2014-12-05 20:59:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdBthProxy.dll
[2014-12-05 20:59:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WlS0WndH.dll
[2014-12-05 20:59:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sas.dll
[2014-12-05 20:59:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2014-12-05 20:59:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iprtprio.dll
[2014-12-05 20:59:51 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeDateMUICallback.dll
[2014-12-05 20:59:51 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spnet.dll
[2014-12-05 20:59:50 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\miguiresource.dll
[2014-12-05 20:59:50 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mprmsg.dll
[2014-12-05 20:59:50 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Fondue.exe
[2014-12-05 20:59:50 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sccls.dll
[2014-12-05 20:59:50 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntprint.exe
[2014-12-05 20:59:50 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TaskSchdPS.dll
[2014-12-05 20:59:50 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sdhcinst.dll
[2014-12-05 20:59:50 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\runas.exe
[2014-12-05 20:59:50 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2014-12-05 20:59:50 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\change.exe
[2014-12-05 20:59:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\query.exe
[2014-12-05 20:59:50 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MRINFO.EXE
[2014-12-05 20:59:50 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DsmUserTask.exe
[2014-12-05 20:59:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TetheringIeProvider.dll
[2014-12-05 20:59:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msiwer.dll
[2014-12-05 20:59:50 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsied.dll
[2014-12-05 20:59:50 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CIRCoInst.dll
[2014-12-05 20:59:49 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Narrator.exe
[2014-12-05 20:59:49 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PATHPING.EXE
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XInput9_1_0.dll
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spwmp.dll
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmpm.dll
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_32.dll
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_32.ax
[2014-12-05 20:59:49 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acledit.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OskSupport.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odtext32.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odpdx32.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odfox32.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\oddbse32.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_qcx.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir50_qc.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_qcx.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir41_qc.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ir32_32.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ds32gt.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comcat.dll
[2014-12-05 20:59:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AutoWorkplaceN.dll
[2014-12-05 20:59:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odexl32.dll
[2014-12-05 20:59:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2014-12-05 20:59:48 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SmartScreenSettings.exe
[2014-12-05 20:59:48 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OptionalFeatures.exe
[2014-12-05 20:59:48 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printui.exe
[2014-12-05 20:59:48 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TRACERT.EXE
[2014-12-05 20:59:48 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msidcrl40.dll
[2014-12-05 20:59:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\osuninst.dll
[2014-12-05 20:59:47 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iscsicpl.exe
[2014-12-05 20:59:47 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LocationNotifications.exe
[2014-12-05 20:59:47 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DpiScaling.exe
[2014-12-05 20:59:47 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\odbcad32.exe
[2014-12-05 20:59:47 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RunLegacyCPLElevated.exe
[2014-12-05 20:59:47 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tzutil.exe
[2014-12-05 20:59:47 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ComputerDefaults.exe
[2014-12-05 20:59:47 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cliconfg.exe
[2014-12-05 20:59:47 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Netplwiz.exe
[2014-12-05 20:59:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TapiUnattend.exe
[2014-12-05 20:59:47 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\txfw32.dll
[2014-12-05 20:59:47 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bootim.exe
[2014-12-05 20:59:47 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regedt32.exe
[2014-12-05 20:59:47 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\InfDefaultInstall.exe
[2014-12-05 20:59:47 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRUM.DLL
[2014-12-05 20:59:46 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\LaunchTM.exe
[2014-12-05 20:59:46 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BitLockerWizardElev.exe
[2014-12-05 20:59:46 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BitLockerWizard.exe
[2014-12-05 20:59:46 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesRemote.exe
[2014-12-05 20:59:46 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesProtection.exe
[2014-12-05 20:59:46 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesPerformance.exe
[2014-12-05 20:59:46 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesHardware.exe
[2014-12-05 20:59:46 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSchedExe.exe
[2014-12-05 20:59:46 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSReset.exe
[2014-12-05 20:59:46 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AxInstUI.exe
[2014-12-05 20:59:46 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winver.exe
[2014-12-05 20:59:46 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fdProxy.dll
[2014-12-05 20:59:46 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Enumeration.ps.dll
[2014-12-05 20:59:46 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mciseq.dll
[2014-12-05 20:59:46 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Background.ps.dll
[2014-12-05 20:59:46 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcalua.exe
[2014-12-05 20:59:46 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dvdplay.exe
[2014-12-05 20:59:46 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\plasrv.exe
[2014-12-05 20:59:45 | 005,120,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWSnapin.dll
[2014-12-05 20:59:45 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\resmon.exe
[2014-12-05 20:59:45 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colorcpl.exe
[2014-12-05 20:59:45 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesDataExecutionPrevention.exe
[2014-12-05 20:59:45 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesComputerName.exe
[2014-12-05 20:59:45 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemPropertiesAdvanced.exe
[2014-12-05 20:59:45 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Devices.Custom.ps.dll
[2014-12-05 20:59:45 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wship6.dll
[2014-12-05 20:59:45 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\scrnsave.scr
[2014-12-05 20:59:45 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\write.exe
[2014-12-05 20:59:45 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2014-12-05 20:59:45 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\winhlp32.exe
[2014-12-05 20:59:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WallpaperHost.exe
[2014-12-05 20:59:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\systray.exe
[2014-12-05 20:59:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\backgroundTaskHost.exe
[2014-12-05 20:59:44 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\UIRibbonRes.dll
[2014-12-05 20:59:44 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AuthFWWizFwk.dll
[2014-12-05 20:59:44 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceProperties.exe
[2014-12-05 20:59:44 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bthudtask.exe
[2014-12-05 20:59:44 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ktmw32.dll
[2014-12-05 20:59:44 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmdkey.exe
[2014-12-05 20:59:44 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DDOIProxy.dll
[2014-12-05 20:59:44 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CallButtons.ProxyStub.dll
[2014-12-05 20:59:44 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.proxystub.dll
[2014-12-05 20:59:44 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\help.exe
[2014-12-05 20:59:44 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2014-12-05 20:59:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TcpipSetup.dll
[2014-12-05 20:59:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDYAK.DLL
[2014-12-05 20:59:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTAT.DLL
[2014-12-05 20:59:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRU1.DLL
[2014-12-05 20:59:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBASH.DLL
[2014-12-05 20:59:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDRU.DLL
[2014-12-05 20:59:43 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\OobeFldr.dll
[2014-12-05 20:59:43 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpudd.dll
[2014-12-05 20:59:43 | 000,026,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys
[2014-12-05 20:59:43 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RpcNs4.dll
[2014-12-05 20:59:43 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dabapi.dll
[2014-12-05 20:59:43 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AppxStreamingDataSourcePS.dll
[2014-12-05 20:59:43 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lpksetupproxyserv.dll
[2014-12-05 20:59:42 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srm.dll
[2014-12-05 20:59:42 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msaudite.dll
[2014-12-05 20:59:42 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys
[2014-12-05 20:59:42 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mslldp.sys
[2014-12-05 20:59:42 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthhfenum.sys
[2014-12-05 20:59:42 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pstorec.dll
[2014-12-05 20:59:42 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DeviceUxRes.dll
[2014-12-05 20:59:42 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\C_ISCII.DLL
[2014-12-05 20:59:42 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Firewall.cpl
[2014-12-05 20:59:42 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdxm.ocx
[2014-12-05 20:59:42 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxmasf.dll
[2014-12-05 20:59:41 | 002,628,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NlsLexicons0009.dll
[2014-12-05 20:59:41 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Ndu.sys
[2014-12-05 20:59:41 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\netvsc63.sys
[2014-12-05 20:59:41 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\workerdd.dll
[2014-12-05 20:59:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDTT102.DLL
[2014-12-05 20:59:40 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iprop.dll
[2014-12-05 20:59:40 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rnr20.dll
[2014-12-05 20:57:49 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vwifimp.sys
[2014-12-05 20:55:41 | 000,283,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\clfs.sys
[2014-12-05 20:55:39 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys
[2014-12-05 20:48:50 | 004,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncEngine.dll
[2014-12-05 20:48:50 | 000,790,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MrmCoreR.dll
[2014-12-05 20:48:49 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDrive.exe
[2014-12-05 20:48:48 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDriveTelemetry.dll
[2014-12-05 20:48:48 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDriveShell.dll
[2014-12-05 20:48:48 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BulkOperationHost.exe
[2014-12-05 20:48:47 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbici.dll
[2014-12-05 20:39:35 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Unity
[2014-12-05 20:38:04 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Unity
[2014-12-05 20:32:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT
[2014-12-05 20:31:02 | 000,229,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2014-12-05 20:02:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2014-12-05 20:01:40 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\NVIDIA
[2014-12-05 19:58:14 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2014-12-05 19:58:14 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
[2014-12-05 19:58:13 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2014-12-05 19:56:29 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdxm.tlb
[2014-12-05 19:56:29 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\amcompat.tlb
[2014-12-05 19:56:27 | 000,023,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys
[2014-12-05 19:56:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmerror.dll
[2014-12-05 19:56:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mferror.dll
[2014-12-05 19:56:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\asferror.dll
[2014-12-05 19:55:36 | 009,374,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmploc.DLL
[2014-12-05 19:54:33 | 001,456,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msmpeg2adec.dll
[2014-12-05 19:38:02 | 000,122,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msgpioclx.sys
[2014-12-05 19:37:27 | 003,558,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2014-12-05 19:36:47 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtmsft.dll
[2014-12-05 19:36:47 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtrans.dll
[2014-12-05 19:36:42 | 000,708,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll
[2014-12-05 19:36:42 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2014-12-05 19:36:42 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2014-12-05 19:36:42 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
[2014-12-05 19:36:41 | 002,051,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2014-12-05 19:36:41 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesetup.dll
[2014-12-05 19:36:40 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9diag.dll
[2014-12-05 19:36:39 | 004,298,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll
[2014-12-05 19:36:39 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\JavaScriptCollectionAgent.dll
[2014-12-05 19:36:37 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwcollector.exe
[2014-12-05 19:36:36 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieui.dll
[2014-12-05 19:36:36 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hlink.dll
[2014-12-05 19:36:35 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
[2014-12-05 19:36:35 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrating.dll
[2014-12-05 19:36:35 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iexpress.exe
[2014-12-05 19:36:35 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2014-12-05 19:36:35 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieUnatt.exe
[2014-12-05 19:36:35 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\IEAdvpack.dll
[2014-12-05 19:36:35 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inseng.dll
[2014-12-05 19:36:35 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesysprep.dll
[2014-12-05 19:36:35 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
[2014-12-05 19:36:35 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2014-12-05 19:36:34 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtml.tlb
[2014-12-05 19:36:34 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
[2014-12-05 19:36:34 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wextract.exe
[2014-12-05 19:36:34 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MshtmlDac.dll
[2014-12-05 19:36:34 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pngfilt.dll
[2014-12-05 19:36:34 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwproxystub.dll
[2014-12-05 19:36:34 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imgutil.dll
[2014-12-05 19:36:34 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iernonce.dll
[2014-12-05 19:36:34 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
[2014-12-05 19:36:34 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedssync.exe
[2014-12-05 19:36:34 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwcollectorres.dll
[2014-12-05 19:36:24 | 000,219,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdFilter.sys
[2014-12-05 19:36:24 | 000,084,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys
[2014-12-05 19:36:23 | 000,029,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdBoot.sys
[2014-12-05 19:36:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winshfhc.dll
[2014-12-05 19:27:39 | 000,000,000 | ---D | C] -- C:\music
[2014-12-05 19:27:36 | 000,000,000 | ---D | C] -- C:\muzyka
[2014-12-05 19:24:23 | 000,080,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mrt_map.dll
[2014-12-05 19:24:23 | 000,026,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mrt100.dll
[2014-12-05 19:22:38 | 000,382,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys
[2014-12-05 19:22:38 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\halmacpi.dll
[2014-12-05 19:22:38 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hal.dll
[2014-12-05 19:22:38 | 000,023,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys
[2014-12-05 19:19:31 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2014-12-05 19:19:11 | 000,609,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvStreaming.exe
[2014-12-05 19:19:08 | 000,875,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr120_clr0400.dll
[2014-12-05 19:18:42 | 003,063,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc.dll
[2014-12-05 19:18:42 | 002,556,360 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvcr.dll
[2014-12-05 19:18:42 | 000,062,936 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvshext.dll
[2014-12-05 19:18:41 | 004,389,848 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.dll
[2014-12-05 19:18:41 | 000,377,288 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray.dll
[2014-12-05 19:18:09 | 000,061,728 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2014-12-05 19:17:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2014-12-05 19:17:39 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2014-12-05 19:16:08 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aepdu.dll
[2014-12-05 19:16:08 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aepic.dll
[2014-12-05 19:16:07 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aeinv.dll
[2014-12-05 19:16:07 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devinv.dll
[2014-12-05 19:16:07 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\generaltel.dll
[2014-12-05 19:12:54 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014-12-05 19:11:27 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Google
[2014-12-05 19:04:11 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\EmieUserList
[2014-12-05 19:04:11 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\EmieSiteList
[2014-12-05 19:04:01 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Macromedia
[2014-12-05 18:51:58 | 000,000,000 | R--D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014-12-05 18:51:58 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Searches
[2014-12-05 18:51:58 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Contacts
[2014-12-05 18:51:58 | 000,000,000 | R--D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014-12-05 18:51:53 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\VirtualStore
[2014-12-05 18:51:51 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Packages
[2014-12-05 18:51:51 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Adobe
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Ustawienia lokalne
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\Temporary Internet Files
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Szablony
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\SendTo
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Recent
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\PrintHood
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\NetHood
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Documents\Moje wideo
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Documents\Moje obrazy
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Moje dokumenty
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Documents\Moja muzyka
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Menu Start
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\Historia
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Dane aplikacji
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\AppData\Local\Dane aplikacji
[2014-12-05 18:51:48 | 000,000,000 | -HSD | C] -- C:\Users\Devex1\Cookies
[2014-12-05 18:51:47 | 000,000,000 | --SD | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Videos
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Saved Games
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Pictures
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Music
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Links
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Favorites
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Downloads
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Documents
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\Desktop
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014-12-05 18:51:47 | 000,000,000 | R--D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2014-12-05 18:51:47 | 000,000,000 | -H-D | C] -- C:\Users\Devex1\AppData
[2014-12-05 18:51:47 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Temp
[2014-12-05 18:51:47 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Local\Microsoft
[2014-12-05 18:51:47 | 000,000,000 | ---D | C] -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014-12-05 18:48:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2014-12-05 18:45:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2014-12-05 18:44:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2014-12-05 18:42:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2014-12-05 18:40:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2014-12-05 18:36:07 | 000,000,000 | ---D | C] -- C:\Windows.old
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-12-12 20:37:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Devex1\Desktop\OTL.exe
[2014-12-12 20:31:27 | 001,111,040 | ---- | M] (Farbar) -- C:\Users\Devex1\Desktop\FRST.exe
[2014-12-12 20:16:13 | 000,001,074 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2932176492-1052457404-2876954459-1001UA.job
[2014-12-12 20:13:53 | 000,805,918 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2014-12-12 20:13:53 | 000,722,278 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-12-12 20:13:53 | 000,163,272 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2014-12-12 20:13:53 | 000,135,394 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014-12-12 20:08:31 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-12-12 13:19:51 | 000,002,430 | ---- | M] () -- C:\Users\Devex1\Desktop\Google Chrome.lnk
[2014-12-11 19:16:00 | 000,001,022 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2932176492-1052457404-2876954459-1001Core.job
[2014-12-06 18:48:54 | 000,001,136 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2014-12-06 12:05:28 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2014-12-06 12:05:25 | 2575,712,256 | -HS- | M] () -- C:\hiberfil.sys
[2014-12-05 23:11:58 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2014-12-05 22:09:48 | 000,337,448 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014-12-05 22:09:39 | 289,166,095 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2014-12-05 21:20:19 | 000,002,521 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-12-05 21:19:27 | 000,000,895 | ---- | M] () -- C:\Users\Devex1\Desktop\µTorrent.lnk
[2014-12-05 21:15:54 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msclmd.dll
[2014-12-05 20:01:00 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014-11-20 21:51:37 | 000,714,208 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014-11-20 21:51:37 | 000,106,976 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-12-07 18:36:35 | 000,002,457 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2014-12-06 18:48:54 | 000,001,136 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2014-12-05 23:11:58 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2014-12-05 23:09:36 | 002,140,976 | ---- | C] () -- C:\WINDOWS\System32\SStudio.dll
[2014-12-05 23:09:31 | 005,804,772 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtvienna.dat
[2014-12-05 23:09:25 | 001,099,203 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2014-12-05 23:08:46 | 000,029,496 | ---- | C] () -- C:\WINDOWS\System32\audioLibVc.dll
[2014-12-05 23:08:45 | 000,188,696 | ---- | C] () -- C:\WINDOWS\System32\AcpiServiceVnA.dll
[2014-12-05 23:01:27 | 000,001,207 | ---- | C] () -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\l2.lnk
[2014-12-05 22:09:39 | 289,166,095 | ---- | C] () -- C:\WINDOWS\MEMORY.DMP
[2014-12-05 21:20:19 | 000,002,521 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-12-05 21:19:27 | 000,000,895 | ---- | C] () -- C:\Users\Devex1\Desktop\µTorrent.lnk
[2014-12-05 21:01:05 | 000,107,008 | ---- | C] () -- C:\WINDOWS\System32\OEMLicense.dll
[2014-12-05 21:00:49 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\BthpanContextHandler.dll
[2014-12-05 21:00:37 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\BWContextHandler.dll
[2014-12-05 20:59:40 | 000,389,020 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml
[2014-12-05 20:59:40 | 000,050,745 | ---- | C] () -- C:\WINDOWS\System32\srms.dat
[2014-12-05 20:59:39 | 000,002,540 | ---- | C] () -- C:\WINDOWS\System32\KeyboardFilterShim.sdb
[2014-12-05 20:01:00 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014-12-05 19:56:00 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2014-12-05 19:18:42 | 003,826,628 | ---- | C] () -- C:\WINDOWS\System32\nvcoproc.bin
[2014-12-05 19:12:54 | 000,002,430 | ---- | C] () -- C:\Users\Devex1\Desktop\Google Chrome.lnk
[2014-12-05 19:11:51 | 000,001,074 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2932176492-1052457404-2876954459-1001UA.job
[2014-12-05 19:11:46 | 000,001,022 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2932176492-1052457404-2876954459-1001Core.job
[2014-12-05 18:51:51 | 000,001,454 | ---- | C] () -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014-12-05 18:51:48 | 000,000,369 | ---- | C] () -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
[2014-12-05 18:51:48 | 000,000,369 | ---- | C] () -- C:\Users\Devex1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
[2014-12-05 18:41:33 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2014-08-19 22:16:28 | 000,651,096 | ---- | C] () -- C:\WINDOWS\System32\nvmcumd.dll
[2014-03-18 08:45:37 | 000,262,335 | ---- | C] () -- C:\WINDOWS\System32\dfpinc.dat
[2014-03-18 08:45:20 | 000,002,255 | ---- | C] () -- C:\WINDOWS\System32\WimBootCompress.ini
[2014-03-18 08:23:43 | 000,805,918 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2014-03-18 08:23:43 | 000,342,912 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2014-03-18 08:23:43 | 000,163,272 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2014-03-18 08:23:43 | 000,041,236 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2013-08-22 09:18:38 | 000,722,278 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2013-08-22 09:18:38 | 000,296,742 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2013-08-22 09:18:38 | 000,135,394 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2013-08-22 09:18:38 | 000,033,362 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2013-08-22 09:17:06 | 000,215,943 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2013-08-22 09:17:05 | 000,000,389 | ---- | C] () -- C:\WINDOWS\System32\AutoWorkplace.exe.config
[2013-08-22 09:17:04 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
[2013-08-22 08:23:51 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013-08-22 08:22:12 | 000,337,448 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-08-22 00:57:03 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2013-08-22 00:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2013-08-22 00:52:35 | 001,520,828 | ---- | C] () -- C:\WINDOWS\System32\WpcNBModel.bin
[2013-08-22 00:52:35 | 000,526,068 | ---- | C] () -- C:\WINDOWS\System32\staticurllist.bin
[2013-08-22 00:50:57 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\settings.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2014-12-05 23:01:04 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-10-29 04:10:55 | 019,734,424 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2014-10-29 01:59:23 | 000,786,944 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2014-10-29 01:57:29 | 000,407,552 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-12-05 21:19:24 | 000,000,000 | ---D | M] -- C:\Users\Devex1\AppData\Roaming\OpenCandy
[2014-12-05 21:19:27 | 000,000,000 | ---D | M] -- C:\Users\Devex1\AppData\Roaming\RHEng
[2014-12-12 00:32:19 | 000,000,000 | ---D | M] -- C:\Users\Devex1\AppData\Roaming\TS3Client
[2014-12-05 20:39:35 | 000,000,000 | ---D | M] -- C:\Users\Devex1\AppData\Roaming\Unity
[2014-12-05 23:31:05 | 000,000,000 | ---D | M] -- C:\Users\Devex1\AppData\Roaming\uTorrent
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >