Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by My Lenovo on wo 03-02-2016 at 21:20:59,42. Microsoft Windows 10 Home 10.0.10240 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\My Lenovo\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2016-02-03-200559.log 29363 bytes ==== Empty Folders Check ====================== C:\Users\My Lenovo\AppData\Local\VirtualStore deleted successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== Lenovo Photo Master Components Conexant HD Audio CyberLink Power2Go 8 Dolby Digital Plus Advanced Audio Google Chrome Google Update Helper Intel(R) Chipset Device Software Intel(R) Management Engine Components Intel(R) ME UninstallLegacy Intel(R) PRO/Wireless Driver Intel(R) Processor Graphics Intel(R) Rapid Storage Technology Intel(R) Wireless Bluetooth(R) Intel© PROSet/Wireless Software Intel© PROSet/Wireless WiFi Software Lenovo Accelerator Application Lenovo BatteryGauge Lenovo EasyCamera Lenovo Experience Improvement Lenovo FusionEngine Lenovo OneKey Recovery Lenovo pointing device Lenovo PowerDVD12 Lenovo QuickOptimizer Lenovo Solution Center Lenovo System Interface Foundation LenovoUtility Metric Collection SDK Metric Collection SDK 35 Microsoft Office Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 REACHit Realtek Card Reader Realtek Ethernet Controller Driver SHAREit User Manuals ==== Running Processes ====================== C:\Windows\SysWOW64\SAsrv.exe C:\Program Files\update\UpdateAgent.exe C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Users\My Lenovo\Downloads\zoek.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0326191454400259mcinstcleanup deleted successfully ==== System Specs ====================== Windows: Windows Version 6.2 (Build 9200) Memory (RAM): 4012 MB CPU Info: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz CPU Speed: 2195,5 MHz Sound Card: Speakers (Conexant SmartAudio H | Display Adapters: Intel(R) HD Graphics 5500 | Intel(R) HD Graphics 5500 | Intel(R) HD Graphics 5500 Monitors: 1x; Generic PnP Monitor | Screen Resolution: 1600 X 900 - 32 bit Network: Network Present Network Adapters: Realtek PCIe GBE Family Controller | Intel(R) Dual Band Wireless-AC 3160 | Bluetooth Device (Personal Area Network) | Microsoft Wi-Fi Direct Virtual Adapter CD / DVD Drives: 1x (E: | ) E: PLDS DVD-RW DA8A6SH Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 8 Button Wheel Mouse Present Hard Disks: C: 883,8GB | D: 25,0GB Hard Disks - Free: C: 843,7GB | D: 23,0GB Manufacturer *: LENOVO BIOS Info: AT/AT COMPATIBLE | | LENOVO - 1 Time Zone: West-Europa (standaardtijd) Motherboard *: LENOVO Lenovo G70-80 Country: Nederland Language: NLD ==== System Specs (Software) ====================== Internet Explorer Version: 11.0.10240.16644 Google Chrome version: 48.0.2564.97 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2016-02-01 08:23:32 D2EAEC106F183572317AF7D68E381063 4532304 ----a-w- C:\Windows\explorer.exe 2016-02-01 08:23:01 986BC1A9E29A9E35C1D10D874616ACBB 215040 ----a-w- C:\Windows\notepad.exe ====== C:\Users\MYLENO~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2016-02-03 20:04:44 BF99EBCE70D6BFB6D4A2443FBB477E8D 826872 ----a-w- C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-02-03 20:04:44 291C2573A59D78D5C277A422F863CC1C 176632 ----a-w- C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-01 08:24:07 F2A08BAE593A8270767ABA6BAADC634E 100712 ----a-w- C:\Windows\SysWOW64\MP3DMOD.DLL 2016-02-01 08:24:07 DAF8197B2944323EFDF15ED32A055D72 2445128 ----a-w- C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-02-01 08:24:07 BE152AA70B19D10253946DBC3A75547C 882208 ----a-w- C:\Windows\SysWOW64\msmpeg2adec.dll 2016-02-01 08:24:06 78D8E6439B27C9F41AAD913BA03E5058 285632 ----a-w- C:\Windows\SysWOW64\MFPlay.dll 2016-02-01 08:24:05 EE04BA6667EC970382AEB544F1D89283 1918976 ----a-w- C:\Windows\SysWOW64\MFMediaEngine.dll 2016-02-01 08:24:05 BBF8ACF14694C6E2DA08CA22E7C544A4 961376 ----a-w- C:\Windows\SysWOW64\LicenseManager.dll 2016-02-01 08:24:05 9C9A14B66C06930A4FA8B654D5A1B2AE 1233920 ----a-w- C:\Windows\SysWOW64\Windows.Globalization.dll 2016-02-01 08:24:05 7E2330319E458B0406F16BF47D0F5FCA 373760 ----a-w- C:\Windows\SysWOW64\schannel.dll 2016-02-01 08:24:02 8752DB54FF4458CE9A247A30E1816DAC 705520 ----a-w- C:\Windows\SysWOW64\rpcrt4.dll 2016-02-01 08:24:02 5C3D6ECECE28FA7883E44C8D89ED1933 37376 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2016-02-01 08:23:54 C1B5BE074E1D85D4C1267B9678F9669D 139776 ----a-w- C:\Windows\SysWOW64\shacct.dll 2016-02-01 08:23:53 D6BF254925FD35955C99F402F8DF4773 20858360 ----a-w- C:\Windows\SysWOW64\shell32.dll 2016-02-01 08:23:51 C9471462610302402FF9BB0B09DB9177 650240 ----a-w- C:\Windows\SysWOW64\jscript.dll 2016-02-01 08:23:51 84F33EA9B82044505ACFCAE15C762628 5454848 ----a-w- C:\Windows\SysWOW64\Chakra.dll 2016-02-01 08:23:51 77BFF88DF139AEB20BE0F5AB7737A981 13027840 ----a-w- C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2016-02-01 08:23:51 4832BCF076EC1B88B0F3D47DEDB5C20F 3580416 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2016-02-01 08:23:51 0B3FBB0539891F7177C3B98D6A141214 503296 ----a-w- C:\Windows\SysWOW64\vbscript.dll 2016-02-01 08:23:50 091F53D3D8FEDA2AB02018A18795B337 19324928 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2016-02-01 08:23:49 86F1A25E25A85F1809DAD3FC7880ACDF 18802176 ----a-w- C:\Windows\SysWOW64\edgehtml.dll 2016-02-01 08:23:48 55863B7FF7119A11BD802DE7A82485A2 11263488 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2016-02-01 08:23:48 35E89DA499A3A12E5ACB4A195BF289EC 6878256 ----a-w- C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-02-01 08:23:47 DC7C56F01B96CA5FDB99D241D4E067FC 311808 ----a-w- C:\Windows\SysWOW64\AppXDeploymentClient.dll 2016-02-01 08:23:47 C15E2900919126DCE4C2A927D3D45158 464896 ----a-w- C:\Windows\SysWOW64\Windows.UI.dll 2016-02-01 08:23:46 F2BCE0CF75943E18852148B2875F632B 41472 ----a-w- C:\Windows\SysWOW64\Windows.Speech.Pal.dll 2016-02-01 08:23:46 BE91839AB726C995AFF389AA298F9332 494592 ----a-w- C:\Windows\SysWOW64\LogonController.dll 2016-02-01 08:23:46 776339B81E632F579AB1EC6EE503A9C0 58368 ----a-w- C:\Windows\SysWOW64\usoapi.dll 2016-02-01 08:23:46 69469FE0E943D6DE0C16AC0A41781DDF 497152 ----a-w- C:\Windows\SysWOW64\PlayToManager.dll 2016-02-01 08:23:46 63900F897A025DDFE83737A260C250A5 371712 ----a-w- C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll 2016-02-01 08:23:46 60242DBD3FCFA6D4163B6C29D76295B7 336384 ----a-w- C:\Windows\SysWOW64\CredProvDataModel.dll 2016-02-01 08:23:46 471921FC25E6EC0AA5755C78DD9F7C4E 613376 ----a-w- C:\Windows\SysWOW64\TokenBroker.dll 2016-02-01 08:23:46 2986B2B617DD50857FC614B64E9BE1F9 2647040 ----a-w- C:\Windows\SysWOW64\Windows.Media.dll 2016-02-01 08:23:46 223F4A196FEDDC45F431D79B833521E6 484352 ----a-w- C:\Windows\SysWOW64\SettingSync.dll 2016-02-01 08:23:46 14B2B40AF5DAE0AD8057341F54FEF9EC 81920 ----a-w- C:\Windows\SysWOW64\VEDataLayerHelpers.dll 2016-02-01 08:23:46 037908D9C8C689490978BFF72532A361 195072 ----a-w- C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2016-02-01 08:23:45 99F56FA8CC016E026C38D4CC338B0A15 762888 ----a-w- C:\Windows\SysWOW64\twinapi.appcore.dll 2016-02-01 08:23:45 6740B4C8B8B3474F086B8AEBDE4861D8 217088 ----a-w- C:\Windows\SysWOW64\VEEventDispatcher.dll 2016-02-01 08:23:45 404A006C387E4F19B4DAB664144B8520 671232 ----a-w- C:\Windows\SysWOW64\MbaeApiPublic.dll 2016-02-01 08:23:44 FABFF0AA6B503B960BBCBCC7CF00350B 195584 ----a-w- C:\Windows\SysWOW64\PackageStateRoaming.dll 2016-02-01 08:23:44 EE8FDC90138DD93AA6B1ECA831D9D3CE 1162240 ----a-w- C:\Windows\SysWOW64\Windows.Media.Speech.dll 2016-02-01 08:23:44 258A4F9A2C91C6C6E36775CDCCB4AFE1 441168 ----a-w- C:\Windows\SysWOW64\SettingSyncHost.exe 2016-02-01 08:23:43 02F4AE16C88F0C0E6D5603233B547B3C 9889792 ----a-w- C:\Windows\SysWOW64\twinui.dll 2016-02-01 08:23:32 4EEB94F7E1ABAB5503EEFEA7F2394370 4047288 ----a-w- C:\Windows\SysWOW64\explorer.exe 2016-02-01 08:23:31 FE3D1AFBAC68746BB7BB2B2ADE9551CC 445240 ----a-w- C:\Windows\SysWOW64\AudioEng.dll 2016-02-01 08:23:31 248521A186986B67107808EB4F3E01E7 232896 ----a-w- C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-02-01 08:23:31 16271541E6C89AC46316DC276DF33C76 2639872 ----a-w- C:\Windows\SysWOW64\esent.dll 2016-02-01 08:23:28 F4E25F21AC509AEE3617E9DBA086318E 434376 ----a-w- C:\Windows\SysWOW64\MFCaptureEngine.dll 2016-02-01 08:23:28 E856065895D1133F5457BCDB4452A8D3 74880 ----a-w- C:\Windows\SysWOW64\remoteaudioendpoint.dll 2016-02-01 08:23:28 A99EE78ACD9BE40C2A4D3097E382643C 82096 ----a-w- C:\Windows\SysWOW64\devenum.dll 2016-02-01 08:23:28 6A59054B30BBBEF05521921E895D16A4 188032 ----a-w- C:\Windows\SysWOW64\COLORCNV.DLL 2016-02-01 08:23:28 66014F80D37AFEF646DA614D68407AB2 305776 ----a-w- C:\Windows\SysWOW64\WMVSDECD.DLL 2016-02-01 08:23:27 B0409CEF7BBF488D3F07FBC36DAE34FF 2459096 ----a-w- C:\Windows\SysWOW64\WMVDECOD.DLL 2016-02-01 08:23:27 75D499303F9334780DDC00EEB15AFA99 368776 ----a-w- C:\Windows\SysWOW64\MP4SDECD.DLL 2016-02-01 08:23:27 5BDB3DD749FD6EE9B51FA452AD896545 695752 ----a-w- C:\Windows\SysWOW64\WMADMOD.DLL 2016-02-01 08:23:26 C637D94084069A10759E53F79D5DC4C5 899584 ----a-w- C:\Windows\SysWOW64\RemoteNaturalLanguage.dll 2016-02-01 08:23:25 E731E28520E527E9EAC2049B3147D536 1867160 ----a-w- C:\Windows\SysWOW64\d3d9.dll 2016-02-01 08:23:25 A1B94C8C5C9DD2780B83C7435EE18BED 1997336 ----a-w- C:\Windows\SysWOW64\msxml6.dll 2016-02-01 08:23:25 6A8F5939B9C3170BEB4FF010F5054ED0 2879024 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2016-02-01 08:23:24 EB010C82D907969FC3A396EE16DB1A44 2152744 ----a-w- C:\Windows\SysWOW64\mfcore.dll 2016-02-01 08:23:24 CC3CDF714B78257E6CF2ED45A1EA1CD9 208688 ----a-w- C:\Windows\SysWOW64\mftranscode.dll 2016-02-01 08:23:24 4B7EC905DF02BBBFDDD725EE98D6535C 658528 ----a-w- C:\Windows\SysWOW64\mfds.dll 2016-02-01 08:23:23 FB3B46B0FFCEDEED7BB5E74D82895118 1171456 ----a-w- C:\Windows\SysWOW64\netcenter.dll 2016-02-01 08:23:23 6C74B225F2EC7A49DD6F78B7072A5C42 1532984 ----a-w- C:\Windows\SysWOW64\ntdll.dll 2016-02-01 08:23:23 3277E503E6EA72D19CDC16501FD151BA 5120056 ----a-w- C:\Windows\SysWOW64\windows.storage.dll 2016-02-01 08:23:22 C662282B95220AD700D9B93A39702A25 409088 ----a-w- C:\Windows\SysWOW64\WMVSENCD.DLL 2016-02-01 08:23:22 98CC3506DFADE0A3C9353E953F0891BD 747008 ----a-w- C:\Windows\SysWOW64\WMVXENCD.DLL 2016-02-01 08:23:22 7A471C2688C5D864A049C4F2074413E7 107952 ----a-w- C:\Windows\SysWOW64\VIDRESZR.DLL 2016-02-01 08:23:22 2813D33FD11FF4E6666A394011D83B3B 2162064 ----a-w- C:\Windows\SysWOW64\WMVENCOD.DLL 2016-02-01 08:23:22 1B9D79C58A2087A7C855559AAAF4BAEF 72808 ----a-w- C:\Windows\SysWOW64\mfvdsp.dll 2016-02-01 08:23:20 E2EFED5C9E4BF8EC6F35CF63CA5B589F 1594368 ----a-w- C:\Windows\SysWOW64\msxml3.dll 2016-02-01 08:23:20 BCCB55B18CE7054BA288FFEB27BA6F54 1766952 ----a-w- C:\Windows\SysWOW64\CoreUIComponents.dll 2016-02-01 08:23:20 8D59581B205692ABC762603D7770E7E4 1541632 ----a-w- C:\Windows\SysWOW64\quartz.dll 2016-02-01 08:23:20 356C54031E21C4790E6C81CDA26F9E0A 1467392 ----a-w- C:\Windows\SysWOW64\GdiPlus.dll 2016-02-01 08:23:20 2AB0D2CB00F9F088705F492F7683907D 563200 ----a-w- C:\Windows\SysWOW64\qdvd.dll 2016-02-01 08:23:18 820C0126D90810B78F5417767DA4F487 1593344 ----a-w- C:\Windows\SysWOW64\dwmcore.dll 2016-02-01 08:23:18 5C74B92851352C5DCDD66C59BBE392F6 1442816 ----a-w- C:\Windows\SysWOW64\SRHInproc.dll 2016-02-01 08:23:17 2DA15A53E965A27A3D5CF99E3CCC430A 6101504 ----a-w- C:\Windows\SysWOW64\mos.dll 2016-02-01 08:23:16 8AFE3CEAF287F9204FC1363A8F2A9B95 1328128 ----a-w- C:\Windows\SysWOW64\comsvcs.dll 2016-02-01 08:23:16 84E5EADD5EB8D2A96C55F3B8F9CA2904 1714176 ----a-w- C:\Windows\SysWOW64\twinui.appcore.dll 2016-02-01 08:23:16 08D6065A1D6D007C77A688271D915B00 5079552 ----a-w- C:\Windows\SysWOW64\BingMaps.dll 2016-02-01 08:23:15 F38B52333E0C93A1C55323719103783B 1357888 ----a-w- C:\Windows\SysWOW64\winmde.dll 2016-02-01 08:23:15 99CEBD54809E76C9CD1839B0492CCF5E 1895568 ----a-w- C:\Windows\SysWOW64\hevcdecoder.dll 2016-02-01 08:23:15 8E853D8DDA2BBD4F3A8B7096085E765B 1070080 ----a-w- C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-02-01 08:23:15 74C8E141400F3B4CE12EE0E657FD91C9 1310880 ----a-w- C:\Windows\SysWOW64\user32.dll 2016-02-01 08:23:15 3504A001D694E685EB2579164C514FB4 2153984 ----a-w- C:\Windows\SysWOW64\authui.dll 2016-02-01 08:23:15 1B102F53BD7209D712BBE96E9FAA32CA 313856 ----a-w- C:\Windows\SysWOW64\LockAppBroker.dll 2016-02-01 08:23:15 13FA2626268E7F522B9750CDCB7039D2 696192 ----a-w- C:\Windows\SysWOW64\WMADMOE.DLL 2016-02-01 08:23:14 DFAE92F5EF58FF29E81D951B2BDF45B8 1104384 ----a-w- C:\Windows\SysWOW64\UIAutomationCore.dll 2016-02-01 08:23:13 71C33FA1180F55803CC312BE73835AEE 1106872 ----a-w- C:\Windows\SysWOW64\mfnetsrc.dll 2016-02-01 08:23:13 4595DE3C22C4B313A21AFB2C0E21688E 714808 ----a-w- C:\Windows\SysWOW64\mfnetcore.dll 2016-02-01 08:23:12 10BD43B952C7A59D31EA976566B624E6 767488 ----a-w- C:\Windows\SysWOW64\kerberos.dll 2016-02-01 08:23:11 FD47D5526827398C371D100284664078 2049536 ----a-w- C:\Windows\SysWOW64\Windows.StateRepository.dll 2016-02-01 08:23:10 ABF1199F0E571D5BA8C7F1ECCCE9AFFA 373248 ----a-w- C:\Windows\SysWOW64\mfmkvsrcsnk.dll 2016-02-01 08:23:10 5EBDB30586730375949854259AA7EEA0 713312 ----a-w- C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2016-02-01 08:23:10 594ED0EDD85408ED0CDEFC4244FC66CC 877016 ----a-w- C:\Windows\SysWOW64\mfmp4srcsnk.dll 2016-02-01 08:23:10 4BAFAEEFDF9577A1B37EB6F14898F702 890880 ----a-w- C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-02-01 08:23:10 07F42CB9A66933950CE16A0DC8F42935 896144 ----a-w- C:\Windows\SysWOW64\mfsrcsnk.dll 2016-02-01 08:23:09 9738D0610EAAD6CE104DFB81AFEDAFDE 786432 ----a-w- C:\Windows\SysWOW64\Magnify.exe 2016-02-01 08:23:09 20311DEFD7B8A7D2AB5D5DDAFF505754 774656 ----a-w- C:\Windows\SysWOW64\SRH.dll 2016-02-01 08:23:08 CD08AC88BF5133AB5376A519C1F14643 871936 ----a-w- C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-02-01 08:23:08 ACA6C8CC89A43F3BABF276662716023D 2748416 ----a-w- C:\Windows\SysWOW64\tquery.dll 2016-02-01 08:23:08 A818674D5F9B67BA4BA9B67434AAAF3B 635312 ----a-w- C:\Windows\SysWOW64\evr.dll 2016-02-01 08:23:08 72262CB79DA833B4DCBFBCDD7C752B1A 1964544 ----a-w- C:\Windows\SysWOW64\mssrch.dll 2016-02-01 08:23:08 3CABA2E1C6B0F3906F03C97A42359896 645144 ----a-w- C:\Windows\SysWOW64\mfsvr.dll 2016-02-01 08:23:07 6EF1F91D387CF337E347722738AA6894 497896 ----a-w- C:\Windows\SysWOW64\advapi32.dll 2016-02-01 08:23:07 4F5230393F48421846F1EEC44F98148B 539728 ----a-w- C:\Windows\SysWOW64\fontdrvhost.exe 2016-02-01 08:23:07 2FA6AE2352567748CD332B2529756EC6 303104 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2016-02-01 08:23:06 DB5CA5EDC2BE901451DD7C240F69721B 404992 ----a-w- C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-02-01 08:23:06 683BACDA104CABCCB8852CA24A03A964 573440 ----a-w- C:\Windows\SysWOW64\qedit.dll 2016-02-01 08:23:06 61E15F462802A480B5481D93489657F3 507696 ----a-w- C:\Windows\SysWOW64\dxgi.dll 2016-02-01 08:23:05 E0F11A1D1C7482BBD76448E6FD3AA327 454512 ----a-w- C:\Windows\SysWOW64\directmanipulation.dll 2016-02-01 08:23:05 7EFF73E0CF886F43B0ABF9921189857E 95744 ----a-w- C:\Windows\SysWOW64\fdWCN.dll 2016-02-01 08:23:05 73FC0143E518D8DB7AFE9675F4AF8063 2207232 ----a-w- C:\Windows\SysWOW64\wininet.dll 2016-02-01 08:23:04 F65307E09D4807EDE95D1016CAF42DAD 587264 ----a-w- C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2016-02-01 08:23:04 B4308481535382A5B61340A2214E91AD 474624 ----a-w- C:\Windows\SysWOW64\ieui.dll 2016-02-01 08:23:04 A5E98AB07AE94407058A4224F2A9504A 1226752 ----a-w- C:\Windows\SysWOW64\wcnwiz.dll 2016-02-01 08:23:04 7E4A5580F1A7EEB3F235429D857100DD 296960 ----a-w- C:\Windows\SysWOW64\ninput.dll 2016-02-01 08:23:04 5DAAAF8A272B9C8975C444298B5D41EF 480768 ----a-w- C:\Windows\SysWOW64\duser.dll 2016-02-01 08:23:04 2A28095B1C625D3DE3C25E6696AC4504 100352 ----a-w- C:\Windows\SysWOW64\WcnApi.dll 2016-02-01 08:23:03 EBD8D48F8EF7E7BDCEEB176CAB1033E3 37376 ----a-w- C:\Windows\SysWOW64\wfdprov.dll 2016-02-01 08:23:03 B9573AE51518377CC31D9F3C92839298 441344 ----a-w- C:\Windows\SysWOW64\dlnashext.dll 2016-02-01 08:23:03 9E604C522EC89CA6D7DD22BE94985359 415744 ----a-w- C:\Windows\SysWOW64\catsrvut.dll 2016-02-01 08:23:03 5DEB6066C1F5D2F07002BF59BA57E2A0 556032 ----a-w- C:\Windows\SysWOW64\mfh264enc.dll 2016-02-01 08:23:03 50A3C0D8655F5ACFE4320FB207A098F1 1985024 ----a-w- C:\Windows\SysWOW64\DWrite.dll 2016-02-01 08:23:02 3C9FDBB0963B18C9D60B54F8AF81DF11 268800 ----a-w- C:\Windows\SysWOW64\ncryptprov.dll 2016-02-01 08:23:01 E8192A23618BCEDE02446F491CB70BDB 42496 ----a-w- C:\Windows\SysWOW64\tetheringclient.dll 2016-02-01 08:23:01 9E590FA5A1BF50F2E7B7005244F8D31D 574464 ----a-w- C:\Windows\SysWOW64\Chakradiag.dll 2016-02-01 08:23:01 9AA440F8F580C573D0F2732DA6ECB87A 207872 ----a-w- C:\Windows\SysWOW64\notepad.exe 2016-02-01 08:23:01 8228A523B9FF392936554EE5F223F05B 1823232 ----a-w- C:\Windows\SysWOW64\InputService.dll 2016-02-01 08:23:01 80D2AE15F53154CEE71C9E3C131FBB9B 407608 ----a-w- C:\Windows\SysWOW64\AudioSes.dll 2016-02-01 08:23:01 62C4E525EE16D6224D746A8488CD657E 752640 ----a-w- C:\Windows\SysWOW64\msctfuimanager.dll 2016-02-01 08:23:01 00682184457B97EDA4C0C157331A7495 454656 ----a-w- C:\Windows\SysWOW64\MbaeApi.dll 2016-02-01 08:23:00 78FBC37D02A39402B685B7E95A83EFE8 428128 ----a-w- C:\Windows\SysWOW64\WWanAPI.dll 2016-02-01 08:22:59 638747E5050BEB4F5DF9DDE8AC418296 473088 ----a-w- C:\Windows\SysWOW64\wpnapps.dll 2016-02-01 08:22:58 A429ED80A03D29F43E99A08CA76E3CFD 1612288 ----a-w- C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2016-02-01 08:22:58 9157489ABA83D6FEAAAEC8E3F79714E8 928256 ----a-w- C:\Windows\SysWOW64\Unistore.dll 2016-02-01 08:22:58 7CDC13C04C1038D6143B64CD2321B1F0 274432 ----a-w- C:\Windows\SysWOW64\NetSetupShim.dll 2016-02-01 08:22:58 7763184B73CB778EE9601555A7C42901 235008 ----a-w- C:\Windows\SysWOW64\ksproxy.ax 2016-02-01 08:22:58 5036F8014556AAAA662A672F3D58F04C 261632 ----a-w- C:\Windows\SysWOW64\ActionCenter.dll 2016-02-01 08:22:58 40258BC35D16DFCDC0D7B7E04C75EDFD 278424 ----a-w- C:\Windows\SysWOW64\MP43DECD.DLL 2016-02-01 08:22:58 0C5FE5EB83BD4C4F3ACF7A08821FC0D5 277400 ----a-w- C:\Windows\SysWOW64\MPG4DECD.DLL 2016-02-01 08:22:57 F69835A120E9627327ECE984D2AC87EA 828928 ----a-w- C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2016-02-01 08:22:57 DF3F02FA4AEB7064FAC76D2E31BE4DC4 311296 ----a-w- C:\Windows\SysWOW64\Windows.Devices.Usb.dll 2016-02-01 08:22:57 C5FBD8DDCD35F7F1242F3587681A2654 193024 ----a-w- C:\Windows\SysWOW64\Windows.Internal.Management.dll 2016-02-01 08:22:57 99E92B7E14452B94CCBF0BA42876A7D7 163328 ----a-w- C:\Windows\SysWOW64\fwpolicyiomgr.dll 2016-02-01 08:22:57 7AF34E43DE496A316DD096AEBDE2492A 268800 ----a-w- C:\Windows\SysWOW64\NotificationObjFactory.dll 2016-02-01 08:22:56 807178C85CF6375FAB2FE42395FE94D7 677888 ----a-w- C:\Windows\SysWOW64\MapControlCore.dll 2016-02-01 08:22:56 685105400BCA64E0D19534A516F36454 625152 ----a-w- C:\Windows\SysWOW64\ContactApis.dll 2016-02-01 08:22:56 0607E8B28F78AD418D6C0D74203FFA79 749568 ----a-w- C:\Windows\SysWOW64\comdlg32.dll 2016-02-01 08:22:55 EFCBA793DF8E9E96528CC8586F7A885C 33280 ----a-w- C:\Windows\SysWOW64\usermgrcli.dll 2016-02-01 08:22:55 B81FC272B92CE1A7542EECF1416D17B9 579584 ----a-w- C:\Windows\SysWOW64\AppointmentApis.dll 2016-02-01 08:22:55 54DB5459A808BB03FDEA98325530B946 145920 ----a-w- C:\Windows\SysWOW64\mdmregistration.dll 2016-02-01 08:22:55 4B5286A021D8CA64BABB07D7B9739AF4 512000 ----a-w- C:\Windows\SysWOW64\CoreMessaging.dll 2016-02-01 08:22:55 2612D8C0CC6919E29D9239C7D1E96B30 159744 ----a-w- C:\Windows\SysWOW64\UserMgrProxy.dll 2016-02-01 08:22:54 5F7ADEE18B15B9D629F9875C9604A696 557568 ----a-w- C:\Windows\SysWOW64\ChatApis.dll 2016-02-01 08:22:54 29975419D8EE4827301777ECE10AF30F 1380864 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2016-02-01 08:22:53 D124F89BBDCFC24A04F159D913852DDC 701952 ----a-w- C:\Windows\SysWOW64\JpMapControl.dll 2016-02-01 08:22:53 B5009272F86C94D193C67F89686A3708 34816 ----a-w- C:\Windows\SysWOW64\VoiceActivationManager.dll 2016-02-01 08:22:53 0C6AA21007BE1389A4D5C3772D7E262D 525312 ----a-w- C:\Windows\SysWOW64\EmailApis.dll 2016-02-01 08:22:52 9944FF1EDD2D36AEC0DACCC85930A152 1365576 ----a-w- C:\Windows\SysWOW64\gdi32.dll 2016-02-01 08:22:52 917C7C09612AD81BCF0C49007740DB4E 775312 ----a-w- C:\Windows\SysWOW64\locale.nls 2016-02-01 08:22:52 53FC0EFBE44591CA16BE1A4309F689DC 253440 ----a-w- C:\Windows\SysWOW64\SensorsApi.dll 2016-02-01 08:22:52 51DDB23BEB935F57C49166DCFEE10206 243800 ----a-w- C:\Windows\SysWOW64\LockAppHost.exe 2016-02-01 08:22:52 39518661140BE931D676EF657E877048 131072 ----a-w- C:\Windows\SysWOW64\CallHistoryClient.dll 2016-02-01 08:22:52 0AF54E5F45A83197AC20EA3F090B5452 78336 ----a-w- C:\Windows\SysWOW64\SensorsNativeApi.V2.dll 2016-02-01 08:22:51 F8EC9D17DB30C1D8B3B7CBFF31161452 918320 ----a-w- C:\Windows\SysWOW64\mfplat.dll 2016-02-01 08:22:51 E4A4BC49568745BDA44F293E3D29A910 466432 ----a-w- C:\Windows\SysWOW64\MessagingDataModel2.dll 2016-02-01 08:22:50 981229E718319A9A01F7E740A8D855FD 700256 ----a-w- C:\Windows\SysWOW64\WWAHost.exe 2016-02-01 08:22:50 1253135EC3029F79601EDCFF55ADC9FC 508248 ----a-w- C:\Windows\SysWOW64\mf.dll 2016-02-01 08:22:49 CA4303787A36890CE6EE34DC1C993F3E 195584 ----a-w- C:\Windows\SysWOW64\UserDataAccountApis.dll 2016-02-01 08:22:48 D055C7AC2514A999D8C636B39457B98B 172032 ----a-w- C:\Windows\SysWOW64\PhoneCallHistoryApis.dll 2016-02-01 08:22:48 C09CA709007AB00D97A764422E9DB981 92992 ----a-w- C:\Windows\SysWOW64\userenv.dll 2016-02-01 08:22:47 951D71B5D602745997A6DCBA33FC5358 280576 ----a-w- C:\Windows\SysWOW64\SearchProtocolHost.exe 2016-02-01 08:22:47 45C650F31088C2820304CFA4A3D4F5FA 845664 ----a-w- C:\Windows\SysWOW64\ReAgent.dll 2016-02-01 08:22:47 202A005B44B0E420D02E280F1AADFE71 116728 ----a-w- C:\Windows\SysWOW64\mfps.dll 2016-02-01 08:22:46 E77F8B3D5750F4527A07E45AB6D44588 7168 ----a-w- C:\Windows\SysWOW64\KBDAZE.DLL 2016-02-01 08:22:46 D0A5D8270FF8606D2B445C4359A8FCEB 328704 ----a-w- C:\Windows\SysWOW64\MapConfiguration.dll 2016-02-01 08:22:46 6BC30FC482A74A92CDDD59E882F18E63 7168 ----a-w- C:\Windows\SysWOW64\kbdgeoqw.dll 2016-02-01 08:22:46 4F74D237260EF8F19DB5AAAB2C3D19D2 53248 ----a-w- C:\Windows\SysWOW64\profext.dll 2016-02-01 08:22:46 45D3CA83474A46D74632700FACF17C90 7168 ----a-w- C:\Windows\SysWOW64\KBDAZEL.DLL 2016-02-01 08:22:46 06A41A2D550BBF58552D3C02D0D20825 7168 ----a-w- C:\Windows\SysWOW64\KBDAZST.DLL 2016-02-01 08:22:44 95A776B86DC5268EB06679351B5D2F7D 131584 ----a-w- C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll 2016-02-01 08:22:44 435EE3E7A2EB0274E5C976A0B3773CA7 162304 ----a-w- C:\Windows\SysWOW64\ReInfo.dll 2016-02-01 08:22:44 011A8CA5E2B3399EB0D893587B830C6B 420352 ----a-w- C:\Windows\SysWOW64\GamePanel.exe 2016-02-01 07:53:56 D924B9998081319D62321F4B76F77982 9898752 ----a-w- C:\Windows\SysWOW64\RsCRIcon.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2016-02-03 20:05:15 9CC2970AA0D27C45DCCC3F6C6CA20C5F 2365304 ----a-w- C:\Windows\Sysnative\WudfUpdate_01011.dll 2016-02-03 20:05:08 02297BB16F35ACCC8EC2E7CB0964C46A 16148 ----a-w- C:\Windows\Sysnative\LAPTOP-ARSJ7O89_My Lenovo_HistoryPrediction.bin 2016-02-02 08:07:22 6FB144600FAE112D455DC5792091B42A 301728 ------w- C:\Windows\Sysnative\MpSigStub.exe 2016-02-01 08:43:23 4DE599F49C7862C9691EE7843E216F4C 143671360 ----a-w- C:\Windows\Sysnative\MRT.exe 2016-02-01 08:24:07 CF2D0CD826F0BBC8F1150122720D2A9C 119800 ----a-w- C:\Windows\Sysnative\MP3DMOD.DLL 2016-02-01 08:24:07 9F2AB116293D0799BA44E27A810C26F0 1063504 ----a-w- C:\Windows\Sysnative\msmpeg2adec.dll 2016-02-01 08:24:07 7128D19C04882CEEABB5F48ACD05B159 2824248 ----a-w- C:\Windows\Sysnative\msmpeg2vdec.dll 2016-02-01 08:24:06 7DDB731AD3E9F9F91D62E991BD52814F 79872 ----a-w- C:\Windows\Sysnative\HttpsDataSource.dll 2016-02-01 08:24:06 513A8EF909DFCDD872E60A0EA03FEAAB 52224 ----a-w- C:\Windows\Sysnative\tetheringclient.dll 2016-02-01 08:24:06 4A54273338073939384A14BF0D7AFC14 88064 ----a-w- C:\Windows\Sysnative\ngckeyenum.dll 2016-02-01 08:24:05 C7503A49364DB2AF7A7DE177B233081F 1844736 ----a-w- C:\Windows\Sysnative\workfolderssvc.dll 2016-02-01 08:24:05 C66E058599A44E0EEA95B3E0547345D2 30208 ----a-w- C:\Windows\Sysnative\syncmlhook.dll 2016-02-01 08:24:05 BF77FC08A7D4DC37A659561B29FA23EC 163840 ----a-w- C:\Windows\Sysnative\CallHistoryClient.dll 2016-02-01 08:24:05 BEC717CC9B6E286B26B1C576FD006709 333168 ----a-w- C:\Windows\Sysnative\MFPlay.dll 2016-02-01 08:24:05 98986780B8D494326D28DCAB6D601450 154624 ----a-w- C:\Windows\Sysnative\dmcertinst.exe 2016-02-01 08:24:05 901350B41D1262A95B5D907BD95A4145 642560 ----a-w- C:\Windows\Sysnative\rdbui.dll 2016-02-01 08:24:05 88E6A429944544346EC3AE1FD7D24BCC 149504 ----a-w- C:\Windows\Sysnative\tetheringservice.dll 2016-02-01 08:24:05 839BD56425530973FF3F6F7C0057CD22 288256 ----a-w- C:\Windows\Sysnative\PimIndexMaintenance.dll 2016-02-01 08:24:05 78FEDDED673167515E77B9BD35B13B3D 137216 ----a-w- C:\Windows\Sysnative\LocationPermissions.dll 2016-02-01 08:24:05 7143FF944C20AB5C6D4485A0469F2797 115712 ----a-w- C:\Windows\Sysnative\MbaeParserTask.exe 2016-02-01 08:24:05 562078FF6ED0C2B1C09078343437D03E 168960 ----a-w- C:\Windows\Sysnative\mdmmigrator.dll 2016-02-01 08:24:05 321A2022926841273CD8D6B9BFE68D05 1383424 ----a-w- C:\Windows\Sysnative\win32kbase.sys 2016-02-01 08:24:05 240FF83DD79546B26F187FAB20F83864 280064 ----a-w- C:\Windows\Sysnative\AudioEndpointBuilder.dll 2016-02-01 08:24:04 754BC3E56FF301B9EE8A764932D02124 513536 ----a-w- C:\Windows\Sysnative\ngcsvc.dll 2016-02-01 08:24:04 59BD4C7EC035B59B77A7D9CE71F1B9AE 1276416 ----a-w- C:\Windows\Sysnative\wifinetworkmanager.dll 2016-02-01 08:24:04 0968D575D9108497A6DC37749D4A6C4F 2093056 ----a-w- C:\Windows\Sysnative\wlidsvc.dll 2016-02-01 08:24:03 D5B31B2F14848015C211F1D674A82F3A 1106432 ----a-w- C:\Windows\Sysnative\sysmain.dll 2016-02-01 08:24:03 9E5E7D977A316EE3BBD4F44903EC954B 4792320 ----a-w- C:\Windows\Sysnative\jscript9.dll 2016-02-01 08:24:03 509FF13E5C4FD63846FCA01A5ED912DB 521728 ----a-w- C:\Windows\Sysnative\PsmServiceExtHost.dll 2016-02-01 08:24:03 3A4A543F135DE9A06ABA9DF982D79DD7 526336 ----a-w- C:\Windows\Sysnative\bisrv.dll 2016-02-01 08:24:03 32212C0FE0556915E763C29DEB6D267E 1423872 ----a-w- C:\Windows\Sysnative\UserDataService.dll 2016-02-01 08:24:02 4D3F2E7C2F83DFAF19F8060E1FD6C5A8 3588096 ----a-w- C:\Windows\Sysnative\win32kfull.sys 2016-02-01 08:24:02 19C0D0D0960E242E1FE052C3F2CA7EC1 455168 ----a-w- C:\Windows\Sysnative\schannel.dll 2016-02-01 08:24:01 D23F211E1AA0787EFEC373D172D4A1C2 1181696 ----a-w- C:\Windows\Sysnative\wwansvc.dll 2016-02-01 08:24:01 A5B7CAFA0327BCBC2FC6F1C9F95191CA 342016 ----a-w- C:\Windows\Sysnative\LocationGeofences.dll 2016-02-01 08:24:01 8C7CCD8D67C1E4A3E5A5EEED3320AC08 32768 ----a-w- C:\Windows\Sysnative\wuautoappupdate.dll 2016-02-01 08:24:01 6300722E8527EC54D426FD00EE5196B2 1068032 ----a-w- C:\Windows\Sysnative\audiosrv.dll 2016-02-01 08:24:01 19C4F8570B675E940CFFA9DB25CBDA05 2418688 ----a-w- C:\Windows\Sysnative\MFMediaEngine.dll 2016-02-01 08:24:00 ECA28C8F0FF34A2BD8311CBA2D35B143 121856 ----a-w- C:\Windows\Sysnative\dmcsps.dll 2016-02-01 08:24:00 E2AE190B76C27430E4E8258D0C44C79B 317440 ----a-w- C:\Windows\Sysnative\configmanager2.dll 2016-02-01 08:24:00 DAFEABE69E915A2374E13C6B24EF331F 690688 ----a-w- C:\Windows\Sysnative\CellularAPI.dll 2016-02-01 08:24:00 63CCD4D03566A23A26E00A85452B7816 1392480 ----a-w- C:\Windows\Sysnative\LicenseManager.dll 2016-02-01 08:24:00 14503C58C1528D83FB2328840784EC78 621056 ----a-w- C:\Windows\Sysnative\enterprisecsps.dll 2016-02-01 08:23:59 F04659446D46718E38B3586371720218 1569280 ----a-w- C:\Windows\Sysnative\Windows.Globalization.dll 2016-02-01 08:23:58 F2F08F34BC90048420D51D6574F29492 7523840 ----a-w- C:\Windows\Sysnative\Chakra.dll 2016-02-01 08:23:58 6187FA436627F9F694AFE1B805B21F5C 21873152 ----a-w- C:\Windows\Sysnative\edgehtml.dll 2016-02-01 08:23:58 517B55BC30206D1644D85EFB594B9172 1200400 ----a-w- C:\Windows\Sysnative\rpcrt4.dll 2016-02-01 08:23:57 C9B6A1DF4767507904C65654725372ED 45568 ----a-w- C:\Windows\Sysnative\atmlib.dll 2016-02-01 08:23:57 B70FF53144AC4B3C7D98BFB7D7C239BD 2236416 ----a-w- C:\Windows\Sysnative\wuaueng.dll 2016-02-01 08:23:57 551C41C9508BF7117A56FC429D5B6534 8022368 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2016-02-01 08:23:57 0A2D0D9A0329B9C46F5D793DB51A15C7 1234944 ----a-w- C:\Windows\Sysnative\aitstatic.exe 2016-02-01 08:23:56 BD962F6BBE51AD778F77260B8036C804 24592896 ----a-w- C:\Windows\Sysnative\mshtml.dll 2016-02-01 08:23:56 212E5C2C279835CBFEBF935EB0E7EC5D 16708608 ----a-w- C:\Windows\Sysnative\Windows.UI.Xaml.dll 2016-02-01 08:23:54 EBD5F0FDD3EBB6EE6F6EE524206AD0AE 26624 ----a-w- C:\Windows\Sysnative\LicenseManagerShellext.exe 2016-02-01 08:23:54 DA32F9BFA7851AD4247353EA03755DE6 578560 ----a-w- C:\Windows\Sysnative\winlogon.exe 2016-02-01 08:23:54 CF2B0ADDBA61B3B9FA339118FC742032 1812480 ----a-w- C:\Windows\Sysnative\pnidui.dll 2016-02-01 08:23:54 B1622CB61E1C2166C0DEADBCDA611378 541024 ----a-w- C:\Windows\Sysnative\mcupdate_GenuineIntel.dll 2016-02-01 08:23:54 547D2BC05916E97FC8F48CB22DD1CFA1 22322624 ----a-w- C:\Windows\Sysnative\shell32.dll 2016-02-01 08:23:54 2481E9E8858AD0A223FA3110916EF0C1 6572032 ----a-w- C:\Windows\Sysnative\wwanmm.dll 2016-02-01 08:23:54 1E4B6E4DB127F1964166B458060C4223 184320 ----a-w- C:\Windows\Sysnative\shacct.dll 2016-02-01 08:23:53 C397F52BD6B482E6E33B065267680A87 8613200 ----a-w- C:\Windows\Sysnative\Windows.Media.Protection.PlayReady.dll 2016-02-01 08:23:47 ED4208A2A5BE50383153463F7ED08ED4 146944 ----a-w- C:\Windows\Sysnative\EthernetMediaManager.dll 2016-02-01 08:23:47 EBBD7066B59D8D0C22E6F59DD22AB486 76800 ----a-w- C:\Windows\Sysnative\browserbroker.dll 2016-02-01 08:23:47 E866643717FF953DAC104E9E806F3E27 498688 ----a-w- C:\Windows\Sysnative\WlanMediaManager.dll 2016-02-01 08:23:47 E68D380E86FBBF7F4466A0DD6CEA0B5B 467456 ----a-w- C:\Windows\Sysnative\MBMediaManager.dll 2016-02-01 08:23:47 90F26A12A7F188B48021A4CA8A615026 12504576 ----a-w- C:\Windows\Sysnative\ieframe.dll 2016-02-01 08:23:47 68AA410BBF3DA69B9F3834EED1BF52EA 270336 ----a-w- C:\Windows\Sysnative\RasMediaManager.dll 2016-02-01 08:23:47 6210B227A7834FFFCA08FBB42F6FF476 126464 ----a-w- C:\Windows\Sysnative\DAMediaManager.dll 2016-02-01 08:23:47 1A8D80F2EA3133AD8DAF64DA25B4B17B 168288 ----a-w- C:\Windows\Sysnative\NetworkUXBroker.exe 2016-02-01 08:23:47 0ACF831DD03989CA9787621C04D73CFD 45568 ----a-w- C:\Windows\Sysnative\wfdprov.dll 2016-02-01 08:23:46 CA7800F03BF0281D4D38E1006618E82E 627712 ----a-w- C:\Windows\Sysnative\Windows.UI.dll 2016-02-01 08:23:46 49B00A59043431804A5BCB5E48F735B3 414208 ----a-w- C:\Windows\Sysnative\AppXDeploymentClient.dll 2016-02-01 08:23:45 D7B28BF9E08128C5A8B89FFD5BEB6B88 465920 ----a-w- C:\Windows\Sysnative\wwanconn.dll 2016-02-01 08:23:45 6C9DDD0611379864596D2A8DE7B1870C 504320 ----a-w- C:\Windows\Sysnative\DataSenseHandlers.dll 2016-02-01 08:23:45 684F1E1B5D07451B600EA3C3D728A534 281600 ----a-w- C:\Windows\Sysnative\VEEventDispatcher.dll 2016-02-01 08:23:45 031080A610C302B0279A267411EDB7E3 2226688 ----a-w- C:\Windows\Sysnative\NetworkMobileSettings.dll 2016-02-01 08:23:45 0291A553B39D1CE0D108CF2388006B33 42496 ----a-w- C:\Windows\Sysnative\usermgrcli.dll 2016-02-01 08:23:44 EA8B28FFF774F7C7862C8746E1FDECF6 273920 ----a-w- C:\Windows\Sysnative\Windows.ApplicationModel.LockScreen.dll 2016-02-01 08:23:44 D920A8B070A9BA5C9DEFC3BA7C3883B5 145408 ----a-w- C:\Windows\Sysnative\dssvc.dll 2016-02-01 08:23:44 D2F7EF42F82CEA2545A7A8D103B57DF5 596480 ----a-w- C:\Windows\Sysnative\SettingSync.dll 2016-02-01 08:23:44 736BB47B4D0F66039E0AB9A7B885D0F0 3248128 ----a-w- C:\Windows\Sysnative\Windows.Media.dll 2016-02-01 08:23:44 506F9F526D42BB4C0A579CB78F923A48 483328 ----a-w- C:\Windows\Sysnative\OneDriveSettingSyncProvider.dll 2016-02-01 08:23:43 9D4A09AB97C2F0EC6BFA6B54AA2BA239 3781120 ----a-w- C:\Windows\Sysnative\SettingsHandlers_nt.dll 2016-02-01 08:23:43 3DB6BAA19408895C9E0BB55084DD94F3 595456 ----a-w- C:\Windows\Sysnative\LogonController.dll 2016-02-01 08:23:43 363F3F99863C2BB8612C9133E45BF3E6 387584 ----a-w- C:\Windows\Sysnative\LockAppBroker.dll 2016-02-01 08:23:42 B3CD8B2CBC6E48B194116B28F72CDA67 408064 ----a-w- C:\Windows\Sysnative\CredProvDataModel.dll 2016-02-01 08:23:42 A2FD4588F579F8671E4AB1064633CB46 712704 ----a-w- C:\Windows\Sysnative\usermgr.dll 2016-02-01 08:23:42 9C2B0E3A21CECD14E20A848F0DE94B24 517632 ----a-w- C:\Windows\Sysnative\NotificationController.dll 2016-02-01 08:23:42 8D23F0819A00C547814409B734DD3747 503808 ----a-w- C:\Windows\Sysnative\tileobjserver.dll 2016-02-01 08:23:42 7505ACFD9362DA74FEB623F21FE3B391 1601536 ----a-w- C:\Windows\Sysnative\Windows.Media.Speech.dll 2016-02-01 08:23:42 728EF45130A9923760AE3CF8DC61436B 654848 ----a-w- C:\Windows\Sysnative\PlayToManager.dll 2016-02-01 08:23:42 3CCF1EDBF6EC23174F4700E6DB3FFBDF 966416 ----a-w- C:\Windows\Sysnative\twinapi.appcore.dll 2016-02-01 08:23:42 37B5ECB8C390D9FD5A5BB2FFB7294B9E 553808 ----a-w- C:\Windows\Sysnative\SettingSyncHost.exe 2016-02-01 08:23:42 0BC61871B9B1446C0B28CB5526DC171C 893440 ----a-w- C:\Windows\Sysnative\MbaeApiPublic.dll 2016-02-01 08:23:41 A51AC21B1F31FD7F4EC2811E33572AFC 859136 ----a-w- C:\Windows\Sysnative\modernexecserver.dll 2016-02-01 08:23:41 6FBC6166E73518A8FEF03DCEB5BC4F34 246272 ----a-w- C:\Windows\Sysnative\PackageStateRoaming.dll 2016-02-01 08:23:41 3BEA5930E4C8FC6AC991E8AC6CA79142 11557888 ----a-w- C:\Windows\Sysnative\twinui.dll 2016-02-01 08:23:41 17159DF4093B2F33B95AB9F703EA8391 796160 ----a-w- C:\Windows\Sysnative\TokenBroker.dll 2016-02-01 08:23:32 D4D08AB39F842C640B7F8B1296BDC38C 121344 ----a-w- C:\Windows\Sysnative\DAMM.dll 2016-02-01 08:23:32 919663D05E791FBC7A5766E150435279 120832 ----a-w- C:\Windows\Sysnative\NetworkStatus.dll 2016-02-01 08:23:32 7E90F66669509E7BD2B250BC271D94E2 171008 ----a-w- C:\Windows\Sysnative\dot3mm.dll 2016-02-01 08:23:32 0F7067F069D502954F4E9E3D3378585B 79872 ----a-w- C:\Windows\Sysnative\BthRadioMedia.dll 2016-02-01 08:23:31 F57FE0BD8BD7E1F8088FE18D0FD7BEE9 501008 ----a-w- C:\Windows\Sysnative\AudioEng.dll 2016-02-01 08:23:31 BA77A5B7C3602D0A8DC96CC5ED4AD665 249464 ----a-w- C:\Windows\Sysnative\RESAMPLEDMO.DLL 2016-02-01 08:23:31 5D1F633C10EC9E00211E6C3D429AC1FB 2987520 ----a-w- C:\Windows\Sysnative\esent.dll 2016-02-01 08:23:31 02077F66F8CF2F1FD58403D371482B01 106496 ----a-w- C:\Windows\Sysnative\KeywordDetectorMsftSidAdapter.dll 2016-02-01 08:23:28 CCC25D8DC3177759B541752D3C163460 233992 ----a-w- C:\Windows\Sysnative\mftranscode.dll 2016-02-01 08:23:28 86C0DEE6940878A1496CBBA856FF4E5B 584656 ----a-w- C:\Windows\Sysnative\mf.dll 2016-02-01 08:23:28 65656FF781BDC10127AB223CDC0AC69F 2463704 ----a-w- C:\Windows\Sysnative\mfcore.dll 2016-02-01 08:23:28 628100F7F1F717D6C115051A389CE37E 90912 ----a-w- C:\Windows\Sysnative\devenum.dll 2016-02-01 08:23:28 5E010B486F7FB28D9B79AAC471FE484F 476760 ----a-w- C:\Windows\Sysnative\MFCaptureEngine.dll 2016-02-01 08:23:28 50410D6D47B1C0A9BC4A4B1EE4E0027F 83704 ----a-w- C:\Windows\Sysnative\mfvdsp.dll 2016-02-01 08:23:27 FF12AE856ADD9B0AC9F1A5DF323E9130 787720 ----a-w- C:\Windows\Sysnative\WMADMOD.DLL 2016-02-01 08:23:27 F7FC6CB37CBF7C3547B2F8D8D3A1ACCD 377592 ----a-w- C:\Windows\Sysnative\MP4SDECD.DLL 2016-02-01 08:23:27 846FF503D852A7B15FC02A46098EB31D 205072 ----a-w- C:\Windows\Sysnative\COLORCNV.DLL 2016-02-01 08:23:27 32EFE0A14B4323786ACE4E8950210367 2641928 ----a-w- C:\Windows\Sysnative\WMVDECOD.DLL 2016-02-01 08:23:27 0DE4840EB6125C69E46EB9CA908B6D29 345080 ----a-w- C:\Windows\Sysnative\WMVSDECD.DLL 2016-02-01 08:23:26 52C3440B5098BFB99D91E869A26ECB30 1213440 ----a-w- C:\Windows\Sysnative\RemoteNaturalLanguage.dll 2016-02-01 08:23:26 162AD130D6F3C5C877F0AD121C1F485E 3622272 ----a-w- C:\Windows\Sysnative\iertutil.dll 2016-02-01 08:23:25 B31569B0E7A467D4050FA49CFCBFCEFA 204800 ----a-w- C:\Windows\Sysnative\wcmcsp.dll 2016-02-01 08:23:25 A40484AC27EE08DBE7F8DA5E1F6651ED 591360 ----a-w- C:\Windows\Sysnative\wcmsvc.dll 2016-02-01 08:23:25 95EC1A9A6926F5091957F6CA52A34F21 162304 ----a-w- C:\Windows\Sysnative\SubscriptionMgr.dll 2016-02-01 08:23:25 91E005E44100E257761A8FD49BC62E51 2147080 ----a-w- C:\Windows\Sysnative\d3d9.dll 2016-02-01 08:23:25 73AF2D8038FCEF4C4EB4B3106B41967A 2573768 ----a-w- C:\Windows\Sysnative\msxml6.dll 2016-02-01 08:23:24 D4D17FB8E003050BA38B85F335B71222 322048 ----a-w- C:\Windows\Sysnative\vaultsvc.dll 2016-02-01 08:23:24 3C096082A9232B7CEE4653B9C9031769 2228736 ----a-w- C:\Windows\Sysnative\wlansvc.dll 2016-02-01 08:23:24 20E8B4BD322195D30C781BED86FA81C8 185344 ----a-w- C:\Windows\Sysnative\psmsrv.dll 2016-02-01 08:23:23 F70197C9E902336B223A8F43AB627BD7 115704 ----a-w- C:\Windows\Sysnative\VIDRESZR.DLL 2016-02-01 08:23:23 B3E7A635C248EBF3A9C630917BDD5FA0 1822280 ----a-w- C:\Windows\Sysnative\ntdll.dll 2016-02-01 08:23:23 959695FD137FF0DEFC6152AAB03AA3D6 1216512 ----a-w- C:\Windows\Sysnative\netcenter.dll 2016-02-01 08:23:23 544F4E3C4EEBAC2541C6D1D865FA2963 1717248 ----a-w- C:\Windows\Sysnative\GdiPlus.dll 2016-02-01 08:23:22 DD5339D7A02E27CC108897AF56F1BA95 1991120 ----a-w- C:\Windows\Sysnative\WMVENCOD.DLL 2016-02-01 08:23:22 9FE8EF9A4FAE92B1296D4D1AD8A2C6E6 447488 ----a-w- C:\Windows\Sysnative\WMVSENCD.DLL 2016-02-01 08:23:22 903FC05DFE2EA0432113E251DE3A3E51 634368 ----a-w- C:\Windows\Sysnative\WMVXENCD.DLL 2016-02-01 08:23:22 7ED8EF17B3A6C69DA6A0EC90CFBB4ABB 7055872 ----a-w- C:\Windows\Sysnative\BingMaps.dll 2016-02-01 08:23:22 55F29D7092ABA1D845847DA7D5E1F400 287744 ----a-w- C:\Windows\Sysnative\provhandlers.dll 2016-02-01 08:23:22 01C2EEA7870FE26A4A6CCBA5421CC7E5 229376 ----a-w- C:\Windows\Sysnative\SensorService.dll 2016-02-01 08:23:21 DE82BD1C35547D04241DB1DB3D4808E0 6487248 ----a-w- C:\Windows\Sysnative\windows.storage.dll 2016-02-01 08:23:21 D6D96E20079D902243690DCBB007F997 2180608 ----a-w- C:\Windows\Sysnative\AppXDeploymentServer.dll 2016-02-01 08:23:21 CD64EAD95F7B20FD4AF7D66C12C6B4E6 80384 ----a-w- C:\Windows\Sysnative\AppxSysprep.dll 2016-02-01 08:23:21 C158F23E5D8581CB50B33D83AC721E93 1795584 ----a-w- C:\Windows\Sysnative\AppXDeploymentExtensions.dll 2016-02-01 08:23:21 B7B20B07E6BDB3DCD78668E4F7BFABA9 1888768 ----a-w- C:\Windows\Sysnative\dwmcore.dll 2016-02-01 08:23:20 F9042F366B9695FD564E9485112453E2 1871360 ----a-w- C:\Windows\Sysnative\msxml3.dll 2016-02-01 08:23:20 6FA4BB1AA0C18F5CFB96F228376BD249 2494712 ----a-w- C:\Windows\Sysnative\CoreUIComponents.dll 2016-02-01 08:23:19 C974AFD04F02EADDE7C1928B3B42AA91 1672192 ----a-w- C:\Windows\Sysnative\quartz.dll 2016-02-01 08:23:19 AA8AD8C57E73057E1C886E9472303CD1 2125312 ----a-w- C:\Windows\Sysnative\twinui.appcore.dll 2016-02-01 08:23:18 FA78CF03CB18E8EAB07D1B9470508AA7 1270104 ----a-w- C:\Windows\Sysnative\mfnetsrc.dll 2016-02-01 08:23:18 8675E8DC436CFD340C2BEACD29315226 1710592 ----a-w- C:\Windows\Sysnative\SRHInproc.dll 2016-02-01 08:23:18 68DE1997977CD3A86D5F8D0FD23056EA 1563392 ----a-w- C:\Windows\Sysnative\winmde.dll 2016-02-01 08:23:18 58395E37ED838B93A56F1D089C2F53CF 1643872 ----a-w- C:\Windows\Sysnative\diagtrack.dll 2016-02-01 08:23:18 3A04CB24453E831CF75C209933DED057 862056 ----a-w- C:\Windows\Sysnative\mfnetcore.dll 2016-02-01 08:23:17 71107775BE0E612150F032CE21DD9C7C 88384 ----a-w- C:\Windows\Sysnative\remoteaudioendpoint.dll 2016-02-01 08:23:17 537826436B921256BA9055F65A97ED91 7569408 ----a-w- C:\Windows\Sysnative\mos.dll 2016-02-01 08:23:17 2C82D9E55432915A68A609008BDEF41A 1563472 ----a-w- C:\Windows\Sysnative\wmpmde.dll 2016-02-01 08:23:16 6C291578AD85D4527E83B5E9465BDB6C 1649152 ----a-w- C:\Windows\Sysnative\comsvcs.dll 2016-02-01 08:23:16 429E7B01BBEB38EA55464918811D3373 515072 ----a-w- C:\Windows\Sysnative\internetmail.dll 2016-02-01 08:23:16 3478670E8646CC536E1EF21F077F4DD6 2156400 ----a-w- C:\Windows\Sysnative\hevcdecoder.dll 2016-02-01 08:23:15 E42DE587D8453E20796A149303DE4691 1255936 ----a-w- C:\Windows\Sysnative\WMSPDMOE.DLL 2016-02-01 08:23:15 E280D20B0AD017F78290C39CB27006AB 187904 ----a-w- C:\Windows\Sysnative\Windows.UI.PicturePassword.dll 2016-02-01 08:23:15 C62218BAE56459EE10145625762CEF1C 751992 ----a-w- C:\Windows\Sysnative\WMADMOE.DLL 2016-02-01 08:23:15 7F380DC90B8A045A3F4835D196C35EEB 1366680 ----a-w- C:\Windows\Sysnative\user32.dll 2016-02-01 08:23:15 711877C9F5CD75070D57431F272DCE78 75264 ----a-w- C:\Windows\Sysnative\ACPBackgroundManagerPolicy.dll 2016-02-01 08:23:15 35D3A05A1FE037E866E17E84CEE9CF48 2350592 ----a-w- C:\Windows\Sysnative\authui.dll 2016-02-01 08:23:14 D5AAA188C70146977CFEE8D128599F3F 378368 ----a-w- C:\Windows\Sysnative\SystemEventsBrokerServer.dll 2016-02-01 08:23:14 9ED18AA0A7F4DEC9779CE9059FE6D057 3527168 ----a-w- C:\Windows\Sysnative\tquery.dll 2016-02-01 08:23:14 92C15AC3119BD5A270D4721D94962E87 205312 ----a-w- C:\Windows\Sysnative\aepic.dll 2016-02-01 08:23:14 85AC4CA67BECC08CBC655A8D8919B23B 1331200 ----a-w- C:\Windows\Sysnative\UIAutomationCore.dll 2016-02-01 08:23:14 085303A3E653D0F1CB7F54A45FB25FAE 1150816 ----a-w- C:\Windows\Sysnative\aeinv.dll 2016-02-01 08:23:12 D61F850547AAD0F46995EAA1363B25F9 1025840 ----a-w- C:\Windows\Sysnative\mfsrcsnk.dll 2016-02-01 08:23:12 C56E82DA13F1433C7E8AC8E31529E41E 949760 ----a-w- C:\Windows\Sysnative\kerberos.dll 2016-02-01 08:23:12 AAC020C718E66C47F05E985AB4C571C1 1043872 ----a-w- C:\Windows\Sysnative\mfmp4srcsnk.dll 2016-02-01 08:23:12 6BE6A7C120E80E36563E35B226700FF3 487424 ----a-w- C:\Windows\Sysnative\mfmkvsrcsnk.dll 2016-02-01 08:23:12 3932BD2F309F76534BA478892C337094 816576 ----a-w- C:\Windows\Sysnative\mfmpeg2srcsnk.dll 2016-02-01 08:23:11 78760751FBCB900F6F68CA1700DAE2DC 2675200 ----a-w- C:\Windows\Sysnative\Windows.StateRepository.dll 2016-02-01 08:23:11 390EAAB81E5C1DB0FD4920796C74AB48 1290240 ----a-w- C:\Windows\Sysnative\Windows.UI.Shell.dll 2016-02-01 08:23:10 AEE285AC6117625361E6D5F06A58A830 723648 ----a-w- C:\Windows\Sysnative\generaltel.dll 2016-02-01 08:23:10 4717521A872CAE4B6DBC40BA5FE2238A 1083072 ----a-w- C:\Windows\Sysnative\appraiser.dll 2016-02-01 08:23:10 1BFAC03B6422E878EFCDA934BF4C4823 1008640 ----a-w- C:\Windows\Sysnative\schedsvc.dll 2016-02-01 08:23:09 DDCBE4B09287CF224B63015F9C6BD31F 1295712 ----a-w- C:\Windows\Sysnative\wpx.dll 2016-02-01 08:23:09 A25B124EF04FE23BE96561C1107B9272 781976 ----a-w- C:\Windows\Sysnative\mfds.dll 2016-02-01 08:23:09 705DC0E4337CFDC6CCC035B2C5F9AF94 1009664 ----a-w- C:\Windows\Sysnative\WMSPDMOD.DLL 2016-02-01 08:23:09 65BCE1DC85A1023021D363E0CE4AB14C 845824 ----a-w- C:\Windows\Sysnative\Magnify.exe 2016-02-01 08:23:09 5E6F27976D0A53CE834D94F55378B9EE 929792 ----a-w- C:\Windows\Sysnative\SRH.dll 2016-02-01 08:23:09 5AB935E396A83A303DEA1FD480A19159 572928 ----a-w- C:\Windows\Sysnative\vbscript.dll 2016-02-01 08:23:09 0AAA44C103BB9D3BE03398BEF93C52A4 826880 ----a-w- C:\Windows\Sysnative\jscript.dll 2016-02-01 08:23:08 DF84555A734BA2BDA55BCCCC47095ADD 1015808 ----a-w- C:\Windows\Sysnative\RDXService.dll 2016-02-01 08:23:08 BABB3A14002CE205616C9A10373AE040 253952 ----a-w- C:\Windows\Sysnative\SettingsHandlers_UserAccount.dll 2016-02-01 08:23:08 B6E5858C57014B0FA4A94F154BBDCC52 784136 ----a-w- C:\Windows\Sysnative\mfsvr.dll 2016-02-01 08:23:08 870F1D282F0F8E7D9A56533A87D0551E 779928 ----a-w- C:\Windows\Sysnative\evr.dll 2016-02-01 08:23:08 52ABEA8D9AF917CDFF22931595BDC64F 122880 ----a-w- C:\Windows\Sysnative\VEDataLayerHelpers.dll 2016-02-01 08:23:08 311F4D131C28DA12595132A35124E955 910848 ----a-w- C:\Windows\Sysnative\SharedStartModel.dll 2016-02-01 08:23:08 09247D43F19CAFEEFEBF6A32F3A1225F 118272 ----a-w- C:\Windows\Sysnative\KnobsCsp.dll 2016-02-01 08:23:08 02786761624CE45D67A480D992C459AC 931328 ----a-w- C:\Windows\Sysnative\MSMPEG2ENC.DLL 2016-02-01 08:23:07 EE329CCF9C1E1CF6096E3935943CB3A5 667856 ----a-w- C:\Windows\Sysnative\advapi32.dll 2016-02-01 08:23:07 E5D86250453B33900666D92ED1A92ABE 2740224 ----a-w- C:\Windows\Sysnative\wininet.dll 2016-02-01 08:23:07 D1650F6BDDF820399421C2952675731A 2558976 ----a-w- C:\Windows\Sysnative\mssrch.dll 2016-02-01 08:23:07 ACA9EAA9CC52E8DA0784FE3B06E06265 609592 ----a-w- C:\Windows\Sysnative\ci.dll 2016-02-01 08:23:07 5A863500AB522EFA6270019D613F15F9 757760 ----a-w- C:\Windows\Sysnative\fveapi.dll 2016-02-01 08:23:06 F90129379A9D912CCF4EADC50F546C8B 463872 ----a-w- C:\Windows\Sysnative\MFWMAAEC.DLL 2016-02-01 08:23:06 C4DC4CAB9B55E288F0C38872009727E9 632168 ----a-w- C:\Windows\Sysnative\dxgi.dll 2016-02-01 08:23:06 B539D98D907A8F94DC3B7BB37B014008 678912 ----a-w- C:\Windows\Sysnative\qedit.dll 2016-02-01 08:23:06 8F52D8477ED3EF446EC72D087FF6B1F5 355328 ----a-w- C:\Windows\Sysnative\ninput.dll 2016-02-01 08:23:06 69B076C9D3B75647EE1807E168F20F78 2415104 ----a-w- C:\Windows\Sysnative\DWrite.dll 2016-02-01 08:23:06 4D9B59BCD7FA373D52E5CD9A285C332C 587776 ----a-w- C:\Windows\Sysnative\ieui.dll 2016-02-01 08:23:06 0367B8FA0C41969DD92F489DA5FE664F 603648 ----a-w- C:\Windows\Sysnative\duser.dll 2016-02-01 08:23:05 D4E92C0C0F9C5054B03D67A3C0B41961 555768 ----a-w- C:\Windows\Sysnative\directmanipulation.dll 2016-02-01 08:23:05 65A0B3477231CE37B09A719DBBB9FCF1 671232 ----a-w- C:\Windows\Sysnative\WUDFx02000.dll 2016-02-01 08:23:05 5CE3C624FABA3154504DF9A2BD029A5E 50176 ----a-w- C:\Windows\Sysnative\WcnNetsh.dll 2016-02-01 08:23:04 BF746516D6DCDF242976A6893D65A778 771072 ----a-w- C:\Windows\Sysnative\Chakradiag.dll 2016-02-01 08:23:04 A108F6D878F2B95EAA00A088EDE0E598 1294336 ----a-w- C:\Windows\Sysnative\wcnwiz.dll 2016-02-01 08:23:04 913E47FCD3B43EC27215F90884915CAF 780288 ----a-w- C:\Windows\Sysnative\Windows.ApplicationModel.Store.dll 2016-02-01 08:23:04 74C965E6A46F070196BDBC1CBD7DB8F8 607408 ----a-w- C:\Windows\Sysnative\fontdrvhost.exe 2016-02-01 08:23:04 65F1F4DBB4A6FA971BF9F00129F452A0 494592 ----a-w- C:\Windows\Sysnative\StoreAgent.dll 2016-02-01 08:23:04 62CFDB1741D700E2292242B50F1EC1A9 168960 ----a-w- C:\Windows\Sysnative\InstallAgent.exe 2016-02-01 08:23:04 4AC4CB97674AB132ACB8309C0615452B 772448 ----a-w- C:\Windows\Sysnative\invagent.dll 2016-02-01 08:23:03 AF32A0D3E5A07AA50F4012C419E63757 539136 ----a-w- C:\Windows\Sysnative\mfh264enc.dll 2016-02-01 08:23:03 A70A997B88EAEE0E898DA5773045AFF1 2446336 ----a-w- C:\Windows\Sysnative\InputService.dll 2016-02-01 08:23:03 8F643B386A381879A90946ACB6E7F30D 502272 ----a-w- C:\Windows\Sysnative\dlnashext.dll 2016-02-01 08:23:03 72C37168B3A428F33D566130382D3D85 523776 ----a-w- C:\Windows\Sysnative\catsrvut.dll 2016-02-01 08:23:03 4CF70EA2E9B2DF1F942B357DCC0E33E8 365568 ----a-w- C:\Windows\Sysnative\atmfd.dll 2016-02-01 08:23:03 3BFEF1D65DFF1CEA182BCF23CBC2BFDD 252768 ----a-w- C:\Windows\Sysnative\ContentDeliveryManager.Utilities.dll 2016-02-01 08:23:03 2E4FA4D0461BB78EC23E12404BED604E 179712 ----a-w- C:\Windows\Sysnative\coredpus.dll 2016-02-01 08:23:02 DBA8FE1EAA344106C334E193D3D57B66 73728 ----a-w- C:\Windows\Sysnative\wwancfg.dll 2016-02-01 08:23:02 C8C5DFF028EA28D7846E95D8E5461794 570880 ----a-w- C:\Windows\Sysnative\MbaeApi.dll 2016-02-01 08:23:02 9C0547B502CFB4F750B883EC4425B30C 441696 ----a-w- C:\Windows\Sysnative\devinv.dll 2016-02-01 08:23:02 69AC1B59A11F3FDBDBEB5B9B09D7E05B 379392 ----a-w- C:\Windows\Sysnative\qdvd.dll 2016-02-01 08:23:02 5002E16AC0B058089CC3BC241AFF8BF2 527952 ----a-w- C:\Windows\Sysnative\AudioSes.dll 2016-02-01 08:23:02 38F08B82ADEEA1003B4A5177BB5366B3 347136 ----a-w- C:\Windows\Sysnative\ncryptprov.dll 2016-02-01 08:23:01 F9BD360A4799BB54A01692940C46CA2B 537080 ----a-w- C:\Windows\Sysnative\WWanAPI.dll 2016-02-01 08:23:01 E22030052530D1A6825C47B997EC0DD3 814080 ----a-w- C:\Windows\Sysnative\msctfuimanager.dll 2016-02-01 08:23:01 C197284A9D565A38497733AF2BDFA111 1679360 ----a-w- C:\Windows\Sysnative\FntCache.dll 2016-02-01 08:23:01 AC180D981BD23443793F7AA71BBE344A 599552 ----a-w- C:\Windows\Sysnative\wpnapps.dll 2016-02-01 08:23:01 986BC1A9E29A9E35C1D10D874616ACBB 215040 ----a-w- C:\Windows\Sysnative\notepad.exe 2016-02-01 08:23:01 0D5C9E27E93AAEA3E30A1E59A7AC3DFF 1205248 ----a-w- C:\Windows\Sysnative\Unistore.dll 2016-02-01 08:23:00 B89FE628B72CEA4674787D13A87CEE9A 387584 ----a-w- C:\Windows\Sysnative\NetSetupShim.dll 2016-02-01 08:23:00 8AFDD74F2DC5BAD9B2215FB19DB65240 809352 ----a-w- C:\Windows\Sysnative\CoreMessaging.dll 2016-02-01 08:23:00 103CBAC0689FA88081E421E8203BA2F0 305664 ----a-w- C:\Windows\Sysnative\ksproxy.ax 2016-02-01 08:22:59 F01743062DA74A24A0E7836289E33731 187904 ----a-w- C:\Windows\Sysnative\provisioningcsp.dll 2016-02-01 08:22:59 EF3BBA8739757B470D0E49C8619A31C0 53760 ----a-w- C:\Windows\Sysnative\Windows.Speech.Pal.dll 2016-02-01 08:22:59 D33C8E7B495A668F4F9740CC93AF6496 453120 ----a-w- C:\Windows\Sysnative\Windows.Devices.Usb.dll 2016-02-01 08:22:59 C92EBECB1E30E7E6006C0D8B4040C3F6 274944 ----a-w- C:\Windows\Sysnative\syncutil.dll 2016-02-01 08:22:59 AF34122A1B595218036B4049D802B470 1203712 ----a-w- C:\Windows\Sysnative\Windows.Devices.Bluetooth.dll 2016-02-01 08:22:59 90211F7475F525E7F9858C0CE3BBBBE7 1774592 ----a-w- C:\Windows\Sysnative\Windows.UI.Immersive.dll 2016-02-01 08:22:59 8A216BBE091DA0585F6A5E8B65980961 324096 ----a-w- C:\Windows\Sysnative\profsvc.dll 2016-02-01 08:22:59 43A1B8B43CA4E213E0FD920F2FD6BCBA 267776 ----a-w- C:\Windows\Sysnative\Windows.Internal.Management.dll 2016-02-01 08:22:59 41E4B5F664AAF085F5B8147D0321DE4C 846336 ----a-w- C:\Windows\Sysnative\wpncore.dll 2016-02-01 08:22:59 334206DD8DA94B0AEBC46A3196888031 83968 ----a-w- C:\Windows\Sysnative\DeviceEnroller.exe 2016-02-01 08:22:59 194239DA484C7DB62E6773ABB5DD4463 269312 ----a-w- C:\Windows\Sysnative\provengine.dll 2016-02-01 08:22:59 157B1CABAF5201237EECA4FB0F34D822 403456 ----a-w- C:\Windows\Sysnative\dmenrollengine.dll 2016-02-01 08:22:58 E4FEBAC5221A92C25734A9769B66A97D 310784 ----a-w- C:\Windows\Sysnative\ActionCenter.dll 2016-02-01 08:22:58 E19B29DCA6AF0D29E180769FEDD408DD 250520 ----a-w- C:\Windows\Sysnative\MPG4DECD.DLL 2016-02-01 08:22:58 76432D2E5504D33B4D2B1F837A057ED4 251544 ----a-w- C:\Windows\Sysnative\MP43DECD.DLL 2016-02-01 08:22:57 C6BA8ADCD2F2A626E01B20D740C5A9AF 1602560 ----a-w- C:\Windows\Sysnative\urlmon.dll 2016-02-01 08:22:57 A92AFC8FB13ADC1CB59719B3E519C843 1294352 ----a-w- C:\Windows\Sysnative\winload.efi 2016-02-01 08:22:57 7E8811597D2752736B776F15A1C8FAA6 856576 ----a-w- C:\Windows\Sysnative\ContactApis.dll 2016-02-01 08:22:57 5077A7430A034A3A53811C3F4E4BD76A 195584 ----a-w- C:\Windows\Sysnative\fwpolicyiomgr.dll 2016-02-01 08:22:57 35EC6A4E7384E233CBB5EEFD3BC2204D 247296 ----a-w- C:\Windows\Sysnative\facecredentialprovider.dll 2016-02-01 08:22:57 327DA4A4DE4E9BECF2C16967366C74E2 186880 ----a-w- C:\Windows\Sysnative\cloudAP.dll 2016-02-01 08:22:57 2C144777278ECD6DFF4B5A90F742C1AA 346112 ----a-w- C:\Windows\Sysnative\ngccredprov.dll 2016-02-01 08:22:57 20436EF4CDBBC0B87464EE42D9D31C99 306688 ----a-w- C:\Windows\Sysnative\NotificationObjFactory.dll 2016-02-01 08:22:56 B7927A1D40BD17BC963E9353DBB36CD7 869376 ----a-w- C:\Windows\Sysnative\MapControlCore.dll 2016-02-01 08:22:56 5D046D71B18BEFB2E4D164C3DEEDD672 187392 ----a-w- C:\Windows\Sysnative\NetSetupSvc.dll 2016-02-01 08:22:56 2B4D03A121996467E53AF02F028FD017 235008 ----a-w- C:\Windows\Sysnative\UserMgrProxy.dll 2016-02-01 08:22:56 11648E08564ECFC6CB435990261F1A34 1123400 ----a-w- C:\Windows\Sysnative\winload.exe 2016-02-01 08:22:56 02954F6B3389EF56088EF1C99B6105BA 202240 ----a-w- C:\Windows\Sysnative\accountaccessor.dll 2016-02-01 08:22:55 BBA571F40F08F967531573109F7FA95E 169984 ----a-w- C:\Windows\Sysnative\mdmregistration.dll 2016-02-01 08:22:55 B32BD244B13DEC1DD050146B5F5466D7 1061888 ----a-w- C:\Windows\Sysnative\reseteng.dll 2016-02-01 08:22:55 3B397ED55AE652520503CCE0996B0D25 160256 ----a-w- C:\Windows\Sysnative\enrollmentapi.dll 2016-02-01 08:22:54 F1A6A22A63F380DFF28C55B11D688B0C 102304 ----a-w- C:\Windows\Sysnative\omadmapi.dll 2016-02-01 08:22:54 E407B70B9D21CA3967485D464A01BAE5 140288 ----a-w- C:\Windows\Sysnative\WcnApi.dll 2016-02-01 08:22:54 D348983828D21D3D05711812A2811DCF 243248 ----a-w- C:\Windows\Sysnative\mfps.dll 2016-02-01 08:22:54 C18ED3B56B91A835F019634180349E8A 849408 ----a-w- C:\Windows\Sysnative\comdlg32.dll 2016-02-01 08:22:54 B02EA3A2E6BEDAB9C954AAC6BD887874 292856 ----a-w- C:\Windows\Sysnative\LockAppHost.exe 2016-02-01 08:22:54 97EB90D57B84797D01D59E862B1FF9E8 1591848 ----a-w- C:\Windows\Sysnative\gdi32.dll 2016-02-01 08:22:54 863E39BB1F8779B8A6CEEC4BA93401C2 1018568 ----a-w- C:\Windows\Sysnative\winresume.efi 2016-02-01 08:22:54 3DB512EC071AB5656EECA3611E24C797 752640 ----a-w- C:\Windows\Sysnative\ChatApis.dll 2016-02-01 08:22:54 3C6F2EF4541A9CD98EFED7B8CE9D061F 112640 ----a-w- C:\Windows\Sysnative\fdWCN.dll 2016-02-01 08:22:54 01F1D71F291A64266E3B0DF60E6B6CE7 117760 ----a-w- C:\Windows\Sysnative\dafWCN.dll 2016-02-01 08:22:53 F3994884BE4F1019B4EC34F85A3397E7 171520 ----a-w- C:\Windows\Sysnative\WinBioDataModel.dll 2016-02-01 08:22:53 E283DE7B5BB438BE4CCD393DA582A5D2 404480 ----a-w- C:\Windows\Sysnative\diagtrack_wininternal.dll 2016-02-01 08:22:53 C5890CAD6482B12ECA19E680B779560F 858408 ----a-w- C:\Windows\Sysnative\winresume.exe 2016-02-01 08:22:53 64D7B91B7D667A70782D9C76D6292C3C 980832 ----a-w- C:\Windows\Sysnative\SecConfig.efi 2016-02-01 08:22:52 E650DD63BF9C8F4369C547B72DC81888 333312 ----a-w- C:\Windows\Sysnative\MusUpdateHandlers.dll 2016-02-01 08:22:52 D907DFF972354542D5B0B4414B308B75 312832 ----a-w- C:\Windows\Sysnative\SensorsApi.dll 2016-02-01 08:22:52 B9FC9E9B55C74557FEC004BF8B1184F4 359936 ----a-w- C:\Windows\Sysnative\ncsi.dll 2016-02-01 08:22:52 B8401703E619E7BD7B5A659306A9BFE6 84480 ----a-w- C:\Windows\Sysnative\MDMAppInstaller.exe 2016-02-01 08:22:52 917C7C09612AD81BCF0C49007740DB4E 775312 ----a-w- C:\Windows\Sysnative\locale.nls 2016-02-01 08:22:52 696A3CCDD99BD4694C7A925CF8B7DDAE 91648 ----a-w- C:\Windows\Sysnative\SensorsNativeApi.V2.dll 2016-02-01 08:22:52 62821B34C9D94E7E58FD2D71F426F5C0 78848 ----a-w- C:\Windows\Sysnative\VPNv2CSP.dll 2016-02-01 08:22:52 49213BF8E7EEE157F128C58D75043B09 68096 ----a-w- C:\Windows\Sysnative\EnterpriseDesktopAppMgmtCSP.dll 2016-02-01 08:22:52 2C7B2FD825A8AF0A1338D86B5AFA4343 413184 ----a-w- C:\Windows\Sysnative\diagtrack_win.dll 2016-02-01 08:22:52 184EA31BE714F3B33A5E96CBE103561C 78528 ----a-w- C:\Windows\Sysnative\acmigration.dll 2016-02-01 08:22:51 D1AA97B30A9ED6F89DC3848C8BF53513 224256 ----a-w- C:\Windows\Sysnative\KnobsCore.dll 2016-02-01 08:22:51 A1EFFF8EA50BE57AC38264541F1B88FD 801632 ----a-w- C:\Windows\Sysnative\WWAHost.exe 2016-02-01 08:22:51 9045120B390CDA9C0C7DB93745B92554 720896 ----a-w- C:\Windows\Sysnative\EmailApis.dll 2016-02-01 08:22:51 5CF2C1A920FAC677573B529436773A84 55296 ----a-w- C:\Windows\Sysnative\MusNotificationUx.exe 2016-02-01 08:22:51 0E585006B82E0566AE521641D827F852 235520 ----a-w- C:\Windows\Sysnative\SettingsHandlers_Notifications.dll 2016-02-01 08:22:50 F777FE6BA9C62A4D90BC7017C8FED35F 336384 ----a-w- C:\Windows\Sysnative\SearchProtocolHost.exe 2016-02-01 08:22:50 7C00C6F9DD1F5B606FD0FAEFA639558D 41984 ----a-w- C:\Windows\Sysnative\VoiceActivationManager.dll 2016-02-01 08:22:50 7910232E31799A576F2509DA92CB8813 928256 ----a-w- C:\Windows\Sysnative\JpMapControl.dll 2016-02-01 08:22:50 41C0EC5B11375F9CA045AFEF1EB75D5F 366592 ----a-w- C:\Windows\Sysnative\wuuhext.dll 2016-02-01 08:22:50 0D75CBD29B38A8D9361033A6884848AF 25280 ----a-w- C:\Windows\Sysnative\CompatTelRunner.exe 2016-02-01 08:22:49 F548C34A6FF655F0A716316133B4DD5D 590336 ----a-w- C:\Windows\Sysnative\MessagingDataModel2.dll 2016-02-01 08:22:49 D37063C5B492B7B4F26D24C62167C8BE 137728 ----a-w- C:\Windows\Sysnative\VEStoreEventHandlers.dll 2016-02-01 08:22:49 9C71FA3F776218AD2394833B8DE79031 685568 ----a-w- C:\Windows\Sysnative\AppointmentApis.dll 2016-02-01 08:22:49 85146ABCB1EF298D1FF6EE4D5541788C 832512 ----a-w- C:\Windows\Sysnative\MapsStore.dll 2016-02-01 08:22:49 01074D7E7370E7A7CAFF0DC442C89794 113184 ----a-w- C:\Windows\Sysnative\userenv.dll 2016-02-01 08:22:48 FBFC4EAC38BEC9515BBAC57D1F2288E6 573440 ----a-w- C:\Windows\Sysnative\Windows.Cortana.Desktop.dll 2016-02-01 08:22:48 E4257DF7C5517E3996047F7ADDB208F5 8847 ----a-w- C:\Windows\Sysnative\ResPriHMImageList 2016-02-01 08:22:48 D61C3ED7C5F0D1B5BD9B351FEC381D57 120832 ----a-w- C:\Windows\Sysnative\omadmclient.exe 2016-02-01 08:22:48 CFFE537A11AE6C825F36240B96689886 993104 ----a-w- C:\Windows\Sysnative\ReAgent.dll 2016-02-01 08:22:48 B171608F20705895726DE86B34D1FBAC 95744 ----a-w- C:\Windows\Sysnative\LocationWiFiAdapter.dll 2016-02-01 08:22:48 98EAC529E0F9A1566E9E19D4667854EC 181760 ----a-w- C:\Windows\Sysnative\shutdownux.dll 2016-02-01 08:22:48 70AAE16C405934CAD2024E8E5BDDDC7A 28672 ----a-w- C:\Windows\Sysnative\NotificationControllerPS.dll 2016-02-01 08:22:48 5E8D09216315B063FD4AEAB9508F0776 1087296 ----a-w- C:\Windows\Sysnative\mfplat.dll 2016-02-01 08:22:48 02707CF32272B726BB410E6717BBB7E8 446976 ----a-w- C:\Windows\Sysnative\MapConfiguration.dll 2016-02-01 08:22:47 F5839DD5FD73019B046ED7FD87AE6C71 123392 ----a-w- C:\Windows\Sysnative\mssprxy.dll 2016-02-01 08:22:47 D88952BD78157D66A0921B63F5DD0EC5 439296 ----a-w- C:\Windows\Sysnative\LocationWebproxy.dll 2016-02-01 08:22:47 77C8CD0AACC1D059EDF6E91920D11550 421888 ----a-w- C:\Windows\Sysnative\Windows.Internal.Bluetooth.dll 2016-02-01 08:22:46 E6B7193FF6E1FBFD644E0D5545A6E779 7168 ----a-w- C:\Windows\Sysnative\KBDAZST.DLL 2016-02-01 08:22:46 E6337423BD19DD12EB6777934B57E0F4 176640 ----a-w- C:\Windows\Sysnative\LocationPeIP.dll 2016-02-01 08:22:46 AE15D9860C287112D57062E24FCD6EB9 7168 ----a-w- C:\Windows\Sysnative\KBDAZE.DLL 2016-02-01 08:22:46 75051FAAA293FA5414105A2BDA6BAC05 223232 ----a-w- C:\Windows\Sysnative\PhoneCallHistoryApis.dll 2016-02-01 08:22:46 69B49DECE9996743DB231D06F49701B2 7168 ----a-w- C:\Windows\Sysnative\KBDAZEL.DLL 2016-02-01 08:22:46 50B2D1C6E83407093678C0B0791F4B74 7168 ----a-w- C:\Windows\Sysnative\kbdgeoqw.dll 2016-02-01 08:22:46 230C8AEE3C7F4723ABEA09C93DF47AF3 257024 ----a-w- C:\Windows\Sysnative\UserDataAccountApis.dll 2016-02-01 08:22:46 17A344D0A065883ABE6A9239093E7CA9 594472 ----a-w- C:\Windows\Sysnative\Windows.Internal.Shell.Broker.dll 2016-02-01 08:22:46 07B5710393558DD734647D5F2F020647 215552 ----a-w- C:\Windows\Sysnative\LocationCrowdsource.dll 2016-02-01 08:22:45 A0DBB9386BEA8DA1A159C2A2E07081A3 856576 ----a-w- C:\Windows\Sysnative\MPSSVC.dll 2016-02-01 08:22:45 63D8A023148D8436D6CBA65E2B9ED56A 143360 ----a-w- C:\Windows\Sysnative\provops.dll 2016-02-01 08:22:45 26E5D4CA29A7B33EAD6E4C07D7DD3FBF 193024 ----a-w- C:\Windows\Sysnative\EnterpriseModernAppMgmtCSP.dll 2016-02-01 08:22:45 141ABE24124CB1E25954E9D52FF1B999 67072 ----a-w- C:\Windows\Sysnative\profext.dll 2016-02-01 08:22:44 F0B43C550BD519423FB79A58A860CE0B 204288 ----a-w- C:\Windows\Sysnative\LocationPeCell.dll 2016-02-01 08:22:44 EA1C2DAB8A63712B94897A58557B086C 371712 ----a-w- C:\Windows\Sysnative\nlasvc.dll 2016-02-01 08:22:44 5793FBBB1F120D1815A8348434ED236C 221184 ----a-w- C:\Windows\Sysnative\LocationPeWiFi.dll 2016-02-01 08:22:44 54D78B8A26900F3E08191ABF0AD499A2 193536 ----a-w- C:\Windows\Sysnative\SharedStartModelShim.dll 2016-02-01 08:22:44 124DC4FC14EEA95B8E05F139A57D5B91 553472 ----a-w- C:\Windows\Sysnative\GamePanel.exe ====== C:\Windows\Sysnative\drivers ===== 2016-02-01 08:24:06 9B2039C5673EEBF1D4E34ABC0AFB88C7 685568 ----a-w- C:\Windows\Sysnative\drivers\WdiWiFi.sys 2016-02-01 08:24:06 7BF844D362EB746BC7A6DC3F57FA3E32 8192 ----a-w- C:\Windows\Sysnative\drivers\gpuenergydrv.sys 2016-02-01 08:24:06 70469C8AC4AD367295E70CFDD81B754C 99664 ----a-w- C:\Windows\Sysnative\drivers\pdc.sys 2016-02-01 08:24:05 C67A03F54A1EA683F4880A481EE5FF6C 373072 ----a-w- C:\Windows\Sysnative\drivers\USBXHCI.SYS 2016-02-01 08:24:05 5A1C6AFFF6946C5C21A27AE05084C0D1 332624 ----a-w- C:\Windows\Sysnative\drivers\fastfat.sys 2016-02-01 08:24:04 D42AC03ACF9CA67693D1D9BB4D2A0BC8 116064 ----a-w- C:\Windows\Sysnative\drivers\tdx.sys 2016-02-01 08:24:04 A3D96563BF46FC8A0E5756B796127D14 577888 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2016-02-01 08:24:04 91756EE69E63D66F77E3B791D33F7078 459104 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2016-02-01 08:24:04 7C3DDCB6F927AFC5569A8CC584F5B5F3 147968 ----a-w- C:\Windows\Sysnative\drivers\rmcast.sys 2016-02-01 08:24:04 1434CA8A224655AD096D57DB24D3AA85 406864 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS 2016-02-01 08:24:03 AE7B7E1E95BFB9340B1956C98CA52C81 80720 ----a-w- C:\Windows\Sysnative\drivers\stornvme.sys 2016-02-01 08:24:03 89C9C3745F270EF93988DA57BC6AA62B 1983824 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys 2016-02-01 08:24:03 7680537006A420D7488E5057A8149F86 442208 ----a-w- C:\Windows\Sysnative\drivers\storport.sys 2016-02-01 08:24:03 14B46248612DF1B1A695040FFFBCFAFC 155136 ----a-w- C:\Windows\Sysnative\drivers\tunnel.sys 2016-02-01 08:24:02 FA5C94FB36625787063D04CF2F24E890 320000 ----a-w- C:\Windows\Sysnative\drivers\portcls.sys 2016-02-01 08:24:02 DAF957B25A35757E9D814611FAE8FE3B 237392 ----a-w- C:\Windows\Sysnative\drivers\rdyboost.sys 2016-02-01 08:24:02 BA8DC96D1DD7785EB0589CB1777208B7 2115936 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys 2016-02-01 08:24:02 647E2A425AD43637EAA01096A58B7089 65536 ----a-w- C:\Windows\Sysnative\drivers\bthhfenum.sys 2016-02-01 08:24:02 27E248CD861AFED4DF0C48F4C853E7F0 80896 ----a-w- C:\Windows\Sysnative\drivers\hdaudbus.sys 2016-02-01 08:24:01 1BDA1FD02783566F0B20EB0E2517F85C 516448 ----a-w- C:\Windows\Sysnative\drivers\USBHUB3.SYS 2016-02-01 08:23:59 854AF190F55E6D70EC65A85798F896E2 36352 ----a-w- C:\Windows\Sysnative\drivers\buttonconverter.sys 2016-02-01 08:23:59 7EBD20284AC9BF9F0A020B86769BB074 2432336 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2016-02-01 08:23:56 FCC211B0F46D831506D0D76539203899 929280 ----a-w- C:\Windows\Sysnative\drivers\bthport.sys 2016-02-01 08:23:09 927AD29D7F91B9A0C5294932374DA15E 894256 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2016-02-01 08:23:06 FDB239DBE2A14B572D21ABCEDC7BB5D0 505696 ----a-w- C:\Windows\Sysnative\drivers\dxgmms2.sys 2016-02-01 08:23:06 B6A33DCEBE437F909615E89BA5FB1385 395088 ----a-w- C:\Windows\Sysnative\drivers\dxgmms1.sys 2016-02-01 08:22:59 004C66464D8FE76D5DA78BE6777D61AF 278352 ----a-w- C:\Windows\Sysnative\drivers\sdbus.sys 2016-02-01 08:22:58 78CA1FF6FE37EEFAFF99DD1C956AF60A 200528 ----a-w- C:\Windows\Sysnative\drivers\wof.sys 2016-02-01 08:22:54 0A368247A900656CC0678117DFC3A87C 498016 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2016-02-01 08:22:53 D5EC9413527B286CFEEB0294C53ABB95 102752 ----a-w- C:\Windows\Sysnative\drivers\mountmgr.sys 2016-02-01 08:22:51 988588C16A53C2581488C15FF18934BF 46432 ----a-w- C:\Windows\Sysnative\drivers\msgpiowin32.sys 2016-02-01 08:22:51 388F2A3C771B8BEE76FD1AAF9614D08E 52264 ----a-w- C:\Windows\Sysnative\drivers\wpcfltr.sys 2016-02-01 08:22:49 CFCCF9F67EECBA6BFE4E880D9BE70CBB 22528 ----a-w- C:\Windows\Sysnative\drivers\usb8023.sys 2016-02-01 08:22:47 616F40B897DA651221F86A1741E9609B 1168736 ----a-w- C:\Windows\Sysnative\drivers\ndis.sys ====== C:\Windows\Tasks ====== 2016-02-01 08:07:46 7314E83B2361356BF73BEDFDF3BEBCB3 1094 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-01 08:07:46 530954266301879F663D1977F61E6172 3920 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineCore 2016-02-01 08:07:46 48F9D3CB84657BEE84E09DADCECC14FD 1090 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-01 08:07:46 08CE097E4C7D6B0B2D081D16A18D039E 4152 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineUA ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2016-02-02 08:09:31 -------- d-----w- C:\Program Files\trend micro 2016-02-01 07:23:08 -------- d-----w- C:\Program Files\Common Files\AV ======= C:\PROGRA~2 ===== 2016-02-01 08:07:45 -------- d-----w- C:\PROGRA~2\Google ======= C: ===== ====== C:\Users\My Lenovo\AppData\Roaming ====== 2016-02-03 20:15:49 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\PnrpSqm 2016-02-03 18:21:07 -------- d-----w- C:\Users\My Lenovo\AppData\Local\Temp 2016-02-02 08:38:52 -------- d-s---w- C:\Windows\serviceprofiles\networkservice\AppData\LocalLow 2016-02-01 11:10:37 -------- d-s---w- C:\Windows\serviceprofiles\Localservice\AppData\LocalLow 2016-02-01 08:07:39 -------- d-----w- C:\Users\My Lenovo\AppData\Local\Google 2016-02-01 08:03:36 -------- d-----w- C:\Users\My Lenovo\AppData\Local\Comms 2016-02-01 07:33:06 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\DataSharing 2016-02-01 07:28:02 -------- d-----w- C:\Users\My Lenovo\AppData\Local\Downloaded Installations 2016-02-01 07:27:11 -------- d-----w- C:\Users\My Lenovo\AppData\Local\Lenovo 2016-02-01 07:23:32 -------- d-----w- C:\Users\My Lenovo\AppData\Local\MicrosoftEdge 2016-01-31 20:26:59 -------- d-----w- C:\Users\My Lenovo\AppData\Local\LSC ====== C:\Users\My Lenovo ====== 2016-02-02 08:09:22 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\My Lenovo\Downloads\RSITx64.exe 2016-02-01 08:07:34 724746EAE8481A3EC9A6CB018DB7C0C3 987728 ----a-w- C:\Users\My Lenovo\Downloads\ChromeSetup (1).exe 2016-02-01 07:34:41 9E44F44B8D86230FFCA20B0F1FF546AD 987728 ----a-w- C:\Users\My Lenovo\Downloads\ChromeSetup.exe 2016-02-01 07:27:11 -------- d-----w- C:\Users\My Lenovo\REACHit 2016-01-31 20:26:59 -------- d-----w- C:\Users\My Lenovo\.QtWebEngineProcess 2016-01-31 20:26:58 -------- d-----w- C:\Users\My Lenovo\.LSC ====== C: exe-files == 2016-02-02 08:09:31 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\My Lenovo.exe 2016-02-02 08:09:22 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\My Lenovo\Downloads\RSITx64.exe 2016-02-01 09:40:27 9FA5F238220E48F0E26A1E03C737066D 173760 ----a-w- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\setupplatform.exe 2016-02-01 09:40:26 76CC107DDFB84B1F1337E148C771721D 279232 ----a-w- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\mighost.exe 2016-02-01 09:30:59 B9E23E5A9D00CE85C5926E6C33F5E3A2 621472 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\IntelCpHDCPSvc.exe 2016-02-01 09:30:59 81583B60CB20A7FE43E1F75B4201CC34 535968 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\IntelWiDiUMS64.exe 2016-02-01 09:30:59 6495F9D2562B0CCD1A919BE360BFB586 1015712 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igxpun.exe 2016-02-01 09:30:59 19D63B21F33FB676849A5E34D932C528 3539000 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\IntelWiDiVAD64.exe 2016-02-01 09:30:59 137BC921135ECDA3E9917B56E3550D32 300968 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\IntelCpHeciSvc.exe 2016-02-01 09:30:58 D61AEC9A148F08A82487938E4EA5DADC 354216 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxEM.exe 2016-02-01 09:30:58 D17636A2E6CEF689E05998449ABF0387 268704 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxHK.exe 2016-02-01 09:30:58 9C956B7195BBD73C74E02EE1EE4C504C 1026464 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxSDK.exe 2016-02-01 09:30:58 8895233A0B2E715A3843665BBB2AD398 236456 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxext.exe 2016-02-01 09:30:58 3A19FD28BF891CB67FD89A94BEC88C3F 402344 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxTray.exe 2016-02-01 09:30:57 078DE1A9D9DB0BB617D4DCF1EF925928 373160 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igfxCUIService.exe 2016-02-01 09:30:48 A0917455AF57869C8030AB9406CE74DD 958880 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\Gfxv2_0.exe 2016-02-01 09:30:48 3D75B1F7559E02F1ABEA6B0D60582FBA 962464 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\Gfxv4_0.exe 2016-02-01 09:30:48 2BFBD09F1C38EC98D03EFE48A45CE30E 466344 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\GfxUIEx.exe 2016-02-01 09:30:45 99D6C7014D2D29F2C41C8BCD4BBDAA36 231336 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\DPTopologyAppv2_0.exe 2016-02-01 09:30:45 7C336C41841A3F0CB718FD870F71B2B4 231848 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\DPTopologyApp.exe 2016-02-01 09:30:45 4FCAD721FB902251AF41E321FEBC1F80 174504 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\difx64.exe 2016-02-01 09:30:44 D1F59C81E2F6030459424F20030B3647 2829512 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\Setup.exe 2016-02-01 09:30:43 FBB698C69C0A8EF6499D9353A97CC232 2451144 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDUn_inst.exe 2016-02-01 09:30:43 D37064498DE2B69EB94E2DA83C62E4A4 2580168 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDCtrlHelper.exe 2016-02-01 09:30:43 BD5B801F8035A5066C6A4F4ABA67C4D5 93384 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDMag.exe 2016-02-01 09:30:43 97B7D81A8461126BB9CC4085712675E5 3242696 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDCtrl.exe 2016-02-01 09:30:43 8916EACF1256E1C5A3AF81FD39C747E7 144072 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDService.exe 2016-02-01 09:30:43 7DBEFB1CD4BB8FEF7AEE87D07F695BFC 2790088 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDDeviceInformation.exe 2016-02-01 09:30:43 2B484C30F4B5C2AE38FC26F6FC57764B 2855112 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDHValueMonitor.exe 2016-02-01 09:30:43 2025712CFB93C2161C6EC0612EEC5B40 2265800 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDFingerPositioner.exe 2016-02-01 09:30:42 BB11B4124F1DCA432705C2DB64B60580 8405192 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETDAniConf.exe 2016-02-01 09:30:41 3FC075F33F8462EB7897A44E760D2377 1056968 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\dpinst.exe 2016-02-01 09:30:39 E1983892766DC2CD493A04030DF65213 1815872 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b3494735-4876-454c-9857-2b9ee3816753\Setup.exe 2016-02-01 09:30:38 CC9AA7618B223A118E2F0242B22F4DBC 1046832 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b3494735-4876-454c-9857-2b9ee3816753\DPInst64.exe 2016-02-01 09:30:38 795714A9BC036C8242E220C8DF57D468 5154240 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b3494735-4876-454c-9857-2b9ee3816753\iprodifx.exe 2016-02-01 09:30:37 E4F0D68BFD2D474AA52C0385D90FA298 91112 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\03e6cbef-7a57-4c9c-8e12-3c6ce10750ee\devcon.exe 2016-02-01 09:30:37 BC011333D1D935EEC5A97F565553633C 4536584 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c01507dc-ba27-4475-8adb-9d01c503d96d\UIU64a.exe 2016-02-01 09:28:24 B4656E85333FED69FD85761FDCE8B5D8 1484104 ----a-w- C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\SwReporter\5.39.1\software_reporter_tool.exe 2016-02-01 08:23:32 D2EAEC106F183572317AF7D68E381063 4532304 ----a-w- C:\Windows\explorer.exe 2016-02-01 08:23:05 B048B365333B4DA075512D67A88AE393 815808 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2016-02-01 08:23:05 96520EEF483B102EFD98B6B246B0EE1D 818880 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2016-02-01 08:23:01 986BC1A9E29A9E35C1D10D874616ACBB 215040 ----a-w- C:\Windows\notepad.exe 2016-02-01 08:22:52 AC9DBC3DCA6F57839B8056D6B6835CB3 780640 ----a-w- C:\Windows\Boot\PCAT\memtest.exe 2016-02-01 08:22:48 7A271F804E4A779646E972BEF9A16CFE 384280 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe 2016-02-01 08:22:46 116A528112CDE77F28D4C8C9CE210C52 21216 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe 2016-02-01 08:08:08 EE3E7E96C86F81E529142247FDE43992 50542672 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\48.0.2564.97\48.0.2564.97_chrome_installer_win64.exe 2016-02-01 08:07:45 F489BF87E4B3E9CCEFA102CC347F180F 95048 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateWebPlugin.exe 2016-02-01 08:07:45 ABF64234F3462571E66527828040219B 252232 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe 2016-02-01 08:07:45 A70C804C5BCC0BBFCB7E9173C32B0221 95048 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe 2016-02-01 08:07:45 8C17EAF5E4883284A75FC560C7F021AB 137544 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateComRegisterShell64.exe 2016-02-01 08:07:45 750446ED76A5D13E902174DDDDA1A62B 154440 ----atw- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 2016-02-01 08:07:45 750446ED76A5D13E902174DDDDA1A62B 154440 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdate.exe 2016-02-01 08:07:45 724746EAE8481A3EC9A6CB018DB7C0C3 987728 ----a-w- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateSetup.exe 2016-02-01 08:07:45 2E6215108125A42160A1EC17208A50F0 313672 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe 2016-02-01 08:07:45 1457C6AC71CAEC4D692FDD62155A9745 95048 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateBroker.exe 2016-02-01 08:07:34 724746EAE8481A3EC9A6CB018DB7C0C3 987728 ----a-w- C:\Users\My Lenovo\Downloads\ChromeSetup (1).exe 2016-02-01 08:01:07 0AB55C9B78063EFBD288B8C15DC605BF 20424 ----a-w- C:\ProgramData\Lenovo\ImController\Plugins\GenericMetricsPreferencesPlugin\x86\LenovoPrivilegedMetricsPreferences.exe 2016-02-01 08:00:57 C0FFFDF5EC0D889C34E85DE25F9481B8 11208 ----a-w- C:\ProgramData\Lenovo\ImController\Plugins\LenovoMobileHotspotPlugin\x86\SleepControl.exe 2016-02-01 07:54:10 AD60A39A820804E89BC2EAD599ED94E1 8067784 ----a-w- C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe 2016-02-01 07:54:10 AD60A39A820804E89BC2EAD599ED94E1 8067784 ----a-w- C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\OneDriveSetup.exe 2016-02-01 07:54:02 EB0965F7AE1394C0A3165A5E9A32C44D 164040 ----a-w- C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncConfig.exe 2016-02-01 07:54:00 2DB7D5B28812523AAF17F71A8EB4832E 171712 ----a-w- C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe 2016-02-01 07:34:41 9E44F44B8D86230FFCA20B0F1FF546AD 987728 ----a-w- C:\Users\My Lenovo\Downloads\ChromeSetup.exe 2016-02-01 07:26:24 9213537B8DD3422D9EDB76772356C940 38173056 ----a-w- C:\ProgramData\Lenovo\SystemUpdatePlugin\session\Repository\pm3330\pm3330.exe 2016-02-01 07:26:16 E5FB1F0D660FB170FAB7BBC481B7F852 19423584 ----a-w- C:\ProgramData\Lenovo\SystemUpdatePlugin\session\Repository\qo10ww19_64\qo10ww19.exe 2016-02-01 07:25:33 1BDA1FBF5E3475114917719AE94A30C3 70019256 ----a-w- C:\ProgramData\Lenovo\SystemUpdatePlugin\session\Repository\lscsetup_x64_3200210\lscsetup_x64_32002.exe 2016-01-31 20:15:23 5B514C4C1466D42A0EBA8F32863698AE 130488 ----a-w- C:\ProgramData\SUPPORTDIR\20160131_211522_7828\TaskScheduler.exe 2016-01-31 20:14:46 1C6615CE0E3F887CA1BA708F7047A3F7 38064392 ----a-w- C:\Users\My Lenovo\AppData\Local\CyberLink\PhotoMaster\Patch\LenovoPhotoMaster_2.1.59456.3330.eModule_Patch_PHP151008-02_Normal.exe 2016-01-28 23:28:58 3ADC9CC605123E37695CF829FC0E677B 33736 ----a-w- C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe 2016-01-28 23:28:54 9EB0733F78EADC5E4DB4D631144A7A34 33224 ----a-w- C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe 2016-01-28 23:28:52 BF12C1E788207253ED6BF657E0B9A290 36808 ----a-w- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe === C: other files == 2016-02-01 09:30:54 65E73EF0D3BFEE31A71E1653651D774D 7328168 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igdkmd64lp.sys 2016-02-01 09:30:53 34E103A5EFF7EADA5ADE6D61294FAA7F 7858088 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c9afac4d-01ec-47ef-b62e-fc9370921940\igdkmd64.sys 2016-02-01 09:30:42 6BD85B39B7B23F03B24CF641ED29147B 525512 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\d21881c9-a4d6-4d0b-8603-b4459de958e9\ETD.sys 2016-02-01 09:30:41 CF0F908B50CD8FB12B7B69DA56A44681 886528 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\3488f6b4-3f7c-462c-9308-19b30f66fe0a\rt640x64.sys 2016-02-01 09:30:41 B75529B026C4E61E4E50AE5334D91D39 3481696 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b8a08d06-51b4-4875-9f86-34877d8b77a1\x64\snp2uvc.sys 2016-02-01 09:30:41 AECF658C5C8F7F8E1FDE36189BE6B530 3337952 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b8a08d06-51b4-4875-9f86-34877d8b77a1\snp2uvc.sys 2016-02-01 09:30:41 87CCF37EC2858FCF7689F8FC0B72F39A 410880 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\6853f485-09eb-4c36-9a30-8bf9cdd5c2a8\RtsUer.sys 2016-02-01 09:30:41 470A04D92087136F147A2C6F31399906 263952 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\15503b57-cb70-40a0-b155-3e59918ff4f2\ibtusb.sys 2016-02-01 09:30:38 B6BCFDDE16B379D63BE83C324E764A5D 3494680 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b3494735-4876-454c-9857-2b9ee3816753\NETwbw02.sys 2016-02-01 09:30:37 A87B255A2313811CD8DC983A1F851DA3 111904 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\57746f1e-b1f0-40c1-bfe6-1203f2fb5a2a\x86\TEEDriver.sys 2016-02-01 09:30:37 8D97229A6FB5BFA1C9D161CA02E29B6C 3433952 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\b8b9e2fe-ad74-4c0f-b803-0705003a20bb\Netwbw02.sys 2016-02-01 09:30:37 5A216E543B4AB0E3EA9E09F49023DAD4 58656 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\57746f1e-b1f0-40c1-bfe6-1203f2fb5a2a\x86\HECI.sys 2016-02-01 09:30:37 579B8A665076612D65107D3C7F80CBF7 1543912 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c01507dc-ba27-4475-8adb-9d01c503d96d\CHDRT64.sys 2016-02-01 09:30:37 4282D0B2F308E4605306EC5B02DD368E 66848 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\57746f1e-b1f0-40c1-bfe6-1203f2fb5a2a\x64\HECIx64.sys 2016-02-01 09:30:37 37A079BB41B3F673B9BF8A8A5B4070A4 1709320 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\c01507dc-ba27-4475-8adb-9d01c503d96d\CHDRT64V64.sys 2016-02-01 09:30:37 1BC9159CF58BABD89419072EA180A8F6 129312 ----a-w- C:\$WINDOWS.~BT\Drivers\DU\57746f1e-b1f0-40c1-bfe6-1203f2fb5a2a\x64\TEEDriverx64.sys 2016-02-01 08:24:06 9B2039C5673EEBF1D4E34ABC0AFB88C7 685568 ----a-w- C:\Windows\System32\drivers\WdiWiFi.sys 2016-02-01 08:24:06 7BF844D362EB746BC7A6DC3F57FA3E32 8192 ----a-w- C:\Windows\System32\drivers\gpuenergydrv.sys 2016-02-01 08:24:06 70469C8AC4AD367295E70CFDD81B754C 99664 ----a-w- C:\Windows\System32\drivers\pdc.sys 2016-02-01 08:24:05 C67A03F54A1EA683F4880A481EE5FF6C 373072 ----a-w- C:\Windows\System32\drivers\USBXHCI.SYS 2016-02-01 08:24:05 5A1C6AFFF6946C5C21A27AE05084C0D1 332624 ----a-w- C:\Windows\System32\drivers\fastfat.sys 2016-02-01 08:24:05 321A2022926841273CD8D6B9BFE68D05 1383424 ----a-w- C:\Windows\System32\win32kbase.sys 2016-02-01 08:24:04 D42AC03ACF9CA67693D1D9BB4D2A0BC8 116064 ----a-w- C:\Windows\System32\drivers\tdx.sys 2016-02-01 08:24:04 A3D96563BF46FC8A0E5756B796127D14 577888 ----a-w- C:\Windows\System32\drivers\afd.sys 2016-02-01 08:24:04 91756EE69E63D66F77E3B791D33F7078 459104 ----a-w- C:\Windows\System32\drivers\netio.sys 2016-02-01 08:24:04 7C3DDCB6F927AFC5569A8CC584F5B5F3 147968 ----a-w- C:\Windows\System32\drivers\rmcast.sys 2016-02-01 08:24:04 1434CA8A224655AD096D57DB24D3AA85 406864 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2016-02-01 08:24:03 AE7B7E1E95BFB9340B1956C98CA52C81 80720 ----a-w- C:\Windows\System32\drivers\stornvme.sys 2016-02-01 08:24:03 89C9C3745F270EF93988DA57BC6AA62B 1983824 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys 2016-02-01 08:24:03 7680537006A420D7488E5057A8149F86 442208 ----a-w- C:\Windows\System32\drivers\storport.sys 2016-02-01 08:24:03 14B46248612DF1B1A695040FFFBCFAFC 155136 ----a-w- C:\Windows\System32\drivers\tunnel.sys 2016-02-01 08:24:02 FA5C94FB36625787063D04CF2F24E890 320000 ----a-w- C:\Windows\System32\drivers\portcls.sys 2016-02-01 08:24:02 DAF957B25A35757E9D814611FAE8FE3B 237392 ----a-w- C:\Windows\System32\drivers\rdyboost.sys 2016-02-01 08:24:02 BA8DC96D1DD7785EB0589CB1777208B7 2115936 ----a-w- C:\Windows\System32\drivers\ntfs.sys 2016-02-01 08:24:02 647E2A425AD43637EAA01096A58B7089 65536 ----a-w- C:\Windows\System32\drivers\bthhfenum.sys 2016-02-01 08:24:02 4D3F2E7C2F83DFAF19F8060E1FD6C5A8 3588096 ----a-w- C:\Windows\System32\win32kfull.sys 2016-02-01 08:24:02 27E248CD861AFED4DF0C48F4C853E7F0 80896 ----a-w- C:\Windows\System32\drivers\hdaudbus.sys 2016-02-01 08:24:01 1BDA1FD02783566F0B20EB0E2517F85C 516448 ----a-w- C:\Windows\System32\drivers\USBHUB3.SYS 2016-02-01 08:23:59 854AF190F55E6D70EC65A85798F896E2 36352 ----a-w- C:\Windows\System32\drivers\buttonconverter.sys 2016-02-01 08:23:59 7EBD20284AC9BF9F0A020B86769BB074 2432336 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2016-02-01 08:23:56 FCC211B0F46D831506D0D76539203899 929280 ----a-w- C:\Windows\System32\drivers\bthport.sys 2016-02-01 08:23:09 927AD29D7F91B9A0C5294932374DA15E 894256 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys 2016-02-01 08:23:06 FDB239DBE2A14B572D21ABCEDC7BB5D0 505696 ----a-w- C:\Windows\System32\drivers\dxgmms2.sys 2016-02-01 08:23:06 B6A33DCEBE437F909615E89BA5FB1385 395088 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys 2016-02-01 08:22:59 004C66464D8FE76D5DA78BE6777D61AF 278352 ----a-w- C:\Windows\System32\drivers\sdbus.sys 2016-02-01 08:22:58 78CA1FF6FE37EEFAFF99DD1C956AF60A 200528 ----a-w- C:\Windows\System32\drivers\wof.sys 2016-02-01 08:22:54 0A368247A900656CC0678117DFC3A87C 498016 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2016-02-01 08:22:53 D5EC9413527B286CFEEB0294C53ABB95 102752 ----a-w- C:\Windows\System32\drivers\mountmgr.sys 2016-02-01 08:22:51 988588C16A53C2581488C15FF18934BF 46432 ----a-w- C:\Windows\System32\drivers\msgpiowin32.sys 2016-02-01 08:22:51 388F2A3C771B8BEE76FD1AAF9614D08E 52264 ----a-w- C:\Windows\System32\drivers\wpcfltr.sys 2016-02-01 08:22:49 CFCCF9F67EECBA6BFE4E880D9BE70CBB 22528 ----a-w- C:\Windows\System32\drivers\usb8023.sys 2016-02-01 08:22:47 616F40B897DA651221F86A1741E9609B 1168736 ----a-w- C:\Windows\System32\drivers\ndis.sys 2016-02-01 07:53:59 8CF4163521FDB8E53482003C7EFA7121 5850 ----a-w- C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\CollectOneDriveLogs.bat ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup" [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup" [HKEY_USERS\S-1-5-21-2903115120-75526390-2088904311-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDrive"="C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background" "GoogleChromeAutoLaunch_183D44E97DC4D6A91CC3A8813F36E8F7"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window" [HKEY_USERS\S-1-5-21-2903115120-75526390-2088904311-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CLMLServer_For_P2G8"="C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe" "CLVirtualDrive"="C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe /R" "snp2uvc"="C:\Windows\vsnp2uvc.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "OneDrive"="C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background" "GoogleChromeAutoLaunch_183D44E97DC4D6A91CC3A8813F36E8F7"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LenovoUtility"="C:\Program Files\Lenovo\LenovoUtility\utility.exe" "IAStorIcon"="C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 60" "ForteConfig"="C:\Program Files\Conexant\ForteConfig\fmapp.exe" "cAudioFilterAgent"="C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" "SmartAudio"="C:\Program Files\CONEXANT\SAII\SACpl.exe /t" "ETDCtrl"="%ProgramFiles%\Elantech\ETDCtrl.exe " ==== Task Scheduler Jobs ====================== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-02-2016 09:07] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-02-2016 09:07] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\PDVDServ12 Task" [C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe] "C:\Windows\SysNative\tasks\CyberLink\Photo Master Gadget startup" [C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe] "C:\Windows\SysNative\tasks\Lenovo\BatteryGauge" ["%programfiles%\lenovo\BatteryGauge\BatteryGaugeIcon.exe"] "C:\Windows\SysNative\tasks\Lenovo\Experience Improvement" ["C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe"] "C:\Windows\SysNative\tasks\Lenovo\Lenovo Customer Feedback Program 64" ["%ProgramFiles(x86)%\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe"] "C:\Windows\SysNative\tasks\Lenovo\Lenovo Solution Center Launcher" [%programfiles%\lenovo\lenovo solution center\App\LSCService.exe] "C:\Windows\SysNative\tasks\Lenovo\QuickOptimizer" ["%programfiles%\lenovo\QuickOptimizer\QuickOptimizerIcon.exe"] "C:\Windows\SysNative\tasks\Lenovo\REACHit Agent Startup" ["C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe"] "C:\Windows\SysNative\tasks\Lenovo\REACHit Agent Update" ["C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe"] "C:\Windows\SysNative\tasks\Lenovo\SHPrompt" ["C:\Program Files (x86)\Lenovo\SHAREit\ShareitPrompt.exe"] "C:\Windows\SysNative\tasks\Lenovo\SHUpdate" ["C:\Program Files (x86)\Lenovo\SHAREit\ShareitUpdater.exe"] "C:\Windows\SysNative\tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" [sc] "C:\Windows\SysNative\tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_TVSUUpdateTask" [reg.exe] "C:\Windows\SysNative\tasks\Lenovo\LSC\Lenovo Solution Center Notifications" [%programfiles%\Lenovo\Lenovo Solution Center\LSCNotify.exe] "C:\Windows\SysNative\tasks\Lenovo\LSC\LSCHardwareScan" ["C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe" -diag HWScan] ==== Chromium Look ====================== Dropbox for Gmail - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec Widthie - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh Pin It Button - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic AVG Secure Search - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof Chrome Web Store Payments - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Search People - My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp ==== Chromium Fix ====================== C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://lenovo15.msn.com/?pc=LCTE" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://lenovo15.msn.com/?pc=LCTE" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{F0D2DEBA-95FF-49A7-8F7C-8E27603AF9E7}" HKLM\SearchScopes\{F0D2DEBA-95FF-49A7-8F7C-8E27603AF9E7} - http://www.bing.com/search?q={searchTerms}&form=PRLNC1&src=IE11TR&pc=LCTE HKLM\Wow6432Node\SearchScopes "DefaultScope"="{F0D2DEBA-95FF-49A7-8F7C-8E27603AF9E7}" HKLM\Wow6432Node\SearchScopes\{F0D2DEBA-95FF-49A7-8F7C-8E27603AF9E7} - http://www.bing.com/search?q={searchTerms}&form=PRLNC1&src=IE11TR&pc=LCTE HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC ==== Reset Google Chrome ====================== C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data will be reset at reboot C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal will be reset at reboot ==== HijackThis Entries ====================== F2 - REG:system.ini: UserInit= O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe" O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe O4 - HKCU\..\Run: [OneDrive] "C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_183D44E97DC4D6A91CC3A8813F36E8F7] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKCU\..\RunOnce: [Uninstall C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\My Lenovo\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing) O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Intel Bluetooth Service (ibtsiva) - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing) O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LenovoPortalService - Unknown owner - C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe O23 - Service: McAfee CSP Service (mccspsvc) - Unknown owner - C:\Program Files\Common Files\McAfee\CSP\1.5.471.0\McCSPServiceHost.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Update Agent (UpdateAgentService) - Unknown owner - C:\Program Files\update\UpdateAgent.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\My Lenovo\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\My Lenovo\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache will be emptied at reboot ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=44 folders=42 103516841 bytes) ==== Empty Temp Folders ====================== C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\MYLENO~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data" not found "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal" not found "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0" deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1" deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2" deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3" deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache\index" deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage" not deleted "C:\Users\My Lenovo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal" not deleted ==== EOF on wo 03-02-2016 at 21:41:44,78 ======================