Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by anjav on ma 04-04-2016 at 10:30:18,92.
Microsoft Windows 10 Home 10.0.10586  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\anjav\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used]

==== System Restore Info ======================

4-4-2016 10:33:24 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\COMMON~1\SWF Studio deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\Users\anjav\AppData\Local\ActiveSync deleted successfully
C:\Users\anjav\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] 
"-Uninstall C:\Users\anjav\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984] 

==== Deleting Files \ Folders ======================

C:\Users\anjav\AppData\Roaming\calibre deleted
C:\Users\anjav\AppData\Local\Microsoft\OneDrive deleted
C:\windows\SysNative\Tasks\Software Update Application deleted
C:\PROGRA~3\Kingsoft deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\windows\SysNative\Tasks\Avast SecureLine deleted
C:\windows\SysNative\Tasks\avast! SL Update deleted
"C:\Windows\SysWOW64\OneDriveSetup.exe" not deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2016-03-28 18:21:04	95D730526EF81792CD6848D8D10FAA1C	4502352	----a-w-	C:\WINDOWS\explorer.exe
2016-03-28 17:30:09	4C4FDFAE055C00FB2585750C23797947	67584	--s-a-w-	C:\WINDOWS\bootstat.dat
====== C:\Users\anjav\AppData\Local\Temp ====
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
2016-03-28 18:27:10	3ABDEBFB29390D9DAB2C83EE33524B9E	45227	----a-w-	C:\WINDOWS\SysWOW64\license.rtf
2016-03-28 18:21:28	EC21FC40C74206DAB19F1A8F9132EFAB	890368	----a-w-	C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-03-28 18:21:28	E3C2853C8F2EED113646F07D62D08C9E	503296	----a-w-	C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-28 18:21:28	C8892F76C2D15CB1175E3F7A04D07904	890880	----a-w-	C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-03-28 18:21:28	C86784A6F08E733BE19D62C82182FA7D	266752	----a-w-	C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-28 18:21:28	B13BE7A31C732B5773FDF51FB140B614	334336	----a-w-	C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-03-28 18:21:28	B073C14F8B76DF8652415488C22F10A1	670928	----a-w-	C:\WINDOWS\SysWOW64\mfds.dll
2016-03-28 18:21:28	A34EDEA5F401143A0190642EABA28518	709688	----a-w-	C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-28 18:21:28	A19A2DDCC69FF16B5FB68AD4F02B564A	480256	----a-w-	C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-28 18:21:28	9ACCC0C1786391EF1FD1FAF12AE22801	340480	----a-w-	C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-03-28 18:21:28	75F7D82383D8CF10D5999874993A2EF5	27136	----a-w-	C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-03-28 18:21:28	6D151B11358362786C45F1A4A21576FA	925064	----a-w-	C:\WINDOWS\SysWOW64\mfplat.dll
2016-03-28 18:21:28	51B550A0FBFA6E04F8595ED0BD99C202	100160	----a-w-	C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-03-28 18:21:28	49CF99392314B7CAD65DE8A05ABFE30D	882720	----a-w-	C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-28 18:21:28	463DA1563BB9C1849527967BA80C1810	287712	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-28 18:21:28	44CBF47585584D74C3D0C2320031E539	569856	----a-w-	C:\WINDOWS\SysWOW64\qdvd.dll
2016-03-28 18:21:28	2EECE39CDFFF244B2489FD8ACDC14D7A	517632	----a-w-	C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-03-28 18:21:28	2AF0E5217FE677C29669E0243F28D64F	70656	----a-w-	C:\WINDOWS\SysWOW64\AppCapture.dll
2016-03-28 18:21:28	29EF8EC898FE21680DB5FB15DB513EC8	235008	----a-w-	C:\WINDOWS\SysWOW64\ksproxy.ax
2016-03-28 18:21:28	2003BE1653553FBC9D809BA40AEE4D68	1542656	----a-w-	C:\WINDOWS\SysWOW64\quartz.dll
2016-03-28 18:21:28	1F48933EFAB68EDD3B456C78E17B89CE	871936	----a-w-	C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-03-28 18:21:28	132209E26098FCDDEC023B460E68EBEB	1070080	----a-w-	C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-03-28 18:21:28	0B7C5790893F3650162BED4BEA35D9A6	695752	----a-w-	C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-03-28 18:21:28	05B15BD9C92BE52F35A2295B22C5D892	168448	----a-w-	C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-03-28 18:21:27	EF3D963CD01DBBBAA7394BB1A638A1BB	116728	----a-w-	C:\WINDOWS\SysWOW64\mfps.dll
2016-03-28 18:21:27	C8F351BE29CEA63BC5EE5A175576B7F3	1105920	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-28 18:21:27	C85501FE7EFD33E06A877B8786F396B6	462760	----a-w-	C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-03-28 18:21:27	C117F577BB0CC6545EA181FBB3FACE99	980352	----a-w-	C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-28 18:21:27	B65549A1CDB2C827AD022A3F35994FCF	2180136	----a-w-	C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-28 18:21:27	AF209F751EB761084CEFE2CF10E1CE8D	895080	----a-w-	C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-28 18:21:27	A7583A49B0F4A91E5B2E154C3582DF82	420928	----a-w-	C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-28 18:21:27	964DE3052B6A869EFBC86930DD51E8BD	379392	----a-w-	C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-28 18:21:27	8C2E49ACD2A820A3FA7C598B811F3803	450912	----a-w-	C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-28 18:21:27	888D41F5EFD6995491326C0DEEA2124A	713824	----a-w-	C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-28 18:21:27	7BA4B67BDA4222B55FA700E31B63F32D	208176	----a-w-	C:\WINDOWS\SysWOW64\mftranscode.dll
2016-03-28 18:21:27	5D676C1C350EA4976B888804444932CE	2061312	----a-w-	C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-28 18:21:27	1F7C4CBC0C5788E3E91C08A3D32F7BB9	1118208	----a-w-	C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-03-28 18:21:27	0C39C1CC2ABC5D88D586EA0D86E79EEE	2793472	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-03-28 18:21:27	0A8409C137B580A3EEB80E33649044F3	701384	----a-w-	C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-03-28 18:21:26	D0693220928997E1DD513B261AF86308	454056	----a-w-	C:\WINDOWS\SysWOW64\AudioEng.dll
2016-03-28 18:21:26	A60B02C7D70EEBF8E362BA5C06339177	366224	----a-w-	C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-03-28 18:21:26	A4CC1E8330E839AA619978E61AEEEAC4	73360	----a-w-	C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-03-28 18:21:26	86128937B83E51BF543CBCB854AE4FFC	405568	----a-w-	C:\WINDOWS\SysWOW64\AudioSes.dll
2016-03-28 18:21:24	550ECFF3C3808065169BFEA6C2B7837C	400896	----a-w-	C:\WINDOWS\SysWOW64\winspool.drv
2016-03-28 18:21:24	162CB5DE3BAB5A029E658180A2E0673A	2919320	----a-w-	C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-28 18:21:23	F2061A1835E8844637168800292309BF	84832	----a-w-	C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-03-28 18:21:23	B315EB17077EF082A79922D4EA47DBF4	163328	----a-w-	C:\WINDOWS\SysWOW64\fwbase.dll
2016-03-28 18:21:23	9DEB4C56FAAB147839BF68B6C28A38FC	164864	----a-w-	C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-03-28 18:21:23	8BD7A79F9A8FF011B89A61C8AC796988	502112	----a-w-	C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-28 18:21:23	7734BD0E9C8ED7DC48F559A67D0A79F4	20480	----a-w-	C:\WINDOWS\SysWOW64\wfapigp.dll
2016-03-28 18:21:23	160CC95D34D62B6A72F9E4E3EE52EBCC	369664	----a-w-	C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-03-28 18:21:23	110A45F765495043CB8ED918FEFD8D90	572928	----a-w-	C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-03-28 18:21:17	DDC479FA1A36285BFC1EF25B547403C3	273408	----a-w-	C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-03-28 18:21:17	B44BC5CC78CF476028D1939A7712BD93	652312	----a-w-	C:\WINDOWS\SysWOW64\evr.dll
2016-03-28 18:21:17	AD1B282BDE4A19D7CE2D405409DBB8D0	1497088	----a-w-	C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-28 18:21:17	0FA8D61A4D4F56063113F9DA4E18848B	289248	----a-w-	C:\WINDOWS\SysWOW64\MFPlay.dll
2016-03-28 18:21:16	780795062541AF34415CCCE4072FBBB8	12586496	----a-w-	C:\WINDOWS\SysWOW64\wmp.dll
2016-03-28 18:21:16	22269B90E92BECDEB3D67EBE1DDB378E	3666432	----a-w-	C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-28 18:21:15	D641F5B6C115C334FD990827979028F3	18677760	----a-w-	C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-28 18:21:15	8A26A15B852AF385469AD62865CCAE7F	2050048	----a-w-	C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-03-28 18:21:15	3A280280AEA583EAB0375C330F7A6CE9	335872	----a-w-	C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-03-28 18:21:15	192B579E14C116D2B742FEBE85A4D3C1	2756096	----a-w-	C:\WINDOWS\SysWOW64\mshtml.tlb
2016-03-28 18:21:14	5814754D92DBD471D5AB7437B20EE3F0	687616	----a-w-	C:\WINDOWS\SysWOW64\msfeeds.dll
2016-03-28 18:21:13	00CE414BA74B576960B559C8C2674106	19339776	----a-w-	C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-28 18:21:12	7BB6C35792323E4761AC6624E2D42397	12125696	----a-w-	C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-28 18:21:11	E83DA16178E4E97B572900803183419D	1542816	----a-w-	C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-28 18:21:11	AA20E6BCDC5A617F4333EE5EEE3CC79E	5661696	----a-w-	C:\WINDOWS\SysWOW64\Chakra.dll
2016-03-28 18:21:11	2D0C2AB110A51895D9D1E875201013DE	1557768	----a-w-	C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-28 18:21:10	FCBCED2A237DCD7EF86CED551B731742	4064320	----a-w-	C:\WINDOWS\SysWOW64\explorer.exe
2016-03-28 18:21:10	F7169F42A954DEAD789529859921BD36	81112	----a-w-	C:\WINDOWS\SysWOW64\OpenWith.exe
2016-03-28 18:21:10	76B9CA3DF18D9E116051652EB4CD2FF2	9919488	----a-w-	C:\WINDOWS\SysWOW64\twinui.dll
2016-03-28 18:21:10	197948552BE23DACBEF10ECC8168FD11	29696	----a-w-	C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-28 18:21:10	0C60922D59461C8D1B0A2AA3CF493438	21124344	----a-w-	C:\WINDOWS\SysWOW64\shell32.dll
2016-03-28 18:21:09	FABAF2C5E74BA9ADC07D28BB03F5C32A	349696	----a-w-	C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-28 18:21:09	FAA5A3DE34FD44C220691C4527E88453	157696	----a-w-	C:\WINDOWS\SysWOW64\SimCfg.dll
2016-03-28 18:21:09	F7F4D3C8F419097D5219C80B811978A9	203264	----a-w-	C:\WINDOWS\SysWOW64\iassam.dll
2016-03-28 18:21:09	D213E29D66D7182AF58CB525EFC2F409	421888	----a-w-	C:\WINDOWS\SysWOW64\LogonController.dll
2016-03-28 18:21:09	CF17C8CA575EC10ACDE1671CDED01B73	17408	----a-w-	C:\WINDOWS\SysWOW64\rasautou.exe
2016-03-28 18:21:09	9797BB52F1943B78CD245B41AE833E1F	653312	----a-w-	C:\WINDOWS\SysWOW64\rasapi32.dll
2016-03-28 18:21:09	96D60277EF8CB48BD3D920298C9D7F83	11776	----a-w-	C:\WINDOWS\SysWOW64\rastlsext.dll
2016-03-28 18:21:09	8880848DC5DEE8BF8FE34DBC57C5655C	129024	----a-w-	C:\WINDOWS\SysWOW64\SimAuth.dll
2016-03-28 18:21:09	7D81335F3FCD9C37DE3C8C9989428C99	431240	----a-w-	C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-03-28 18:21:09	76B00BE575C4D8CF3D7334240C8DAF90	683008	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-03-28 18:21:09	6CE4F5BC53932C885B2276C2B352065C	34816	----a-w-	C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-03-28 18:21:09	650A2E42A8965FEEF24105EF3D19780B	510976	----a-w-	C:\WINDOWS\SysWOW64\wlidcli.dll
2016-03-28 18:21:09	64F7A89D4DBFA69D40C7C1FF5BB4457E	166912	----a-w-	C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-03-28 18:21:09	5A98CF000F5202776E4A58438AB2E070	4412928	----a-w-	C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-28 18:21:09	559358D3C39A1EC0D944714C32FAD582	799744	----a-w-	C:\WINDOWS\SysWOW64\rasdlg.dll
2016-03-28 18:21:09	5467DAD0BDB397D84052FCCF8686FB9C	60928	----a-w-	C:\WINDOWS\SysWOW64\mssign32.dll
2016-03-28 18:21:09	532AC1D121972B17BE523A9988A3A0E5	2155008	----a-w-	C:\WINDOWS\SysWOW64\authui.dll
2016-03-28 18:21:09	4A49EC3B4063CC569134D2BA64FA5022	350720	----a-w-	C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-03-28 18:21:09	27C3814755F5078A06B3B95CC6BAD111	13312	----a-w-	C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-03-28 18:21:09	1C1DC38D8D6E075DE06ED174B9E81FE9	535040	----a-w-	C:\WINDOWS\SysWOW64\rastls.dll
2016-03-28 18:21:09	102F3BB5D63225A25817C8E44B85533F	63528	----a-w-	C:\WINDOWS\SysWOW64\wwapi.dll
2016-03-28 18:21:09	100E983F59F3BF3A3F8BFA327CF9B438	157184	----a-w-	C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-28 18:21:05	F40196C743D54C56C7C2CCDD6FDE262E	572272	----a-w-	C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-28 18:21:05	DBE39E4BDCC3D8F49A2B0277652120D0	41984	----a-w-	C:\WINDOWS\SysWOW64\pcaui.exe
2016-03-28 18:21:05	CA57FE09C1255009C9AC1462B7D7264D	957608	----a-w-	C:\WINDOWS\SysWOW64\ole32.dll
2016-03-28 18:21:05	AD18802933E2F0BD9FDE02FF35D8AEC3	118272	----a-w-	C:\WINDOWS\SysWOW64\mtxoci.dll
2016-03-28 18:21:05	9DB69A637142A6C72DF22706CF2F6F7B	31744	----a-w-	C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-28 18:21:05	97E96ABEBCB6CF556406781C47C5282A	78848	----a-w-	C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-28 18:21:05	8CE4D365EF60DA0A098757371DD43752	88576	----a-w-	C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-28 18:21:05	6F1EEEF679AFA703C7C328BD87C5AB68	558592	----a-w-	C:\WINDOWS\SysWOW64\uReFS.dll
2016-03-28 18:21:05	5B64BFE61393D22D908BB5E2A17B6147	1328128	----a-w-	C:\WINDOWS\SysWOW64\comsvcs.dll
2016-03-28 18:21:05	4C421E34FF4A836590401A3E9A5B5DE8	415744	----a-w-	C:\WINDOWS\SysWOW64\catsrvut.dll
2016-03-28 18:21:05	4591BC3EC5FD8336642F8B94EABD4D4F	187744	----a-w-	C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-28 18:21:05	42248856CC8A2AE6642B5D1B170EAB35	450560	----a-w-	C:\WINDOWS\SysWOW64\SyncController.dll
2016-03-28 18:21:05	31DE6A034E8BBA043CB2F4612033C12A	296488	----a-w-	C:\WINDOWS\SysWOW64\policymanager.dll
2016-03-28 18:21:05	2BECAD7E55AB723F361254477270ED2F	1707520	----a-w-	C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-28 18:21:05	1E7B13CDBA9D57D2BF54A7501FB17376	586080	----a-w-	C:\WINDOWS\SysWOW64\wimgapi.dll
2016-03-28 18:21:01	FAE7DA27029FDDA27375722B4DC387D7	138240	----a-w-	C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-03-28 18:21:01	F32770E19F1CB817274BC85824730E48	470528	----a-w-	C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-03-28 18:21:01	EB5DBA11B7C79B28A759AF12F03A17BB	769536	----a-w-	C:\WINDOWS\SysWOW64\ContactApis.dll
2016-03-28 18:21:01	E34395496B11CF5C8C5B6D2E438BFA43	18944	----a-w-	C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-03-28 18:21:01	D9EF9F5DA78CD085FD23C8EBB6108662	409088	----a-w-	C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-03-28 18:21:01	D8DA5B9D54225B46242011154C9E417A	133632	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-03-28 18:21:01	D707B12965D5E8DFBD7C5BF7FB12AF02	24064	----a-w-	C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-03-28 18:21:01	CE9B87CDE4D7BCEA229D676720E28C6B	1859960	----a-w-	C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-03-28 18:21:01	CBE2DFB96C188DC8913B0CCBFA50C2FF	1824264	----a-w-	C:\WINDOWS\SysWOW64\combase.dll
2016-03-28 18:21:01	CA260C1A4CFC95D49DBE4DAEDCD65585	58368	----a-w-	C:\WINDOWS\SysWOW64\MosStorage.dll
2016-03-28 18:21:01	C406A5FDC8A1ECF2A9632F302B7D0EC3	294752	----a-w-	C:\WINDOWS\SysWOW64\msv1_0.dll
2016-03-28 18:21:01	C11AFEBFFDD62BA366D2F146212B415E	110592	----a-w-	C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-03-28 18:21:01	C012CE3AB0120D01C75EDBB869AC463E	523752	----a-w-	C:\WINDOWS\SysWOW64\dxgi.dll
2016-03-28 18:21:01	B8C4EFAA6AAED98E6B5AB57CAFA489B9	1337240	----a-w-	C:\WINDOWS\SysWOW64\user32.dll
2016-03-28 18:21:01	B0DB58B85CF68C61AFBEFC107807FECF	784896	----a-w-	C:\WINDOWS\SysWOW64\NMAA.dll
2016-03-28 18:21:01	AA0644D24DD488B1E1517189DD3DC00B	48640	----a-w-	C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-03-28 18:21:01	A971D150CD168A1F7BD775674896F02C	711680	----a-w-	C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-03-28 18:21:01	A589CD44BDB433F727EE84792FCCF0C0	87040	----a-w-	C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-03-28 18:21:01	A43688711B5DA91ED9FC159BB8F8AF14	646656	----a-w-	C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-28 18:21:01	A1EB9EF86954DF012BD3A48803DB36C8	6297088	----a-w-	C:\WINDOWS\SysWOW64\mos.dll
2016-03-28 18:21:01	93B7ED5F44D9C3FB0A74C059E1B9E68B	89088	----a-w-	C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-03-28 18:21:01	8BAD6657817E0960C7CB6026323828A1	511320	----a-w-	C:\WINDOWS\SysWOW64\mf.dll
2016-03-28 18:21:01	88D538838692B2D66514301CCB37B4E7	83456	----a-w-	C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-03-28 18:21:01	7F64C196D3FA41C0F437A158FDEF7F50	800768	----a-w-	C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-03-28 18:21:01	7CDF1630DCF7C9167E551874D18C3CE0	709120	----a-w-	C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-03-28 18:21:01	761E6E736B47DA42D74227A26F658108	100864	----a-w-	C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-03-28 18:21:01	75B5C1588D3703F44004D3EB2BD358AD	129024	----a-w-	C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-03-28 18:21:01	6EB3A9117D1849AE452110A2C66CC411	820704	----a-w-	C:\WINDOWS\SysWOW64\WinTypes.dll
2016-03-28 18:21:01	6DFDAD2B0EA3385069276DF547F4CAC8	2186864	----a-w-	C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-28 18:21:01	6AE2C3CFEA73E2D01CB1E00DBD1EC4A5	205824	----a-w-	C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-03-28 18:21:01	674333934AEF201C56419742CD86782B	973664	----a-w-	C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-03-28 18:21:01	65E98344070A6C0B66ED476F735B14D3	59904	----a-w-	C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-03-28 18:21:01	620737C11CD32E03299E0B60BC896230	552960	----a-w-	C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-03-28 18:21:01	5A212173FC0622865F409B16ED77C9DF	98304	----a-w-	C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-03-28 18:21:01	56315A6A6598E701BB0A5F506DA6143E	200704	----a-w-	C:\WINDOWS\SysWOW64\cemapi.dll
2016-03-28 18:21:01	53F74B2F4AEA9C6A7BB9DABDCC3C7431	613888	----a-w-	C:\WINDOWS\SysWOW64\winhttp.dll
2016-03-28 18:21:01	53E2029302DA056DE856D4C662663B2B	10240	----a-w-	C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-03-28 18:21:01	4C85D9A9FD26D3F00BBF5D3F469F1800	241664	----a-w-	C:\WINDOWS\SysWOW64\cryptngc.dll
2016-03-28 18:21:01	4B9DE8EAA2E16C34E018749F325BAEFF	949248	----a-w-	C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-28 18:21:01	4A2AD2C3B186FFE8EFE4DC7AB492F73E	79360	----a-w-	C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-03-28 18:21:01	451356B814B46BB6582F307E24AA0863	9728	----a-w-	C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-03-28 18:21:01	43AE8C9F7D031AB3DBEADA4C17D8C682	150528	----a-w-	C:\WINDOWS\SysWOW64\VCardParser.dll
2016-03-28 18:21:01	3FCEAC0D175851962F9CF797A370A14F	3072	----a-w-	C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-03-28 18:21:01	3BFCD46B7D67D0B137BD54C2BE644C4A	161280	----a-w-	C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-03-28 18:21:01	3B1F2F6F89F3F4ED75C5FADDB2E7CFE1	56320	----a-w-	C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-03-28 18:21:01	39E7BAB659A6AB4419A908E578BE7029	56320	----a-w-	C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-03-28 18:21:01	395F9E50709FAE503C339047207E46CF	540160	----a-w-	C:\WINDOWS\SysWOW64\ChatApis.dll
2016-03-28 18:21:01	392434472351B2DA0499AEC962E988CE	37888	----a-w-	C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-03-28 18:21:01	3547D79A60007624BFEBAFCAE158E992	169984	----a-w-	C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-03-28 18:21:01	3249EA75874EE3DD3FCBA141656DF210	713728	----a-w-	C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-28 18:21:01	31657EDEEA6039E71C708BDA61AB62D5	37888	----a-w-	C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-03-28 18:21:01	2DE2DAF437341AECB280DBFE88CBB581	346112	----a-w-	C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-03-28 18:21:01	2C84609F09FD003FA955567D395EEA8A	575488	----a-w-	C:\WINDOWS\SysWOW64\EmailApis.dll
2016-03-28 18:21:01	2B6C84CF3AE5E1CEE5C763115DAF5FB4	389120	----a-w-	C:\WINDOWS\SysWOW64\schannel.dll
2016-03-28 18:21:01	262D880248233D3A96C15F7C7E1BAD21	58368	----a-w-	C:\WINDOWS\SysWOW64\MosResource.dll
2016-03-28 18:21:01	259517866C369BCC5990292BCB57E709	223744	----a-w-	C:\WINDOWS\SysWOW64\ExSMime.dll
2016-03-28 18:21:01	242708810A22D373904539EDF39FFAD1	196608	----a-w-	C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-03-28 18:21:01	1ECA3CCBC61038D780FC179C9CB5F0CA	1944576	----a-w-	C:\WINDOWS\SysWOW64\InputService.dll
2016-03-28 18:21:01	1C22BFBABCF389F2A985A32C01819467	5202944	----a-w-	C:\WINDOWS\SysWOW64\BingMaps.dll
2016-03-28 18:21:01	1AEBF2230422716D8CE1BEBCBAE961D3	48128	----a-w-	C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-03-28 18:21:01	123BD3D4504BB548A823152EAC57DE00	32040	----a-w-	C:\WINDOWS\SysWOW64\mfpmp.exe
2016-03-28 18:21:01	104ED5E318C5EED6178BE9F4B4E1E5A2	4759040	----a-w-	C:\WINDOWS\SysWOW64\d2d1.dll
2016-03-28 18:21:01	0B247775E6D85763E490BAE3B7CE0CB9	31232	----a-w-	C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-03-28 18:21:01	039AD4C3FDCF13CE3196C0258C24D0C7	1371792	----a-w-	C:\WINDOWS\SysWOW64\gdi32.dll
2016-03-28 18:21:01	00ECC00ED8713D7FDE30323237C5CAEF	792064	----a-w-	C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-28 18:20:57	F60E1993D8D8FD2E23516C1278B209C1	34304	----a-w-	C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-03-28 18:20:57	F2D2E8091D0929884E6A86AFD9981E2F	2001408	----a-w-	C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-03-28 18:20:57	E43400F37F8F0FA9281FEB64E3D7F72B	754176	----a-w-	C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-28 18:20:57	CA2EA5401563387162E61444AE15AF59	53248	----a-w-	C:\WINDOWS\SysWOW64\profext.dll
2016-03-28 18:20:57	C9B1E5A2FE0C7BF75B8B751311331EB4	2604032	----a-w-	C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-28 18:20:57	C97B5BEADC79FFC5DAF1C9011CAE796B	5242496	----a-w-	C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-28 18:20:57	B7B67257F01B0B814066F245DAD34367	93696	----a-w-	C:\WINDOWS\SysWOW64\winbio.dll
2016-03-28 18:20:57	AC42505CBCEE5825BB2695C34E43B1D0	184832	----a-w-	C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-03-28 18:20:57	9FE071ED2AAE48A691D234E757297CF3	49152	----a-w-	C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-03-28 18:20:57	6DA0B412C0DD9DDB5382527488A5AD2E	237056	----a-w-	C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-28 18:20:57	65D0043F608A12AF75ED37A65AFB906B	342528	----a-w-	C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-03-28 18:20:57	626E736B04150EC59601D2D3EEFEDA6D	123392	----a-w-	C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-03-28 18:20:57	35383CA7169E12D885B9B553F59E3154	41984	----a-w-	C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-03-28 18:20:57	15E75D27F0C67A7A21D5A514601F0E5A	135168	----a-w-	C:\WINDOWS\SysWOW64\AppxSip.dll
2016-03-28 18:20:57	05B81C404A34101E1DC17C0D9A67EA32	5321728	----a-w-	C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-28 18:20:57	053E2D136DB8A4743E4C40D5D979834B	200704	----a-w-	C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-28 18:20:56	FC90756CB632C0E4AC0D6A60AF2DF9AD	585216	----a-w-	C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-28 18:20:56	F87C928A9C09611670BBF6533281003C	162816	----a-w-	C:\WINDOWS\SysWOW64\msorcl32.dll
2016-03-28 18:20:56	F7447D7EDE2E9F4FEC87143F5CC021F5	65536	----a-w-	C:\WINDOWS\SysWOW64\wininetlui.dll
2016-03-28 18:20:56	F0ED21F9D39229B305C363B6ED023170	11776	----a-w-	C:\WINDOWS\SysWOW64\dciman32.dll
2016-03-28 18:20:56	EDD93EDB3758471A4862D3CF70FE9007	503296	----a-w-	C:\WINDOWS\SysWOW64\vbscript.dll
2016-03-28 18:20:56	EBD26D676238C0B3938AFF925043576F	394752	----a-w-	C:\WINDOWS\SysWOW64\werui.dll
2016-03-28 18:20:56	DD73501C379ABF585DC7CC1765BE8E2E	303104	----a-w-	C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-28 18:20:56	DB6C9645A16676FDE0D730CB05D8F6E1	1443328	----a-w-	C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-03-28 18:20:56	D51618B0CB2B51F7D9B8DEB38A454126	36352	----a-w-	C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-03-28 18:20:56	D1817C1F148C21EC4403186D731DF042	540752	----a-w-	C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-03-28 18:20:56	CF342DCC0B8053DCABA7C5D30BE4B5C3	1500672	----a-w-	C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-28 18:20:56	C23A52581FEA6CD49A49160BFA794BF7	6952088	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-28 18:20:56	B014F98BEE810D5BF9F8C1C75F0EAD92	489984	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-28 18:20:56	A8EF9AEDACF24908E12E910BF3977DC9	703840	----a-w-	C:\WINDOWS\SysWOW64\WWAHost.exe
2016-03-28 18:20:56	A820BD54E6B4A68C6E4490EA23FA5650	1860096	----a-w-	C:\WINDOWS\SysWOW64\cdp.dll
2016-03-28 18:20:56	A680339559FBC02BC0854D73DDE85C7B	1174008	----a-w-	C:\WINDOWS\SysWOW64\msctf.dll
2016-03-28 18:20:56	9B60985A87BA2FED9F57DA30F191098E	315904	----a-w-	C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-03-28 18:20:56	978D6640C869D7FA4FCDD877E4A5C2C7	93696	----a-w-	C:\WINDOWS\SysWOW64\fontsub.dll
2016-03-28 18:20:56	952D6065F133D9525B399E6274CFE027	793600	----a-w-	C:\WINDOWS\SysWOW64\SRH.dll
2016-03-28 18:20:56	94A99147A62D9830676B47D2BFA8FA46	125440	----a-w-	C:\WINDOWS\SysWOW64\wshom.ocx
2016-03-28 18:20:56	93050CE746C09F2F6F49A4893FB060ED	647168	----a-w-	C:\WINDOWS\SysWOW64\jscript.dll
2016-03-28 18:20:56	8FA6855FCD9F683BC6761B97F7F48408	13018624	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-03-28 18:20:56	89F3F69C9996D5BCC879C664BF74A4E2	675064	----a-w-	C:\WINDOWS\SysWOW64\dcomp.dll
2016-03-28 18:20:56	856AD15FD2D187EA8435564A135C85C0	228352	----a-w-	C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-28 18:20:56	847B31F89A3009D5D851479224B7579A	2680320	----a-w-	C:\WINDOWS\SysWOW64\msftedit.dll
2016-03-28 18:20:56	7F0A9630C78E3783680CC9620C4E09C0	6740992	----a-w-	C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-28 18:20:56	7A2A3BAAA05C8124D95B2915E904F900	141664	----a-w-	C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-28 18:20:56	6FA3485DB4DE58EE9E73597CAC493AB4	37376	----a-w-	C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-28 18:20:56	6E7BF3FB027D46B7DEFCFFBEF8C4511D	2026736	----a-w-	C:\WINDOWS\SysWOW64\msxml6.dll
2016-03-28 18:20:56	64B0C2833EB2501DAE37C0A9700BF48F	45568	----a-w-	C:\WINDOWS\SysWOW64\jsproxy.dll
2016-03-28 18:20:56	627DC6C1A8D38FFC64BF884C2DE90410	573440	----a-w-	C:\WINDOWS\SysWOW64\qedit.dll
2016-03-28 18:20:56	594B272EA8C34067CD74AAE90EFFBE88	1626624	----a-w-	C:\WINDOWS\SysWOW64\dwmcore.dll
2016-03-28 18:20:56	588E4109C8A78BC211AC1D5756652A67	1139200	----a-w-	C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-03-28 18:20:56	54F47C0CD2DE99A7B8C7583CF6C22D92	3072	----a-w-	C:\WINDOWS\SysWOW64\lpk.dll
2016-03-28 18:20:56	529D8C676C042EC2E6930221F81C1A4A	99840	----a-w-	C:\WINDOWS\SysWOW64\hlink.dll
2016-03-28 18:20:56	52838DDB3B20C7330A30D89509A93B55	1268736	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-03-28 18:20:56	4D2E3D6BC01E7A5E9C6F9AFDBFAF98BB	220064	----a-w-	C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-28 18:20:56	44F1D7984F8B7739EF7EF50DEC6B41B9	2229760	----a-w-	C:\WINDOWS\SysWOW64\wininet.dll
2016-03-28 18:20:56	3F8B09A6D234877025A5EBECF9151F58	162816	----a-w-	C:\WINDOWS\SysWOW64\MTF.dll
2016-03-28 18:20:56	38EE252AD45EB7D6834F718B9487D3F9	538736	----a-w-	C:\WINDOWS\SysWOW64\wer.dll
2016-03-28 18:20:56	30C2700A2CDEF6042585C9296ABC9054	499432	----a-w-	C:\WINDOWS\SysWOW64\advapi32.dll
2016-03-28 18:20:56	302A0BE9FA2874A3E99C0E25C992E7C7	1467392	----a-w-	C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-03-28 18:20:56	0FC0E3CA4D36EB8A3BC1BA48436C1645	63488	----a-w-	C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-03-28 18:20:56	0B8C82099C16CC3AF45ABBE9BADC0B0C	498176	----a-w-	C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-03-28 18:14:34	6F2CA3BDD1C78C465BC0C1E5DDA15B28	2629632	----a-w-	C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-03-28 18:14:34	14129011499850E46153AB0E6C325F87	4847616	----a-w-	C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-03-28 18:04:17	F432E0E5B0958F4982D40EB622FBD7FC	35480	----a-w-	C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-03-28 18:04:17	BF9CAA33ADD4C21C118148B5CFC5494B	778936	----a-w-	C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-03-28 18:04:17	6F391E9286733CC6B34FC0FAB23B8DF3	103120	----a-w-	C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-28 17:35:17	AD897721279996658B80E5B4408060F7	105472	----a-w-	C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-03-28 17:32:49	42DE22BB4E675AE8DADD9038B26F8EFE	2718208	----a-w-	C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-03-25 11:57:02	09B79FB0E014C71CDD6DBA6C850A2C6B	952	--sha-w-	C:\WINDOWS\SysWOW64\KGyGaAvL.sys
2016-03-25 11:38:41	FA4B7023057BF988816AC7FB33450B5B	114176	----a-w-	C:\WINDOWS\SysWOW64\SSCE4132.DLL
2016-03-25 11:38:41	B782098F7ADC4AD566D1602E8E0A9EFA	45936	----a-w-	C:\WINDOWS\SysWOW64\ltvdd11w.drv
2016-03-25 11:38:41	AAF54174F73DC829D1EA44B135252208	53248	----a-w-	C:\WINDOWS\SysWOW64\PretzelSpellCheck.dll
2016-03-25 11:38:41	2097BA9A60C761ABDE9BD053D4C260B0	73728	----a-w-	C:\WINDOWS\SysWOW64\ImageServerMI.dll
2016-03-25 11:38:41	0268E31EA510A41900B2A3CDC25E6520	392192	----a-w-	C:\WINDOWS\SysWOW64\ltkrn11n.dll
2016-03-25 11:38:40	FB8EA3C207B13E11431382FC3888DDDA	285184	----a-w-	C:\WINDOWS\SysWOW64\LFCMP11n.DLL
2016-03-25 11:38:40	F5828E28301A6BB0F8953387DF68DCDC	36864	----a-w-	C:\WINDOWS\SysWOW64\lfbmp11n.dll
2016-03-25 11:38:40	E2320435BE26E03EBB1FD9256886AC72	172032	----a-w-	C:\WINDOWS\SysWOW64\Lfpng11n.dll
2016-03-25 11:38:40	DEE51CBD0811300CE099E8A242F6ED40	29184	----a-w-	C:\WINDOWS\SysWOW64\Popup.ocx
2016-03-25 11:38:40	C8A32AA8830DEF259794C90F7ADCB930	33280	----a-w-	C:\WINDOWS\SysWOW64\lfpcx11n.dll
2016-03-25 11:38:40	C66F8220234603EC8ADEA942042376DF	152064	----a-w-	C:\WINDOWS\SysWOW64\lftif11n.dll
2016-03-25 11:38:40	BBEC3A597A6A7603D86E13E3634093C3	31232	----a-w-	C:\WINDOWS\SysWOW64\lfeps11n.dll
2016-03-25 11:38:40	ABD99C090DC8DE24311769827095CCA8	262656	----a-w-	C:\WINDOWS\SysWOW64\LTDIS11n.dll
2016-03-25 11:38:40	A90A15A0BF7328C75040D94349B2AD8D	27648	----a-w-	C:\WINDOWS\SysWOW64\lfwpg11n.dll
2016-03-25 11:38:40	987F202D2EDD56F00147ACD0CBACCB2A	41472	----a-w-	C:\WINDOWS\SysWOW64\lfgif11n.dll
2016-03-25 11:38:40	8D3CDD3ABB133526407FE57CD5505AC4	26112	----a-w-	C:\WINDOWS\SysWOW64\lfpcd11n.dll
2016-03-25 11:38:40	824C1F22548A2A949CD1F77DA4253221	127488	----a-w-	C:\WINDOWS\SysWOW64\ltimg11n.dll
2016-03-25 11:38:40	68FE12C5785B30B360BACE26A867FBAA	118784	----a-w-	C:\WINDOWS\SysWOW64\ltfil11n.DLL
2016-03-25 11:38:40	11DE62A50DFC9B0A5FAE1ABFAFF71A1C	81408	----a-w-	C:\WINDOWS\SysWOW64\lffax11n.dll
2016-03-25 11:38:40	0F76CD55A9CC3013F244A6DB88790367	56320	----a-w-	C:\WINDOWS\SysWOW64\lfpsd11n.dll
2016-03-25 11:38:40	09F4129675CE57F2B14D647ED91C9EC6	59392	----a-w-	C:\WINDOWS\SysWOW64\lfwmf11n.dll
2016-03-25 11:38:39	6B08C6BB0EB7298378F3CA47F82B1482	745472	----a-w-	C:\WINDOWS\SysWOW64\PMAppBuilder.dll
2016-03-25 11:38:39	67B2BA33590924F725AB82749418AD3F	90112	----a-w-	C:\WINDOWS\SysWOW64\PMovieServer.dll
2016-03-25 11:38:37	CA96E1FD3DD1DBCCBCC3716BD5237A08	81920	----a-w-	C:\WINDOWS\SysWOW64\CONNMGR.OCX
2016-03-25 11:38:37	5ADEC13B7472D9B1007A35F7BA678210	45056	----a-w-	C:\WINDOWS\SysWOW64\ImportClient.dll
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2016-03-28 18:27:10	3ABDEBFB29390D9DAB2C83EE33524B9E	45227	----a-w-	C:\WINDOWS\Sysnative\license.rtf
2016-03-28 18:21:29	C3F15E167CB84E2E6027AF17D49D5904	372224	----a-w-	C:\WINDOWS\Sysnative\MDEServer.exe
2016-03-28 18:21:28	BC767AD01E4DAFD08C21D5D07CC290C9	567808	----a-w-	C:\WINDOWS\Sysnative\MCRecvSrc.dll
2016-03-28 18:21:28	95B9A9F4D41A54FD421CF6F7323B87FF	126464	----a-w-	C:\WINDOWS\Sysnative\dialserver.dll
2016-03-28 18:21:28	903F7858A69A95836B0C1D36CBEC5E5B	387072	----a-w-	C:\WINDOWS\Sysnative\qdvd.dll
2016-03-28 18:21:28	815D17429CBDA7DD5D11AA57B379E94B	119320	----a-w-	C:\WINDOWS\Sysnative\MP3DMOD.DLL
2016-03-28 18:21:28	6E76BB89EED6C2BD7B1E7B5F9A1C41F0	320000	----a-w-	C:\WINDOWS\Sysnative\MSFlacDecoder.dll
2016-03-28 18:21:28	67C00AEDBE4B3AD408A4910A357E046F	786696	----a-w-	C:\WINDOWS\Sysnative\WMADMOD.DLL
2016-03-28 18:21:28	63B9376F17E6DE7DE8B25BC6F3319A98	671472	----a-w-	C:\WINDOWS\Sysnative\advapi32.dll
2016-03-28 18:21:28	503FFDCC4319F7419DE2B201B03BDB54	305664	----a-w-	C:\WINDOWS\Sysnative\ksproxy.ax
2016-03-28 18:21:28	2EC83C9326B6731398674C0C0CB1636F	1674240	----a-w-	C:\WINDOWS\Sysnative\quartz.dll
2016-03-28 18:21:27	D79FFE2219AE3BA3B871BA2D39B16519	1152328	----a-w-	C:\WINDOWS\Sysnative\mfasfsrcsnk.dll
2016-03-28 18:21:27	CCFE330C465256D5D835E9248C676E9E	245840	----a-w-	C:\WINDOWS\Sysnative\mfps.dll
2016-03-28 18:21:27	BD70B866034C1366D74CCBB5CA97395E	2544264	----a-w-	C:\WINDOWS\Sysnative\mfcore.dll
2016-03-28 18:21:27	63F861960D2EA541831072D88E08EABA	3425792	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.dll
2016-03-28 18:21:27	5CB2CB9410BD09BE144D64BF447D6582	1299504	----a-w-	C:\WINDOWS\Sysnative\mfnetsrc.dll
2016-03-28 18:21:27	48E90F12346EE70764CEE435826ABD31	493568	----a-w-	C:\WINDOWS\Sysnative\mfmkvsrcsnk.dll
2016-03-28 18:21:26	FEBBA212353E4FA90C6164AA970B772F	536256	----a-w-	C:\WINDOWS\Sysnative\AudioSes.dll
2016-03-28 18:21:26	F5DC166DC9D533651B83B83CD70FD14C	88392	----a-w-	C:\WINDOWS\Sysnative\remoteaudioendpoint.dll
2016-03-28 18:21:26	F3B1BFB19C6A47DE7706A9CF1A177028	526856	----a-w-	C:\WINDOWS\Sysnative\mfreadwrite.dll
2016-03-28 18:21:26	EF94C4BB5DDCEB9F0A092122582CF4E5	516544	----a-w-	C:\WINDOWS\Sysnative\AudioEng.dll
2016-03-28 18:21:26	EB05F5368F8BBF75157B87FD1F689167	2581504	----a-w-	C:\WINDOWS\Sysnative\MFMediaEngine.dll
2016-03-28 18:21:26	D1824F779289CA26635A186FF30C0F92	858952	----a-w-	C:\WINDOWS\Sysnative\mfnetcore.dll
2016-03-28 18:21:26	C9BFE1D6420BFADB249162039C321F63	1131520	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Audio.dll
2016-03-28 18:21:26	9D9A25E3E658EAC6FA9BC1BC23168516	1092456	----a-w-	C:\WINDOWS\Sysnative\mfplat.dll
2016-03-28 18:21:26	9C4C3EB6A2371A2038E2BB3A9D54CDE0	498448	----a-w-	C:\WINDOWS\Sysnative\MFCaptureEngine.dll
2016-03-28 18:21:26	9610CE53A9ED0789C8B669A5F86008F7	1054208	----a-w-	C:\WINDOWS\Sysnative\audiosrv.dll
2016-03-28 18:21:26	92F74BF86088520654BD5636A69E37F1	848168	----a-w-	C:\WINDOWS\Sysnative\mfsvr.dll
2016-03-28 18:21:26	751F5B6AF16546162E06211AF1FC2979	794888	----a-w-	C:\WINDOWS\Sysnative\mfds.dll
2016-03-28 18:21:26	6E0BFE7FAFAC7B5D0C13062D5884B135	369912	----a-w-	C:\WINDOWS\Sysnative\audiodg.exe
2016-03-28 18:21:26	669F733F85FEBE6F7438C66CBF7FD3FD	1062480	----a-w-	C:\WINDOWS\Sysnative\mfmp4srcsnk.dll
2016-03-28 18:21:26	468D29ECE0AD7700B790A20FA2765313	408120	----a-w-	C:\WINDOWS\Sysnative\AUDIOKSE.dll
2016-03-28 18:21:26	42BF7FA295F453618104B5A50BEE105B	275456	----a-w-	C:\WINDOWS\Sysnative\AudioEndpointBuilder.dll
2016-03-28 18:21:26	36208F250EE9B93B87AD6384237373A9	110032	----a-w-	C:\WINDOWS\Sysnative\EncDump.dll
2016-03-28 18:21:26	350CFCC870E30BEE151F3DFB83BD0178	1017032	----a-w-	C:\WINDOWS\Sysnative\mfsrcsnk.dll
2016-03-28 18:21:26	29A61BF9EAB31507C36060CFAFEBE154	234504	----a-w-	C:\WINDOWS\Sysnative\mftranscode.dll
2016-03-28 18:21:26	28343B7C30E6AF073B02288EB579D984	476728	----a-w-	C:\WINDOWS\Sysnative\msvproc.dll
2016-03-28 18:21:26	218CEC10714AF029BF4D8BCE600AD1DA	819648	----a-w-	C:\WINDOWS\Sysnative\mfmpeg2srcsnk.dll
2016-03-28 18:21:25	D12D3DD397A35EF06CDF41C1A9E3EE45	613376	----a-w-	C:\WINDOWS\Sysnative\SettingSync.dll
2016-03-28 18:21:25	8E3B324D6479A63B6F23D663307D53A1	477696	----a-w-	C:\WINDOWS\Sysnative\srcore.dll
2016-03-28 18:21:24	F9B6E75F16F92CB79F68DA3ABCB576E0	989536	----a-w-	C:\WINDOWS\Sysnative\SecConfig.efi
2016-03-28 18:21:24	E9B10E704AD5B1BA5E531809C89A085B	93184	----a-w-	C:\WINDOWS\Sysnative\wpninprc.dll
2016-03-28 18:21:24	C3D11EE0D07D6CAF9F8D4073B9F5579E	557056	----a-w-	C:\WINDOWS\Sysnative\PsmServiceExtHost.dll
2016-03-28 18:21:24	47323DE2A684895004CE63EC66FB4AB4	401408	----a-w-	C:\WINDOWS\Sysnative\sharemediacpl.dll
2016-03-28 18:21:23	F6B9E6CB351D86A0C318B37E14B97656	196608	----a-w-	C:\WINDOWS\Sysnative\fwpolicyiomgr.dll
2016-03-28 18:21:23	AA97AC06BFA15DA23C7C9C145A226C2D	25600	----a-w-	C:\WINDOWS\Sysnative\wfapigp.dll
2016-03-28 18:21:23	9AE80C03EA83537F17B286ECBBA13D43	184320	----a-w-	C:\WINDOWS\Sysnative\fwbase.dll
2016-03-28 18:21:23	80AD89A1EF678960E13D977EF8C047A9	1750440	----a-w-	C:\WINDOWS\Sysnative\WpcMon.exe
2016-03-28 18:21:23	6A5290128257BC733107E7819648CA76	526336	----a-w-	C:\WINDOWS\Sysnative\FirewallAPI.dll
2016-03-28 18:21:23	5C6B3AFF685A17163315276E86CE173E	696160	----a-w-	C:\WINDOWS\Sysnative\NetSetupEngine.dll
2016-03-28 18:21:23	553F19DC6F3F73545CB17FCD7A8AE37B	870912	----a-w-	C:\WINDOWS\Sysnative\MPSSVC.dll
2016-03-28 18:21:23	549A1696E594E6939C210972B4AD9747	824320	----a-w-	C:\WINDOWS\Sysnative\WpcWebFilter.dll
2016-03-28 18:21:23	4EB351CB5A23E0F7AB2B7137374EFB85	870400	----a-w-	C:\WINDOWS\Sysnative\wpncore.dll
2016-03-28 18:21:23	3D58D04A9269CE21B61960544A05573D	204288	----a-w-	C:\WINDOWS\Sysnative\NetSetupSvc.dll
2016-03-28 18:21:23	38F068BA3D5CE3C53A025E1F9381CC54	115040	----a-w-	C:\WINDOWS\Sysnative\NetSetupApi.dll
2016-03-28 18:21:17	C78D43083400B8FAE408FEB1E99F9DA8	1847808	----a-w-	C:\WINDOWS\Sysnative\WMPDMC.exe
2016-03-28 18:21:17	844EB2280A13842B9919DCD0113F5487	343552	----a-w-	C:\WINDOWS\Sysnative\SensorsApi.dll
2016-03-28 18:21:17	7014B74B0F62698EC891A19A781689D5	337840	----a-w-	C:\WINDOWS\Sysnative\MFPlay.dll
2016-03-28 18:21:17	55FB0D95CC3EF6A0EB40DBDBC529787A	1255936	----a-w-	C:\WINDOWS\Sysnative\WMSPDMOE.DLL
2016-03-28 18:21:17	3FAD094B789D7D8C130D474A8FD479D6	785088	----a-w-	C:\WINDOWS\Sysnative\evr.dll
2016-03-28 18:21:17	18CE63A5B5EB84FF7F9F575C8FE53F44	931328	----a-w-	C:\WINDOWS\Sysnative\MSMPEG2ENC.DLL
2016-03-28 18:21:16	E0932D924DA7C363F40E5B90DC9D2669	129536	----a-w-	C:\WINDOWS\Sysnative\flvprophandler.dll
2016-03-28 18:21:16	BB2DD53E90A958FDB1254839F30329D5	803840	----a-w-	C:\WINDOWS\Sysnative\jscript.dll
2016-03-28 18:21:16	B83CCF1BEECF4BCDE71FC431BAB9A790	34304	----a-w-	C:\WINDOWS\Sysnative\iernonce.dll
2016-03-28 18:21:16	85EB31A46D618AC52726253A32539082	221696	----a-w-	C:\WINDOWS\Sysnative\ie4uinit.exe
2016-03-28 18:21:16	5F8178A9C45D9C69819C63AFC5988C33	66560	----a-w-	C:\WINDOWS\Sysnative\iesetup.dll
2016-03-28 18:21:16	40D666AEFB8775F25AA403EDB5D2414E	4894208	----a-w-	C:\WINDOWS\Sysnative\jscript9.dll
2016-03-28 18:21:16	3E80E2B0C0010154CC504DC51BE21968	14252544	----a-w-	C:\WINDOWS\Sysnative\wmp.dll
2016-03-28 18:21:15	A84812FE1FC4EAE9BBD816A2AEE4830D	383488	----a-w-	C:\WINDOWS\Sysnative\iedkcs32.dll
2016-03-28 18:21:15	7950D23F5542F6F8A9D41F046C01067F	2756096	----a-w-	C:\WINDOWS\Sysnative\mshtml.tlb
2016-03-28 18:21:15	777F439F1E5989777805647F1684529D	2127360	----a-w-	C:\WINDOWS\Sysnative\inetcpl.cpl
2016-03-28 18:21:14	3ED081A1F371E63BC6DA0327E1E51D22	22376960	----a-w-	C:\WINDOWS\Sysnative\edgehtml.dll
2016-03-28 18:21:14	0307E9C189E8FD376109265BAD5E3475	784384	----a-w-	C:\WINDOWS\Sysnative\msfeeds.dll
2016-03-28 18:21:12	408E62A03168C0016B986C80ECFD088C	24600576	----a-w-	C:\WINDOWS\Sysnative\mshtml.dll
2016-03-28 18:21:11	EB850DDF36D7462F1ADC1B6A329CE266	7835648	----a-w-	C:\WINDOWS\Sysnative\Chakra.dll
2016-03-28 18:21:11	C6F9333F6C5F326B075CBC062E33793D	7680	----a-w-	C:\WINDOWS\Sysnative\readingviewresources.dll
2016-03-28 18:21:11	BF0B4D43097A7FEFE3F7F9EEC13C31FB	764928	----a-w-	C:\WINDOWS\Sysnative\Chakradiag.dll
2016-03-28 18:21:11	54E585CFCD208E460A70D1356CD489BE	13382656	----a-w-	C:\WINDOWS\Sysnative\ieframe.dll
2016-03-28 18:21:11	2985697A74DE409D53C6ACD2CD30FDAA	1818696	----a-w-	C:\WINDOWS\Sysnative\ntdll.dll
2016-03-28 18:21:11	0088614FE67298E6996AD19B05AE90C7	1997328	----a-w-	C:\WINDOWS\Sysnative\KernelBase.dll
2016-03-28 18:21:10	70E822EC30C93426C2C51D8CB8BBCDDF	2587696	----a-w-	C:\WINDOWS\Sysnative\msxml6.dll
2016-03-28 18:21:05	F232BE986A85BA857E7C5FDBEFC71653	1415200	----a-w-	C:\WINDOWS\Sysnative\msctf.dll
2016-03-28 18:21:05	F01ADB9BD13B60B6AB9538447F901921	365568	----a-w-	C:\WINDOWS\Sysnative\atmfd.dll
2016-03-28 18:21:05	EA30B6E587862DF15E35525C60CCAFA9	838144	----a-w-	C:\WINDOWS\Sysnative\uDWM.dll
2016-03-28 18:21:05	DA81241A3493CD3B7EEF3AFD6BBE38B6	92352	----a-w-	C:\WINDOWS\Sysnative\acmigration.dll
2016-03-28 18:21:05	BAAB5AE1EC2A970C16FDA670882EEE39	79360	----a-w-	C:\WINDOWS\Sysnative\cfgbkend.dll
2016-03-28 18:21:05	B8F17AB618578B9024D949DE8308B95A	14336	----a-w-	C:\WINDOWS\Sysnative\dciman32.dll
2016-03-28 18:21:05	A74CEC306AB99D74559F7075EDB60A9B	451584	----a-w-	C:\WINDOWS\Sysnative\werui.dll
2016-03-28 18:21:05	96B060E7FDDD6E2902282C12C3BFD6AE	630632	----a-w-	C:\WINDOWS\Sysnative\fontdrvhost.exe
2016-03-28 18:21:05	8C86CB7C7725B196773451DE66602199	75776	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.XboxLive.ProxyStub.dll
2016-03-28 18:21:05	7185B16516478DF0061C2561C1B072CE	228352	----a-w-	C:\WINDOWS\Sysnative\wsqmcons.exe
2016-03-28 18:21:05	6ABAC83AD594B0390C470F9C1C017382	3072	----a-w-	C:\WINDOWS\Sysnative\lpk.dll
2016-03-28 18:21:05	69E727F94BEA64E66C284F3C482F33E6	1035776	----a-w-	C:\WINDOWS\Sysnative\XboxNetApiSvc.dll
2016-03-28 18:21:05	69B4974176206D7276B733B30BCE442E	1717248	----a-w-	C:\WINDOWS\Sysnative\GdiPlus.dll
2016-03-28 18:21:05	68B34C3558BEE0F6B822FA603E9AE441	258280	----a-w-	C:\WINDOWS\Sysnative\sqmapi.dll
2016-03-28 18:21:05	52623F9ED4D00357F3874DD31BB232FD	45568	----a-w-	C:\WINDOWS\Sysnative\atmlib.dll
2016-03-28 18:21:05	2C8130AFF9C3F0E99DE4B52A0A187CB3	118272	----a-w-	C:\WINDOWS\Sysnative\fontsub.dll
2016-03-28 18:21:05	2989A5B700D1C706ED496CCA75DCFA67	7533568	----a-w-	C:\WINDOWS\Sysnative\mstscax.dll
2016-03-28 18:21:05	186BAF9C9F422E6B784E4C990585E2E3	673792	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.dll
2016-03-28 18:21:04	FF07BE14ED82E218C3EEE7C986118A2E	307712	----a-w-	C:\WINDOWS\Sysnative\usbmon.dll
2016-03-28 18:21:04	FDB262D0B2C0790385B894AA4B2C0A6C	182784	----a-w-	C:\WINDOWS\Sysnative\shutdownux.dll
2016-03-28 18:21:04	FB2FBCF8AD0DF4F8A50B1639F0256D83	555520	----a-w-	C:\WINDOWS\Sysnative\SyncController.dll
2016-03-28 18:21:04	FAB5054707064EA9881954F98D9150C0	85320	----a-w-	C:\WINDOWS\Sysnative\OpenWith.exe
2016-03-28 18:21:04	F8083C536BEDE61AFB4069D8A8C16DA7	456704	----a-w-	C:\WINDOWS\Sysnative\ipnathlp.dll
2016-03-28 18:21:04	F40D409308162E071561049ACADF753C	80600	----a-w-	C:\WINDOWS\Sysnative\wwapi.dll
2016-03-28 18:21:04	F3FE9C939D684607118E306B98CEBBBC	22564328	----a-w-	C:\WINDOWS\Sysnative\shell32.dll
2016-03-28 18:21:04	F2232A78D975E8F1B99DAC4873CBDC89	414720	----a-w-	C:\WINDOWS\Sysnative\bcastdvr.exe
2016-03-28 18:21:04	F0D97E9816795E1AAA17396ABD2660C4	4827136	----a-w-	C:\WINDOWS\Sysnative\ExplorerFrame.dll
2016-03-28 18:21:04	F0BA42C8EB6ADB733E35D2EC7714408F	49152	----a-w-	C:\WINDOWS\Sysnative\pcaui.exe
2016-03-28 18:21:04	F07301C282AA222C33F8C28B4F545275	591872	----a-w-	C:\WINDOWS\Sysnative\SmsRouterSvc.dll
2016-03-28 18:21:04	EFA47480BEB0968E3A18479593B2E60C	18944	----a-w-	C:\WINDOWS\Sysnative\wshrm.dll
2016-03-28 18:21:04	EBD07BD20B5E0E92A398566EF8720F79	31232	----a-w-	C:\WINDOWS\Sysnative\seclogon.dll
2016-03-28 18:21:04	E9A0D466F6D8EC349DB526146618BCB6	606720	----a-w-	C:\WINDOWS\Sysnative\wcmsvc.dll
2016-03-28 18:21:04	E78793375E53690605E4441078CCBF84	87552	----a-w-	C:\WINDOWS\Sysnative\AppxSysprep.dll
2016-03-28 18:21:04	E7588419770BDDB510741F734D290E27	1318912	----a-w-	C:\WINDOWS\Sysnative\wifinetworkmanager.dll
2016-03-28 18:21:04	E4AFFF129D51A779B75164CB6D077FC1	1831936	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentExtensions.dll
2016-03-28 18:21:04	E104F46B2E0C4F760382CF95E248E0AD	43520	----a-w-	C:\WINDOWS\Sysnative\bcastdvr.proxy.dll
2016-03-28 18:21:04	DFDA465D7D14906ECC04071E20D0F19E	644096	----a-w-	C:\WINDOWS\Sysnative\uReFS.dll
2016-03-28 18:21:04	DEEA03E61DCE718C64BF68D446E8ABA0	1309376	----a-w-	C:\WINDOWS\Sysnative\appraiser.dll
2016-03-28 18:21:04	DD723E3E44BBD7A1B94D8914B7E72549	623616	----a-w-	C:\WINDOWS\Sysnative\PhoneProviders.dll
2016-03-28 18:21:04	DAFECF80513C6E6892BBEBB48D555A31	115712	----a-w-	C:\WINDOWS\Sysnative\srpapi.dll
2016-03-28 18:21:04	DAB53783AD08864E873A6B7B874D1783	3671888	----a-w-	C:\WINDOWS\Sysnative\iertutil.dll
2016-03-28 18:21:04	D974EACE921C3B1C78DD29334CC7F861	109056	----a-w-	C:\WINDOWS\Sysnative\hlink.dll
2016-03-28 18:21:04	D7ED1ADDC1D19A9D6A1C583A938F4AF4	465920	----a-w-	C:\WINDOWS\Sysnative\wwanconn.dll
2016-03-28 18:21:04	D60BA4C76D194472D6602FF3D2D51ADE	106496	----a-w-	C:\WINDOWS\Sysnative\rasauto.dll
2016-03-28 18:21:04	D4170CA7268AEDE7DE43EE54D7C8F639	256512	----a-w-	C:\WINDOWS\Sysnative\accountaccessor.dll
2016-03-28 18:21:04	D229D73154CD66884BEAD67393ABE5C7	726528	----a-w-	C:\WINDOWS\Sysnative\wlidcli.dll
2016-03-28 18:21:04	D20C52607024BD08A88CF1CA6B339C9B	517632	----a-w-	C:\WINDOWS\Sysnative\winspool.drv
2016-03-28 18:21:04	D1BB4122E41E04E2D8D57702396AE031	412512	----a-w-	C:\WINDOWS\Sysnative\wifitask.exe
2016-03-28 18:21:04	D1241DFC397FA8CCFB4BB4B63AAD31AC	755712	----a-w-	C:\WINDOWS\Sysnative\spoolsv.exe
2016-03-28 18:21:04	D0E812616609B1E6E3317FF46B9177C8	44032	----a-w-	C:\WINDOWS\Sysnative\wsplib.dll
2016-03-28 18:21:04	CD2CC65DDF46F065BCC975C2BC89DD11	1648640	----a-w-	C:\WINDOWS\Sysnative\comsvcs.dll
2016-03-28 18:21:04	C8C10002DF980C3830D103960957AA3C	1582080	----a-w-	C:\WINDOWS\Sysnative\aitstatic.exe
2016-03-28 18:21:04	C6856D20BE1DB90407C9154B0EC319B9	77824	----a-w-	C:\WINDOWS\Sysnative\provpackageapidll.dll
2016-03-28 18:21:04	C177128E60700E43109584F33D0430F9	258048	----a-w-	C:\WINDOWS\Sysnative\iassam.dll
2016-03-28 18:21:04	BF53DA0A9C4BC6A0D8DCF529154DBF74	538632	----a-w-	C:\WINDOWS\Sysnative\WWanAPI.dll
2016-03-28 18:21:04	BE8C62B0B7BBA8F1152A6A7FCF248404	915456	----a-w-	C:\WINDOWS\Sysnative\configurationclient.dll
2016-03-28 18:21:04	BA4DB0DDCF88E0D609E085130773A034	2597888	----a-w-	C:\WINDOWS\Sysnative\NetworkMobileSettings.dll
2016-03-28 18:21:04	B84FEAB09387BECCA1900E4BFBD899A9	1009152	----a-w-	C:\WINDOWS\Sysnative\WMSPDMOD.DLL
2016-03-28 18:21:04	B58CE40AC84F1B068A2004400E68245B	87040	----a-w-	C:\WINDOWS\Sysnative\MDMAppInstaller.exe
2016-03-28 18:21:04	B46D8BBF27B186B0AE7C57C88A1A6D93	6572032	----a-w-	C:\WINDOWS\Sysnative\wwanmm.dll
2016-03-28 18:21:04	B37F21B4C25BF10605A196791F93E324	360448	----a-w-	C:\WINDOWS\Sysnative\vaultsvc.dll
2016-03-28 18:21:04	AE46FC3FC01DA2DC876D75776F5943B0	86528	----a-w-	C:\WINDOWS\Sysnative\AppCapture.dll
2016-03-28 18:21:04	A9073B21B807C28A5A2246BB1440E823	1030416	----a-w-	C:\WINDOWS\Sysnative\winresume.efi
2016-03-28 18:21:04	A80237F337639402450C5F6CE9B75C94	474624	----a-w-	C:\WINDOWS\Sysnative\NetSetupShim.dll
2016-03-28 18:21:04	A78E76034D230AFE6B74B57BAF8C8BF2	27648	----a-w-	C:\WINDOWS\Sysnative\WiFiConfigSP.dll
2016-03-28 18:21:04	A6E666BC673DD38C3ECDB53FD83138E7	3993600	----a-w-	C:\WINDOWS\Sysnative\SettingsHandlers_nt.dll
2016-03-28 18:21:04	9E55D606C3CE9A37FB2FE5A419AE9CE6	30208	----a-w-	C:\WINDOWS\Sysnative\StorageUsage.dll
2016-03-28 18:21:04	9CEBBE3FB11718F2B2B2086102711C2E	19456	----a-w-	C:\WINDOWS\Sysnative\rasautou.exe
2016-03-28 18:21:04	9BE5ECE2F17B3BEDE6FDE1175BD23266	376536	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.MediaControl.dll
2016-03-28 18:21:04	9AEEB769F72EF13134BC21BA1465CCE3	134656	----a-w-	C:\WINDOWS\Sysnative\wificonnapi.dll
2016-03-28 18:21:04	9A3D731707AC0059E0ACBD4E8CDF46E6	1731584	----a-w-	C:\WINDOWS\Sysnative\urlmon.dll
2016-03-28 18:21:04	9953FA89A4E3BC33296DAFB1ACFDC62F	617984	----a-w-	C:\WINDOWS\Sysnative\StorSvc.dll
2016-03-28 18:21:04	9822B613AEB1CF24E05EFEE748160637	25088	----a-w-	C:\WINDOWS\Sysnative\irmon.dll
2016-03-28 18:21:04	98112F9B965646D338896FD7B13BB32E	1173344	----a-w-	C:\WINDOWS\Sysnative\aeinv.dll
2016-03-28 18:21:04	96BAB1499995B85B91C312BA5114CA03	1322248	----a-w-	C:\WINDOWS\Sysnative\ole32.dll
2016-03-28 18:21:04	91038CB7820CFB27E7C9D10320307301	1390080	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Shell.dll
2016-03-28 18:21:04	90AA1A4C3B4FF984BB33D74C23D71536	678912	----a-w-	C:\WINDOWS\Sysnative\qedit.dll
2016-03-28 18:21:04	8AF0CBE3FC6129C42D7A2A73B681F226	1118208	----a-w-	C:\WINDOWS\Sysnative\localspl.dll
2016-03-28 18:21:04	8A0BAD6F9EEFB0FCD1629F6366394380	1814528	----a-w-	C:\WINDOWS\Sysnative\pnidui.dll
2016-03-28 18:21:04	8938F957903BBA18ED242AE4DBF419FD	73728	----a-w-	C:\WINDOWS\Sysnative\wwancfg.dll
2016-03-28 18:21:04	84ADBF35DAF6404148AE85973BE26D59	48640	----a-w-	C:\WINDOWS\Sysnative\wfdprov.dll
2016-03-28 18:21:04	8321155AACF85779A42582B0CD5084A4	148992	----a-w-	C:\WINDOWS\Sysnative\wshom.ocx
2016-03-28 18:21:04	83012CF88DF6EC835B2308941B47CA8A	7474528	----a-w-	C:\WINDOWS\Sysnative\ntoskrnl.exe
2016-03-28 18:21:04	80021DC2AF64B92F3FA8935C0D5C81D7	69632	----a-w-	C:\WINDOWS\Sysnative\wininetlui.dll
2016-03-28 18:21:04	7E1AE9B225DEA8A142BAE7AFFC2A78F5	160768	----a-w-	C:\WINDOWS\Sysnative\SimAuth.dll
2016-03-28 18:21:04	7CDB2034A13C7009CFF479C170E21C90	55808	----a-w-	C:\WINDOWS\Sysnative\rilproxy.dll
2016-03-28 18:21:04	7B24B823404D53DA4748F21AD2BF04C9	584704	----a-w-	C:\WINDOWS\Sysnative\winlogon.exe
2016-03-28 18:21:04	79F73D66F612FE53C8E5E607FCDCFAB1	884736	----a-w-	C:\WINDOWS\Sysnative\rasdlg.dll
2016-03-28 18:21:04	77B2F9C522467B1FC8770028D09534DB	91648	----a-w-	C:\WINDOWS\Sysnative\asycfilt.dll
2016-03-28 18:21:04	717FDDACE38C314CA5A517E12162CC6D	216576	----a-w-	C:\WINDOWS\Sysnative\QuickActionsDataModel.dll
2016-03-28 18:21:04	716E299C1058C9F2030F31BC7270A210	52224	----a-w-	C:\WINDOWS\Sysnative\Wwanpref.dll
2016-03-28 18:21:04	703430E9FFF072334B247B5E88428331	288768	----a-w-	C:\WINDOWS\Sysnative\vaultcli.dll
2016-03-28 18:21:04	6FF8248F3A9D69A095C7F3F42BC29CB2	440152	----a-w-	C:\WINDOWS\Sysnative\services.exe
2016-03-28 18:21:04	6F9775D843AA4595A3F60A60829B11A9	1098752	----a-w-	C:\WINDOWS\Sysnative\dosvc.dll
2016-03-28 18:21:04	6E04BBE242E2889B37300C4DF5CE1126	3449168	----a-w-	C:\WINDOWS\Sysnative\WSService.dll
2016-03-28 18:21:04	6D7BC576DEC9750D5F8AED361E687384	704000	----a-w-	C:\WINDOWS\Sysnative\CellularAPI.dll
2016-03-28 18:21:04	6CA51117CDDB89DB6AE9F196B01C3491	389992	----a-w-	C:\WINDOWS\Sysnative\wlanapi.dll
2016-03-28 18:21:04	6BB898FE9AE437C3D9D1F4920B92B1C3	1500672	----a-w-	C:\WINDOWS\Sysnative\RecoveryDrive.exe
2016-03-28 18:21:04	69B6B69C95E1FBDC796F5B2019A8B24D	791744	----a-w-	C:\WINDOWS\Sysnative\generaltel.dll
2016-03-28 18:21:04	6855984AA46D2452A7C518787E1F2643	1996288	----a-w-	C:\WINDOWS\Sysnative\ActiveSyncProvider.dll
2016-03-28 18:21:04	6817CD1A33EB94CDE8FBBCB7E3C4E469	1317640	----a-w-	C:\WINDOWS\Sysnative\winload.efi
2016-03-28 18:21:04	6807A6D971AA7A26245397ADDFE3B5D8	2755584	----a-w-	C:\WINDOWS\Sysnative\wininet.dll
2016-03-28 18:21:04	671DA2607117AC3BC7C028C0A6F4555E	210432	----a-w-	C:\WINDOWS\Sysnative\aepic.dll
2016-03-28 18:21:04	610D0502400BDAFD4BB8EA10713234C7	74240	----a-w-	C:\WINDOWS\Sysnative\SMSRouter.dll
2016-03-28 18:21:04	6072C7DB85FD3FE8D308EE44865C04DE	305664	----a-w-	C:\WINDOWS\Sysnative\wifiprofilessettinghandler.dll
2016-03-28 18:21:04	5D88798FC34BB61C74256CDD66BDD205	318976	----a-w-	C:\WINDOWS\Sysnative\domgmt.dll
2016-03-28 18:21:04	57C2033773055CEE5963EBCB999337F8	210432	----a-w-	C:\WINDOWS\Sysnative\wcmcsp.dll
2016-03-28 18:21:04	57606281E23B0F53347527691E947B2B	749056	----a-w-	C:\WINDOWS\Sysnative\PhoneService.dll
2016-03-28 18:21:04	561B71EE613240D3CC643E2E308BD3F7	248832	----a-w-	C:\WINDOWS\Sysnative\UserMgrProxy.dll
2016-03-28 18:21:04	56027D21265759F4EADD0555E7915D9A	957952	----a-w-	C:\WINDOWS\Sysnative\SRH.dll
2016-03-28 18:21:04	557496EE056CEF8D1D569D2663BC701F	988160	----a-w-	C:\WINDOWS\Sysnative\SharedStartModel.dll
2016-03-28 18:21:04	5548D83C60E37CBB1B451A1108D4142C	513888	----a-w-	C:\WINDOWS\Sysnative\devinv.dll
2016-03-28 18:21:04	53AC4B2658807691D2A485EE0F8A50E9	463360	----a-w-	C:\WINDOWS\Sysnative\wlansec.dll
2016-03-28 18:21:04	52B49D01CE8F8EEC3D557D2CCD46548B	17408	----a-w-	C:\WINDOWS\Sysnative\rasadhlp.dll
2016-03-28 18:21:04	5125BB69518578E5EDC4117BABF2A687	874968	----a-w-	C:\WINDOWS\Sysnative\winresume.exe
2016-03-28 18:21:04	50FED971D0FAD2B990C0A05735761D62	733184	----a-w-	C:\WINDOWS\Sysnative\rasapi32.dll
2016-03-28 18:21:04	5058E240BBD22D66CE29D9C3279C8A91	610816	----a-w-	C:\WINDOWS\Sysnative\rastls.dll
2016-03-28 18:21:04	4DAAEB83744362082EA91B05C9CC13F3	604672	----a-w-	C:\WINDOWS\Sysnative\vbscript.dll
2016-03-28 18:21:04	486C22DD70BE538B1C164AE38E130009	2352128	----a-w-	C:\WINDOWS\Sysnative\authui.dll
2016-03-28 18:21:04	46BF56CC45F3EBE9DCF04EA702F79FF7	64000	----a-w-	C:\WINDOWS\Sysnative\ihvrilproxy.dll
2016-03-28 18:21:04	467F2BD2CC73E322839B3AED763BA2DC	193024	----a-w-	C:\WINDOWS\Sysnative\SimCfg.dll
2016-03-28 18:21:04	45FDB4ACF680DF92D6510F77E7FF3E7F	713568	----a-w-	C:\WINDOWS\Sysnative\invagent.dll
2016-03-28 18:21:04	453740989239803FE363FF8B40EA2E08	2295808	----a-w-	C:\WINDOWS\Sysnative\wlansvc.dll
2016-03-28 18:21:04	447413C46C687CF730051DD8B4EA12F6	75264	----a-w-	C:\WINDOWS\Sysnative\wwanprotdim.dll
2016-03-28 18:21:04	417D1526811D9646A7E8779209F11361	1213440	----a-w-	C:\WINDOWS\Sysnative\wwansvc.dll
2016-03-28 18:21:04	3F8466CC13D1F614C8FAC24B1C030D59	214528	----a-w-	C:\WINDOWS\Sysnative\Windows.Devices.Scanners.dll
2016-03-28 18:21:04	3DF25A56F18D2AB4CF58C1300C8CD323	2158592	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentServer.dll
2016-03-28 18:21:04	39D5E08E69BFC5CBFA94EE09656D6427	1713664	----a-w-	C:\WINDOWS\Sysnative\SRHInproc.dll
2016-03-28 18:21:04	36EC82F0E399F36BD25F593D63DC144A	912384	----a-w-	C:\WINDOWS\Sysnative\usermgr.dll
2016-03-28 18:21:04	334A9D347CC52E7581DC21FA7CDBB261	515584	----a-w-	C:\WINDOWS\Sysnative\LogonController.dll
2016-03-28 18:21:04	2DDEA2BEDD3169F483C9BE610ADFE8B1	8705672	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Protection.PlayReady.dll
2016-03-28 18:21:04	2DA8708EB1FCB83375A450D401A1ED09	74240	----a-w-	C:\WINDOWS\Sysnative\mssign32.dll
2016-03-28 18:21:04	2B91178DE30EF92DD383486485B0C97D	523776	----a-w-	C:\WINDOWS\Sysnative\catsrvut.dll
2016-03-28 18:21:04	29C0CB42B16F323AB8003A73B7E81DD5	1141504	----a-w-	C:\WINDOWS\Sysnative\winload.exe
2016-03-28 18:21:04	28CFFDB411375B2BBB0EBF295ABAEF29	382464	----a-w-	C:\WINDOWS\Sysnative\wuuhext.dll
2016-03-28 18:21:04	285D92DAC2C93818615C70A5719DD1F8	440320	----a-w-	C:\WINDOWS\Sysnative\CredProvDataModel.dll
2016-03-28 18:21:04	26DFF195B1A59942541CE199C586F0D4	43520	----a-w-	C:\WINDOWS\Sysnative\usermgrcli.dll
2016-03-28 18:21:04	266B9C1CC212C255ED61CB13CE3A98A4	13824	----a-w-	C:\WINDOWS\Sysnative\sscoreext.dll
2016-03-28 18:21:04	215C9C65601378F56BEECDECBD1EF4AE	216416	----a-w-	C:\WINDOWS\Sysnative\AppxAllUserStore.dll
2016-03-28 18:21:04	20E6B1B1F23615B5CF21AC3CE0A2E227	52224	----a-w-	C:\WINDOWS\Sysnative\jsproxy.dll
2016-03-28 18:21:04	1C375486D1F6D0DD5281B76C750EEFA3	147456	----a-w-	C:\WINDOWS\Sysnative\mtxoci.dll
2016-03-28 18:21:04	0ED8556CB47EC7689D0046791F3427AE	26112	----a-w-	C:\WINDOWS\Sysnative\wlansvcpal.dll
2016-03-28 18:21:04	0D7BB44BFFFA4E153F4EA1E05522D2C3	37376	----a-w-	C:\WINDOWS\Sysnative\LaunchWinApp.exe
2016-03-28 18:21:04	0A9C90159378EAF0F45AF2275156EF0D	264544	----a-w-	C:\WINDOWS\Sysnative\ContentDeliveryManager.Utilities.dll
2016-03-28 18:21:04	09918925526BC0B5B823CF1A2473D909	412672	----a-w-	C:\WINDOWS\Sysnative\wlanmsm.dll
2016-03-28 18:21:04	096671DD1AA23C708FC4493C41D5DB82	13824	----a-w-	C:\WINDOWS\Sysnative\rastlsext.dll
2016-03-28 18:21:04	043051E7D39381BC1DCA5B25236BBA72	11545600	----a-w-	C:\WINDOWS\Sysnative\twinui.dll
2016-03-28 18:21:04	023338E1DA5B6E5C2EFC7E5ADA7929C5	685568	----a-w-	C:\WINDOWS\Sysnative\scapi.dll
2016-03-28 18:21:04	01AE64981A7C7AE4F84799931D8DAAD1	900608	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.BackgroundTransfer.dll
2016-03-28 18:21:01	FFD04E8263FC9CDB89BAD8C27C337223	794112	----a-w-	C:\WINDOWS\Sysnative\winhttp.dll
2016-03-28 18:21:01	FF1FF1A83425C77D1CAFF9EC7AFA8C1F	108544	----a-w-	C:\WINDOWS\Sysnative\InputLocaleManager.dll
2016-03-28 18:21:01	FF0F6AAD313DCD878D2ECF1BA0B32478	2624512	----a-w-	C:\WINDOWS\Sysnative\InputService.dll
2016-03-28 18:21:01	FBEFDA259F6254B6590956753421D387	89600	----a-w-	C:\WINDOWS\Sysnative\NFCProvisioningPlugin.dll
2016-03-28 18:21:01	FA7FE5ECB4E0103F132BB00E526E67EF	852480	----a-w-	C:\WINDOWS\Sysnative\Windows.ApplicationModel.Store.dll
2016-03-28 18:21:01	F93E9FA2A54843D6EC529E4754F12946	166400	----a-w-	C:\WINDOWS\Sysnative\MusNotification.exe
2016-03-28 18:21:01	F6D1F548315E07F98B6294940CCBE7FB	97280	----a-w-	C:\WINDOWS\Sysnative\winhttpcom.dll
2016-03-28 18:21:01	F5AF729AD65041D74FED75E02DA4A4DC	138240	----a-w-	C:\WINDOWS\Sysnative\ETWCoreUIComponentsResources.dll
2016-03-28 18:21:01	F2E3456FD405F9BEACA0B8CF2BBDF0DE	202472	----a-w-	C:\WINDOWS\Sysnative\wscapi.dll
2016-03-28 18:21:01	F202F182FF6046869E2995DF333C5B2A	7199232	----a-w-	C:\WINDOWS\Sysnative\BingMaps.dll
2016-03-28 18:21:01	EEA1E99FBC7D91A1A271012F2B4567BB	60416	----a-w-	C:\WINDOWS\Sysnative\PimIndexMaintenanceClient.dll
2016-03-28 18:21:01	EBDDBFCAA0E8BF346F5DC13BC364B39E	110592	----a-w-	C:\WINDOWS\Sysnative\Microsoft-Windows-MapControls.dll
2016-03-28 18:21:01	EAB4B1DD5E18EE57853ACD0156AE92E6	199168	----a-w-	C:\WINDOWS\Sysnative\InstallAgent.exe
2016-03-28 18:21:01	EA195B8BC11C1CDB313CFD456EFFA0E9	997376	----a-w-	C:\WINDOWS\Sysnative\schedsvc.dll
2016-03-28 18:21:01	E95EA71BD560BF02276DF339FA412FCB	472576	----a-w-	C:\WINDOWS\Sysnative\DscCore.dll
2016-03-28 18:21:01	E8C7F673B75210D3F35142361923C945	157184	----a-w-	C:\WINDOWS\Sysnative\dmcertinst.exe
2016-03-28 18:21:01	E432FCF8572682126C3362AA856DC4AE	221184	----a-w-	C:\WINDOWS\Sysnative\PhoneCallHistoryApis.dll
2016-03-28 18:21:01	E1D8055043DF089DB8ADB67C21DF2CC4	70656	----a-w-	C:\WINDOWS\Sysnative\POSyncServices.dll
2016-03-28 18:21:01	E00F94FADD6FE28F62841F8D31EF47BF	1594408	----a-w-	C:\WINDOWS\Sysnative\gdi32.dll
2016-03-28 18:21:01	DEFF4C7B937F60923980D4BB7D1724B8	274944	----a-w-	C:\WINDOWS\Sysnative\ExSMime.dll
2016-03-28 18:21:01	DD97EF0AE9224B8C1161736E033C03F1	1399224	----a-w-	C:\WINDOWS\Sysnative\user32.dll
2016-03-28 18:21:01	DD877B48C28AB34197AD88902971B81D	45056	----a-w-	C:\WINDOWS\Sysnative\UserDataLanguageUtil.dll
2016-03-28 18:21:01	DD57E9F1482E1A9BD2514F6D017DF58A	258560	----a-w-	C:\WINDOWS\Sysnative\UserDataAccountApis.dll
2016-03-28 18:21:01	DC59D9253F50A2D329945CBDBE3B8B7A	32256	----a-w-	C:\WINDOWS\Sysnative\wups2.dll
2016-03-28 18:21:01	D754BB9E00B5D305617461E9C3CB6057	120320	----a-w-	C:\WINDOWS\Sysnative\MapsBtSvc.dll
2016-03-28 18:21:01	D169A4C1EDA2F63545628420014F2FE3	808800	----a-w-	C:\WINDOWS\Sysnative\WWAHost.exe
2016-03-28 18:21:01	D02F3E132E6AD02F2CB4F9991FB77B56	1270072	----a-w-	C:\WINDOWS\Sysnative\WinTypes.dll
2016-03-28 18:21:01	CD8C4364BC6040C0226638EF37E13CBB	161280	----a-w-	C:\WINDOWS\Sysnative\CallHistoryClient.dll
2016-03-28 18:21:01	CB902A15DD21B363FECA5DCCF34F5C57	1224704	----a-w-	C:\WINDOWS\Sysnative\Unistore.dll
2016-03-28 18:21:01	C64B693DF26EB7BFF25F9BAD8B54D571	649216	----a-w-	C:\WINDOWS\Sysnative\ngcsvc.dll
2016-03-28 18:21:01	C46FC25D2742C6426F6581A4C59331D9	35656	----a-w-	C:\WINDOWS\Sysnative\mfpmp.exe
2016-03-28 18:21:01	C402B84B789382748EEEC04284781732	2606824	----a-w-	C:\WINDOWS\Sysnative\combase.dll
2016-03-28 18:21:01	BF1A001A4EBD005CB412E322F20DB0D7	75264	----a-w-	C:\WINDOWS\Sysnative\EditBufferTestHook.dll
2016-03-28 18:21:01	BEF109D45139E2646C116DD9B6E53E3C	847360	----a-w-	C:\WINDOWS\Sysnative\netlogon.dll
2016-03-28 18:21:01	BAEFEFB04D7F9A554C029FBA52A02BB8	652392	----a-w-	C:\WINDOWS\Sysnative\dxgi.dll
2016-03-28 18:21:01	BA45A9F29AB13A0E66BAABF9D7C30B70	523616	----a-w-	C:\WINDOWS\Sysnative\wimserv.exe
2016-03-28 18:21:01	B94746868C7AD8F0449662E8552E55DE	145920	----a-w-	C:\WINDOWS\Sysnative\omadmclient.exe
2016-03-28 18:21:01	B7D367ABFC188C1AC27C6C961694B5B4	1056256	----a-w-	C:\WINDOWS\Sysnative\JpMapControl.dll
2016-03-28 18:21:01	B6877446C93D3110E56C90CF13CBEC89	45568	----a-w-	C:\WINDOWS\Sysnative\UserDataTypeHelperUtil.dll
2016-03-28 18:21:01	B67BE37DB6E01693A8529DBC4B2A1C88	970752	----a-w-	C:\WINDOWS\Sysnative\kerberos.dll
2016-03-28 18:21:01	A74C62AE99A015CD6275F0D8D8843886	342016	----a-w-	C:\WINDOWS\Sysnative\SensorService.dll
2016-03-28 18:21:01	A34D9229F8D3A7164247213C9A283DB0	189952	----a-w-	C:\WINDOWS\Sysnative\WiFiDisplay.dll
2016-03-28 18:21:01	A249C98D869623F1AF0DB4BCFFF6D2A8	68096	----a-w-	C:\WINDOWS\Sysnative\UserDataPlatformHelperUtil.dll
2016-03-28 18:21:01	A1A4838C326E1C33AACAD537E84880D3	851456	----a-w-	C:\WINDOWS\Sysnative\MapsStore.dll
2016-03-28 18:21:01	A0C330AAF06A36A13171A28FE4B582A2	92160	----a-w-	C:\WINDOWS\Sysnative\policymanagerprecheck.dll
2016-03-28 18:21:01	9FCC3D4817CCA5BCEF1FB4B14E523EBC	78336	----a-w-	C:\WINDOWS\Sysnative\BarcodeProvisioningPlugin.dll
2016-03-28 18:21:01	9F171CF4EDEB38DB4CA906ABD535DC44	13312	----a-w-	C:\WINDOWS\Sysnative\MapsBtSvcProxy.dll
2016-03-28 18:21:01	9C17CF2D05F8DA5AC66880B6BEE64E7D	190464	----a-w-	C:\WINDOWS\Sysnative\wscsvc.dll
2016-03-28 18:21:01	9972A886D911234F833A265D5D641D30	587776	----a-w-	C:\WINDOWS\Sysnative\bisrv.dll
2016-03-28 18:21:01	9920C9AD4528A4396D19BC03AA2D0882	58408	----a-w-	C:\WINDOWS\Sysnative\SensorsNativeApi.dll
2016-03-28 18:21:01	960E3DB158FC9D262EE33D928AEDA3F5	320000	----a-w-	C:\WINDOWS\Sysnative\cryptngc.dll
2016-03-28 18:21:01	95D2BD6AC94FB337AF69F8AFE056BEBE	147808	----a-w-	C:\WINDOWS\Sysnative\wermgr.exe
2016-03-28 18:21:01	907B65AD953EA159B573A0BCC82F6DB0	243712	----a-w-	C:\WINDOWS\Sysnative\cemapi.dll
2016-03-28 18:21:01	8EC4F381818F8A073DEC52C6D1ED9C76	86016	----a-w-	C:\WINDOWS\Sysnative\DeviceEnroller.exe
2016-03-28 18:21:01	8CDC28FB78253481353A882FA3139FBB	2654872	----a-w-	C:\WINDOWS\Sysnative\CoreUIComponents.dll
2016-03-28 18:21:01	8BACF65C95DA69173FA80F644502F9BC	26408	----a-w-	C:\WINDOWS\Sysnative\wuauclt.exe
2016-03-28 18:21:01	8A48AEAACC0F44E999BEC15BF017E74B	36864	----a-w-	C:\WINDOWS\Sysnative\ztrace_maps.dll
2016-03-28 18:21:01	88B38A7435DFA9B7E8F94F5D5FE999D2	66560	----a-w-	C:\WINDOWS\Sysnative\moshost.dll
2016-03-28 18:21:01	87A8DD15B7DEAC51916358250E5BC7C5	122368	----a-w-	C:\WINDOWS\Sysnative\KnobsCsp.dll
2016-03-28 18:21:01	849275D7BF36660743973B8E28542E45	51680	----a-w-	C:\WINDOWS\Sysnative\SensorsUtilsV2.dll
2016-03-28 18:21:01	8465AF051B7C887C0D163AB939FDF570	358752	----a-w-	C:\WINDOWS\Sysnative\msv1_0.dll
2016-03-28 18:21:01	839F7EC52C8E6888C4E9120E68652438	589312	----a-w-	C:\WINDOWS\Sysnative\MbaeApi.dll
2016-03-28 18:21:01	836DC2848B800FC890E8FCF96F5E639B	458752	----a-w-	C:\WINDOWS\Sysnative\PlayToDevice.dll
2016-03-28 18:21:01	83365A5A2632275C7B005B7A4995DCE1	416768	----a-w-	C:\WINDOWS\Sysnative\dmenrollengine.dll
2016-03-28 18:21:01	8109C3D1CFDC7AE78605D8F3EA4EAA20	586208	----a-w-	C:\WINDOWS\Sysnative\mf.dll
2016-03-28 18:21:01	80EEB2E91EE933EFB1384D9866BD997F	64000	----a-w-	C:\WINDOWS\Sysnative\MosHostClient.dll
2016-03-28 18:21:01	80D6AF1D9BE30E386322E9E723F7B6DE	1387520	----a-w-	C:\WINDOWS\Sysnative\lsasrv.dll
2016-03-28 18:21:01	80BF2990E01E774D64F6E13F30661942	162304	----a-w-	C:\WINDOWS\Sysnative\tetheringservice.dll
2016-03-28 18:21:01	7E81E3E0D7F83BFE3C3975020B6C7F12	163840	----a-w-	C:\WINDOWS\Sysnative\TimeBrokerServer.dll
2016-03-28 18:21:01	7DD3B4B77A787E06A6B3DC9AE7B451E0	292352	----a-w-	C:\WINDOWS\Sysnative\provengine.dll
2016-03-28 18:21:01	7C6B51E0233814D401905289AFD27BC5	1390592	----a-w-	C:\WINDOWS\Sysnative\win32kbase.sys
2016-03-28 18:21:01	7C20F3EC0BA5ACB8ED40CDEF41B0AC56	779384	----a-w-	C:\WINDOWS\Sysnative\taskschd.dll
2016-03-28 18:21:01	7BD715D15060E0B6E4AF222CA7120BD1	69632	----a-w-	C:\WINDOWS\Sysnative\EnterpriseDesktopAppMgmtCSP.dll
2016-03-28 18:21:01	79EE5C9F9DF073C315D035A1785B502F	3072	----a-w-	C:\WINDOWS\Sysnative\MapControlStringsRes.dll
2016-03-28 18:21:01	79BD0E63A9E54ED8AFFD19F43B5B83F2	264192	----a-w-	C:\WINDOWS\Sysnative\NmaDirect.dll
2016-03-28 18:21:01	781EFD88C2BD9A95CA6961E16AFF7332	168960	----a-w-	C:\WINDOWS\Sysnative\mdmmigrator.dll
2016-03-28 18:21:01	7677EA28D43C73FBD58BFA7C8E21FE97	479232	----a-w-	C:\WINDOWS\Sysnative\schannel.dll
2016-03-28 18:21:01	7538F05A7C07DB69F6E82B67CAA67286	92160	----a-w-	C:\WINDOWS\Sysnative\SensorsNativeApi.V2.dll
2016-03-28 18:21:01	7489ACBF86C3774E7EF0DC8C7616B07E	641536	----a-w-	C:\WINDOWS\Sysnative\enterprisecsps.dll
2016-03-28 18:21:01	72534830694CCABA9A5CBA33F9771C63	260608	----a-w-	C:\WINDOWS\Sysnative\MTFServer.dll
2016-03-28 18:21:01	722FA682ED9EA8B85FA843A5C8F39E61	2273792	----a-w-	C:\WINDOWS\Sysnative\wuaueng.dll
2016-03-28 18:21:01	7118498F6E48758A2EF5A7D1982E2B62	1139712	----a-w-	C:\WINDOWS\Sysnative\XblGameSave.dll
2016-03-28 18:21:01	70BA4CAAC5D621DCE88082DA0B1FF014	23552	----a-w-	C:\WINDOWS\Sysnative\ExtrasXmlParser.dll
2016-03-28 18:21:01	6D31FB3E4263749BD994B3895322D799	982016	----a-w-	C:\WINDOWS\Sysnative\AppxPackaging.dll
2016-03-28 18:21:01	6D0F04544716C90220B58008B4422B97	459776	----a-w-	C:\WINDOWS\Sysnative\MapConfiguration.dll
2016-03-28 18:21:01	6D04648D2E3F42A295B6D080A948E9BA	163328	----a-w-	C:\WINDOWS\Sysnative\provops.dll
2016-03-28 18:21:01	6B058785608DAB0D191575E12A45201D	406528	----a-w-	C:\WINDOWS\Sysnative\MusUpdateHandlers.dll
2016-03-28 18:21:01	67C1D042FA62E2294973FD0CD1F1BC36	192000	----a-w-	C:\WINDOWS\Sysnative\provisioningcsp.dll
2016-03-28 18:21:01	66312F4AFEFB1AE0B80051F8A5E5B26B	698208	----a-w-	C:\WINDOWS\Sysnative\wimgapi.dll
2016-03-28 18:21:01	63A71E0B8BEF5FC3A5C9669B5C771A1C	286208	----a-w-	C:\WINDOWS\Sysnative\provhandlers.dll
2016-03-28 18:21:01	61C99C1A4BB5EE14563ED321A859ACB6	726528	----a-w-	C:\WINDOWS\Sysnative\ChatApis.dll
2016-03-28 18:21:01	5B7B6AF7E94E972DCE4BF892ABD466B6	115200	----a-w-	C:\WINDOWS\Sysnative\win32k.sys
2016-03-28 18:21:01	5B50521452D87A439A87B1EAEBC138C7	208896	----a-w-	C:\WINDOWS\Sysnative\storewuauth.dll
2016-03-28 18:21:01	559E4E19F481FBB9AF622E23772533CC	52736	----a-w-	C:\WINDOWS\Sysnative\RemovableMediaProvisioningPlugin.dll
2016-03-28 18:21:01	54C5C6E962A873A1D05394DFF553FD18	149504	----a-w-	C:\WINDOWS\Sysnative\FilterDS.dll
2016-03-28 18:21:01	54051585F9E1A644C3ED024B639C0E32	231936	----a-w-	C:\WINDOWS\Sysnative\KnobsCore.dll
2016-03-28 18:21:01	5358F9A3A5C55ED1395BBFFCFA65F551	28672	----a-w-	C:\WINDOWS\Sysnative\mapsupdatetask.dll
2016-03-28 18:21:01	50007CDB0F9801A7186F3E81D3377D12	2773096	----a-w-	C:\WINDOWS\Sysnative\d3d11.dll
2016-03-28 18:21:01	4E5B496EBD95AEE005F54EA49EECAAC6	72704	----a-w-	C:\WINDOWS\Sysnative\MosStorage.dll
2016-03-28 18:21:01	4C3A93515CA70A7017CBA3A6A95CF080	121856	----a-w-	C:\WINDOWS\Sysnative\AppointmentActivation.dll
2016-03-28 18:21:01	4BCE40BC42A874A57B0E1B3E0FED0ABA	475648	----a-w-	C:\WINDOWS\Sysnative\DDDS.dll
2016-03-28 18:21:01	4B4970CB5FF1D25B444F95A18ED8AF22	114688	----a-w-	C:\WINDOWS\Sysnative\offlinelsa.dll
2016-03-28 18:21:01	4AAD96366A51B26F50113A6393CB5587	42496	----a-w-	C:\WINDOWS\Sysnative\mapstoasttask.dll
2016-03-28 18:21:01	46D84D62993CEB88542EFA438F4D6E82	167936	----a-w-	C:\WINDOWS\Sysnative\dafBth.dll
2016-03-28 18:21:01	46668562A5BDD2D2F383CAD6D35DCB15	89088	----a-w-	C:\WINDOWS\Sysnative\MapsCSP.dll
2016-03-28 18:21:01	45B88D0BBAB3EAA10883097C14C33678	1281376	----a-w-	C:\WINDOWS\Sysnative\LicenseManager.dll
2016-03-28 18:21:01	446E107CFCFECA7EF4A79414E882D8C8	574976	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.UX.EapRequestHandler.dll
2016-03-28 18:21:01	43B6BF7F95CF7D60599740EF2BF0DDD8	938496	----a-w-	C:\WINDOWS\Sysnative\MapControlCore.dll
2016-03-28 18:21:01	3FDFB93023689FBA65741B9D92C2D75A	7979008	----a-w-	C:\WINDOWS\Sysnative\mos.dll
2016-03-28 18:21:01	3DF7BD7E0E0CFCF8D8856B639FD46C3C	30720	----a-w-	C:\WINDOWS\Sysnative\tetheringconfigsp.dll
2016-03-28 18:21:01	3C9066503DE3E45CB98C8584DE19C186	28160	----a-w-	C:\WINDOWS\Sysnative\nativemap.dll
2016-03-28 18:21:01	3B36AFC1B127B13A82752A3F02CE9D8C	543232	----a-w-	C:\WINDOWS\Sysnative\StoreAgent.dll
2016-03-28 18:21:01	3A1FCBE9103770CF17F81EBD9809FE1B	697856	----a-w-	C:\WINDOWS\Sysnative\PlayToManager.dll
2016-03-28 18:21:01	3932940E0DB7A31B00A415F6B3D3E242	700416	----a-w-	C:\WINDOWS\Sysnative\AppointmentApis.dll
2016-03-28 18:21:01	3690FAA19C6D3C68C033D0E5CB3BDB03	28160	----a-w-	C:\WINDOWS\Sysnative\Windows.Management.Provisioning.ProxyStub.dll
2016-03-28 18:21:01	35F9920E5B9757E2047C024063C9A279	988160	----a-w-	C:\WINDOWS\Sysnative\NMAA.dll
2016-03-28 18:21:01	33F4AE1E913D7F865D0CFA716BDC9032	10240	----a-w-	C:\WINDOWS\Sysnative\Microsoft-Windows-MosTrace.dll
2016-03-28 18:21:01	333F190DFAE2E1EE500234B78ADDA297	640472	----a-w-	C:\WINDOWS\Sysnative\wer.dll
2016-03-28 18:21:01	32509061F29DA432B62336A4462ADEBF	3593216	----a-w-	C:\WINDOWS\Sysnative\win32kfull.sys
2016-03-28 18:21:01	301A917544D10E9F28A946BA0E84C407	160768	----a-w-	C:\WINDOWS\Sysnative\enrollmentapi.dll
2016-03-28 18:21:01	2E165E1CF278FC2B4959B825642A595B	558080	----a-w-	C:\WINDOWS\Sysnative\MBMediaManager.dll
2016-03-28 18:21:01	2BCCAEB08EAF8C5D6BD024B3F020D0EA	790528	----a-w-	C:\WINDOWS\Sysnative\EmailApis.dll
2016-03-28 18:21:01	2771EBB565F5C121E66060B173991D4D	1490432	----a-w-	C:\WINDOWS\Sysnative\UserDataService.dll
2016-03-28 18:21:01	25DA92A03FFF1A620A950ED6209CDC8F	77312	----a-w-	C:\WINDOWS\Sysnative\ProvPluginEng.dll
2016-03-28 18:21:01	25C9F417FA6FE9073392BD34630A89B4	17408	----a-w-	C:\WINDOWS\Sysnative\IcsEntitlementHost.exe
2016-03-28 18:21:01	25086E02B6C3F34BC4646C134C3E1769	1042432	----a-w-	C:\WINDOWS\Sysnative\BingOnlineServices.dll
2016-03-28 18:21:01	23B32FD7B58007D0407B8A4191AB76BB	28672	----a-w-	C:\WINDOWS\Sysnative\WordBreakers.dll
2016-03-28 18:21:01	2362BCA98EAF8CE0487664467F720861	178176	----a-w-	C:\WINDOWS\Sysnative\psmsrv.dll
2016-03-28 18:21:01	21098276051C6BEBBA7C8EB79AAF4E22	938496	----a-w-	C:\WINDOWS\Sysnative\ContactApis.dll
2016-03-28 18:21:01	2031A1DA09AFF8A8BADFFF73511AF306	58368	----a-w-	C:\WINDOWS\Sysnative\MosResource.dll
2016-03-28 18:21:01	1D445E497D7BE9566D51BD60CA8B8CE7	175616	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Core.TextInput.dll
2016-03-28 18:21:01	1D00BBEEE33FA7F64A8CBFF471968CB0	195072	----a-w-	C:\WINDOWS\Sysnative\VCardParser.dll
2016-03-28 18:21:01	1C671129864880F66678D3B80316074E	56320	----a-w-	C:\WINDOWS\Sysnative\provtool.exe
2016-03-28 18:21:01	1A0945D67F0499600E7B43A69210EC5B	41984	----a-w-	C:\WINDOWS\Sysnative\TimeBrokerClient.dll
2016-03-28 18:21:01	18DF88220B196D0D45644BC2730D6757	55296	----a-w-	C:\WINDOWS\Sysnative\MusNotificationUx.exe
2016-03-28 18:21:01	186B00E5849DA43B2CEF58252105F3CE	5503488	----a-w-	C:\WINDOWS\Sysnative\d2d1.dll
2016-03-28 18:21:01	156963089DF9C18AF330E08BFE41884D	165376	----a-w-	C:\WINDOWS\Sysnative\provdatastore.dll
2016-03-28 18:21:01	140201A765860592F320B6AD6AA35155	235008	----a-w-	C:\WINDOWS\Sysnative\MTF.dll
2016-03-28 18:21:01	1083375C70D529AA1C8224E13D9E6F40	334736	----a-w-	C:\WINDOWS\Sysnative\policymanager.dll
2016-03-28 18:21:01	08F0E6B466F44EA24CA1601F3196E43E	9728	----a-w-	C:\WINDOWS\Sysnative\Microsoft-Windows-MosHost.dll
2016-03-28 18:21:01	04F7878E7017105AB782353231561749	252928	----a-w-	C:\WINDOWS\Sysnative\PimIndexMaintenance.dll
2016-03-28 18:21:01	04BB77409644685810DBD63D86F5720E	99328	----a-w-	C:\WINDOWS\Sysnative\ngckeyenum.dll
2016-03-28 18:21:01	020AD2DA67F206DC160053F88454A0D4	111616	----a-w-	C:\WINDOWS\Sysnative\UserDataTimeUtil.dll
2016-03-28 18:21:01	0161DABC5CDB2BE6D0B91BEB5386B47D	52736	----a-w-	C:\WINDOWS\Sysnative\tetheringclient.dll
2016-03-28 18:21:01	0053C878CDBA8F8D55339547EC2E99E8	269824	----a-w-	C:\WINDOWS\Sysnative\moshostcore.dll
2016-03-28 18:20:57	F66EEB5365413D4B968C5B51D25F88B8	141560	----a-w-	C:\WINDOWS\Sysnative\AuthHost.exe
2016-03-28 18:20:57	E48BBF1363F843E030757EC190DD33E6	2057216	----a-w-	C:\WINDOWS\Sysnative\wlidsvc.dll
2016-03-28 18:20:57	E0FBBE85A7DC215F97F7B81236CE2674	60928	----a-w-	C:\WINDOWS\Sysnative\XblAuthTokenBrokerExt.dll
2016-03-28 18:20:57	AFAF7063071A1124985A63382B2BC34C	161792	----a-w-	C:\WINDOWS\Sysnative\AppxSip.dll
2016-03-28 18:20:57	93373D10F0F00D1DEE2EB822654735A5	275968	----a-w-	C:\WINDOWS\Sysnative\facecredentialprovider.dll
2016-03-28 18:20:57	8C8161E40F42E437161972E8866025D5	3355136	----a-w-	C:\WINDOWS\Sysnative\msftedit.dll
2016-03-28 18:20:57	8AA095B5A4826840B348D0A94969CE1A	1268736	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Xaml.Resources.dll
2016-03-28 18:20:57	85031015C1F1B9A7DAA002DAAEE341AA	2444288	----a-w-	C:\WINDOWS\Sysnative\twinui.appcore.dll
2016-03-28 18:20:57	797497201A406D6CFDB72FE0545F990C	6972416	----a-w-	C:\WINDOWS\Sysnative\Windows.Data.Pdf.dll
2016-03-28 18:20:57	7890990143812A452858058BBD52149F	297472	----a-w-	C:\WINDOWS\Sysnative\thumbcache.dll
2016-03-28 18:20:57	6D7B4647F5FB25CE88E2555A9DFF1D2E	70656	----a-w-	C:\WINDOWS\Sysnative\XblAuthManagerProxy.dll
2016-03-28 18:20:57	642EFABF900374FA85639D83B5533AFD	621568	----a-w-	C:\WINDOWS\Sysnative\wbiosrvc.dll
2016-03-28 18:20:57	597AA6F5B21B1B15C87982FAFD1555EE	6607080	----a-w-	C:\WINDOWS\Sysnative\windows.storage.dll
2016-03-28 18:20:57	4F83D9D2478E3421BFA7B7F13FAD614B	130560	----a-w-	C:\WINDOWS\Sysnative\winbio.dll
2016-03-28 18:20:57	4F0263646FF401695E0C14FE81D3E6A5	16986112	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Xaml.dll
2016-03-28 18:20:57	497EB340D13433E8FE53625103E0C2D0	146432	----a-w-	C:\WINDOWS\Sysnative\AuthBroker.dll
2016-03-28 18:20:57	405A419F4CDAC3C18F91FEDBD146C0A8	948736	----a-w-	C:\WINDOWS\Sysnative\XblAuthManager.dll
2016-03-28 18:20:57	3EEB5260D4321F7F124955E1D228FDF2	274944	----a-w-	C:\WINDOWS\Sysnative\DisplayManager.dll
2016-03-28 18:20:57	3CE8EBC0B1A74A7AC639C5FAFC549CCA	436736	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentClient.dll
2016-03-28 18:20:57	1CC123FE215B7FFBA4B7889FD13B32D5	36864	----a-w-	C:\WINDOWS\Sysnative\BackgroundTransferHost.exe
2016-03-28 18:20:57	1C8474EF741ABA77E53BE94DE8E89D26	990720	----a-w-	C:\WINDOWS\Sysnative\SettingSyncCore.dll
2016-03-28 18:20:57	183B210A411E23AC9C5374AEE5645312	36352	----a-w-	C:\WINDOWS\Sysnative\UIAutomationCoreRes.dll
2016-03-28 18:20:57	0DC4BEB16161362B4E46D117204D8566	2843136	----a-w-	C:\WINDOWS\Sysnative\cdp.dll
2016-03-28 18:20:57	03EB1EBAB72BB8322C30D070C346EA33	1395200	----a-w-	C:\WINDOWS\Sysnative\UIAutomationCore.dll
2016-03-28 18:20:56	FBC8C56814642A7CA88ACBCA8DD1121F	145408	----a-w-	C:\WINDOWS\Sysnative\dssvc.dll
2016-03-28 18:20:56	F7526C133AC265F283012E9CD751F873	625000	----a-w-	C:\WINDOWS\Sysnative\ClipSVC.dll
2016-03-28 18:20:56	E853D5823793FE6E5FB0351F256DC1F2	223232	----a-w-	C:\WINDOWS\Sysnative\fveapibase.dll
2016-03-28 18:20:56	C7A6CC05D5D1BE5A863F858D963F7E0C	628736	----a-w-	C:\WINDOWS\Sysnative\MessagingDataModel2.dll
2016-03-28 18:20:56	C62ACC8B1B1136464583F871EBB4ACE1	1946624	----a-w-	C:\WINDOWS\Sysnative\dwmcore.dll
2016-03-28 18:20:56	B8CBDF64077D764D26E6E0255270B7BF	224256	----a-w-	C:\WINDOWS\Sysnative\PackageStateRoaming.dll
2016-03-28 18:20:56	B174232356859EBB0CF8FA950119DA1E	159232	----a-w-	C:\WINDOWS\Sysnative\DeviceCensus.exe
2016-03-28 18:20:56	AD37B56D53795944240011FF4EEBBD30	911648	----a-w-	C:\WINDOWS\Sysnative\dcomp.dll
2016-03-28 18:20:56	ABC346A1CD915DEE6231BB4A7F0B96EC	204800	----a-w-	C:\WINDOWS\Sysnative\Microsoft-Windows-AppModelExecEvents.dll
2016-03-28 18:20:56	A407435633C74CB1D6911DC05A90D939	2912256	----a-w-	C:\WINDOWS\Sysnative\CertEnroll.dll
2016-03-28 18:20:56	9CB84B6398F10BCF0CE357F2C7B6056D	286720	----a-w-	C:\WINDOWS\Sysnative\deviceaccess.dll
2016-03-28 18:20:56	5CBB046266CD7CD1593354C93BCDBE91	870400	----a-w-	C:\WINDOWS\Sysnative\modernexecserver.dll
2016-03-28 18:20:56	5B5F518D6487FDCC9C40A74D3C72B8EE	828928	----a-w-	C:\WINDOWS\Sysnative\Windows.AccountsControl.dll
2016-03-28 18:20:56	55A629331D5EB924A1926C18E5028243	764928	----a-w-	C:\WINDOWS\Sysnative\fveapi.dll
2016-03-28 18:20:56	4EA244C67F3D3B0EB0CC694443D3F5AA	167936	----a-w-	C:\WINDOWS\Sysnative\ProximityCommon.dll
2016-03-28 18:20:56	4098813724BDAC23A74DD6E75CA360CC	450560	----a-w-	C:\WINDOWS\Sysnative\Windows.Internal.Bluetooth.dll
2016-03-28 18:20:56	1A9A77ACDAC29C39F50D2A492FD0DB16	87040	----a-w-	C:\WINDOWS\Sysnative\tzautoupdate.dll
2016-03-28 18:20:56	15D174719872A30F2FDD6B5B1B8BA5D9	1613664	----a-w-	C:\WINDOWS\Sysnative\diagtrack.dll
2016-03-28 18:20:56	11B74BAF9BD95FC3B7F17658A8CDBF3C	1804664	----a-w-	C:\WINDOWS\Sysnative\WMALFXGFXDSP.dll
2016-03-28 18:20:56	0FEE16BB03B1A97A70121165E7414903	67584	----a-w-	C:\WINDOWS\Sysnative\profext.dll
2016-03-28 18:20:56	0319FFA35F366D2FD1C9776DAA98FE96	299008	----a-w-	C:\WINDOWS\Sysnative\microsoft-windows-system-events.dll
2016-03-28 18:14:34	F44AA79DF45B1CAE6E6C64372D846AA5	6359040	----a-w-	C:\WINDOWS\Sysnative\NlsData0009.dll
2016-03-28 18:14:34	E52612EA0C1C1ACD3ABFD09534F6AAE6	5739520	----a-w-	C:\WINDOWS\Sysnative\prm0009.dll
2016-03-28 18:14:34	8F1CD3FABC7F24FE329FE39A3EB58C58	2629632	----a-w-	C:\WINDOWS\Sysnative\NlsLexicons0009.dll
2016-03-28 18:04:14	E91942A0D00C6AA014B2EA33EE0ED0A3	35480	----a-w-	C:\WINDOWS\Sysnative\TsWpfWrp.exe
2016-03-28 18:04:14	E2296A6174894682DF8F0FF29FDDCC82	1166520	----a-w-	C:\WINDOWS\Sysnative\PresentationNative_v0300.dll
2016-03-28 18:04:14	C5FEF4B4A7FB961ECDB0AB07DBCF379E	124624	----a-w-	C:\WINDOWS\Sysnative\PresentationCFFRasterizerNative_v0300.dll
2016-03-28 18:03:59	48E7F01CD9246CAF86702F5CB9100C9F	1087488	----a-w-	C:\WINDOWS\Sysnative\reseteng.dll
2016-03-28 18:03:59	20B48DC4AF4492B31A756528444BDA8C	304752	----a-w-	C:\WINDOWS\Sysnative\systemreset.exe
2016-03-28 17:55:12	9F77BBDD8D7E681C9D2324516BAB20EF	22980	----a-w-	C:\WINDOWS\Sysnative\emptyregdb.dat
2016-03-28 17:35:23	5C5A797761421CF9B72087F3BC8A5259	180	----a-w-	C:\WINDOWS\Sysnative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-28 17:35:23	1373F6562D5E4C715D5D3583E350093E	200	----a-w-	C:\WINDOWS\Sysnative\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-03-28 17:35:17	6C240583248C7C87EFCA78BE36459266	99856	----a-w-	C:\WINDOWS\Sysnative\OpenCL.DLL
2016-03-28 17:28:29	6D2256BEE0256E9A9657EA9D4CD79611	257968	----a-w-	C:\WINDOWS\Sysnative\FNTCACHE.DAT
2016-03-25 12:23:48	DFE3AD07E87194DD7F10C8C10E64B5AA	535552	----a-w-	C:\WINDOWS\Sysnative\ensppui.dll
2016-03-25 12:23:48	DFE3AD07E87194DD7F10C8C10E64B5AA	535552	----a-w-	C:\WINDOWS\Sysnative\enppui.dll
2016-03-25 12:23:48	74984FC408BF5BB10A0660B321E4BC5D	219648	----a-w-	C:\WINDOWS\Sysnative\enspres.dll
2016-03-25 12:23:48	74984FC408BF5BB10A0660B321E4BC5D	219648	----a-w-	C:\WINDOWS\Sysnative\enpres.dll
2016-03-25 12:23:48	01E0D3508E6E6F4497A242BE8DDBCC14	558592	----a-w-	C:\WINDOWS\Sysnative\ensppmon.dll
2016-03-25 12:23:48	01E0D3508E6E6F4497A242BE8DDBCC14	558592	----a-w-	C:\WINDOWS\Sysnative\enppmon.dll
2016-03-25 12:23:23	20ECD0A490A121CB34F553FAD1DBBD39	135824	----a-w-	C:\WINDOWS\Sysnative\escsvc64.exe
====== C:\WINDOWS\Sysnative\drivers =====
2016-03-28 18:21:25	1A490555FD330CA2764D89191177C867	285696	----a-w-	C:\WINDOWS\Sysnative\drivers\mrxsmb10.sys
2016-03-28 18:21:23	91D3F2A6253EF83EFBD7903028F58C4D	118624	----a-w-	C:\WINDOWS\Sysnative\drivers\tdx.sys
2016-03-28 18:21:11	70148EFA9A562E7185B75BBE7D376BF7	578912	----a-w-	C:\WINDOWS\Sysnative\drivers\afd.sys
2016-03-28 18:21:11	58BFFEF692A47FCE3FAAEDBC8F3DCBBB	2152288	----a-w-	C:\WINDOWS\Sysnative\drivers\ntfs.sys
2016-03-28 18:21:10	0B3B0C1D86050355676640488FA897D3	430944	----a-w-	C:\WINDOWS\Sysnative\drivers\mrxsmb.sys
2016-03-28 18:21:04	EDDB0D726DBECDFC1DBCC6DB464E5A13	146272	----a-w-	C:\WINDOWS\Sysnative\drivers\appid.sys
2016-03-28 18:21:04	E3C82823B22463BC38AA4F8ADA852624	104960	----a-w-	C:\WINDOWS\Sysnative\drivers\rasl2tp.sys
2016-03-28 18:21:04	DBBACE77DDE8CCFD85B37B114965C385	147968	----a-w-	C:\WINDOWS\Sysnative\drivers\rmcast.sys
2016-03-28 18:21:04	A4411C522D41707D5BCA817A5BB9E30B	114688	----a-w-	C:\WINDOWS\Sysnative\drivers\bridge.sys
2016-03-28 18:21:01	F45665E77D11F3C1552EDBEAD1559DC8	1997152	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys
2016-03-28 18:21:01	EF536C54AB9281FDC4E83B07279FCFC4	35680	----a-w-	C:\WINDOWS\Sysnative\drivers\wimmount.sys
2016-03-28 18:21:01	BF6CA7EA5ECD6CF72D3D76652A9B8280	144384	----a-w-	C:\WINDOWS\Sysnative\drivers\mrxdav.sys
2016-03-28 18:21:01	A1105260EEEE3DBD8D38FD054B22BD00	604928	----a-w-	C:\WINDOWS\Sysnative\drivers\cng.sys
2016-03-28 18:21:01	7D8B9214692C4D0F1646215D9984E19A	161632	----a-w-	C:\WINDOWS\Sysnative\drivers\ksecpkg.sys
2016-03-28 18:21:01	64D4F5DE44B64B8284BADE5819B5195A	394080	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgmms1.sys
2016-03-28 18:21:01	33190E86460C4FF7382848187463DC28	576864	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgmms2.sys
2016-03-28 18:21:01	318E816717431D3C23DC82779900C744	1089880	----a-w-	C:\WINDOWS\Sysnative\drivers\http.sys
2016-03-28 18:20:56	F279536122B83FD0D8E158AA753E1B7C	238592	----a-w-	C:\WINDOWS\Sysnative\drivers\xboxgip.sys
2016-03-28 18:20:56	F259A45D6B555B14CC8365AA6BC8DC20	67072	----a-w-	C:\WINDOWS\Sysnative\drivers\usbser.sys
2016-03-28 18:20:56	DE6D7DC78D956928F59F7415A0F41E13	95072	----a-w-	C:\WINDOWS\Sysnative\drivers\sdstor.sys
2016-03-28 18:20:56	DBACD4E4FE191D0CE7C624ACA389535E	29696	----a-w-	C:\WINDOWS\Sysnative\drivers\xinputhid.sys
2016-03-28 18:20:56	CEFF59649E90987D263D96078724A54A	954368	----a-w-	C:\WINDOWS\Sysnative\drivers\bthport.sys
2016-03-28 18:20:56	C24C27FDF93B85A4EFCF25F830253AA2	117248	----a-w-	C:\WINDOWS\Sysnative\drivers\capimg.sys
2016-03-28 18:20:56	B7E1CAA9429E4C3E7E01CB35B97E1536	534368	----a-w-	C:\WINDOWS\Sysnative\drivers\USBHUB3.SYS
2016-03-28 18:20:56	8949F77132A4F8F3BA17C6727099F002	127840	----a-w-	C:\WINDOWS\Sysnative\drivers\USBSTOR.SYS
2016-03-28 18:20:56	469441BAE3FF8A16826FC62C51EF5E18	563552	----a-w-	C:\WINDOWS\Sysnative\drivers\acpi.sys
2016-03-28 18:20:56	0D279373091AA1BBEEE958AAF02B5EDF	84992	----a-w-	C:\WINDOWS\Sysnative\drivers\BTHUSB.SYS
2016-03-28 18:03:59	F871CE85AF64D81A9CB6C361CF797144	185184	----a-w-	C:\WINDOWS\Sysnative\drivers\dumpsd.sys
2016-03-28 18:03:59	70165A0A2653FB8AFDE3D85000727F29	277856	----a-w-	C:\WINDOWS\Sysnative\drivers\sdbus.sys
2016-03-28 17:35:54	E5C146B89101F7C0543DD3E07CE05470	32931716	----a-w-	C:\WINDOWS\Sysnative\drivers\rtkhdasetting.zip
2016-03-14 19:47:54	6F477FB2256293B976A71ADCC38A8FDA	266512	----a-w-	C:\WINDOWS\Sysnative\drivers\ibtusb.sys
2016-03-08 11:57:29	D41D8CD98F00B204E9800998ECF8427E	0	---ha-w-	C:\WINDOWS\Sysnative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
====== C:\WINDOWS\Tasks ======
2016-03-16 10:14:12	9ED3472221F98263A52B1B36921248A3	2954	----a-w-	C:\WINDOWS\Sysnative\Tasks\Adobe Acrobat Update Task
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2016-04-03 09:26:16	--------	d-----w-	C:\Program Files\Speccy
2016-03-28 18:04:51	--------	d-----w-	C:\Program Files\Reference Assemblies
2016-03-28 18:04:51	--------	d-----w-	C:\Program Files\MSBuild
2016-03-28 17:35:56	--------	d-----w-	C:\Program Files\Elantech
2016-03-28 17:35:30	--------	d-----w-	C:\Program Files\Realtek
2016-03-28 17:34:41	--------	d-----w-	C:\Program Files\Intel
2016-03-25 12:30:08	--------	d-----w-	C:\Program Files\Common Files\EPSON
2016-03-25 12:23:48	--------	d-----w-	C:\Program Files\EpsonNet
2016-03-25 11:31:30	--------	d-----w-	C:\Program Files\Common Files\AV
2016-03-24 10:26:09	--------	d-----w-	C:\Program Files\TrueKey
======= C:\PROGRA~2 =====
2016-03-28 18:04:51	--------	d-----w-	C:\PROGRA~2\Reference Assemblies
2016-03-28 18:04:51	--------	d-----w-	C:\PROGRA~2\MSBuild
2016-03-28 17:34:35	--------	d-----w-	C:\PROGRA~2\COMMON~1\Intel
2016-03-25 12:24:12	--------	d-----w-	C:\PROGRA~2\Epson Software
2016-03-25 12:23:37	--------	d-----w-	C:\PROGRA~2\COMMON~1\EPSON
2016-03-25 12:22:55	--------	d-----w-	C:\PROGRA~2\epson
2016-03-25 11:40:35	--------	d-----w-	C:\PROGRA~2\Web Publish
2016-03-25 11:38:42	--------	d-----w-	C:\PROGRA~2\COMMON~1\Broderbund
2016-03-25 11:38:41	--------	d-----w-	C:\PROGRA~2\Broderbund
2016-03-25 11:38:08	--------	d-----w-	C:\PROGRA~2\COMMON~1\InstallShield
2016-03-16 10:13:43	--------	d-----w-	C:\PROGRA~2\COMMON~1\Adobe
2016-03-16 10:13:43	--------	d-----w-	C:\PROGRA~2\Adobe
======= C: =====
2016-03-16 10:15:30	A6799D0F42122C0D1E28655C10DB2707	30	----a-w-	C:\AVScanner.ini
====== C:\Users\anjav\AppData\Roaming ======
2016-04-03 12:21:44	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\PnrpSqm
2016-04-03 11:23:14	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\DataSharing
2016-03-28 18:07:17	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft
2016-03-28 17:55:22	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Packages
2016-03-28 17:50:37	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Intel
2016-03-28 17:49:54	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\TrueKey
2016-03-28 17:49:17	--------	d-----w-	C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft
2016-03-28 17:49:11	--------	d-----w-	C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\AvgSetupLog
2016-03-28 17:49:01	--------	d-----w-	C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Avg
2016-03-28 17:47:43	--------	d-----w-	C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Avg
2016-03-28 17:45:27	--------	d-----w-	C:\Users\Default\AppData\Local\Host App Service
2016-03-28 17:45:27	--------	d-----w-	C:\Users\Default User\AppData\Local\Host App Service
2016-03-28 17:39:15	--------	d-s---r-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-03-28 17:39:15	--------	d-----w-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-03-28 17:39:15	--------	d-----w-	C:\Users\anjav\AppData\Roaming
2016-03-28 17:39:15	--------	d-----w-	C:\Users\anjav\AppData\Local\Temp
2016-03-28 17:39:15	--------	d-----w-	C:\Users\anjav\AppData\Local\Microsoft
2016-03-28 17:39:15	--------	d-----w-	C:\Users\anjav\AppData\Local
2016-03-28 17:39:15	--------	d-----r-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-03-28 17:39:15	--------	d-----r-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-03-28 17:39:15	--------	d-----r-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-03-28 17:39:15	--------	d-----r-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-03-28 17:29:25	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\FontCache
2016-03-28 17:28:51	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\AppData\Roaming
2016-03-28 17:28:51	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp
2016-03-28 17:28:44	--------	d-----w-	C:\WINDOWS\serviceprofiles\networkservice\AppData\Roaming
2016-03-28 17:28:44	--------	d-----w-	C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp
2016-03-28 17:28:43	--------	d-----w-	C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Microsoft
2016-03-28 17:28:43	--------	d-----w-	C:\WINDOWS\serviceprofiles\networkservice\AppData\Local
2016-03-25 11:40:36	--------	d-----w-	C:\Users\anjav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer
2016-03-25 11:34:53	--------	d-----w-	C:\Users\anjav\AppData\Local\tkdata
2016-03-25 11:34:53	--------	d-----w-	C:\Users\anjav\AppData\Local\CEF
2016-03-16 10:12:53	--------	d-----w-	C:\Users\anjav\AppData\Local\Adobe
====== C:\Users\anjav ======
2016-04-03 12:58:12	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\anjav\Downloads\RSITx64.exe
2016-04-03 12:16:24	D41D8CD98F00B204E9800998ECF8427E	0	----a-w-	C:\Users\anjav\TASKKILL
2016-04-03 09:23:11	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\Users\anjav\Downloads\spsetup129.exe
2016-03-28 18:02:48	6FC234AD3752E1267B34FB12BCD6718B	20	--sh--w-	C:\Users\anjav\ntuser.ini
2016-03-28 17:45:27	--------	d-----w-	C:\Users\Default\Roaming
2016-03-28 17:39:15	--------	d--h--w-	C:\Users\anjav\AppData
2016-03-28 17:35:52	D41D8CD98F00B204E9800998ECF8427E	0	---ha-w-	C:\ProgramData\DP45977C.lfl
2016-03-28 17:29:31	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\winhttp
2016-03-28 17:28:51	--------	d-----w-	C:\WINDOWS\serviceprofiles\Localservice\Saved Games
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Videos
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Pictures
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Music
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Links
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Favorites
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Downloads
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Documents
2016-03-28 17:28:51	--------	d-----r-	C:\WINDOWS\serviceprofiles\Localservice\Desktop
2016-03-28 17:28:44	--------	d-----w-	C:\WINDOWS\serviceprofiles\networkservice\Saved Games
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Videos
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Pictures
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Music
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Links
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Favorites
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Downloads
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Documents
2016-03-28 17:28:44	--------	d-----r-	C:\WINDOWS\serviceprofiles\networkservice\Desktop
2016-03-28 17:28:43	--------	d--h--w-	C:\WINDOWS\serviceprofiles\networkservice\AppData
2016-03-25 12:24:13	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2016-03-25 12:23:24	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-03-25 12:21:13	--------	d-----w-	C:\ProgramData\EPSON
2016-03-25 11:40:51	--------	d-----w-	C:\ProgramData\Broderbund Software
2016-03-25 11:38:53	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintMaster
2016-03-25 11:35:11	--------	d-----w-	C:\ProgramData\TrueKey
2016-03-16 10:13:24	--------	d-----w-	C:\ProgramData\Adobe

====== C: exe-files ==
2016-04-04 08:29:49	752C6BA470D9E233B30B16262901E206	104	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IN9Z9BJ.exe
2016-04-04 08:28:45	7EA0260488F304D68067A50B33A23AC2	1309184	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RN9Z9BJ.exe
2016-04-03 13:30:36	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\9531C549-B657-4D08-B588-3D7068014294\DismHost.exe
2016-04-03 13:14:41	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\55DB97A8-843F-495D-A9EE-6FCCE061FF90\DismHost.exe
2016-04-03 13:10:07	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\E88F08C8-6FD4-4946-85DD-65E1E39FA5EE\DismHost.exe
2016-04-03 12:59:07	A067DAC4ECDFE630300DC4ABEEEDF1F7	110	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$I8J3USF.exe
2016-04-03 12:59:05	4784E871AD1E3386A039E00DCE96715B	110	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IGYYJES.exe
2016-04-03 12:58:35	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$R8J3USF.exe
2016-04-03 12:58:19	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RGYYJES.exe
2016-04-03 12:58:12	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\anjav\Downloads\RSITx64.exe
2016-04-03 11:57:46	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\1F744DA5-ADAA-4CE0-A868-01D1C0F8F2D7\DismHost.exe
2016-04-03 11:52:22	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\A9866A31-D3B2-4803-92DD-691FFB0803F7\DismHost.exe
2016-04-03 11:47:49	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\9A2C3EA8-A002-4174-9E96-76CAF3B086CE\DismHost.exe
2016-04-03 11:39:16	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\15390582-CB02-4D12-8978-4C7CFBC585DF\DismHost.exe
2016-04-03 11:29:24	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\anjav\AppData\Local\Temp\82B4DAF5-2712-4D1C-9FE1-76D1EE6C7727\DismHost.exe
2016-04-03 09:25:41	F0DB85ED89098F5E86C26F03957BC6F8	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$I20IFX6.exe
2016-04-03 09:25:41	949AB4C555B69E7D4F2F7E8C7E3FF486	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$I3HF6F0.exe
2016-04-03 09:25:41	7ADBE2276DC474EC6E0EC88E128085B1	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$ILU7WDA.exe
2016-04-03 09:25:41	7396541EF55B753916A3AC28658EAB21	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IBINWZJ.exe
2016-04-03 09:25:41	6B9AE0267E57CCB0D80AB59D73EE33D9	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IKSO3VJ.exe
2016-04-03 09:25:41	45AE0DE35DAE31EC3753539D1010929E	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IGPNB5E.exe
2016-04-03 09:25:41	18B357B74EB3C5985C966033FB371852	116	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$IV93DUA.exe
2016-04-03 09:24:52	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RV93DUA.exe
2016-04-03 09:24:51	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$R20IFX6.exe
2016-04-03 09:23:33	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RKSO3VJ.exe
2016-04-03 09:23:33	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RBINWZJ.exe
2016-04-03 09:23:32	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RGPNB5E.exe
2016-04-03 09:23:32	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$R3HF6F0.exe
2016-04-03 09:23:18	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-3612907582-3073615944-3246669413-1001\$RLU7WDA.exe
2016-04-03 09:23:11	FF70EB133BE86B9F9EB18E274DAA6B6C	5111240	----a-w-	C:\Users\anjav\Downloads\spsetup129.exe
2016-04-02 11:17:36	ACDDDCD662CF23936178DCDCE4473D18	3225688	----a-w-	C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\49.0.2623.110\49.0.2623.110_49.0.2623.87_chrome_updater.exe
2016-04-02 10:51:03	EBAC147284CCCE809DB313D28329F888	5959696	----a-w-	C:\ProgramData\Avg\Setup\av\avgmfapx.exe
2016-04-02 10:51:03	0A672971E10E0D114F66AB0593A0B7C9	71592	----a-w-	C:\ProgramData\Avg\Setup\av\avguirux.exe
2016-03-28 18:21:26	09D8EBC01776C2D117918993EDDC19B2	1474560	----a-w-	C:\Program Files\Windows Media Player\wmpnetwk.exe
2016-03-28 18:21:24	E25912F0DA86EF6D0812ED848BDA60C0	797024	----a-w-	C:\Windows\Boot\PCAT\memtest.exe
2016-03-28 18:21:11	E7CD04555F47651B79A50DBA6148019C	820416	----a-w-	C:\Program Files (x86)\Internet Explorer\iexplore.exe
2016-03-28 18:21:11	05CB7AA244D84ED3BB43FDA10413E2F8	815808	----a-w-	C:\Program Files\Internet Explorer\iexplore.exe
2016-03-28 18:21:04	95D730526EF81792CD6848D8D10FAA1C	4502352	----a-w-	C:\Windows\explorer.exe
2016-03-28 18:21:04	8F26CB57B225F046E49A4D8003DAE920	83704	----a-w-	C:\Windows\ImmersiveControlPanel\SystemSettings.exe
=== C: other files ==
2016-04-04 08:21:51	FF70780AB49FC755AC280BB52DC09ABE	297	----a-w-	C:\ProgramData\OEM\Fub Tracking Program\Upload\_1459765311.zip
2016-03-28 18:21:25	1A490555FD330CA2764D89191177C867	285696	----a-w-	C:\Windows\System32\drivers\mrxsmb10.sys
2016-03-28 18:21:23	91D3F2A6253EF83EFBD7903028F58C4D	118624	----a-w-	C:\Windows\System32\drivers\tdx.sys
2016-03-28 18:21:11	70148EFA9A562E7185B75BBE7D376BF7	578912	----a-w-	C:\Windows\System32\drivers\afd.sys
2016-03-28 18:21:11	58BFFEF692A47FCE3FAAEDBC8F3DCBBB	2152288	----a-w-	C:\Windows\System32\drivers\ntfs.sys
2016-03-28 18:21:10	0B3B0C1D86050355676640488FA897D3	430944	----a-w-	C:\Windows\System32\drivers\mrxsmb.sys
2016-03-28 18:21:04	EDDB0D726DBECDFC1DBCC6DB464E5A13	146272	----a-w-	C:\Windows\System32\drivers\appid.sys
2016-03-28 18:21:04	E3C82823B22463BC38AA4F8ADA852624	104960	----a-w-	C:\Windows\System32\drivers\rasl2tp.sys
2016-03-28 18:21:04	DBBACE77DDE8CCFD85B37B114965C385	147968	----a-w-	C:\Windows\System32\drivers\rmcast.sys
2016-03-28 18:21:04	A4411C522D41707D5BCA817A5BB9E30B	114688	----a-w-	C:\Windows\System32\drivers\bridge.sys
2016-03-28 18:21:01	F45665E77D11F3C1552EDBEAD1559DC8	1997152	----a-w-	C:\Windows\System32\drivers\dxgkrnl.sys
2016-03-28 18:21:01	EF536C54AB9281FDC4E83B07279FCFC4	35680	----a-w-	C:\Windows\System32\drivers\wimmount.sys
2016-03-28 18:21:01	BF6CA7EA5ECD6CF72D3D76652A9B8280	144384	----a-w-	C:\Windows\System32\drivers\mrxdav.sys
2016-03-28 18:21:01	A1105260EEEE3DBD8D38FD054B22BD00	604928	----a-w-	C:\Windows\System32\drivers\cng.sys
2016-03-28 18:21:01	7D8B9214692C4D0F1646215D9984E19A	161632	----a-w-	C:\Windows\System32\drivers\ksecpkg.sys
2016-03-28 18:21:01	7C6B51E0233814D401905289AFD27BC5	1390592	----a-w-	C:\Windows\System32\win32kbase.sys
2016-03-28 18:21:01	64D4F5DE44B64B8284BADE5819B5195A	394080	----a-w-	C:\Windows\System32\drivers\dxgmms1.sys
2016-03-28 18:21:01	5B7B6AF7E94E972DCE4BF892ABD466B6	115200	----a-w-	C:\Windows\System32\win32k.sys
2016-03-28 18:21:01	33190E86460C4FF7382848187463DC28	576864	----a-w-	C:\Windows\System32\drivers\dxgmms2.sys
2016-03-28 18:21:01	32509061F29DA432B62336A4462ADEBF	3593216	----a-w-	C:\Windows\System32\win32kfull.sys
2016-03-28 18:21:01	318E816717431D3C23DC82779900C744	1089880	----a-w-	C:\Windows\System32\drivers\http.sys
2016-03-28 18:20:56	F279536122B83FD0D8E158AA753E1B7C	238592	----a-w-	C:\Windows\System32\drivers\xboxgip.sys
2016-03-28 18:20:56	F259A45D6B555B14CC8365AA6BC8DC20	67072	----a-w-	C:\Windows\System32\drivers\usbser.sys
2016-03-28 18:20:56	DE6D7DC78D956928F59F7415A0F41E13	95072	----a-w-	C:\Windows\System32\drivers\sdstor.sys
2016-03-28 18:20:56	DBACD4E4FE191D0CE7C624ACA389535E	29696	----a-w-	C:\Windows\System32\drivers\xinputhid.sys
2016-03-28 18:20:56	CEFF59649E90987D263D96078724A54A	954368	----a-w-	C:\Windows\System32\drivers\bthport.sys
2016-03-28 18:20:56	C24C27FDF93B85A4EFCF25F830253AA2	117248	----a-w-	C:\Windows\System32\drivers\capimg.sys
2016-03-28 18:20:56	B7E1CAA9429E4C3E7E01CB35B97E1536	534368	----a-w-	C:\Windows\System32\drivers\USBHUB3.SYS
2016-03-28 18:20:56	8949F77132A4F8F3BA17C6727099F002	127840	----a-w-	C:\Windows\System32\drivers\USBSTOR.SYS
2016-03-28 18:20:56	469441BAE3FF8A16826FC62C51EF5E18	563552	----a-w-	C:\Windows\System32\drivers\acpi.sys
2016-03-28 18:20:56	0D279373091AA1BBEEE958AAF02B5EDF	84992	----a-w-	C:\Windows\System32\drivers\BTHUSB.SYS
2016-03-28 18:13:10	F7D4D187D8F3490C11F6E4D7AED2B72D	56756	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnport.vbs
2016-03-28 18:13:10	C36D1285B62C6739B465A285148E4000	51462	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnqctl.vbs
2016-03-28 18:13:10	AB328741766A47CACE8978A24260C51A	7418	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\pubprn.vbs
2016-03-28 18:13:10	96289191763ACF8E4AB69F622262B15F	51312	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prndrvr.vbs
2016-03-28 18:13:10	816213C95FC12D011BF789213E1CC973	81048	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnmngr.vbs
2016-03-28 18:13:10	31D7079AF27F244E6AA5B7A7C8FE75F3	105940	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prncnfg.vbs
2016-03-28 18:13:10	03E9BADC32A52E3CB44E4277803CFFF9	69882	----a-w-	C:\Windows\SysWOW64\Printing_Admin_Scripts\en-US\prnjobs.vbs
2016-03-28 18:13:04	F7D4D187D8F3490C11F6E4D7AED2B72D	56756	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prnport.vbs
2016-03-28 18:13:04	C36D1285B62C6739B465A285148E4000	51462	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prnqctl.vbs
2016-03-28 18:13:04	AB328741766A47CACE8978A24260C51A	7418	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\pubprn.vbs
2016-03-28 18:13:04	96289191763ACF8E4AB69F622262B15F	51312	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prndrvr.vbs
2016-03-28 18:13:04	816213C95FC12D011BF789213E1CC973	81048	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prnmngr.vbs
2016-03-28 18:13:04	31D7079AF27F244E6AA5B7A7C8FE75F3	105940	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prncnfg.vbs
2016-03-28 18:13:04	03E9BADC32A52E3CB44E4277803CFFF9	69882	----a-w-	C:\Windows\System32\Printing_Admin_Scripts\en-US\prnjobs.vbs
2016-03-28 18:03:59	F871CE85AF64D81A9CB6C361CF797144	185184	----a-w-	C:\Windows\System32\drivers\dumpsd.sys
2016-03-28 18:03:59	70165A0A2653FB8AFDE3D85000727F29	277856	----a-w-	C:\Windows\System32\drivers\sdbus.sys
2016-03-28 17:35:54	E5C146B89101F7C0543DD3E07CE05470	32931716	----a-w-	C:\Windows\System32\drivers\rtkhdasetting.zip
2016-03-28 17:35:23	5C5A797761421CF9B72087F3BC8A5259	180	----a-w-	C:\Windows\System32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-28 17:35:23	1373F6562D5E4C715D5D3583E350093E	200	----a-w-	C:\Windows\System32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-21-3612907582-3073615944-3246669413-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIJAE.EXE /EPT EPLTarget\P0000000000000000 /M XP-800 Series"

[HKEY_USERS\S-1-5-21-3612907582-3073615944-3246669413-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\anjav\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\anjav\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"abDocsDllLoader"="C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe"
"AvgUi"="C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe /lps=fmw"
"AVG_UI"="C:\Program Files (x86)\AVG\Av\avuirunnerx.exe C:\Program Files (x86)\AVG\Av\avgui.exe"
"Corel Photo Downloader"="C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe -startup"
"EEventManager"="C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"FUFAXRCV"=""C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe""
"FUFAXSTM"=""C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe""

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIJAE.EXE /EPT EPLTarget\P0000000000000000 /M XP-800 Series"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\anjav\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\anjav\AppData\Local\Microsoft\OneDrive\17.3.6302.0225_1\amd64"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"
"Logitech Download Assistant"="C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch"
"Classic Start Menu"="C:\Program Files\Classic Shell\ClassicStartMenu.exe -autorun"
"Corel Photo Downloader"="C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe -startup"

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05-02-2016 17:12]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:6C:\ProgramC:FilesC:x86\Google\Update\GoogleUpdate.exe []
C:\WINDOWS\tasks\WpsNotifyTask_Administrator.job --a-------- C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsnotify.exe [23-08-2015 06:28]
C:\WINDOWS\tasks\WpsUpdateTask_Administrator.job --a-------- C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdate.exe [23-08-2015 06:28]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\abDocsDllLoader" [C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe]
"C:\WINDOWS\SysNative\tasks\ACC" [C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe]
"C:\WINDOWS\SysNative\tasks\ACCAgent" [C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe]
"C:\WINDOWS\SysNative\tasks\ACCBackgroundApplication" [C:\Program Files (x86)\Acer\Care Center\ACCStd.exe]
"C:\WINDOWS\SysNative\tasks\AcerCloud" [C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe]
"C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\WINDOWS\SysNative\tasks\App Explorer" [%LOCALAPPDATA%\Host App Service\Engine\HostAppServiceUpdater.exe]
"C:\WINDOWS\SysNative\tasks\BacKGroundAgent" [C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe]
"C:\WINDOWS\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\WINDOWS\SysNative\tasks\CreateExplorerShellUnelevatedTask" [C:\Windows\explorer.exe]
"C:\WINDOWS\SysNative\tasks\FUBTrackingByPLD" ["C:\OEM\Preload\FubTracking\FubTracking.exe"]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\Power Button" ["C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe"]
"C:\WINDOWS\SysNative\tasks\Power Management" ["C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe"]
"C:\WINDOWS\SysNative\tasks\Quick Access" ["C:\Program Files\Acer\Acer Quick Access\QALauncher.exe"]
"C:\WINDOWS\SysNative\tasks\UbtFrameworkService" ["C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe"]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{9040A449-B978-440D-B365-999C3FBD5497}" [C:\Windows\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\WpsNotifyTask_Administrator" [C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsnotify.exe]
"C:\WINDOWS\SysNative\tasks\WpsUpdateTask_Administrator" [C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdate.exe]

==== Firefox Extensions ======================

ProfilePath: C:\Users\anjav\AppData\Roaming\Mozilla\Firefox\Profiles\ave67v2u.default
- Nederlands NL Language Pack - %ProfilePath%\extensions\langpack-nl@firefox.mozilla.org
- Traditional Chinese zh-TW Language Pack - %ProfilePath%\extensions\langpack-zh-TW@firefox.mozilla.org

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================


==== Chromium Look ======================


Google Slides - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek
Google Docs - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Sheets - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap
Google Docs Offline - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi
Chrome Web Store Payments - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - anjav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Fix ======================

C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage deleted successfully
C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage-journal deleted successfully
C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{F0C73FE1-31BF-4F51-BCBE-E2A7CC13ED95}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\SearchScopes\{F0C73FE1-31BF-4F51-BCBE-E2A7CC13ED95} - http://www.bing.com/search?q={searchTerms}&form=PRACE1&src=IE11TR&pc=ACTE
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{F0C73FE1-31BF-4F51-BCBE-E2A7CC13ED95}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{F0C73FE1-31BF-4F51-BCBE-E2A7CC13ED95} - http://www.bing.com/search?q={searchTerms}&form=PRACE1&src=IE11TR&pc=ACTE
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
HKCU\SearchScopes\{F0C73FE1-31BF-4F51-BCBE-E2A7CC13ED95} - No_Url_Value

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\anjav\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\anjav\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\anjav\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\anjav\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Default User\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\anjav\AppData\Local\Mozilla\Firefox\Profiles\ave67v2u.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\anjav\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=55 folders=19 18142800 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\anjav\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\SysWOW64\OneDriveSetup.exe"  not deleted

==== EOF on ma 04-04-2016 at 10:58:04,53 ======================