Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by Deklerck on vr 16-09-2016 at 21:45:23,22. Microsoft Windows 10 Home 10.0.10586 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Deklerck\Downloads\zoek (2).exe [Scan all users] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2015-08-08-154054.log 58385 bytes C:\zoek-results2016-09-13-172328.log 17788 bytes C:\zoek-results2016-09-15-181901.log 633 bytes C:\zoek-results2016-09-15-190302.log 103014 bytes ==== Empty Folders Check ====================== C:\Users\Deklerck\AppData\Local\ActiveSync deleted successfully C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== 2016-09-14 09:32:09 02ADAC7A8D203C70BC0FBB34836DD4E6 4515256 ----a-w- C:\WINDOWS\explorer.exe ====== C:\Users\Deklerck\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\WINDOWS\SysWOW64 ===== 2016-09-14 09:35:04 D45F54B990BDCCB9876FAD1CDA8A9121 19350016 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll 2016-09-14 09:35:01 EE91D0D3F048C6E1EC19EC19134EE295 2050048 ----a-w- C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-09-14 09:35:01 D8178F03D49D483A21B4D318C0F476F8 687616 ----a-w- C:\WINDOWS\SysWOW64\msfeeds.dll 2016-09-14 09:35:01 2A1378FF4DD8F98C112642DD1259E072 335872 ----a-w- C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-09-14 09:34:59 A49BE5C98028DC25A531B5B50E3FF429 12134400 ----a-w- C:\WINDOWS\SysWOW64\ieframe.dll 2016-09-14 09:34:57 402ADE11479782DAB3125A8860F8E0FE 5659136 ----a-w- C:\WINDOWS\SysWOW64\Chakra.dll 2016-09-14 09:34:55 0DED8D990F3C09D1BC36790508226DB9 3663360 ----a-w- C:\WINDOWS\SysWOW64\jscript9.dll 2016-09-14 09:34:54 F904A35F8A70B468E6ECAC86059E5273 18676224 ----a-w- C:\WINDOWS\SysWOW64\edgehtml.dll 2016-09-14 09:34:52 2B097BAA2A5F768BB16A26CAE357C991 2604032 ----a-w- C:\WINDOWS\SysWOW64\CertEnroll.dll 2016-09-14 09:34:52 1BF143C52D3A6EAD2009E5106D2D31C1 2102272 ----a-w- C:\WINDOWS\SysWOW64\xpsservices.dll 2016-09-14 09:34:51 44D76582FF72CC8E599CA8DA4797FA3F 4412928 ----a-w- C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2016-09-14 09:34:51 0059AAF3002C5C37F24D260539723E4B 2217984 ----a-w- C:\WINDOWS\SysWOW64\Wpc.dll 2016-09-14 09:34:49 8DCB1CB0E41C277EFEA70A72103668DB 1194496 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll 2016-09-14 09:34:49 431318DA0E7653576197DE7270FD2A82 6743040 ----a-w- C:\WINDOWS\SysWOW64\mstscax.dll 2016-09-14 09:34:47 F53148BEB5CAFF1FE7D225E7061E6C1A 3065344 ----a-w- C:\WINDOWS\SysWOW64\mstsc.exe 2016-09-14 09:34:47 104773FF056B24C828BA6EDF9C8ED39C 1123328 ----a-w- C:\WINDOWS\SysWOW64\XpsPrint.dll 2016-09-14 09:34:46 BD8DE539CF360AE57AFDEE2EDDA37948 3671040 ----a-w- C:\WINDOWS\SysWOW64\msi.dll 2016-09-14 09:34:46 A9FFAD104A2ABADAC9F09D76242E5DA1 1166848 ----a-w- C:\WINDOWS\SysWOW64\Pimstore.dll 2016-09-14 09:34:46 6ADF386A1D57B7F76F3E5686D10F1C7B 769536 ----a-w- C:\WINDOWS\SysWOW64\ContactApis.dll 2016-09-14 09:34:46 5E7F6409850436A1BE7B6CA90947FCA2 980480 ----a-w- C:\WINDOWS\SysWOW64\winipcsecproc.dll 2016-09-14 09:34:44 F17617DB69B5FD2419A305AD8864201B 1526272 ----a-w- C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-09-14 09:34:44 86D0B0BD5F59401DD5D5BD009AB52945 963072 ----a-w- C:\WINDOWS\SysWOW64\wsp_health.dll 2016-09-14 09:34:43 CA051FF9288A613E2E5F043484F6D390 581632 ----a-w- C:\WINDOWS\SysWOW64\apphelp.dll 2016-09-14 09:34:43 84584FF4B2A0098B46B833938FC59893 294752 ----a-w- C:\WINDOWS\SysWOW64\msv1_0.dll 2016-09-14 09:34:43 01C60BC4DACA1C15C1FF28ECAFAFE7DC 416256 ----a-w- C:\WINDOWS\SysWOW64\hnetcfg.dll 2016-09-14 09:34:42 C3BF3002DF3AD149AC9D6A38D055B423 1508352 ----a-w- C:\WINDOWS\SysWOW64\winmsipc.dll 2016-09-14 09:34:42 7339C3C11CF2FA0ACCB994AE6DBB8416 552960 ----a-w- C:\WINDOWS\SysWOW64\AppointmentApis.dll 2016-09-14 09:34:40 EF4E834AAE8EA920078CE06D572412F5 511312 ----a-w- C:\WINDOWS\SysWOW64\mf.dll 2016-09-14 09:34:40 66EA2B8BDD0DCF4D06DA6E1C45B56C20 496360 ----a-w- C:\WINDOWS\SysWOW64\wmdrmdev.dll 2016-09-14 09:34:39 97C29523D3237EC759BD56E6B82F4740 1349632 ----a-w- C:\WINDOWS\SysWOW64\winmde.dll 2016-09-14 09:34:38 ABCF62B17F6E279EA449661063374D22 1072128 ----a-w- C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2016-09-14 09:34:38 469C83D8762300901ECE8C4E92B30DA8 854528 ----a-w- C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2016-09-14 09:34:37 EB7915F4475F3B0AE10745D0D2E18A10 785920 ----a-w- C:\WINDOWS\SysWOW64\mprddm.dll 2016-09-14 09:34:36 352E3682471DA93612D3FD9D92F010F5 569744 ----a-w- C:\WINDOWS\SysWOW64\SHCore.dll 2016-09-14 09:34:35 98EB75FC9C691F1E5FB0E57DFA52B7CB 393216 ----a-w- C:\WINDOWS\SysWOW64\wbemcomn.dll 2016-09-14 09:34:35 44EA0607983FD67A64D022DCA4E06F06 835072 ----a-w- C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2016-09-14 09:34:35 13FC0B13E3C45CA8FB17B97A424D1A6B 592384 ----a-w- C:\WINDOWS\SysWOW64\Windows.Web.dll 2016-09-14 09:34:34 8CCB8E9893224BBA1548E2930008CA7E 1276928 ----a-w- C:\WINDOWS\SysWOW64\wsp_fs.dll 2016-09-14 09:34:34 7B32841C00E67231CE30356DE42660F3 1174008 ----a-w- C:\WINDOWS\SysWOW64\msctf.dll 2016-09-14 09:34:33 A33E65163331CFF8BEE138F25DCB620E 753664 ----a-w- C:\WINDOWS\SysWOW64\msctfuimanager.dll 2016-09-14 09:34:33 444AADEC6044C2A7ADA34F8C9566DF61 521728 ----a-w- C:\WINDOWS\SysWOW64\wmdrmsdk.dll 2016-09-14 09:34:32 EF1F7906A81A73DB00F8729C8D28B402 94720 ----a-w- C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2016-09-14 09:34:32 35AF7F248CE20BBD1772ECE2D0B83993 329216 ----a-w- C:\WINDOWS\SysWOW64\upnphost.dll 2016-09-14 09:34:30 8C885A2683849C8AACA596CA34BC31DA 572272 ----a-w- C:\WINDOWS\SysWOW64\taskschd.dll 2016-09-14 09:34:30 6B860145BDDAEEB28E38C6459D10AD86 314880 ----a-w- C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2016-09-14 09:34:29 5E027608FDFE1C456D5AA5FE41205434 780800 ----a-w- C:\WINDOWS\SysWOW64\tdh.dll 2016-09-14 09:34:26 689EACE3D704359ABEFE286479D4DA5D 674816 ----a-w- C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2016-09-14 09:34:25 31A7CB68096DDA81D749460710B61E06 573440 ----a-w- C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2016-09-14 09:34:24 EDD6189A5FA0AE6B399E9C8FD229FC3D 400896 ----a-w- C:\WINDOWS\SysWOW64\winspool.drv 2016-09-14 09:34:24 865710D1926C39C79DE91D46B66F2381 2679808 ----a-w- C:\WINDOWS\SysWOW64\netshell.dll 2016-09-14 09:34:24 630075B02E08BAFADCE73465C8997AE0 3695104 ----a-w- C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2016-09-14 09:34:23 E845BA2D1B648FF14CFE8F8F1188C691 638464 ----a-w- C:\WINDOWS\SysWOW64\Windows.Networking.dll 2016-09-14 09:34:23 20A06AE7898628960C6177919829AE6B 296448 ----a-w- C:\WINDOWS\SysWOW64\sysdm.cpl 2016-09-14 09:34:22 12D552FCD88D10E8468CD5CDC918B705 59904 ----a-w- C:\WINDOWS\SysWOW64\udhisapi.dll 2016-09-14 09:34:21 C3F0BB917D712CD7F667C12DAA5ACE85 284160 ----a-w- C:\WINDOWS\SysWOW64\eappcfg.dll 2016-09-14 09:34:21 C30C0AAD98A50DC834EADAF68F4FE511 230400 ----a-w- C:\WINDOWS\SysWOW64\webcheck.dll 2016-09-14 09:34:21 7A8A2F106151B09E96ABCBDE716F5A69 88576 ----a-w- C:\WINDOWS\SysWOW64\olepro32.dll 2016-09-14 09:34:20 C0FB297DCA6B5E6D6B19226F38C89BCF 256512 ----a-w- C:\WINDOWS\SysWOW64\unimdm.tsp 2016-09-14 09:34:20 4BF5C0202A7B31BF0E805069B096038B 119296 ----a-w- C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll 2016-09-14 09:34:20 2738FEB1231E6D02DD5BB6DB401C2654 35840 ----a-w- C:\WINDOWS\SysWOW64\upnpcont.exe 2016-09-14 09:34:20 0B1AFB644499491A8608E192EDB884D5 290304 ----a-w- C:\WINDOWS\SysWOW64\WmpDui.dll 2016-09-14 09:34:19 B1EEAAA047842CF3355186D92901F81D 242688 ----a-w- C:\WINDOWS\SysWOW64\sti.dll 2016-09-14 09:34:19 31335F733AB251090C53BDDA7A78B143 572928 ----a-w- C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2016-09-14 09:34:16 55891FDCC0EC6E5FDAC19789E4190AD3 986976 ----a-w- C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-09-14 09:34:13 F8E84BF61902A694FEB91B91C752A036 2937384 ----a-w- C:\WINDOWS\SysWOW64\iertutil.dll 2016-09-14 09:34:13 D33FA8D625C3A347017B0B8D4206DD08 2106368 ----a-w- C:\WINDOWS\SysWOW64\storagewmi.dll 2016-09-14 09:34:13 9B5AFFFEEB9D0F324C740E856004DE98 614400 ----a-w- C:\WINDOWS\SysWOW64\winhttp.dll 2016-09-14 09:34:12 130C0D483454C8D729B2462A29F7B576 499712 ----a-w- C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-09-14 09:34:12 07430769D5AB6568C596DAA37EB603A2 2553856 ----a-w- C:\WINDOWS\SysWOW64\wininet.dll 2016-09-14 09:34:11 850BEC996C89538D24729B8894793E1B 334336 ----a-w- C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-09-14 09:34:11 4E36EFC0226C38AA211641749B27333E 2177024 ----a-w- C:\WINDOWS\SysWOW64\WsmSvc.dll 2016-09-14 09:34:11 2CA8B0192E03FC39F0D47574F3F497E0 70656 ----a-w- C:\WINDOWS\SysWOW64\AppCapture.dll 2016-09-14 09:34:10 FED8EFACEE593FC8607549FFB7C582E2 2155008 ----a-w- C:\WINDOWS\SysWOW64\authui.dll 2016-09-14 09:34:10 E4A988EA9CC96639BB25975E9A0FCAB1 1139712 ----a-w- C:\WINDOWS\SysWOW64\vssapi.dll 2016-09-14 09:34:10 B8F891DDDD9398F7236A50A06EA43ED3 2527232 ----a-w- C:\WINDOWS\SysWOW64\mispace.dll 2016-09-14 09:34:10 60595DB9D55DB464C205A2A2DA07D6E5 334848 ----a-w- C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-09-14 09:34:09 CD025A9A7AB48BC8D267AF1E971F4681 1626112 ----a-w- C:\WINDOWS\SysWOW64\dwmcore.dll 2016-09-14 09:34:09 C2DB9475BFBDC16AFE2CB01B83A8C521 1085728 ----a-w- C:\WINDOWS\SysWOW64\webservices.dll 2016-09-14 09:34:08 398DE0A4EF9A2FC7FE76A28228797265 1708032 ----a-w- C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-09-14 09:34:07 EB80010043C25AD37F2056AAAB751D41 2180096 ----a-w- C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-09-14 09:34:07 DB7DF7C9E2F36E076A754C101D09D5CF 1309696 ----a-w- C:\WINDOWS\SysWOW64\wdc.dll 2016-09-14 09:34:06 DE80CA19283DD863FEE0FA6B6AC9525C 337920 ----a-w- C:\WINDOWS\SysWOW64\Geolocation.dll 2016-09-14 09:34:06 6E8CE3CBB0A4B7336BF611D17537EEAE 845568 ----a-w- C:\WINDOWS\SysWOW64\MrmCoreR.dll 2016-09-14 09:34:06 4C2966EFB3D3DCA157F31A79F8AE8783 1497088 ----a-w- C:\WINDOWS\SysWOW64\WMPDMC.exe 2016-09-14 09:34:05 6A1F4CD736E17C60C3820731044CAFDD 503296 ----a-w- C:\WINDOWS\SysWOW64\SettingSync.dll 2016-09-14 09:34:04 F212B706AA24E0B2B28F16C8D622628B 355672 ----a-w- C:\WINDOWS\SysWOW64\netcfgx.dll 2016-09-14 09:34:03 E6C9DE3341BA7E649B63AF11C725D6B5 1502208 ----a-w- C:\WINDOWS\SysWOW64\urlmon.dll 2016-09-14 09:34:03 D49A432A4EAFFB43BCF29309230A5ADF 620176 ----a-w- C:\WINDOWS\SysWOW64\kernel32.dll 2016-09-14 09:34:03 4F68B639F367395E8A56317D331D855C 501760 ----a-w- C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2016-09-14 09:34:03 362ECB58F85819EC8043AD4A85B12104 1249280 ----a-w- C:\WINDOWS\SysWOW64\usercpl.dll 2016-09-14 09:34:03 2AD9C33CF047F906EE389E8F3C065DDF 102912 ----a-w- C:\WINDOWS\SysWOW64\shsetup.dll 2016-09-14 09:34:02 E25C476941A869921C62A3A67339AAD5 708608 ----a-w- C:\WINDOWS\SysWOW64\CPFilters.dll 2016-09-14 09:34:02 D4920B4E190EACB68593D4E423D71EBB 436224 ----a-w- C:\WINDOWS\SysWOW64\mprdim.dll 2016-09-14 09:34:01 D6DB155E125324D49B31CDA40A5696E0 654336 ----a-w- C:\WINDOWS\SysWOW64\winipcsecproc_ssp.dll 2016-09-14 09:34:01 AA5C50CEB5FEE10575BED0B20CF916A6 2195632 ----a-w- C:\WINDOWS\SysWOW64\d3d10warp.dll 2016-09-14 09:34:01 9530F33C4B4AD13D314664B9DB018E97 116216 ----a-w- C:\WINDOWS\SysWOW64\sspicli.dll 2016-09-14 09:34:01 616845DEA13995193A27E92769BDFCF9 501600 ----a-w- C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-09-14 09:34:00 0DFDB28959A7B6B6FDD9B4E87189CFCD 846336 ----a-w- C:\WINDOWS\SysWOW64\rasgcw.dll 2016-09-14 09:33:59 8BEB48FFB51DDFE5D9252ECD73D4CE71 435200 ----a-w- C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll 2016-09-14 09:33:58 4FB8FD984BCC939A951275CACD15C9D8 1448960 ----a-w- C:\WINDOWS\SysWOW64\dui70.dll 2016-09-14 09:33:58 4CF6EEF0D03D43B2437292D496107DF0 1588224 ----a-w- C:\WINDOWS\SysWOW64\msxml3.dll 2016-09-14 09:33:57 DC49F9A272AEB79213469BB9F53B1DD3 879616 ----a-w- C:\WINDOWS\SysWOW64\WebcamUi.dll 2016-09-14 09:33:56 1FBBCD4CAD0C07777FEBE4A168031B1D 442368 ----a-w- C:\WINDOWS\SysWOW64\dlnashext.dll 2016-09-14 09:33:55 F81181E37C3136869E4620E07F37B43D 321024 ----a-w- C:\WINDOWS\SysWOW64\syncutil.dll 2016-09-14 09:33:55 F330D9DEA659DE81D1DB4AC949F35191 199680 ----a-w- C:\WINDOWS\SysWOW64\SyncSettings.dll 2016-09-14 09:33:55 D0A760DB6516239B369A57FF08E701A1 482816 ----a-w- C:\WINDOWS\SysWOW64\duser.dll 2016-09-14 09:33:55 A0C729228E02C8A171D365621059D579 238080 ----a-w- C:\WINDOWS\SysWOW64\WsmWmiPl.dll 2016-09-14 09:33:54 EE9C0741B2D087534D3E6110F78A3808 145408 ----a-w- C:\WINDOWS\SysWOW64\WsmAuto.dll 2016-09-14 09:33:54 D4C6E4E6178EB3E70DCA4223A72E5C70 541184 ----a-w- C:\WINDOWS\SysWOW64\GamePanel.exe 2016-09-14 09:33:54 5CACA0D3DAEC7698C5DF5CF8C0218CD8 450560 ----a-w- C:\WINDOWS\SysWOW64\SyncController.dll 2016-09-14 09:33:53 E94D189AFE82CE311BF4AE4DBD400448 52736 ----a-w- C:\WINDOWS\SysWOW64\vsstrace.dll 2016-09-14 09:33:53 A4105FA42A9B7F59F90E294B70CA7D59 26624 ----a-w- C:\WINDOWS\SysWOW64\WsmAgent.dll 2016-09-14 09:33:53 A321F502D7C2478DFBF93085BCFAE103 38912 ----a-w- C:\WINDOWS\SysWOW64\wsmprovhost.exe 2016-09-14 09:33:53 A04D5CAF99115A9491C4BDF55DC47614 25600 ----a-w- C:\WINDOWS\SysWOW64\odbcconf.dll 2016-09-14 09:33:53 49228AA189B65A13F12DD2C6F358CB09 232448 ----a-w- C:\WINDOWS\SysWOW64\notepad.exe 2016-09-14 09:33:53 218E27FC50DBC4203CB4A1613A2AA076 35328 ----a-w- C:\WINDOWS\SysWOW64\deviceassociation.dll 2016-09-14 09:33:50 EBD4C9D1309C84332947689873EE467B 5205504 ----a-w- C:\WINDOWS\SysWOW64\BingMaps.dll 2016-09-14 09:33:50 C71C029009E7D9D24899721BAFCEDA38 711680 ----a-w- C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-09-14 09:33:50 BB0DFA3D19B471642601EA34D2D5A7A7 784896 ----a-w- C:\WINDOWS\SysWOW64\NMAA.dll 2016-09-14 09:33:50 6E7A2ACCC290BFEC6C4A5FFB6BEBAC5F 800768 ----a-w- C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-09-14 09:33:50 62CFE446D9D3E8B0EBFFC3CD148F4B84 50176 ----a-w- C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-09-14 09:33:50 1573560661819784A39F0EEC84D6B335 349696 ----a-w- C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-09-14 09:33:49 0F1DF30A8B44E92AB28F70B0DD324817 6296064 ----a-w- C:\WINDOWS\SysWOW64\mos.dll 2016-09-14 09:33:45 87CA433AE22A3DB561B97516A70624C7 4404736 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2016-09-14 09:33:45 220F8F90CEAE3041DBF21DDCCE0F2CDC 5325824 ----a-w- C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-09-14 09:33:44 A35B2ADF90A6E307AB5E5CC156BAA939 3459584 ----a-w- C:\WINDOWS\SysWOW64\UIRibbon.dll 2016-09-14 09:33:43 135D497C547E44B052F8565E2CA6B4C2 2361856 ----a-w- C:\WINDOWS\SysWOW64\mmcndmgr.dll 2016-09-14 09:33:42 D03C60C8C8668A96759A876A2148E661 59392 ----a-w- C:\WINDOWS\SysWOW64\MosStorage.dll 2016-09-14 09:33:42 79A7A7B96D61A9CEE8E0E356F7960842 87040 ----a-w- C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-09-14 09:33:41 926E1412986617398A35D790EC5BB568 1562112 ----a-w- C:\WINDOWS\SysWOW64\mmc.exe 2016-09-14 09:33:41 0AE73F88B131728A551356FFD7FBD98C 1944576 ----a-w- C:\WINDOWS\SysWOW64\InputService.dll 2016-09-14 09:33:40 D3A03A54F5B60AC386BA3F9704C45D26 712704 ----a-w- C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2016-09-14 09:33:39 CD9D8577AC7DAB3AB088722B773B2613 2680320 ----a-w- C:\WINDOWS\SysWOW64\msftedit.dll 2016-09-14 09:33:39 27B8673BBF3E40F5E16E29842C1ED008 778240 ----a-w- C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2016-09-14 09:33:38 F144F08A042800BC3C27DA0EAA372968 458752 ----a-w- C:\WINDOWS\SysWOW64\wlidprov.dll 2016-09-14 09:33:38 4D7E9F390D12BFDD732C5C69AD4B830C 294912 ----a-w- C:\WINDOWS\SysWOW64\PhoneOm.dll 2016-09-14 09:33:38 4371689AEDBE3B9D6D946C69B5F36B64 754176 ----a-w- C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-09-14 09:33:38 3C680DE53A2CBB43D9FC8DD9AC4F4DB2 1522152 ----a-w- C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2016-09-14 09:33:37 8E0D775BF8ABCC2FE73A6741CB61D515 1915392 ----a-w- C:\WINDOWS\SysWOW64\MSAJApi.dll 2016-09-14 09:33:36 47F0B90977407CBA4315B85EBAD4D032 1951848 ----a-w- C:\WINDOWS\SysWOW64\hevcdecoder.dll 2016-09-14 09:33:36 0DBBA022EC74C68BCB66677C374F5898 1865584 ----a-w- C:\WINDOWS\SysWOW64\d3d9.dll 2016-09-14 09:33:35 F43D9302DE6BDADE329622807FA5D9E8 471552 ----a-w- C:\WINDOWS\SysWOW64\filemgmt.dll 2016-09-14 09:33:35 C686FD94975E12A696E4954679AA6E35 502272 ----a-w- C:\WINDOWS\SysWOW64\mscms.dll 2016-09-14 09:33:34 81AF930F9817720707D62CB97A24CB26 576000 ----a-w- C:\WINDOWS\SysWOW64\nshwfp.dll 2016-09-14 09:33:32 3FE61347A18B6912305906E8D22730BD 1355336 ----a-w- C:\WINDOWS\SysWOW64\propsys.dll 2016-09-14 09:33:31 43E281B97BEE9BE22AD84F0E4F3A5BCC 248320 ----a-w- C:\WINDOWS\SysWOW64\resutils.dll 2016-09-14 09:33:30 1870134AA00C6E049CC2FAE5020817B3 553472 ----a-w- C:\WINDOWS\SysWOW64\cryptui.dll 2016-09-14 09:33:28 79B4BA9A9471A088D42C073A745DDF68 460800 ----a-w- C:\WINDOWS\SysWOW64\SearchFolder.dll 2016-09-14 09:33:28 6E28C1CCF57AC0B6EAD96BB4193AD497 100352 ----a-w- C:\WINDOWS\SysWOW64\WcnApi.dll 2016-09-14 09:33:27 E2AE917B4F875DE610236DFBAABEF22A 339456 ----a-w- C:\WINDOWS\SysWOW64\azroleui.dll 2016-09-14 09:33:27 E1C65BCA5ADBF579D69E005632FCCFD3 639488 ----a-w- C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-09-14 09:33:27 6F7F37DE87EA60E8931E2DBFE786B935 163840 ----a-w- C:\WINDOWS\SysWOW64\cic.dll 2016-09-14 09:33:27 151F438E840AA4D164D87810076CA82D 673280 ----a-w- C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2016-09-14 09:33:26 F4C03A65C09162BEEC552A449D92640A 300032 ----a-w- C:\WINDOWS\SysWOW64\mmcbase.dll 2016-09-14 09:33:26 4A313C8F4D7E23DB497F57654AE4307F 488960 ----a-w- C:\WINDOWS\SysWOW64\clusapi.dll 2016-09-14 09:33:26 36EC25A9B85F48A91D3B1EB096943587 465760 ----a-w- C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-09-14 09:33:26 2FAC340535900A4E441939F02950763A 386048 ----a-w- C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2016-09-14 09:33:25 3D37169830FC2493F3A4CB68A7019769 115712 ----a-w- C:\WINDOWS\SysWOW64\mmcshext.dll 2016-09-14 09:33:24 6439C52458DDD3CADF39E5F7301527A4 1537536 ----a-w- C:\WINDOWS\SysWOW64\pla.dll 2016-09-14 09:33:22 8809F8A3059E54DEAB4E0CC82F4BD97E 489984 ----a-w- C:\WINDOWS\SysWOW64\mbsmsapi.dll 2016-09-14 09:33:22 568A0D14943A58FBA0997B9998AB20C3 1226752 ----a-w- C:\WINDOWS\SysWOW64\wcnwiz.dll 2016-09-14 09:33:21 E2B3A2010F3FD5184D3A948E3523240E 489984 ----a-w- C:\WINDOWS\SysWOW64\ShareHost.dll 2016-09-14 09:33:21 8BA3CF9871CE8DA231B67A56454E52FF 400896 ----a-w- C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-09-14 09:33:21 68E443090FA19F786FFB4F877BE77AEB 53760 ----a-w- C:\WINDOWS\SysWOW64\Windows.Cortana.ProxyStub.dll 2016-09-14 09:33:20 DE2561AA38AA90DB5096760E00F09AF5 1063936 ----a-w- C:\WINDOWS\SysWOW64\gpedit.dll 2016-09-14 09:33:20 637D7FE0825878E9D16F766CDF6752FE 47104 ----a-w- C:\WINDOWS\SysWOW64\fwcfg.dll 2016-09-14 09:33:19 D7062B03D01433EE8989F1F4CF425C3B 824832 ----a-w- C:\WINDOWS\SysWOW64\adtschema.dll 2016-09-14 09:33:19 6DD1225DE51F25E3A19B886B29DA50A0 1987072 ----a-w- C:\WINDOWS\SysWOW64\DWrite.dll 2016-09-14 09:33:18 E18E36E7FA31014AA353CA518790A3A0 339456 ----a-w- C:\WINDOWS\SysWOW64\certcli.dll 2016-09-14 09:33:18 984669494C52B7F8AFADEC44AF1664FF 736768 ----a-w- C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll 2016-09-14 09:33:18 4E4FAC4A6F1E25958300B5CD2E47D9C1 205312 ----a-w- C:\WINDOWS\SysWOW64\oemlicense.dll 2016-09-14 09:33:18 2F942689C176CBDA0DEF68F61E17D74C 96256 ----a-w- C:\WINDOWS\SysWOW64\VoipRT.dll 2016-09-14 09:33:18 16E2A66BDAA15251A1CF0FCCCBB0C291 100864 ----a-w- C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-09-14 09:33:17 5AB10790C555E7918177DED25FE29486 4143104 ----a-w- C:\WINDOWS\SysWOW64\WlanMM.dll 2016-09-14 09:33:17 166DB357B5B47092BA716418F5FA8864 645632 ----a-w- C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll 2016-09-14 09:33:17 10622E8A69895D6C76B583A6E09849D0 358912 ----a-w- C:\WINDOWS\SysWOW64\authfwcfg.dll 2016-09-14 09:33:16 A9BCE4CCA5F553B1D6827E912EB01F40 95744 ----a-w- C:\WINDOWS\SysWOW64\fdWCN.dll 2016-09-14 09:33:16 72B938276F91738764FE186004554C0B 638976 ----a-w- C:\WINDOWS\SysWOW64\MrmIndexer.dll 2016-09-14 09:33:16 615C6279E7074D773A126FE2E6478546 413696 ----a-w- C:\WINDOWS\SysWOW64\WLanConn.dll 2016-09-14 09:33:16 499C79D0FA8E8F7ADF4C39F0D4DACDFA 1985024 ----a-w- C:\WINDOWS\SysWOW64\certmgr.dll 2016-09-14 09:33:15 F7C51731B140425F9C59650245C44D99 207872 ----a-w- C:\WINDOWS\SysWOW64\licensingdiag.exe 2016-09-14 09:33:15 C7F84BEA438AB096DBBFEA166613EC6D 477184 ----a-w- C:\WINDOWS\SysWOW64\ieui.dll 2016-09-14 09:33:15 ADAB64E232F6CC237299E0C8312C499E 584704 ----a-w- C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2016-09-14 09:33:15 2D19F6EAB83FE80FD7EE3148344BC1D8 63488 ----a-w- C:\WINDOWS\SysWOW64\msobjs.dll 2016-09-14 09:33:14 CDCB138799B0850D1B4DD5C5E69420B1 24064 ----a-w- C:\WINDOWS\SysWOW64\CheckNetIsolation.exe 2016-09-14 09:33:14 BCEA1011D4053AC5EA3903B01C719ABF 321536 ----a-w- C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2016-09-14 09:33:07 F55DD4C2F52237CD317AD35043404648 1118200 ----a-w- C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-09-14 09:33:07 82A5856C43A27E3872D97FA48B0D126F 2180128 ----a-w- C:\WINDOWS\SysWOW64\mfcore.dll 2016-09-14 09:33:07 597471E4A0B037D8285D32A5F55B7335 9920512 ----a-w- C:\WINDOWS\SysWOW64\twinui.dll 2016-09-14 09:33:05 96B02C936DC8CB91D70EAE8D58D11093 2026736 ----a-w- C:\WINDOWS\SysWOW64\msxml6.dll 2016-09-14 09:33:05 92652701DDC6968ABCC3089A2D9C8DB7 2772480 ----a-w- C:\WINDOWS\SysWOW64\tquery.dll 2016-09-14 09:33:05 7CF5222C40AF33E1830FB00CAE83EA82 501760 ----a-w- C:\WINDOWS\SysWOW64\vbscript.dll 2016-09-14 09:33:04 BFDE87A7E902181EE5E647A4EEADAFF5 2798080 ----a-w- C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-09-14 09:33:04 73C76E3971CE91796DD97A05F4288482 1556992 ----a-w- C:\WINDOWS\SysWOW64\OpcServices.dll 2016-09-14 09:33:04 67C9B10BDF884D13B9825E078FA72F76 569856 ----a-w- C:\WINDOWS\SysWOW64\qdvd.dll 2016-09-14 09:33:03 FBC382EF0BB88A043ADA4C410A1A604B 3555840 ----a-w- C:\WINDOWS\SysWOW64\xpsrchvw.exe 2016-09-14 09:33:03 ABCA711449A54842D734A1F37C069F32 1984000 ----a-w- C:\WINDOWS\SysWOW64\mssrch.dll 2016-09-14 09:33:02 E3F3144EE93C24EB323B0419D1A9F491 4074160 ----a-w- C:\WINDOWS\SysWOW64\explorer.exe 2016-09-14 09:32:59 EC5E3658FEA92435161B8E2E03F90C65 601744 ----a-w- C:\WINDOWS\SysWOW64\oleaut32.dll 2016-09-14 09:32:58 E522D5DB2397C5AF1F62F16F3D521A68 980352 ----a-w- C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-09-14 09:32:58 81CB6216AFC164863053ADEFDCADBB7B 759808 ----a-w- C:\WINDOWS\SysWOW64\SearchIndexer.exe 2016-09-14 09:32:58 5098DC8BBCA6188899352B68BA0C686B 1582080 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2016-09-14 09:32:57 DF269D03CC7D827E2FF533335BD2A9B6 517632 ----a-w- C:\WINDOWS\SysWOW64\PlayToManager.dll 2016-09-14 09:32:56 2042E4F883E80AD7CD897FB88B0563B8 925064 ----a-w- C:\WINDOWS\SysWOW64\mfplat.dll 2016-09-14 09:32:55 A6AB90EFDBF0880C7BB7BA5FD763C588 2578432 ----a-w- C:\WINDOWS\SysWOW64\gameux.dll 2016-09-14 09:32:55 7BFFC5AB6DCCBBF4B4F29C9E448578B2 581632 ----a-w- C:\WINDOWS\SysWOW64\twinapi.dll 2016-09-14 09:32:55 0B51010A1969EEC602CA2FBC185A9D28 451928 ----a-w- C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-09-14 09:32:53 AAC4B791A6DC18D300C326EE94D00829 1328128 ----a-w- C:\WINDOWS\SysWOW64\comsvcs.dll 2016-09-14 09:32:53 4BC4BEC60B6D7EDE7EFC8D6837E7E1CB 683008 ----a-w- C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2016-09-14 09:32:52 209DF669399C9BFCD2FF211337450FE3 328520 ----a-w- C:\WINDOWS\SysWOW64\BCP47Langs.dll 2016-09-14 09:32:51 8DC69998631F058B043CCCFAE7BE5B3F 434688 ----a-w- C:\WINDOWS\SysWOW64\LogonController.dll 2016-09-14 09:32:50 7CA769C11DADC0F15DB2C76D8953A6F1 1117184 ----a-w- C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2016-09-14 09:32:49 C270B34AC8EC3272A8DF3E351E4A0A11 651776 ----a-w- C:\WINDOWS\SysWOW64\comuid.dll 2016-09-14 09:32:49 4122330FF1DF5E47A9D4C1A91557F7C0 627200 ----a-w- C:\WINDOWS\SysWOW64\certca.dll 2016-09-14 09:32:47 B2BD13B249D72B65671F6FBBBE648149 2062336 ----a-w- C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-09-14 09:32:45 49462DE67E5EA4F64EC903C369BB34A8 709176 ----a-w- C:\WINDOWS\SysWOW64\mfsvr.dll 2016-09-14 09:32:44 C8FDC1419C27D64CAE1BE05A17E9BF6B 282624 ----a-w- C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2016-09-14 09:32:44 4EB47B6CF5BAEC7A29BEBA976A85B67E 957608 ----a-w- C:\WINDOWS\SysWOW64\ole32.dll 2016-09-14 09:32:43 8DD56A98C66E31F83DD657E26AF7C51B 282624 ----a-w- C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2016-09-14 09:32:43 8565511C3E82979F36CD9112CA25A6D3 652312 ----a-w- C:\WINDOWS\SysWOW64\evr.dll 2016-09-14 09:32:43 1DE3D5DE5DE4E72E6A0A99E1B0C2BADB 1467392 ----a-w- C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-09-14 09:32:42 FF865BE7F3EE3DE07FAF15B15753D266 792576 ----a-w- C:\WINDOWS\SysWOW64\kerberos.dll 2016-09-14 09:32:42 BBDD4996622B87FBB212046B906B535B 667648 ----a-w- C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2016-09-14 09:32:42 263ADCB7EFC3F324A62A9896B1B14EA3 131072 ----a-w- C:\WINDOWS\SysWOW64\usbceip.dll 2016-09-14 09:32:42 15FBC52789C24B1C3F9E5ECA18DB5228 764928 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2016-09-14 09:32:41 F42E2A6E25B1F43E8E94EDCC7DEA741B 2519552 ----a-w- C:\WINDOWS\SysWOW64\themecpl.dll 2016-09-14 09:32:41 1F68D594CBC653592A5F624B2295D9D6 304128 ----a-w- C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2016-09-14 09:32:41 00D902AF8497B6B5B006B8787D449C78 585216 ----a-w- C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2016-09-14 09:32:40 061767F7D8BD899E55539A097A6A0840 620544 ----a-w- C:\WINDOWS\SysWOW64\XpsFilt.dll 2016-09-14 09:32:39 787786EB675731F7CB8E04328D7C15D6 260096 ----a-w- C:\WINDOWS\SysWOW64\apprepsync.dll 2016-09-14 09:32:38 AF4DC4ED1C22C60942F742F6FCB76B44 502272 ----a-w- C:\WINDOWS\SysWOW64\DevicePairing.dll 2016-09-14 09:32:38 8385BD7B25F6F0DE504580A2E78027BC 190464 ----a-w- C:\WINDOWS\SysWOW64\apprepapi.dll 2016-09-14 09:32:37 0B7808AF4545EEB28C411DB452E7295D 372224 ----a-w- C:\WINDOWS\SysWOW64\LockAppBroker.dll 2016-09-14 09:32:36 DF58074812F9EADE7452BAAE279018D2 738816 ----a-w- C:\WINDOWS\SysWOW64\appwiz.cpl 2016-09-14 09:32:36 66101D1EFBB9D2106284560F651B870E 99328 ----a-w- C:\WINDOWS\SysWOW64\srpapi.dll 2016-09-14 09:32:35 A6BEC0415DD242FCA5AC091DE15EB31E 574976 ----a-w- C:\WINDOWS\SysWOW64\hgcpl.dll 2016-09-14 09:32:34 AE797F448AD075F7C833700B18BF6F2A 6471168 ----a-w- C:\WINDOWS\SysWOW64\mspaint.exe 2016-09-14 09:32:34 57CC215DCB22967E791D15BD9791EFE9 1105920 ----a-w- C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-09-14 09:32:32 CF104996C5A8FF76F5A83CD686B58EFF 292864 ----a-w- C:\WINDOWS\SysWOW64\dot3ui.dll 2016-09-14 09:32:32 3AE7CA120C5762296D425708236B382A 785408 ----a-w- C:\WINDOWS\SysWOW64\azroles.dll 2016-09-14 09:32:31 CD4E10D728AB5412DA083E3985BEC102 283136 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2016-09-14 09:32:31 24CBED67F1EEF56066C762AA14048A77 250880 ----a-w- C:\WINDOWS\SysWOW64\AppLockerCSP.dll 2016-09-14 09:32:30 9F55648B80A050CDA0B93F904113802D 461824 ----a-w- C:\WINDOWS\SysWOW64\CoreMessaging.dll 2016-09-14 09:32:29 B62965E99F78760F66A9DB5414A97F57 92160 ----a-w- C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-09-14 09:32:28 1E7C926619954E0C5943733FC161E926 4759040 ----a-w- C:\WINDOWS\SysWOW64\d2d1.dll 2016-09-14 09:32:27 CC57DA65CC1A818E2E57799E2B4B8465 13018624 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-09-14 09:32:20 453AB251D3EAE51BA27C88BC57C987BB 12585472 ----a-w- C:\WINDOWS\SysWOW64\wmp.dll 2016-09-14 09:32:16 6E051A44B9E6A4C90C8457612A49F7B7 21123320 ----a-w- C:\WINDOWS\SysWOW64\shell32.dll 2016-09-14 09:32:16 509B49CBCD49F2E4DB840EDB18857F7F 703840 ----a-w- C:\WINDOWS\SysWOW64\WWAHost.exe 2016-09-14 09:32:15 EBE36ED42CF19C00FD3CE10BF16430BD 5240952 ----a-w- C:\WINDOWS\SysWOW64\windows.storage.dll 2016-09-14 09:32:13 77C50FC1C6712B3F8DB906160917CA7E 2000896 ----a-w- C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-09-14 09:32:11 0DE3899F53C77F79B3F92210E5100CD0 28083144 ----a-w- C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll 2016-09-14 09:32:09 072A2B345FA14ED92C55DA74EA59CA9D 1824264 ----a-w- C:\WINDOWS\SysWOW64\combase.dll 2016-09-14 09:32:08 DADED4B303B0CFA28833470A9F981D9F 2632192 ----a-w- C:\WINDOWS\SysWOW64\rdpcore.dll 2016-09-14 09:32:08 CCCD6ECC7C7328A38C2CE3E2B796A5E4 4078592 ----a-w- C:\WINDOWS\SysWOW64\dbgeng.dll 2016-09-14 09:32:07 8F80B0D48C97685A94D47C53D4CF1AF2 1557768 ----a-w- C:\WINDOWS\SysWOW64\KernelBase.dll 2016-09-14 09:32:06 E957E2328E20B582FA1AD12DAD7D1C39 1862000 ----a-w- C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-09-14 09:32:04 26FE54D48A7534F5FA544EA1B35E7700 836752 ----a-w- C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2016-09-14 09:32:01 3CE16B483E7C32034319E8B571B949B4 805888 ----a-w- C:\WINDOWS\SysWOW64\WSShared.dll 2016-09-14 09:31:59 7D46A771327519FC8D4AEB4A99C849CF 508416 ----a-w- C:\WINDOWS\SysWOW64\wpnapps.dll 2016-09-14 09:31:58 C676DE39E4AD367781160F49A0DF0EF9 802816 ----a-w- C:\WINDOWS\SysWOW64\ntshrui.dll 2016-09-14 09:31:57 F239BD41D4F434A04D089D3BCC01F456 200704 ----a-w- C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-09-14 09:31:57 D3DB516A218D96BB2267058010C412BE 711680 ----a-w- C:\WINDOWS\SysWOW64\D3D12.dll 2016-09-14 09:31:55 EBF8C0E8C8E075DAE398F8D349ACC0BA 9324032 ----a-w- C:\WINDOWS\SysWOW64\wmploc.DLL 2016-09-14 09:31:52 EAD26A5665C94395BBC1195CC1087EAA 253080 ----a-w- C:\WINDOWS\SysWOW64\wmpeffects.dll 2016-09-14 09:31:51 75D82431F557CED1FC29E15F4E4F14BF 2186856 ----a-w- C:\WINDOWS\SysWOW64\d3d11.dll 2016-09-14 09:31:47 4682974ED9AFB7812FD172654EAA0D66 360480 ----a-w- C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2016-09-14 09:31:46 8D3FC3F26CF58C8A63920FC947B18C02 238592 ----a-w- C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll 2016-09-14 09:31:46 62A435BC905A57D3213C14B24F05A019 224256 ----a-w- C:\WINDOWS\SysWOW64\prnntfy.dll 2016-09-14 09:31:45 E9BFC02C14D1534CED93DA23539560CC 1139712 ----a-w- C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-09-14 09:31:45 1C5E17016634711819F3E36D6ABC7CE9 438784 ----a-w- C:\WINDOWS\SysWOW64\DbgModel.dll 2016-09-14 09:31:44 478A5D744F4F7251CB8C43F0ECFA2E79 799744 ----a-w- C:\WINDOWS\SysWOW64\SRH.dll 2016-09-14 09:31:44 1D116A229E1155727332FFD8BE048D06 489984 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-09-14 09:31:44 06614CE299EF20A72355CB3E69D47DF3 515584 ----a-w- C:\WINDOWS\SysWOW64\PhotoScreensaver.scr 2016-09-14 09:31:43 5E679BDADCEC216AB25E3FA7CC648617 1228800 ----a-w- C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2016-09-14 09:31:41 475C0FA8F96AA8F02432F4AC7ADD8373 153088 ----a-w- C:\WINDOWS\SysWOW64\WSSync.dll 2016-09-14 09:31:38 A897AA0B6013D079094B7B7A79F985AD 233984 ----a-w- C:\WINDOWS\SysWOW64\DictationManager.dll 2016-09-13 21:52:06 4E2B0163395885B3A73E427C575A038E 6502080 ----a-w- C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe ====== C:\WINDOWS\SysWOW64\drivers ===== ====== C:\WINDOWS\Sysnative ===== 2016-09-14 09:35:10 15BA82BD820F496CBBB330AC5B3F2463 16985600 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Xaml.dll 2016-09-14 09:35:09 6C269F6FC559998F84CDAD5F2FD6C16D 602624 ----a-w- C:\WINDOWS\Sysnative\vbscript.dll 2016-09-14 09:35:08 7A23A56A617371ACA45647A4D1B5E477 24611840 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll 2016-09-14 09:35:07 6B66A91898E8ED1A59D965F636514763 2544256 ----a-w- C:\WINDOWS\Sysnative\mfcore.dll 2016-09-14 09:35:06 F47621DCAE21E1D94BC7F29F0FB3E9F2 794624 ----a-w- C:\WINDOWS\Sysnative\winhttp.dll 2016-09-14 09:35:05 93312092ABFB05E7D40C005C755934EC 22379520 ----a-w- C:\WINDOWS\Sysnative\edgehtml.dll 2016-09-14 09:35:01 E021AE8259CB91DB310E42EB24B5B88F 383488 ----a-w- C:\WINDOWS\Sysnative\iedkcs32.dll 2016-09-14 09:35:01 D216250EF8D61855A79736F5182058C5 2127360 ----a-w- C:\WINDOWS\Sysnative\inetcpl.cpl 2016-09-14 09:35:01 199CE31391FD09F5F6CD8B601B6AAF50 784384 ----a-w- C:\WINDOWS\Sysnative\msfeeds.dll 2016-09-14 09:35:00 0B0E214359608EED8D28646657CFE70E 13392384 ----a-w- C:\WINDOWS\Sysnative\ieframe.dll 2016-09-14 09:34:58 194259641AF650C66F3D14AB281A87B1 4895232 ----a-w- C:\WINDOWS\Sysnative\jscript9.dll 2016-09-14 09:34:58 0D20D8D7DA98EBF0CC901E07B7B01122 7831552 ----a-w- C:\WINDOWS\Sysnative\Chakra.dll 2016-09-14 09:34:57 865A4A37839EDAB3C6C4CC6EF9EEC55E 4171264 ----a-w- C:\WINDOWS\Sysnative\rdpcorets.dll 2016-09-14 09:34:57 31BB77AE241C209FFAA2AB46E04FFD34 1299504 ----a-w- C:\WINDOWS\Sysnative\mfnetsrc.dll 2016-09-14 09:34:56 2B47E29597B14F0ED6743EE9DC4F7012 3577344 ----a-w- C:\WINDOWS\Sysnative\tquery.dll 2016-09-14 09:34:55 F9075697E175068D798B040531B188DB 2607336 ----a-w- C:\WINDOWS\Sysnative\combase.dll 2016-09-14 09:34:55 E9F597ED6E05B155AEB586FBB1BF2BD7 1750440 ----a-w- C:\WINDOWS\Sysnative\WpcMon.exe 2016-09-14 09:34:53 B27A9BD72E97798EA3E74A39AEF134D8 2911744 ----a-w- C:\WINDOWS\Sysnative\CertEnroll.dll 2016-09-14 09:34:53 4D0E671755DB778A1F3687778008B6E2 2280960 ----a-w- C:\WINDOWS\Sysnative\wuaueng.dll 2016-09-14 09:34:53 3CD794C96190F28E565C04756A5AFDD7 2876928 ----a-w- C:\WINDOWS\Sysnative\Wpc.dll 2016-09-14 09:34:53 06C5795C4B59790F287032BCB290F212 2597888 ----a-w- C:\WINDOWS\Sysnative\mssrch.dll 2016-09-14 09:34:52 7121F0537EE20290788B6BAAA498D90B 2874880 ----a-w- C:\WINDOWS\Sysnative\mmcndmgr.dll 2016-09-14 09:34:51 3B3F08EAF50ED8E86837E8896F57051E 3428864 ----a-w- C:\WINDOWS\Sysnative\Windows.Media.dll 2016-09-14 09:34:50 DAC602E1DB694824718897ED9B8238C0 2656952 ----a-w- C:\WINDOWS\Sysnative\CoreUIComponents.dll 2016-09-14 09:34:49 AA46965B3518588A88B816D6CE2CD8D5 1743872 ----a-w- C:\WINDOWS\Sysnative\wevtsvc.dll 2016-09-14 09:34:49 40F1E163004CED702260EFAE039738FE 2055168 ----a-w- C:\WINDOWS\Sysnative\OpcServices.dll 2016-09-14 09:34:48 A443DC17F146CDC8A39CDAB989A49CC2 2746368 ----a-w- C:\WINDOWS\Sysnative\Windows.StateRepository.dll 2016-09-14 09:34:48 57B1DD6EE6CF9A653ABB7DDB262FDE78 2352128 ----a-w- C:\WINDOWS\Sysnative\authui.dll 2016-09-14 09:34:47 1C6B7CE85EE0DD9128E012D47DA479E9 1946112 ----a-w- C:\WINDOWS\Sysnative\dwmcore.dll 2016-09-14 09:34:46 587075CB54E823EA1DC522B51B9DC9F4 588320 ----a-w- C:\WINDOWS\Sysnative\wmdrmdev.dll 2016-09-14 09:34:46 1863976CCE6DE4663AFE0285F466D8BE 1797120 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Immersive.dll 2016-09-14 09:34:45 DB5B996CA8C464D9938445E7C0A43E9C 1567744 ----a-w- C:\WINDOWS\Sysnative\Windows.Globalization.dll 2016-09-14 09:34:45 4D9D5E9FD9640D4C2D48E37F17E389B7 938496 ----a-w- C:\WINDOWS\Sysnative\SearchIndexer.exe 2016-09-14 09:34:45 46D7E6C25DE30ACEB9290DB5EA31749F 3046400 ----a-w- C:\WINDOWS\Sysnative\xpsservices.dll 2016-09-14 09:34:45 3A3F92C01C683F7E2172599C39C622F7 701952 ----a-w- C:\WINDOWS\Sysnative\twinapi.dll 2016-09-14 09:34:44 60BC8F666D4447409497ADA41678E732 1098640 ----a-w- C:\WINDOWS\Sysnative\MrmCoreR.dll 2016-09-14 09:34:43 E998075C61E990B5ABCB45CD8A12D61D 1152320 ----a-w- C:\WINDOWS\Sysnative\mfasfsrcsnk.dll 2016-09-14 09:34:43 585CCA7EA69C1659FC91FD6C1BDB950B 2285568 ----a-w- C:\WINDOWS\Sysnative\WpcWebSync.dll 2016-09-14 09:34:43 07ECD1D4C2CE8FBA0F1FFE93857709DB 1676800 ----a-w- C:\WINDOWS\Sysnative\XpsPrint.dll 2016-09-14 09:34:42 DE414EA3111A4A2EA6CD00296B87BC7C 1707520 ----a-w- C:\WINDOWS\Sysnative\msdtctm.dll 2016-09-14 09:34:41 E9CA7E2FF4870680126B86C34ADDB890 451072 ----a-w- C:\WINDOWS\Sysnative\XpsDocumentTargetPrint.dll 2016-09-14 09:34:41 A9EE3696F1C7C5351A83D92692F5CAB7 610304 ----a-w- C:\WINDOWS\Sysnative\wmdrmsdk.dll 2016-09-14 09:34:41 68E07DF3E6D1DFED440B82D3D33542B1 904704 ----a-w- C:\WINDOWS\Sysnative\rpcss.dll 2016-09-14 09:34:41 60248D62E7EB8A4391A5B2C7E9E45091 2582016 ----a-w- C:\WINDOWS\Sysnative\MFMediaEngine.dll 2016-09-14 09:34:40 9CE2E2322192862F6968C0BA37FE0F06 1040792 ----a-w- C:\WINDOWS\Sysnative\twinapi.appcore.dll 2016-09-14 09:34:39 F1CA1E5A30AB995749C68C7D66446E25 838144 ----a-w- C:\WINDOWS\Sysnative\uDWM.dll 2016-09-14 09:34:39 A67C11D10DD8CEBFACD522BB9FF8E80D 206848 ----a-w- C:\WINDOWS\Sysnative\SharedStartModelShim.dll 2016-09-14 09:34:37 5D129AB2DD411B8A46DE712E689B776C 727040 ----a-w- C:\WINDOWS\Sysnative\nshwfp.dll 2016-09-14 09:34:37 031E6ABABF940133B92613E7BDF3A169 643584 ----a-w- C:\WINDOWS\Sysnative\wiaservc.dll 2016-09-14 09:34:36 FA6C16354AD42C109879E931DEBAAB05 725776 ----a-w- C:\WINDOWS\Sysnative\SHCore.dll 2016-09-14 09:34:36 DE23637D300F44F2ECE9E776FD174617 1001472 ----a-w- C:\WINDOWS\Sysnative\schedsvc.dll 2016-09-14 09:34:36 71A3C45C50BCB0782AE9CB15A2FF4787 1603224 ----a-w- C:\WINDOWS\Sysnative\propsys.dll 2016-09-14 09:34:36 31A849DD431ECEB2374678DAD6A95E5B 1092464 ----a-w- C:\WINDOWS\Sysnative\mfplat.dll 2016-09-14 09:34:34 9190A835F510767CE507AA8C52BD5AD5 1131520 ----a-w- C:\WINDOWS\Sysnative\Windows.Media.Audio.dll 2016-09-14 09:34:34 67135715FDCFCAB28035C61189A760C3 814592 ----a-w- C:\WINDOWS\Sysnative\msctfuimanager.dll 2016-09-14 09:34:33 EF9ABB853B7868703168476E9028F236 847648 ----a-w- C:\WINDOWS\Sysnative\mfsvr.dll 2016-09-14 09:34:33 6ACFDD7D5C43C9DF52CAD6B43E130754 245840 ----a-w- C:\WINDOWS\Sysnative\mfps.dll 2016-09-14 09:34:33 58667A20184EAB470ED60465A5F8ADB4 828928 ----a-w- C:\WINDOWS\Sysnative\Windows.AccountsControl.dll 2016-09-14 09:34:33 0C3826B2DB8D45A6B577007EFA0D24C2 617984 ----a-w- C:\WINDOWS\Sysnative\StorSvc.dll 2016-09-14 09:34:32 E7897E69CBA16D82D3753EA3436F7DE8 394240 ----a-w- C:\WINDOWS\Sysnative\Search.ProtocolHandler.MAPI2.dll 2016-09-14 09:34:32 6A7BC6056605A243CB3018E65F415184 124928 ----a-w- C:\WINDOWS\Sysnative\shsetup.dll 2016-09-14 09:34:32 53C2B247E97221BD5173366E149BC527 911640 ----a-w- C:\WINDOWS\Sysnative\dcomp.dll 2016-09-14 09:34:32 29714B2847782C1C55907A08BD6B3C9A 254464 ----a-w- C:\WINDOWS\Sysnative\ExecModelClient.dll 2016-09-14 09:34:31 DF92E3150A490FD3238623E5215DC532 1270064 ----a-w- C:\WINDOWS\Sysnative\WinTypes.dll 2016-09-14 09:34:31 76969C115752FB7353F27F0456275D73 952320 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.PointOfService.dll 2016-09-14 09:34:31 6BEB33E727DBA39A9ECFC167DD785E69 381952 ----a-w- C:\WINDOWS\Sysnative\apprepsync.dll 2016-09-14 09:34:31 19ED6D095B0D05F9BEF94341C3A24095 123392 ----a-w- C:\WINDOWS\Sysnative\mssprxy.dll 2016-09-14 09:34:30 0F940F413D9F88E432C42D0F2ABE2BBB 339968 ----a-w- C:\WINDOWS\Sysnative\SensorService.dll 2016-09-14 09:34:30 0EBA7A146FBA1016C68BA7C1B8379C5B 275968 ----a-w- C:\WINDOWS\Sysnative\facecredentialprovider.dll 2016-09-14 09:34:29 DF983438C94E0B94091D7BB57093CDC7 785088 ----a-w- C:\WINDOWS\Sysnative\evr.dll 2016-09-14 09:34:29 247C0B040567F320BC7611B0914DB879 1128096 ----a-w- C:\WINDOWS\Sysnative\ClipUp.exe 2016-09-14 09:34:28 BDB16B336E2540E7D2FEB98765862069 858952 ----a-w- C:\WINDOWS\Sysnative\mfnetcore.dll 2016-09-14 09:34:27 652FF54C49125611F7D33AE3E56BF889 26408 ----a-w- C:\WINDOWS\Sysnative\wuauclt.exe 2016-09-14 09:34:26 C488C87CE64CD26C9AE9D39191418DC2 457216 ----a-w- C:\WINDOWS\Sysnative\azroleui.dll 2016-09-14 09:34:26 99B3ABA60D7CAE8BF1258E6FCA809DD1 870400 ----a-w- C:\WINDOWS\Sysnative\modernexecserver.dll 2016-09-14 09:34:26 2CE23356C99E646E385CBFA378C30691 316416 ----a-w- C:\WINDOWS\Sysnative\sti.dll 2016-09-14 09:34:25 B88236EAC4DCA6A9F2B09BE765D507FC 262144 ----a-w- C:\WINDOWS\Sysnative\webcheck.dll 2016-09-14 09:34:25 A702B58E9B2CC32778D6FC71D8967511 1063936 ----a-w- C:\WINDOWS\Sysnative\comdlg32.dll 2016-09-14 09:34:25 7E03C96F22BF5E12F27C0F3663FE17B6 489984 ----a-w- C:\WINDOWS\Sysnative\authfwcfg.dll 2016-09-14 09:34:25 4A002ED2AEBE21D023C0DC2DB1FC0E26 287744 ----a-w- C:\WINDOWS\Sysnative\apprepapi.dll 2016-09-14 09:34:25 3111749D8C15576AF32C6196AFF97B39 356864 ----a-w- C:\WINDOWS\Sysnative\ActivationManager.dll 2016-09-14 09:34:24 9C8CF81B95D71ABF2ED5B12A42DCA0EA 313856 ----a-w- C:\WINDOWS\Sysnative\DictationManager.dll 2016-09-14 09:34:24 4D3C3F478A05F939022F02D446C16ED7 174592 ----a-w- C:\WINDOWS\Sysnative\easwrt.dll 2016-09-14 09:34:24 0DFAE0128A61D4D964B9AAD35BAEA05F 92160 ----a-w- C:\WINDOWS\Sysnative\mshtmled.dll 2016-09-14 09:34:23 CFD2A04A21F5A2B9CFA548AA13C2C5F3 821760 ----a-w- C:\WINDOWS\Sysnative\MrmIndexer.dll 2016-09-14 09:34:23 30692A2A8317B77E7C9AF0E9D000D43B 504320 ----a-w- C:\WINDOWS\Sysnative\AppReadiness.dll 2016-09-14 09:34:23 2DBF533A738948B84D8BA697AAED6DA5 334848 ----a-w- C:\WINDOWS\Sysnative\SearchProtocolHost.exe 2016-09-14 09:34:23 0574B2DBBD3F0B42D012CF0A47010541 206848 ----a-w- C:\WINDOWS\Sysnative\LegacyNetUXHost.exe 2016-09-14 09:34:22 CE9F172D243A5ACED0B53E27A88E3DEF 1568768 ----a-w- C:\WINDOWS\Sysnative\msdt.exe 2016-09-14 09:34:22 8BAB2C5E8BFD8D7C8B73E430A1D861F9 305152 ----a-w- C:\WINDOWS\Sysnative\edputil.dll 2016-09-14 09:34:22 71DAE1FD62444A54301EA132FF737564 75264 ----a-w- C:\WINDOWS\Sysnative\wiarpc.dll 2016-09-14 09:34:21 B5F9D5E80CCF9C4914B1C86428807622 1051136 ----a-w- C:\WINDOWS\Sysnative\DiagCpl.dll 2016-09-14 09:34:21 75C826E7A31D0820D626B001A63F057D 3351040 ----a-w- C:\WINDOWS\Sysnative\msi.dll 2016-09-14 09:34:21 0EF102C81F561625B92D9F93FE6ED01C 738816 ----a-w- C:\WINDOWS\Sysnative\SmartCardSimulator.dll 2016-09-14 09:34:20 AC6D0A34ED6E59E0B9DEBCD2387EDC04 69120 ----a-w- C:\WINDOWS\Sysnative\pngfilt.dll 2016-09-14 09:34:20 80DFC75A74E04F5E9251EB46C2418E06 56832 ----a-w- C:\WINDOWS\Sysnative\fwcfg.dll 2016-09-14 09:34:20 5566EBBB6B29CD0CD0A078DAE5396E52 371712 ----a-w- C:\WINDOWS\Sysnative\MDEServer.exe 2016-09-14 09:34:20 25EE06F7B8E0AD4FC7C48E9379F85BFC 957952 ----a-w- C:\WINDOWS\Sysnative\IKEEXT.DLL 2016-09-14 09:34:20 012A5590379ABC876908558C20645144 824320 ----a-w- C:\WINDOWS\Sysnative\WpcWebFilter.dll 2016-09-14 09:34:19 9C4485D3AB171D1C132D5349BD9D7778 27648 ----a-w- C:\WINDOWS\Sysnative\CheckNetIsolation.exe 2016-09-14 09:34:19 972D0EE51FE2B0A88A13DE6C90CFBD22 381952 ----a-w- C:\WINDOWS\Sysnative\wuuhext.dll 2016-09-14 09:34:19 8BCE5EE80DD84AE26C8897B4CE6F4E6E 1752576 ----a-w- C:\WINDOWS\Sysnative\ieapfltr.dll 2016-09-14 09:34:19 144E2449CE45C690B32C1F0096457E23 254464 ----a-w- C:\WINDOWS\Sysnative\prnntfy.dll 2016-09-14 09:34:18 D677548718B96AE032A860F8B46484FE 84480 ----a-w- C:\WINDOWS\Sysnative\rdpudd.dll 2016-09-14 09:34:18 05017DBD7B299C7677A1319B03A6AFDA 764928 ----a-w- C:\WINDOWS\Sysnative\Chakradiag.dll 2016-09-14 09:34:15 43738A934CEB95309A239234E0BB7D63 1297760 ----a-w- C:\WINDOWS\Sysnative\LicenseManager.dll 2016-09-14 09:34:14 B1D79F82E205EE8F49054B0A4674D638 6312448 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Search.dll 2016-09-14 09:34:12 AA04E4E03C4AA6C31B5C8B67BAF8854E 2624512 ----a-w- C:\WINDOWS\Sysnative\InputService.dll 2016-09-14 09:34:12 09C771A8725B65D214CB17388C52A16E 576000 ----a-w- C:\WINDOWS\Sysnative\Windows.Networking.UX.EapRequestHandler.dll 2016-09-14 09:34:11 BD7BD3C23C205B85B794213C25B261B6 1487872 ----a-w- C:\WINDOWS\Sysnative\SpeechPal.dll 2016-09-14 09:34:11 5E1045CB15471C326FE16F1FD94CB98E 1319424 ----a-w- C:\WINDOWS\Sysnative\wifinetworkmanager.dll 2016-09-14 09:34:11 0E844C711760A680528B9E2727A1C385 1213440 ----a-w- C:\WINDOWS\Sysnative\wwansvc.dll 2016-09-14 09:34:09 E657B463C873D4F03221C2C6601B6D6C 2175488 ----a-w- C:\WINDOWS\Sysnative\AppXDeploymentServer.dll 2016-09-14 09:34:09 C04072F23A29FF7F6BB511F58117E7C9 538632 ----a-w- C:\WINDOWS\Sysnative\WWanAPI.dll 2016-09-14 09:34:09 08D65292D3138CD601D2D6EEB78C0059 698368 ----a-w- C:\WINDOWS\Sysnative\PlayToManager.dll 2016-09-14 09:34:08 BC4F70F7CD405CF443A0820FBF233E29 787456 ----a-w- C:\WINDOWS\Sysnative\Windows.Web.dll 2016-09-14 09:34:08 925E12D995C671D2DBE485FB07AAD1D8 2476032 ----a-w- C:\WINDOWS\Sysnative\MSAJApi.dll 2016-09-14 09:34:08 36D0F6515AD5247ECF71F7DAD0143761 1388544 ----a-w- C:\WINDOWS\Sysnative\lsasrv.dll 2016-09-14 09:34:07 D51843E0802E4651573E2ECE2750D87A 645120 ----a-w- C:\WINDOWS\Sysnative\wpnapps.dll 2016-09-14 09:34:07 CC65014D1E82EFF0FE28BF3BC54869B8 3053568 ----a-w- C:\WINDOWS\Sysnative\rdpcore.dll 2016-09-14 09:34:07 8CD54C0719F82AC7A3D336D0A75C2883 466944 ----a-w- C:\WINDOWS\Sysnative\wwanconn.dll 2016-09-14 09:34:07 120B0DF5427D88345026964929F8E300 754664 ----a-w- C:\WINDOWS\Sysnative\CoreMessaging.dll 2016-09-14 09:34:06 F4FEA3EC9D8E7268FDC6F03D4DB3B75B 549888 ----a-w- C:\WINDOWS\Sysnative\SearchFolder.dll 2016-09-14 09:34:06 6C2D3DF908D2D7BCF51EE6E3093AA0E2 1410560 ----a-w- C:\WINDOWS\Sysnative\Windows.Web.Http.dll 2016-09-14 09:34:06 63CDDDB7A784A6B971BAD9E4AFF74FE8 2067968 ----a-w- C:\WINDOWS\Sysnative\AppXDeploymentExtensions.dll 2016-09-14 09:34:05 FB8FC521304C1E6B6554CC8BEE2ACF00 586200 ----a-w- C:\WINDOWS\Sysnative\mf.dll 2016-09-14 09:34:05 806F5A80D326B0AD2A0E0CA56227C3D5 444928 ----a-w- C:\WINDOWS\Sysnative\das.dll 2016-09-14 09:34:05 2795A5FF9B390C95A602045673900063 1035776 ----a-w- C:\WINDOWS\Sysnative\TSWorkspace.dll 2016-09-14 09:34:05 000B3D0E02E4079F09C51D14BF4D3C1A 888320 ----a-w- C:\WINDOWS\Sysnative\Windows.Networking.dll 2016-09-14 09:34:04 6B9DF9991BF66487616ACA72D0AA5D12 669696 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.Sensors.dll 2016-09-14 09:34:04 2D0EB7B4FA2E548FB7956C4B78C2BC2B 888832 ----a-w- C:\WINDOWS\Sysnative\printfilterpipelinesvc.exe 2016-09-14 09:34:03 D1B94A6D3CA37ED23AF2F4A8BA5ED7BF 344064 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.Picker.dll 2016-09-14 09:34:03 618EAA72DD130C38F8AE0D7994167AE6 445765 ----a-w- C:\WINDOWS\Sysnative\ApnDatabase.xml 2016-09-14 09:34:02 DC93FA36AE1AEBCF51705AD68765495B 538112 ----a-w- C:\WINDOWS\Sysnative\Windows.Cortana.Desktop.dll 2016-09-14 09:34:02 AADACF000A1F60FD37AE6C045E8857FB 577536 ----a-w- C:\WINDOWS\Sysnative\Windows.ApplicationModel.Wallet.dll 2016-09-14 09:34:02 1B4A92585E3C14103C48AF5FA537FBB7 1048576 ----a-w- C:\WINDOWS\Sysnative\WebcamUi.dll 2016-09-14 09:34:01 8736FF32AB7699FD8C7453C9A6D2739E 1121792 ----a-w- C:\WINDOWS\Sysnative\localspl.dll 2016-09-14 09:34:00 FD35B4E83326317C5DAEBE1A8A67F3FC 649216 ----a-w- C:\WINDOWS\Sysnative\ngcsvc.dll 2016-09-14 09:34:00 B66C925E07D6CA1B7DFDA9695F780734 704000 ----a-w- C:\WINDOWS\Sysnative\CellularAPI.dll 2016-09-14 09:34:00 72F4A00106B9C90A942D6902470748E6 859136 ----a-w- C:\WINDOWS\Sysnative\Windows.ApplicationModel.Store.dll 2016-09-14 09:33:59 FBE4168C17181FD8AEA2885272342EA7 870400 ----a-w- C:\WINDOWS\Sysnative\wpncore.dll 2016-09-14 09:33:59 F5A1551A1B36AF4829375BC5D142BD0B 413536 ----a-w- C:\WINDOWS\Sysnative\wifitask.exe 2016-09-14 09:33:59 B0F7542AAD35C41DCD4212FA20D476A2 947200 ----a-w- C:\WINDOWS\Sysnative\rasgcw.dll 2016-09-14 09:33:58 E0CFB2AB4D7F00250DF4CCD5C8441251 841728 ----a-w- C:\WINDOWS\Sysnative\win32spl.dll 2016-09-14 09:33:58 4164DD4816FCE468533766B7E836B81C 6572032 ----a-w- C:\WINDOWS\Sysnative\wwanmm.dll 2016-09-14 09:33:57 E7629BAEABD9A785D0824CB00CB31CFC 458752 ----a-w- C:\WINDOWS\Sysnative\PlayToDevice.dll 2016-09-14 09:33:57 BE926D418354A470C709EC8BFAC6F448 517632 ----a-w- C:\WINDOWS\Sysnative\winspool.drv 2016-09-14 09:33:57 2FB692AE26040D9091F8BFFE683AC471 673280 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.dll 2016-09-14 09:33:57 199C8C07241F1A14C5B0527647A6D2D7 755712 ----a-w- C:\WINDOWS\Sysnative\spoolsv.exe 2016-09-14 09:33:56 9A85091EC9AFD076A721CBD999B72BE0 847360 ----a-w- C:\WINDOWS\Sysnative\netlogon.dll 2016-09-14 09:33:56 6284743AFD613A1DAF20FA5FE3FBF9BB 1035776 ----a-w- C:\WINDOWS\Sysnative\XboxNetApiSvc.dll 2016-09-14 09:33:56 44873B7C9F46B4AB8D72288A500D7694 1216512 ----a-w- C:\WINDOWS\Sysnative\netcenter.dll 2016-09-14 09:33:56 0CBA4DB110EA62CA9818C8CD04DA9529 1291776 ----a-w- C:\WINDOWS\Sysnative\werconcpl.dll 2016-09-14 09:33:55 E1866907706D75AE36F936E921B17333 578560 ----a-w- C:\WINDOWS\Sysnative\mscms.dll 2016-09-14 09:33:55 E0517C831BE84420A43A5A76D387449E 47616 ----a-w- C:\WINDOWS\Sysnative\deviceassociation.dll 2016-09-14 09:33:55 9B1A8AA8A06E8CA5B257CE493C12F489 341504 ----a-w- C:\WINDOWS\Sysnative\RADCUI.dll 2016-09-14 09:33:55 111D89C5F6AA8EEC9D3107FC4603A58B 319488 ----a-w- C:\WINDOWS\Sysnative\dot3ui.dll 2016-09-14 09:33:54 D3045CFABFC8D424611216B852643C35 114688 ----a-w- C:\WINDOWS\Sysnative\offlinelsa.dll 2016-09-14 09:33:54 7357C16B7495CC07F6868B4D544824E4 435712 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.AllJoyn.dll 2016-09-14 09:33:54 01177453C9F498EABD49CCF1E50437C8 591872 ----a-w- C:\WINDOWS\Sysnative\SmsRouterSvc.dll 2016-09-14 09:33:53 7003059FE8FFFD0C8A15418563DC16C7 134656 ----a-w- C:\WINDOWS\Sysnative\wificonnapi.dll 2016-09-14 09:33:53 19061999531D6F1199DECD34EEDDFC33 66048 ----a-w- C:\WINDOWS\Sysnative\OnDemandConnRouteHelper.dll 2016-09-14 09:33:52 4C2837CFFE94D1D164F80F6238D2028C 200192 ----a-w- C:\WINDOWS\Sysnative\WUDFPlatform.dll 2016-09-14 09:33:51 8D5EBE968C95BDD31F65F74C3236B19E 6536248 ----a-w- C:\WINDOWS\Sysnative\sppsvc.exe 2016-09-14 09:33:48 FF27A8D860838B31D9960F57AEDF53DB 432640 ----a-w- C:\WINDOWS\Sysnative\CredProvDataModel.dll 2016-09-14 09:33:48 D508794081A5AB25A2B0944B946B8BBE 808288 ----a-w- C:\WINDOWS\Sysnative\WWAHost.exe 2016-09-14 09:33:48 A78CF2B70637443EC4FFBAC9F07AB0A2 387072 ----a-w- C:\WINDOWS\Sysnative\qdvd.dll 2016-09-14 09:33:47 393FA157DA5FA167C0FF69CDDAAAFE65 22561256 ----a-w- C:\WINDOWS\Sysnative\shell32.dll 2016-09-14 09:33:46 B2C1D8B376D21CCE55D996F4B9682992 7536640 ----a-w- C:\WINDOWS\Sysnative\mstscax.dll 2016-09-14 09:33:46 03AEC5BB60CD3A8FF5F58F56D2C0CC66 6605544 ----a-w- C:\WINDOWS\Sysnative\windows.storage.dll 2016-09-14 09:33:44 7CB38AB0088D91B6E3E24BCA52007B7A 3078656 ----a-w- C:\WINDOWS\Sysnative\wininet.dll 2016-09-14 09:33:44 0E2D3FB7D34AB92F42A8AEB0245240A6 2587696 ----a-w- C:\WINDOWS\Sysnative\msxml6.dll 2016-09-14 09:33:43 CF0CDB6987DA95350D43721758455B40 2573824 ----a-w- C:\WINDOWS\Sysnative\WsmSvc.dll 2016-09-14 09:33:43 7A5C9B04013200E547F5543CDAA34262 1526784 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Xaml.Phone.dll 2016-09-14 09:33:42 FFCDA4F0E670F6A132C46B16782AB176 3693064 ----a-w- C:\WINDOWS\Sysnative\iertutil.dll 2016-09-14 09:33:42 FC689DDDA070FE37CBB2A95E7CCF6C00 2444288 ----a-w- C:\WINDOWS\Sysnative\twinui.appcore.dll 2016-09-14 09:33:42 0539C20DD61F15E4EE7C5FDFFD87B6E1 4826624 ----a-w- C:\WINDOWS\Sysnative\ExplorerFrame.dll 2016-09-14 09:33:41 DBC8801F9E1187E474A794A59FB83541 4169728 ----a-w- C:\WINDOWS\Sysnative\UIRibbon.dll 2016-09-14 09:33:40 AAE4D21445B30F7A1D314E5B8567A5E2 1322248 ----a-w- C:\WINDOWS\Sysnative\ole32.dll 2016-09-14 09:33:40 0C55EC7D9EDB50C66BCC2EA1E6B05383 1447776 ----a-w- C:\WINDOWS\Sysnative\webservices.dll 2016-09-14 09:33:39 D3E9912B181446784FE65749D10583C6 1030408 ----a-w- C:\WINDOWS\Sysnative\winresume.efi 2016-09-14 09:33:39 CAC19CB312573639012EE70467B47F3B 875480 ----a-w- C:\WINDOWS\Sysnative\winresume.exe 2016-09-14 09:33:37 C827110703D2353E9DE35B0D68FCE9AC 1575936 ----a-w- C:\WINDOWS\Sysnative\Windows.Media.Speech.dll 2016-09-14 09:33:37 8ED840581CB7CF3240AFECF061EA91E6 1142560 ----a-w- C:\WINDOWS\Sysnative\winload.exe 2016-09-14 09:33:37 2068385CFA5032084B8CB6F9D3ACB836 1094656 ----a-w- C:\WINDOWS\Sysnative\Windows.Networking.Vpn.dll 2016-09-14 09:33:36 BB9CB52D5DF4E5EB5D59DC8CD6993415 1317640 ----a-w- C:\WINDOWS\Sysnative\winload.efi 2016-09-14 09:33:36 9E35088EE8E38E84F230E2B0CA9B7CA2 882688 ----a-w- C:\WINDOWS\Sysnative\ntshrui.dll 2016-09-14 09:33:36 174061E5CCDB9427C995D9E2C8936221 1872896 ----a-w- C:\WINDOWS\Sysnative\workfolderssvc.dll 2016-09-14 09:33:35 BBC69A644F2F5289BD6DC70729E50D32 970752 ----a-w- C:\WINDOWS\Sysnative\nettrace.dll 2016-09-14 09:33:35 A1AD76366C1C852A7F7C42107545CC97 839680 ----a-w- C:\WINDOWS\Sysnative\comuid.dll 2016-09-14 09:33:35 78D47B9F381ED6EF58EE3D2BA77A9633 1732096 ----a-w- C:\WINDOWS\Sysnative\urlmon.dll 2016-09-14 09:33:34 C30FEF13860B0C7886ACD341B7DF8A6A 1674240 ----a-w- C:\WINDOWS\Sysnative\quartz.dll 2016-09-14 09:33:34 28D7CE430541007EFCCB38E0FAC6B8FB 1902592 ----a-w- C:\WINDOWS\Sysnative\msxml3.dll 2016-09-14 09:33:34 109C7FD1869A3C7C08FB9EF83C4698BE 471040 ----a-w- C:\WINDOWS\Sysnative\wbemcomn.dll 2016-09-14 09:33:33 E69F81984B6E3AFF1C2BA0A567D60E24 4213248 ----a-w- C:\WINDOWS\Sysnative\WlanMM.dll 2016-09-14 09:33:33 5997FF4E6A12C0D76E6FDC540D22EB6A 3294208 ----a-w- C:\WINDOWS\Sysnative\mstsc.exe 2016-09-14 09:33:33 23F780F709A399267FED5E6B5085510F 651776 ----a-w- C:\WINDOWS\Sysnative\UserLanguagesCpl.dll 2016-09-14 09:33:32 DC3B37A4ECF2F5ECF096B2C2078A53A5 175120 ----a-w- C:\WINDOWS\Sysnative\sspicli.dll 2016-09-14 09:33:31 AC8197386BEF74AA844FFAE75C3A4DCC 2295808 ----a-w- C:\WINDOWS\Sysnative\wlansvc.dll 2016-09-14 09:33:31 3EE7FC9EB3559D88A70F520D8D975994 642048 ----a-w- C:\WINDOWS\Sysnative\enterprisecsps.dll 2016-09-14 09:33:30 23A8B8301B5F26C5A5C190C2F3B71F97 941568 ----a-w- C:\WINDOWS\Sysnative\MiracastReceiver.dll 2016-09-14 09:33:29 F6A6B608881AAEED7A3ACA7806A7E74C 1297408 ----a-w- C:\WINDOWS\Sysnative\SensorDataService.exe 2016-09-14 09:33:29 BF9B1318562F0128A1A554F4A035085E 510464 ----a-w- C:\WINDOWS\Sysnative\WlanMediaManager.dll 2016-09-14 09:33:29 6ACE7489410ED99F68F1C13D307C6E1A 379392 ----a-w- C:\WINDOWS\Sysnative\usocore.dll 2016-09-14 09:33:29 28F844500ADA77447835BC586F15AAAE 57912 ----a-w- C:\WINDOWS\Sysnative\lsass.exe 2016-09-14 09:33:28 950846F8759CF7AD1FEB71F554DF0929 757248 ----a-w- C:\WINDOWS\Sysnative\winipcsecproc_ssp.dll 2016-09-14 09:33:27 389C25113B303D03CD701B349CE76F32 900608 ----a-w- C:\WINDOWS\Sysnative\Windows.Networking.BackgroundTransfer.dll 2016-09-14 09:33:26 B8D06004DC8E1D872B7BC9D098CCF6BC 607232 ----a-w- C:\WINDOWS\Sysnative\AppxApplicabilityEngine.dll 2016-09-14 09:33:25 DC280CEFBE78A39328B31F883651D587 288768 ----a-w- C:\WINDOWS\Sysnative\WsmWmiPl.dll 2016-09-14 09:33:25 8ABC5F15429263D7C622237489C7B063 904704 ----a-w- C:\WINDOWS\Sysnative\azroles.dll 2016-09-14 09:33:25 348D508EC42B1A9ED6937955938F8055 86528 ----a-w- C:\WINDOWS\Sysnative\spcompat.dll 2016-09-14 09:33:25 13E5DF9154661470023E1178351F35FF 417792 ----a-w- C:\WINDOWS\Sysnative\dmenrollengine.dll 2016-09-14 09:33:25 004E2395FE15814BD8250430F5EEC523 506880 ----a-w- C:\WINDOWS\Sysnative\tileobjserver.dll 2016-09-14 09:33:24 DD510082B0D2FBA111689EB8274BA336 471040 ----a-w- C:\WINDOWS\Sysnative\wcncsvc.dll 2016-09-14 09:33:24 C07DB62C881117C9A6DE5514A137486A 1424384 ----a-w- C:\WINDOWS\Sysnative\wdc.dll 2016-09-14 09:33:21 F45146859C45F013B78F1F6BA83AA30C 274944 ----a-w- C:\WINDOWS\Sysnative\DisplayManager.dll 2016-09-14 09:33:21 ECF693BD5BB66DCE4836707B649209FE 157184 ----a-w- C:\WINDOWS\Sysnative\SettingsHandlers_Geolocation.dll 2016-09-14 09:33:21 E80D4ACCEE35377B74DD02AC602C3B9B 585728 ----a-w- C:\WINDOWS\Sysnative\ieui.dll 2016-09-14 09:33:21 DA2D983EE39BC289E7BBCF88E187F866 163328 ----a-w- C:\WINDOWS\Sysnative\WsmAuto.dll 2016-09-14 09:33:21 3060D0E2D8BE0E6E1A59920F2FC6A8E1 1294336 ----a-w- C:\WINDOWS\Sysnative\wcnwiz.dll 2016-09-14 09:33:20 F45FCD17200DB9988CF73B1435127A69 817152 ----a-w- C:\WINDOWS\Sysnative\Windows.Storage.Search.dll 2016-09-14 09:33:20 8C20E607101B0E1C97362AE632052E09 140288 ----a-w- C:\WINDOWS\Sysnative\WcnApi.dll 2016-09-14 09:33:20 6B705C7A38A3C8152789D48A9B3ACBFF 497664 ----a-w- C:\WINDOWS\Sysnative\WalletService.dll 2016-09-14 09:33:20 2842271BC7E5516BD0B8505C8D65DE97 900608 ----a-w- C:\WINDOWS\Sysnative\CPFilters.dll 2016-09-14 09:33:20 19F82A50098942E0C1F83C9B7DBFC4A0 125952 ----a-w- C:\WINDOWS\Sysnative\MediaFoundation.DefaultPerceptionProvider.dll 2016-09-14 09:33:19 C491915B2EF6EA3D3F018A858C07DA99 715264 ----a-w- C:\WINDOWS\Sysnative\GamePanel.exe 2016-09-14 09:33:19 6E9C4AAF268D7C4BBA4C2870D01AEAD0 112640 ----a-w- C:\WINDOWS\Sysnative\fdWCN.dll 2016-09-14 09:33:19 4A39B6F6A63FF14E41D45837D93E3AD7 373248 ----a-w- C:\WINDOWS\Sysnative\WmpDui.dll 2016-09-14 09:33:19 3BFBD39A1FA4AC0C4BCEE7625F9C3C16 619520 ----a-w- C:\WINDOWS\Sysnative\efswrt.dll 2016-09-14 09:33:18 4AEA60D07F12CA52153B14D7C727C573 414720 ----a-w- C:\WINDOWS\Sysnative\bcastdvr.exe 2016-09-14 09:33:17 DE69C5AB9A7807356A23E616969F3F9E 522240 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.WiFiDirect.dll 2016-09-14 09:33:17 BE3E73D0EAA12ABC1D0D718E9EC11CE8 412672 ----a-w- C:\WINDOWS\Sysnative\wlanui.dll 2016-09-14 09:33:17 874E5DB1CA54C997F33016C17CC0C73B 86528 ----a-w- C:\WINDOWS\Sysnative\AppCapture.dll 2016-09-14 09:33:17 6E1148622DB5B19614747ED85C5368E4 1648640 ----a-w- C:\WINDOWS\Sysnative\comsvcs.dll 2016-09-14 09:33:16 DF0D066D0ABA9F2F3112C4DD4A0FDAA7 117760 ----a-w- C:\WINDOWS\Sysnative\dafWCN.dll 2016-09-14 09:33:16 B38B1EB47173A42D5F3CF192BB3791F1 519680 ----a-w- C:\WINDOWS\Sysnative\WLanConn.dll 2016-09-14 09:33:16 6C7337252280D5AAC8B0C403933FD8EB 982016 ----a-w- C:\WINDOWS\Sysnative\AppxPackaging.dll 2016-09-14 09:33:16 574E8260AD663B4E8A0A4B5D852A8824 37376 ----a-w- C:\WINDOWS\Sysnative\wsmprovhost.exe 2016-09-14 09:33:16 126FCA1567A012BAEA80FC4F8068A48F 278016 ----a-w- C:\WINDOWS\Sysnative\Windows.Internal.Management.dll 2016-09-14 09:33:15 F74033E64EF20ED7E2F53CE8FAEE35D8 14848 ----a-w- C:\WINDOWS\Sysnative\IconCodecService.dll 2016-09-14 09:33:15 C634A2123EE608C9021C1B886D995F5A 368128 ----a-w- C:\WINDOWS\Sysnative\Windows.Graphics.dll 2016-09-14 09:33:15 6AC10197176BCC30D715A28B726A0282 584704 ----a-w- C:\WINDOWS\Sysnative\UIRibbonRes.dll 2016-09-14 09:33:15 184A5D53E910A3ADCBDDF0ACEAB688F6 310784 ----a-w- C:\WINDOWS\Sysnative\sysdm.cpl 2016-09-14 09:33:14 D830FD7A8B279C875309BCAA92D52C49 31744 ----a-w- C:\WINDOWS\Sysnative\WsmAgent.dll 2016-09-14 09:33:14 C24E46B261D33E9600ADD9CD0C1C51D0 268288 ----a-w- C:\WINDOWS\Sysnative\updatehandlers.dll 2016-09-14 09:33:14 BB5A603D3ED219ABFB30FD7436017D8B 126464 ----a-w- C:\WINDOWS\Sysnative\dialserver.dll 2016-09-14 09:33:14 9948D294F35C2B99EBAEADD19166AEF5 162816 ----a-w- C:\WINDOWS\Sysnative\enrollmentapi.dll 2016-09-14 09:33:14 744913D381916C4E26E520CF909DE085 37376 ----a-w- C:\WINDOWS\Sysnative\cmintegrator.dll 2016-09-14 09:33:14 6CD8250984AB43EDADF61619069CA858 31232 ----a-w- C:\WINDOWS\Sysnative\odbcconf.dll 2016-09-14 09:33:11 8EA14B5D993AB536EE45DF19DD9FB025 1056256 ----a-w- C:\WINDOWS\Sysnative\JpMapControl.dll 2016-09-14 09:33:11 8D6E3C423CFA422F6E518BABEC739C89 988160 ----a-w- C:\WINDOWS\Sysnative\NMAA.dll 2016-09-14 09:33:11 83BAE780D949ADA5F3658927E7EDC517 460800 ----a-w- C:\WINDOWS\Sysnative\MapConfiguration.dll 2016-09-14 09:33:11 47BB67322EEB3448153A1BEC527B27F8 852992 ----a-w- C:\WINDOWS\Sysnative\MapsStore.dll 2016-09-14 09:33:10 BF504CD59A5B54097BEC49744C9A5696 5503488 ----a-w- C:\WINDOWS\Sysnative\d2d1.dll 2016-09-14 09:33:10 B413AD078ED1A7FA2B0F61DFFEC7DE8C 7200256 ----a-w- C:\WINDOWS\Sysnative\BingMaps.dll 2016-09-14 09:33:10 1719A7BB88AFC8DF1D43994FB17E0112 939520 ----a-w- C:\WINDOWS\Sysnative\MapControlCore.dll 2016-09-14 09:33:09 AA5FB7BE55B8B77BB14DC1CCEFA1392D 7977984 ----a-w- C:\WINDOWS\Sysnative\mos.dll 2016-09-14 09:33:06 70B4901B4D4784F5B1B0F1618E7137A0 1500160 ----a-w- C:\WINDOWS\Sysnative\RecoveryDrive.exe 2016-09-14 09:33:05 1E237FAC9C2D705921884DC145C2D702 733184 ----a-w- C:\WINDOWS\Sysnative\rasapi32.dll 2016-09-14 09:33:03 7C9D3716183A11E37825803EC175287E 2773088 ----a-w- C:\WINDOWS\Sysnative\d3d11.dll 2016-09-14 09:33:03 2DE54E9384AE4459AC9F2337AEE655AC 630784 ----a-w- C:\WINDOWS\Sysnative\MessagingDataModel2.dll 2016-09-14 09:33:02 8A765D6E27FCA0E99262AF04009BF212 3355136 ----a-w- C:\WINDOWS\Sysnative\msftedit.dll 2016-09-14 09:33:02 1405E48696142D0CE1AC494B16F807FF 2881536 ----a-w- C:\WINDOWS\Sysnative\storagewmi.dll 2016-09-14 09:33:01 D768F4B49DB81E7A665FDB2029B0893F 1144320 ----a-w- C:\WINDOWS\Sysnative\qmgr.dll 2016-09-14 09:33:01 C28C9612D1BCB3C76237D2B679BE210B 28672 ----a-w- C:\WINDOWS\Sysnative\mapsupdatetask.dll 2016-09-14 09:33:01 420FA89BDCFD5BE3BB8FB60C9FE07D93 66560 ----a-w- C:\WINDOWS\Sysnative\MosHostClient.dll 2016-09-14 09:33:01 2ABFA7862B64AFFDE4A56752DC50251A 89088 ----a-w- C:\WINDOWS\Sysnative\MapsCSP.dll 2016-09-14 09:33:01 1F90F7FF05BE19803FD4C028C4304F34 72704 ----a-w- C:\WINDOWS\Sysnative\moshost.dll 2016-09-14 09:33:01 1D41D09620A2EB130D3553E015644BD9 120320 ----a-w- C:\WINDOWS\Sysnative\MapsBtSvc.dll 2016-09-14 09:32:59 F9AE4B8C5C9C268831A20E6304ACF580 1415200 ----a-w- C:\WINDOWS\Sysnative\msctf.dll 2016-09-14 09:32:59 EC1C21BC17FCABE71CC99915A8E74992 799568 ----a-w- C:\WINDOWS\Sysnative\oleaut32.dll 2016-09-14 09:32:59 9AF32A89413B48AC47BE39071060646E 270848 ----a-w- C:\WINDOWS\Sysnative\moshostcore.dll 2016-09-14 09:32:59 47721869B78A3B2B347419541A87046C 1465344 ----a-w- C:\WINDOWS\Sysnative\VSSVC.exe 2016-09-14 09:32:59 1BA3A19D8E4CC441FCADE31AEDB821B7 74240 ----a-w- C:\WINDOWS\Sysnative\MosStorage.dll 2016-09-14 09:32:58 EEC1DE319BCF51265708AFD8A6EDEDAA 1613664 ----a-w- C:\WINDOWS\Sysnative\diagtrack.dll 2016-09-14 09:32:58 9C3E05694F3C1146CC7FEEEB0D22BE88 1052160 ----a-w- C:\WINDOWS\Sysnative\MsSpellCheckingFacility.dll 2016-09-14 09:32:58 603525CF5F77BE890F3E07895ED47D19 1443328 ----a-w- C:\WINDOWS\Sysnative\diagperf.dll 2016-09-14 09:32:58 53A15E033D640133CBC60DA29057393B 752128 ----a-w- C:\WINDOWS\Sysnative\PhoneService.dll 2016-09-14 09:32:57 D7D01C3432AF88BE887292149D842D49 4646912 ----a-w- C:\WINDOWS\Sysnative\xpsrchvw.exe 2016-09-14 09:32:57 91DFD200100965DB47A2C512EDD35979 1385472 ----a-w- C:\WINDOWS\Sysnative\usercpl.dll 2016-09-14 09:32:57 6853048101D2744446870534D9885C72 1558528 ----a-w- C:\WINDOWS\Sysnative\vssapi.dll 2016-09-14 09:32:56 AB8543CE8D5A2E1D4C7E1C3B5893B190 1554152 ----a-w- C:\WINDOWS\Sysnative\wmpmde.dll 2016-09-14 09:32:56 79287A1F683963A621468C40F04B3692 865792 ----a-w- C:\WINDOWS\Sysnative\AzureSettingSyncProvider.dll 2016-09-14 09:32:56 72070284ADAD4506EC8E0BBAFBDE964F 363008 ----a-w- C:\WINDOWS\Sysnative\PhoneOm.dll 2016-09-14 09:32:56 410EC733547D7FE5709D108015088460 1033216 ----a-w- C:\WINDOWS\Sysnative\termsrv.dll 2016-09-14 09:32:55 F85E177FDF28AC954FAEB229B609EB17 359256 ----a-w- C:\WINDOWS\Sysnative\msv1_0.dll 2016-09-14 09:32:55 C34CD5DEA079FC796B244D65CC0C2255 2144512 ----a-w- C:\WINDOWS\Sysnative\d3d9.dll 2016-09-14 09:32:55 A191CCDA679993D27602B29731D37D50 1813504 ----a-w- C:\WINDOWS\Sysnative\pnidui.dll 2016-09-14 09:32:55 3032C21AAA79B3ADC2B291C0B11DC112 588288 ----a-w- C:\WINDOWS\Sysnative\wlidprov.dll 2016-09-14 09:32:54 E9DE7492D4AD20E7E0839FC4543E5B57 2548936 ----a-w- C:\WINDOWS\Sysnative\d3d10warp.dll 2016-09-14 09:32:54 DE45A2B6EEC40BAC33C089B7999E9146 513024 ----a-w- C:\WINDOWS\Sysnative\hnetcfg.dll 2016-09-14 09:32:54 D968D2F07CDB6EC65CFF60AEF67B46EB 649216 ----a-w- C:\WINDOWS\Sysnative\clusapi.dll 2016-09-14 09:32:54 8D344C87273C429F373F8E17965401D8 2057216 ----a-w- C:\WINDOWS\Sysnative\wlidsvc.dll 2016-09-14 09:32:54 57D6A84FDFE5F2EC6ED22FB8275897A8 318464 ----a-w- C:\WINDOWS\Sysnative\Windows.Cortana.OneCore.dll 2016-09-14 09:32:54 3A7F8AB8C95C1017EB905E47A51357A3 414232 ----a-w- C:\WINDOWS\Sysnative\BCP47Langs.dll 2016-09-14 09:32:53 EF0111BCB4B8F0058ED2FEEE88B43A1F 899072 ----a-w- C:\WINDOWS\Sysnative\D3D12.dll 2016-09-14 09:32:53 C3D16D5FB3275F51450638BF4CE5E6CB 1783808 ----a-w- C:\WINDOWS\Sysnative\wsp_fs.dll 2016-09-14 09:32:53 131E8CB3A1AA25732ACDBFA60095AE73 1847808 ----a-w- C:\WINDOWS\Sysnative\WMPDMC.exe 2016-09-14 09:32:52 EAD55A7EC50B0E93B73ABDA29E387548 667136 ----a-w- C:\WINDOWS\Sysnative\vds.exe 2016-09-14 09:32:52 9D86C1A36319E048D70BDAE2FC46B72B 3589120 ----a-w- C:\WINDOWS\Sysnative\win32kfull.sys 2016-09-14 09:32:52 41BC6CE286934F346D194A3207884C90 1318400 ----a-w- C:\WINDOWS\Sysnative\wsp_health.dll 2016-09-14 09:32:52 39886FE4B4F5808191E0EF75FE3A5681 889344 ----a-w- C:\WINDOWS\Sysnative\mprddm.dll 2016-09-14 09:32:52 2EAC7BF69DC104F9AC913D5E00550334 467968 ----a-w- C:\WINDOWS\Sysnative\swprv.dll 2016-09-14 09:32:51 AEADFE9C3D3FBB3BE619AB369AE069B6 527872 ----a-w- C:\WINDOWS\Sysnative\defragsvc.dll 2016-09-14 09:32:51 51BF55AC0B9F0D2EE162C24554AD4B0D 3093504 ----a-w- C:\WINDOWS\Sysnative\mispace.dll 2016-09-14 09:32:51 4C1FAB963BA644F707AAD19070918371 479744 ----a-w- C:\WINDOWS\Sysnative\apphelp.dll 2016-09-14 09:32:50 E9D276A024E65212DE4CDF1F45AAC556 1087488 ----a-w- C:\WINDOWS\Sysnative\reseteng.dll 2016-09-14 09:32:50 C2BC0DD8B5EFF962A445EACED2749A89 1997312 ----a-w- C:\WINDOWS\Sysnative\ActiveSyncProvider.dll 2016-09-14 09:32:50 BA40E234563F5C991A1DC79026F7FB48 821760 ----a-w- C:\WINDOWS\Sysnative\TokenBroker.dll 2016-09-14 09:32:50 B08A00B65C26249648ED67E74E21B8EA 1213440 ----a-w- C:\WINDOWS\Sysnative\sdengin2.dll 2016-09-14 09:32:50 6F3F3259088633224F13424EAAD40A9C 313344 ----a-w- C:\WINDOWS\Sysnative\resutils.dll 2016-09-14 09:32:49 E47D531A0AA241316D30817823BCD904 503600 ----a-w- C:\WINDOWS\Sysnative\DMRServer.dll 2016-09-14 09:32:49 AF46F7D896F67D117DB4B293740F2090 352768 ----a-w- C:\WINDOWS\Sysnative\eappcfg.dll 2016-09-14 09:32:49 123A9873FAF69EB274E78EE739AA4C16 918016 ----a-w- C:\WINDOWS\Sysnative\XpsFilt.dll 2016-09-14 09:32:48 E7917387C6866992C5D37311FCE2689F 693592 ----a-w- C:\WINDOWS\Sysnative\NetSetupEngine.dll 2016-09-14 09:32:48 B03DF95636ADED78F32F8AA546E7988A 705576 ----a-w- C:\WINDOWS\Sysnative\kernel32.dll 2016-09-14 09:32:48 A3BC61B4DCBB5BAEEAE12A92CF612D17 984576 ----a-w- C:\WINDOWS\Sysnative\tdh.dll 2016-09-14 09:32:48 62C35022062C6C2CE797E74DD4952BD8 342016 ----a-w- C:\WINDOWS\Sysnative\APHostService.dll 2016-09-14 09:32:48 4E32080374906CE25329F784F43FE7BB 1570816 ----a-w- C:\WINDOWS\Sysnative\wbengine.exe 2016-09-14 09:32:48 31EFC43DA99BB96A35CE091F2FCAE58A 511488 ----a-w- C:\WINDOWS\Sysnative\icsvc.dll 2016-09-14 09:32:48 1F730435804C65ADF4195AECAB3DE19F 989536 ----a-w- C:\WINDOWS\Sysnative\SecConfig.efi 2016-09-14 09:32:48 14E9B28BED8BFE27A61F31D90C394690 1238584 ----a-w- C:\WINDOWS\Sysnative\Taskmgr.exe 2016-09-14 09:32:47 E44B9B6F5E842C0E4D63E2644CDE2370 528736 ----a-w- C:\WINDOWS\Sysnative\pcasvc.dll 2016-09-14 09:32:47 ADF8DBE1212418207F6D5F6F4E8A9E07 452608 ----a-w- C:\WINDOWS\Sysnative\upnphost.dll 2016-09-14 09:32:47 83D91A842E6A63BFB611C87C2E58E184 1717760 ----a-w- C:\WINDOWS\Sysnative\GdiPlus.dll 2016-09-14 09:32:47 20A3341C586525486349C759E83C0E0A 265728 ----a-w- C:\WINDOWS\Sysnative\netman.dll 2016-09-14 09:32:46 DA901E60F1892D307B275BF7238A84BD 58368 ----a-w- C:\WINDOWS\Sysnative\csrsrv.dll 2016-09-14 09:32:46 D05D6D88E5C8769E365CE34E4018DFAF 317952 ----a-w- C:\WINDOWS\Sysnative\NetworkBindingEngineMigPlugin.dll 2016-09-14 09:32:46 623A1B3CA6DDC9644FF71FD1BE6F4376 970752 ----a-w- C:\WINDOWS\Sysnative\kerberos.dll 2016-09-14 09:32:46 602B47D2AE72C4F9EBE2B567003D3DA6 4387680 ----a-w- C:\WINDOWS\Sysnative\setupapi.dll 2016-09-14 09:32:45 B8B197787331426271457525DA7FC04D 314368 ----a-w- C:\WINDOWS\Sysnative\EnterpriseAppMgmtSvc.dll 2016-09-14 09:32:45 63C525D67B0235D737FA54965DE00271 309760 ----a-w- C:\WINDOWS\Sysnative\wusa.exe 2016-09-14 09:32:45 6173A1B984658D43797D29D016EB370C 439136 ----a-w- C:\WINDOWS\Sysnative\netcfgx.dll 2016-09-14 09:32:45 5971BD53E54C2B5BD8C76C7BEFA2FDF3 332800 ----a-w- C:\WINDOWS\Sysnative\eapp3hst.dll 2016-09-14 09:32:45 2E46B48F627C122238DF2828B42F7FD4 871776 ----a-w- C:\WINDOWS\Sysnative\drvstore.dll 2016-09-14 09:32:44 EC6945CECC4B95DCF730F3041F5153C1 250880 ----a-w- C:\WINDOWS\Sysnative\MicrosoftAccountCloudAP.dll 2016-09-14 09:32:44 D7CDC32C3407642CCC206DEDC0EBA8AB 550656 ----a-w- C:\WINDOWS\Sysnative\directmanipulation.dll 2016-09-14 09:32:44 310DDC18C7E5DDC6068632807F50E805 337328 ----a-w- C:\WINDOWS\Sysnative\Windows.Storage.ApplicationData.dll 2016-09-14 09:32:44 0B9471DE5E3FF419BA41E5E7C35B27CE 105984 ----a-w- C:\WINDOWS\Sysnative\Windows.Cortana.ProxyStub.dll 2016-09-14 09:32:43 73DB3AC4CFCDE0C5E57A8427114610D5 523616 ----a-w- C:\WINDOWS\Sysnative\wimserv.exe 2016-09-14 09:32:43 3262A194EFF1A1B31EEEE16CB14BAA29 68608 ----a-w- C:\WINDOWS\Sysnative\fdProxy.dll 2016-09-14 09:32:42 43D0007BA47874107D4EFC555CDF83C1 1671168 ----a-w- C:\WINDOWS\Sysnative\FntCache.dll 2016-09-14 09:32:42 050924454935C444A55A5CD8711BF95A 276480 ----a-w- C:\WINDOWS\Sysnative\WindowsCodecsExt.dll 2016-09-14 09:32:41 913F890E9E28428693167ABCB6A78DA2 68608 ----a-w- C:\WINDOWS\Sysnative\udhisapi.dll 2016-09-14 09:32:40 EF90988CEE0BA39671EEF2FA3097784F 41472 ----a-w- C:\WINDOWS\Sysnative\upnpcont.exe 2016-09-14 09:32:40 99542C1582929A8539C32A704230CBD4 892416 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.SmartCards.dll 2016-09-14 09:32:40 933BD7BEECB1EE5FCB559597540D72F3 945664 ----a-w- C:\WINDOWS\Sysnative\autochk.exe 2016-09-14 09:32:39 FAB69529A0B90462C345F1CEE6CD9432 270336 ----a-w- C:\WINDOWS\Sysnative\netplwiz.dll 2016-09-14 09:32:39 DD1E35253EBBF2C3CA10CF33E9CFF4FD 599040 ----a-w- C:\WINDOWS\Sysnative\duser.dll 2016-09-14 09:32:39 A5103F9A30E47B9BF02EE5F4127A8EA4 356352 ----a-w- C:\WINDOWS\Sysnative\mcbuilder.exe 2016-09-14 09:32:39 9040A0D91472C74EBBB55F4C1CFC6918 219136 ----a-w- C:\WINDOWS\Sysnative\EnterpriseModernAppMgmtCSP.dll 2016-09-14 09:32:39 8F7589E30AC42D0019B8B22E138A78AA 1755648 ----a-w- C:\WINDOWS\Sysnative\dui70.dll 2016-09-14 09:32:39 80024D0CF49036939606450B66C49141 120832 ----a-w- C:\WINDOWS\Sysnative\VoipRT.dll 2016-09-14 09:32:39 41E47479C680BEEF18D3006279B4E89B 824832 ----a-w- C:\WINDOWS\Sysnative\adtschema.dll 2016-09-14 09:32:39 1889B4DA9583A6AA762D804B1B01FFCD 283648 ----a-w- C:\WINDOWS\Sysnative\PlayToReceiver.dll 2016-09-14 09:32:38 D731CB85A7313136E2143EE9777DDFDF 2800128 ----a-w- C:\WINDOWS\Sysnative\netshell.dll 2016-09-14 09:32:38 5D2DF0392FFD0BA4FF27F503999997C2 1487360 ----a-w- C:\WINDOWS\Sysnative\pla.dll 2016-09-14 09:32:37 DC45D070B4E980DE70A366132AE4CF63 4456448 ----a-w- C:\WINDOWS\Sysnative\D3DCompiler_47.dll 2016-09-14 09:32:37 C07FE98552BE88E5B4591005D9D24A28 685568 ----a-w- C:\WINDOWS\Sysnative\scapi.dll 2016-09-14 09:32:37 7320656A3C9B7ECA76161DE9879BCCC0 504832 ----a-w- C:\WINDOWS\Sysnative\dlnashext.dll 2016-09-14 09:32:37 42E7A1E58B1708DE50DB56DFBE061AB3 465920 ----a-w- C:\WINDOWS\Sysnative\StikyNot.exe 2016-09-14 09:32:36 E65E475BF08109A56DE7A1BFAB1C6A96 1395712 ----a-w- C:\WINDOWS\Sysnative\UIAutomationCore.dll 2016-09-14 09:32:36 5CFB1E4A4DDA764CFD4E0B39EC879513 1582080 ----a-w- C:\WINDOWS\Sysnative\aitstatic.exe 2016-09-14 09:32:36 4C14BD6060628F62FD0FF724603303B6 297472 ----a-w- C:\WINDOWS\Sysnative\unimdm.tsp 2016-09-14 09:32:36 490AB4F144B1BA26B21B9AE9DD8E8577 308736 ----a-w- C:\WINDOWS\Sysnative\eapphost.dll 2016-09-14 09:32:36 44E60AC79BF9C48627DE5B0DDD978613 135680 ----a-w- C:\WINDOWS\Sysnative\vdsutil.dll 2016-09-14 09:32:36 42ACB56AE0FD9CCC3F2514E6A7610A5F 394752 ----a-w- C:\WINDOWS\Sysnative\WMPhoto.dll 2016-09-14 09:32:36 315FB5AEFC044656B84738F3793D3033 1387520 ----a-w- C:\WINDOWS\Sysnative\win32kbase.sys 2016-09-14 09:32:35 8DD84A1D556EB5EE72BBA43DFB9301E3 387584 ----a-w- C:\WINDOWS\Sysnative\syncutil.dll 2016-09-14 09:32:35 61E8FE64E5FF44EF9CF9B627AF99EDD1 2902528 ----a-w- C:\WINDOWS\Sysnative\themeui.dll 2016-09-14 09:32:35 1FBC5FF75CE1B6DCC61DA0352E7C91AA 112640 ----a-w- C:\WINDOWS\Sysnative\eapsvc.dll 2016-09-14 09:32:34 DA9765B81341D7BBDAA68528768E6EDA 606720 ----a-w- C:\WINDOWS\Sysnative\wcmsvc.dll 2016-09-14 09:32:34 95B18D014FB564E5EF0CFF46BF01D184 915456 ----a-w- C:\WINDOWS\Sysnative\configurationclient.dll 2016-09-14 09:32:34 7FB521815C6AF0BC1E6C96722DDD6BC4 61952 ----a-w- C:\WINDOWS\Sysnative\vss_ps.dll 2016-09-14 09:32:34 249EB3B68B22DBB27FF50FBC6BEFE67B 70144 ----a-w- C:\WINDOWS\Sysnative\vsstrace.dll 2016-09-14 09:32:33 FE0AFB01EE8165CE89C177405EABBAF5 47616 ----a-w- C:\WINDOWS\Sysnative\TpmTasks.dll 2016-09-14 09:32:33 FCC55E58676AF5579FFD02305EC73784 846848 ----a-w- C:\WINDOWS\Sysnative\ipsecsnp.dll 2016-09-14 09:32:33 CD8DB6F5D17A7E918774E1399185B883 436736 ----a-w- C:\WINDOWS\Sysnative\AppXDeploymentClient.dll 2016-09-14 09:32:33 B2DCCF139A78CDA1CC9C0031C6EB2B0C 63488 ----a-w- C:\WINDOWS\Sysnative\msobjs.dll 2016-09-14 09:32:33 77E00A809F1DC856729E0A7EBBDD24B5 440320 ----a-w- C:\WINDOWS\Sysnative\fhcfg.dll 2016-09-14 09:32:33 130AA463B4C1E0DAABF0A3A20E3ECE7C 948736 ----a-w- C:\WINDOWS\Sysnative\XblAuthManager.dll 2016-09-14 09:32:32 EB8E21FD0904899CF636A71A8C7D53A3 368640 ----a-w- C:\WINDOWS\Sysnative\diagtrack_win.dll 2016-09-14 09:32:32 DEA54E0237C89A5BD242EA80EB65D50A 853504 ----a-w- C:\WINDOWS\Sysnative\aadtb.dll 2016-09-14 09:32:32 C27C39D56B11C2DF2257CC466375A52B 118784 ----a-w- C:\WINDOWS\Sysnative\fhsvc.dll 2016-09-14 09:32:32 B6BFFC3BFC42547FEB276B84F74A0399 555520 ----a-w- C:\WINDOWS\Sysnative\SyncController.dll 2016-09-14 09:32:32 A8F3DC02565733B0DF789D391E78BD3A 567808 ----a-w- C:\WINDOWS\Sysnative\MBMediaManager.dll 2016-09-14 09:32:32 3ED33356F27EA5F4FAD792D77C4FCAB5 245248 ----a-w- C:\WINDOWS\Sysnative\MicrosoftAccountExtension.dll 2016-09-14 09:32:32 3768230FC9C22DB3E80E61C61908D806 91136 ----a-w- C:\WINDOWS\Sysnative\browserbroker.dll 2016-09-14 09:32:31 1D1ACF3361F8ABFD9C5D553CE22195D2 187392 ----a-w- C:\WINDOWS\Sysnative\BootMenuUX.dll 2016-09-14 09:32:30 6CA8B7E935286A3D3794E14DDE069C4E 198144 ----a-w- C:\WINDOWS\Sysnative\winsrv.dll 2016-09-14 09:32:30 3651858CEC2F9DE91C52F4F067D2B091 210432 ----a-w- C:\WINDOWS\Sysnative\wcmcsp.dll 2016-09-14 09:32:21 608A3DD0F40E92980F8E02461A8C504B 14251520 ----a-w- C:\WINDOWS\Sysnative\wmp.dll 2016-09-14 09:32:18 6C12AA7FEC1A78FDD2765654CFD8162B 11545088 ----a-w- C:\WINDOWS\Sysnative\twinui.dll 2016-09-14 09:32:17 07C591DBDCEB68519EEF5BAF72873C84 6976000 ----a-w- C:\WINDOWS\Sysnative\Windows.Data.Pdf.dll 2016-09-14 09:32:15 C4F9C5E582E674B3FE666C498C6E3622 2610176 ----a-w- C:\WINDOWS\Sysnative\NetworkMobileSettings.dll 2016-09-14 09:32:14 F739C64580F71DC4F068B5353CA8B9B3 7468896 ----a-w- C:\WINDOWS\Sysnative\ntoskrnl.exe 2016-09-14 09:32:14 3242721C0EF6AEE1E68568F4159907AD 3994624 ----a-w- C:\WINDOWS\Sysnative\SettingsHandlers_nt.dll 2016-09-14 09:32:09 5A763177C01E0A5CAF8BBE67C9FA4BB6 1390592 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Shell.dll 2016-09-14 09:32:08 42D71C6B4EEC9C3B71B4D484B8E6C554 1965568 ----a-w- C:\WINDOWS\Sysnative\mmc.exe 2016-09-14 09:32:07 D4063886393294CF8A8CE8CC20035EF5 1466368 ----a-w- C:\WINDOWS\Sysnative\Pimstore.dll 2016-09-14 09:32:07 6ADF92DB3B1A65D8CB1FB66CB5D6131B 1036288 ----a-w- C:\WINDOWS\Sysnative\Windows.Media.Streaming.dll 2016-09-14 09:32:07 41FFB42EB218077E18F13209572B0FF7 1552104 ----a-w- C:\WINDOWS\Sysnative\winmde.dll 2016-09-14 09:32:06 B3564BE23E0624BEB0452F80A152BB12 1141248 ----a-w- C:\WINDOWS\Sysnative\winipcsecproc.dll 2016-09-14 09:32:06 86F21A9D9F657FA66C06DE21C7E5A749 1997832 ----a-w- C:\WINDOWS\Sysnative\KernelBase.dll 2016-09-14 09:32:06 55EF740908BBFAE6E29DD83C55B6BFC8 2445312 ----a-w- C:\WINDOWS\Sysnative\DWrite.dll 2016-09-14 09:32:06 00D508D577158467A99EA4481DB40DB3 3585536 ----a-w- C:\WINDOWS\Sysnative\SystemSettingsThresholdAdminFlowUI.dll 2016-09-14 09:32:05 EFBE1A2A18509E30B3D63E56455A46B2 938496 ----a-w- C:\WINDOWS\Sysnative\ContactApis.dll 2016-09-14 09:32:05 8C6BFFC7A165BD99934C6655D96CE587 958976 ----a-w- C:\WINDOWS\Sysnative\RemoteNaturalLanguage.dll 2016-09-14 09:32:05 612E13635C9DCFD6F3C926A8C393F20E 1490432 ----a-w- C:\WINDOWS\Sysnative\UserDataService.dll 2016-09-14 09:32:04 B1BC1DEF900CB1176727C05CF167F530 28851224 ----a-w- C:\WINDOWS\Sysnative\WindowsCodecsRaw.dll 2016-09-14 09:32:03 E3A42C6DF7CFC5F195FAF5AF5956ABF9 1097216 ----a-w- C:\WINDOWS\Sysnative\dosvc.dll 2016-09-14 09:32:03 A4D0F8937FC0812EA7C3BE5FEA192B2F 2125312 ----a-w- C:\WINDOWS\Sysnative\SettingsHandlers_Bluetooth.dll 2016-09-14 09:32:02 E3C697949080965BFD1D311F360079EE 730344 ----a-w- C:\WINDOWS\Sysnative\Windows.Internal.Shell.Broker.dll 2016-09-14 09:32:02 AE347B9A40B45F7B9924E9CD4801EC75 2012672 ----a-w- C:\WINDOWS\Sysnative\winmsipc.dll 2016-09-14 09:32:02 83268B5C98979F36B4251FA8C1201EAD 1054208 ----a-w- C:\WINDOWS\Sysnative\audiosrv.dll 2016-09-14 09:32:02 590A7373377FED15D6563F66EBFA7D28 1776768 ----a-w- C:\WINDOWS\Sysnative\WindowsCodecs.dll 2016-09-14 09:32:00 9DBCC977F21CA76950F0389B4C72F7AC 700416 ----a-w- C:\WINDOWS\Sysnative\AppointmentApis.dll 2016-09-14 09:32:00 8A36DC8E9FC68443004628D431EF2FCF 2731008 ----a-w- C:\WINDOWS\Sysnative\gameux.dll 2016-09-14 09:32:00 5C281EB1D5F33A419937EE93E25B4172 984576 ----a-w- C:\WINDOWS\Sysnative\SettingSyncCore.dll 2016-09-14 09:31:59 C8BEE314E42E384D60FE33112A6713A7 472064 ----a-w- C:\WINDOWS\Sysnative\Geolocation.dll 2016-09-14 09:31:59 9489550C256A4ED17D6DDEDF1E4201DC 961024 ----a-w- C:\WINDOWS\Sysnative\WSShared.dll 2016-09-14 09:31:59 71319C9115C768FC52B08114B8B1B5DF 814080 ----a-w- C:\WINDOWS\Sysnative\appwiz.cpl 2016-09-14 09:31:58 F6C9085580E41CA9D8F4D33204AC1E56 1211904 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Cred.dll 2016-09-14 09:31:58 A381D0E89515688097FCF744FF5F7B5A 2187408 ----a-w- C:\WINDOWS\Sysnative\hevcdecoder.dll 2016-09-14 09:31:58 823DA75B99F61585D9D47DEAC59FD410 1417728 ----a-w- C:\WINDOWS\Sysnative\mqqm.dll 2016-09-14 09:31:58 22CF3668BA7C3B037B3918678293B2BD 527872 ----a-w- C:\WINDOWS\Sysnative\w32time.dll 2016-09-14 09:31:57 92A0C106F9FA0DE5B7A9BA767D524B80 1239552 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.Bluetooth.dll 2016-09-14 09:31:57 926187B3890DF1275760ACF1C08FD9D3 638976 ----a-w- C:\WINDOWS\Sysnative\ShareHost.dll 2016-09-14 09:31:57 7197098648DF23E0FC3E18A5E6899B53 770048 ----a-w- C:\WINDOWS\Sysnative\certca.dll 2016-09-14 09:31:56 F3BF9A332A418CAAD05D19E763EE35F2 990208 ----a-w- C:\WINDOWS\Sysnative\SharedStartModel.dll 2016-09-14 09:31:56 EFA006CC3D3BB2C2848F091C2EA19FBD 636928 ----a-w- C:\WINDOWS\Sysnative\hgcpl.dll 2016-09-14 09:31:56 DC8BB0459538D3BDDA7163A2DE151361 388888 ----a-w- C:\WINDOWS\Sysnative\wmpps.dll 2016-09-14 09:31:56 704F04824DEF12C5ED051A6CCC0A16A4 1073152 ----a-w- C:\WINDOWS\Sysnative\RDXService.dll 2016-09-14 09:31:56 3C760B88747D8F1BAD0ED93E5D41CFD3 305296 ----a-w- C:\WINDOWS\Sysnative\wmpeffects.dll 2016-09-14 09:31:55 C3477C29B51E20C962D20667E4668A6D 714240 ----a-w- C:\WINDOWS\Sysnative\SystemSettings.Handlers.dll 2016-09-14 09:31:55 93D216BE4F43591BF7B3A9E4AF5A45A2 9324032 ----a-w- C:\WINDOWS\Sysnative\wmploc.DLL 2016-09-14 09:31:54 AED9F69883F341A15A7FCCC4BFDC0F1F 95232 ----a-w- C:\WINDOWS\Sysnative\SecureTimeAggregator.dll 2016-09-14 09:31:54 A4116FB92BACB4B90AD988C704C11042 742192 ----a-w- C:\WINDOWS\Sysnative\EditionUpgradeManagerObj.dll 2016-09-14 09:31:54 A05B0E866E1CB37CC0F56EB72A7714EB 315392 ----a-w- C:\WINDOWS\Sysnative\RDXTaskFactory.dll 2016-09-14 09:31:54 3C97C98A9695FAAC1599B9450DA3282E 674304 ----a-w- C:\WINDOWS\Sysnative\mbsmsapi.dll 2016-09-14 09:31:54 006568F0040B8E71F8B465B95DFDEED5 790528 ----a-w- C:\WINDOWS\Sysnative\EmailApis.dll 2016-09-14 09:31:53 B328ADB19A009C663FEC97D112038D4C 492544 ----a-w- C:\WINDOWS\Sysnative\SystemSettings.UserAccountsHandlers.dll 2016-09-14 09:31:53 7441ACF8D5C9E86F2036A6F05DC44718 565600 ----a-w- C:\WINDOWS\Sysnative\SettingSyncHost.exe 2016-09-14 09:31:53 5ECC4E321F64C84D3C7BA3108C568AF2 726528 ----a-w- C:\WINDOWS\Sysnative\ChatApis.dll 2016-09-14 09:31:53 54C2D58D4DD1579318287CE11FB94D21 613376 ----a-w- C:\WINDOWS\Sysnative\SettingSync.dll 2016-09-14 09:31:52 F0F7452505B8B673584238B75B310248 896512 ----a-w- C:\WINDOWS\Sysnative\MbaeApiPublic.dll 2016-09-14 09:31:52 CD5F9A47AF011C102D15056D1777AC33 515072 ----a-w- C:\WINDOWS\Sysnative\OneDriveSettingSyncProvider.dll 2016-09-14 09:31:52 CCAAF9BEF65289824D079A86D821B829 450048 ----a-w- C:\WINDOWS\Sysnative\Windows.Internal.Bluetooth.dll 2016-09-14 09:31:52 9F896D979E867944B50DB99D63D0B069 374008 ----a-w- C:\WINDOWS\Sysnative\SystemSettingsAdminFlows.exe 2016-09-14 09:31:52 7E501D92E4DF158696AD332ADB57D302 119296 ----a-w- C:\WINDOWS\Sysnative\UserDataTimeUtil.dll 2016-09-14 09:31:52 7E4FCE1C05D5B31627C1F5C221A42A6B 531456 ----a-w- C:\WINDOWS\Sysnative\sppcext.dll 2016-09-14 09:31:52 1DD7A0382840BFBC3501EAE88A49CE85 600064 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.LowLevel.dll 2016-09-14 09:31:51 DA59C11CF37EBB05E312E9314F8DD1F2 602112 ----a-w- C:\WINDOWS\Sysnative\cryptui.dll 2016-09-14 09:31:51 4675DC0F0BD1DEAAA3DDE0882E775BAC 572928 ----a-w- C:\WINDOWS\Sysnative\filemgmt.dll 2016-09-14 09:31:51 03A7A34A492D1AFE82C7EA89A24B18D8 1540216 ----a-w- C:\WINDOWS\Sysnative\sppobjs.dll 2016-09-14 09:31:50 FD706ED984D57FD3B70446EA4E11EE11 564224 ----a-w- C:\WINDOWS\Sysnative\DevicePairing.dll 2016-09-14 09:31:50 EAF2678B33B492D2CBF6F9125F242F1F 5123072 ----a-w- C:\WINDOWS\Sysnative\dbgeng.dll 2016-09-14 09:31:50 BAC89DCD30C53AE213F7EA1A6719F401 3449168 ----a-w- C:\WINDOWS\Sysnative\WSService.dll 2016-09-14 09:31:50 87FF6EB2C1725A2954AA76A703360031 414720 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.BioFeedback.dll 2016-09-14 09:31:49 B7DF3A93F4702A8D9B805F24FA8BE6B5 625000 ----a-w- C:\WINDOWS\Sysnative\ClipSVC.dll 2016-09-14 09:31:49 A63F710FB2BC52267B3E7127DA28C5C9 428896 ----a-w- C:\WINDOWS\Sysnative\hal.dll 2016-09-14 09:31:49 76141663853B53A776B0E2AC7CD751FB 516544 ----a-w- C:\WINDOWS\Sysnative\AudioEng.dll 2016-09-14 09:31:49 5FBA5AB29C965A05FDE7B440B8597E8F 484352 ----a-w- C:\WINDOWS\Sysnative\DataSenseHandlers.dll 2016-09-14 09:31:49 34413FD79239332EA8BB9B3641734E16 448000 ----a-w- C:\WINDOWS\Sysnative\winipcfile.dll 2016-09-14 09:31:48 F27C769D8172AABF1B38A4358BBCCBE4 2563584 ----a-w- C:\WINDOWS\Sysnative\themecpl.dll 2016-09-14 09:31:48 EF6259C5AAD93253136AB688BC23586E 129024 ----a-w- C:\WINDOWS\Sysnative\mmcshext.dll 2016-09-14 09:31:48 AF94633E3D621B7366B14EF3D262A3B2 431296 ----a-w- C:\WINDOWS\Sysnative\bcryptprimitives.dll 2016-09-14 09:31:48 947E9A36317B0B3713077B65556F69C8 335360 ----a-w- C:\WINDOWS\Sysnative\mmcbase.dll 2016-09-14 09:31:48 2B99839D02146F4DA8A72A5B2A092594 303216 ----a-w- C:\WINDOWS\Sysnative\LockAppHost.exe 2016-09-14 09:31:48 18E8011B6D06B23BEFF1A97AD2971A30 965632 ----a-w- C:\WINDOWS\Sysnative\SRH.dll 2016-09-14 09:31:47 F83FE5E61A49024E5A764C68785473C2 480768 ----a-w- C:\WINDOWS\Sysnative\LockAppBroker.dll 2016-09-14 09:31:47 CEA6F4FB9556E741FB581649A2FAC01D 475648 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.BlockedShutdown.dll 2016-09-14 09:31:47 77F897DD380C7D2C11637FC4CE7E333B 692136 ----a-w- C:\WINDOWS\Sysnative\sppwinob.dll 2016-09-14 09:31:47 4BEAE31176E16E8EF85DB89266D112BA 3415040 ----a-w- C:\WINDOWS\Sysnative\SyncCenter.dll 2016-09-14 09:31:47 42CAAAF20D2C205AD0728C3FDAE9B2B0 238592 ----a-w- C:\WINDOWS\Sysnative\Windows.Media.Streaming.ps.dll 2016-09-14 09:31:46 B8345E56495B346848096A0918878A0E 1159168 ----a-w- C:\WINDOWS\Sysnative\ApplicationFrame.dll 2016-09-14 09:31:46 7718A1F1EA869DD4391632994E98C9D0 621568 ----a-w- C:\WINDOWS\Sysnative\DbgModel.dll 2016-09-14 09:31:46 36FB6F3754DCBCB775116D47ADEE0A1F 413696 ----a-w- C:\WINDOWS\Sysnative\Windows.Devices.Midi.dll 2016-09-14 09:31:46 2B867F2A432A688A802481FC78C8F204 556032 ----a-w- C:\WINDOWS\Sysnative\PsmServiceExtHost.dll 2016-09-14 09:31:46 23247F380832FB1BCF835587170B3E1F 507904 ----a-w- C:\WINDOWS\Sysnative\mprdim.dll 2016-09-14 09:31:45 BE1A3BDA24A449857E5C8721716CCC93 529920 ----a-w- C:\WINDOWS\Sysnative\LogonController.dll 2016-09-14 09:31:45 81CB82442B7A49719BD6D9F25129F36A 203776 ----a-w- C:\WINDOWS\Sysnative\cic.dll 2016-09-14 09:31:45 6999655AF336E05C9E53639E99072F80 1113600 ----a-w- C:\WINDOWS\Sysnative\gpedit.dll 2016-09-14 09:31:44 7C019CCB9FF9879EF4168F99B8E037D2 1037824 ----a-w- C:\WINDOWS\Sysnative\SmartcardCredentialProvider.dll 2016-09-14 09:31:44 72BB50B8812A519F2930B13295ED520E 273408 ----a-w- C:\WINDOWS\Sysnative\SyncSettings.dll 2016-09-14 09:31:44 4500C83EE55F99487FBF0C03280B0628 912384 ----a-w- C:\WINDOWS\Sysnative\usermgr.dll 2016-09-14 09:31:44 44DD2039DC0C2FE3DED3D9ED9A05223D 583680 ----a-w- C:\WINDOWS\Sysnative\PhotoScreensaver.scr 2016-09-14 09:31:44 2BD00BB7DBEAB66EBA31CD5550625297 459776 ----a-w- C:\WINDOWS\Sysnative\certcli.dll 2016-09-14 09:31:43 41E10B020AD495B9E1A8263D9FC9B847 775168 ----a-w- C:\WINDOWS\Sysnative\Display.dll 2016-09-14 09:31:43 2E3D386E3D0F7EDD8405E707B7CF82AE 285184 ----a-w- C:\WINDOWS\Sysnative\oemlicense.dll 2016-09-14 09:31:42 F779BBAEECA63F1B1ED385C702D5CE66 6675968 ----a-w- C:\WINDOWS\Sysnative\mspaint.exe 2016-09-14 09:31:42 AAD7C52E32660BF63E2507CA75006695 392192 ----a-w- C:\WINDOWS\Sysnative\zipfldr.dll 2016-09-14 09:31:42 77319932A489F7A23A236B8ABE0C3D70 1500672 ----a-w- C:\WINDOWS\Sysnative\dbghelp.dll 2016-09-14 09:31:41 D6CD358B43E0975612831A7B13EEBBFE 183808 ----a-w- C:\WINDOWS\Sysnative\WSSync.dll 2016-09-14 09:31:41 D3C464039441D05F77C58D5066FFFAE0 607232 ----a-w- C:\WINDOWS\Sysnative\WUDFx.dll 2016-09-14 09:31:41 0A887A89CA0A200920A3C3C09E3926F9 492544 ----a-w- C:\WINDOWS\Sysnative\SettingsHandlers_StorageSense.dll 2016-09-14 09:31:40 F7C13CCFF342F5D5FFB1553D6B36A4D7 236032 ----a-w- C:\WINDOWS\Sysnative\licensingdiag.exe 2016-09-14 09:31:40 D392FFA651F1C05FCE3E714B120B2867 258560 ----a-w- C:\WINDOWS\Sysnative\credprovs.dll 2016-09-14 09:31:40 9CB4F06DAA26ADE37594F4957A8CE606 188416 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.PicturePassword.dll 2016-09-14 09:31:40 7E6E016E13CCB579630E5A6FAE93C464 237056 ----a-w- C:\WINDOWS\Sysnative\NetworkDesktopSettings.dll 2016-09-14 09:31:40 78096AF9C6A7A0C9E0A25B66CA92018D 318976 ----a-w- C:\WINDOWS\Sysnative\domgmt.dll 2016-09-14 09:31:40 6126B2C93EE8C49892CA86DED38DD3C7 90624 ----a-w- C:\WINDOWS\Sysnative\FingerprintEnrollment.dll 2016-09-14 09:31:39 E7CAE7AF2A8688819974E01D5504A590 88064 ----a-w- C:\WINDOWS\Sysnative\ImplatSetup.dll 2016-09-14 09:31:39 D579E3695A8F2C6979C2D1A17EE2F287 243712 ----a-w- C:\WINDOWS\Sysnative\SettingMonitor.dll 2016-09-14 09:31:39 645E56A34F77255285AF752CFF1FCFB4 813056 ----a-w- C:\WINDOWS\Sysnative\mqsnap.dll 2016-09-14 09:31:39 0AF0AE551DD56F8312FA08B06E4409BF 769536 ----a-w- C:\WINDOWS\Sysnative\sppinst.dll 2016-09-14 09:31:38 4D91CB65D9668F2FE6D57994DACCF10E 110080 ----a-w- C:\WINDOWS\Sysnative\IdCtrls.dll ====== C:\WINDOWS\Sysnative\drivers ===== 2016-09-14 09:34:40 B32F13993145E815D7280C6F55B9523B 277848 ----a-w- C:\WINDOWS\Sysnative\drivers\sdbus.sys 2016-09-14 09:34:05 734D21F5B05D05DA2F85BE7EEF77DD43 286208 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb10.sys 2016-09-14 09:34:02 B5C5436E7DEA7048822809D16B6E861D 407040 ----a-w- C:\WINDOWS\Sysnative\drivers\srv.sys 2016-09-14 09:34:00 1F186B561EC82AB3EB4D039FEE0D9012 604920 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys 2016-09-14 09:33:34 0B1013A5204A6B9EEB38F4EE1E430CE6 131424 ----a-w- C:\WINDOWS\Sysnative\drivers\ufxsynopsys.sys 2016-09-14 09:33:28 6922ACEB62812748401DD25C0744F5D3 405856 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS 2016-09-14 09:33:28 38DADD5178E0299A1BB5A805B2136DEC 129888 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecdd.sys 2016-09-14 09:33:25 655491B1173E0F6322F6972A596B93F7 218624 ----a-w- C:\WINDOWS\Sysnative\drivers\ahcache.sys 2016-09-14 09:33:20 D65DB6F9285AF96151C937ABF027AEA8 15872 ----a-w- C:\WINDOWS\Sysnative\drivers\MTConfig.sys 2016-09-14 09:32:53 BD94675E1C036C94B4A39660B099CB96 1988448 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys 2016-09-14 09:32:13 143DD64D88994C557222E7D8DF0ABA08 638816 ----a-w- C:\WINDOWS\Sysnative\drivers\ClipSp.sys 2016-09-14 09:31:57 E7D59C52DE0C19C3179114D028EAA4B7 430944 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb.sys 2016-09-14 09:31:50 600D5CC9DD2AE16691C71DCD4DAF8F1D 216416 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb20.sys 2016-09-14 09:31:45 FEABA2601AD0D819760F84D1A3ECE5AF 236544 ----a-w- C:\WINDOWS\Sysnative\drivers\srvnet.sys 2016-09-14 09:31:43 ACCFA2FAAF77F5F9D72D3496B36057A8 689664 ----a-w- C:\WINDOWS\Sysnative\drivers\srv2.sys ====== C:\WINDOWS\Tasks ====== 2016-08-23 18:08:54 83C857F0B507107358D553F8E00B3FCA 3346 ----a-w- C:\WINDOWS\Sysnative\Tasks\OneDrive Standalone Update Task ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== 2016-09-04 19:56:55 -------- d---a-w- C:\Program Files\Bulk Rename Utility ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\Deklerck\AppData\Roaming ====== 2016-09-14 18:28:04 -------- d-----w- C:\Users\Deklerck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-08-29 07:14:27 -------- d-s---r- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Roaming 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Local\Temp 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Local\Microsoft Help 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Local\Microsoft 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Local\Google 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\AppData\Local 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility ====== C:\Users\Deklerck ====== 2016-09-16 17:47:21 08FA8F59B375D60E12ED00D175331FD6 130919120 ----a-w- C:\Users\Deklerck\Downloads\pixbook3.6_nl.exe 2016-09-04 19:57:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Rename Utility 2016-09-04 19:47:12 3EEF1DA76E619117435AD4C07D7C7A74 9699408 ----a-w- C:\Users\Deklerck\Downloads\BRU_setup_3.0.0.1.exe 2016-08-29 07:14:35 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\DefaultAppPool\ntuser.ini 2016-08-29 07:14:27 -------- d--h--w- C:\Users\DefaultAppPool\AppData 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\Saved Games 2016-08-29 07:14:27 -------- d-----w- C:\Users\DefaultAppPool\Cookies 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Videos 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Pictures 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Music 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Links 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Favorites 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Downloads 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Documents 2016-08-29 07:14:27 -------- d-----r- C:\Users\DefaultAppPool\Desktop 2016-08-22 15:25:07 -------- d-----w- C:\ProgramData\Easybits ====== C: exe-files == 2016-09-14 09:34:38 B836F2BFB9FCE6130619DCAD0B548D1C 1474560 ----a-w- C:\Program Files\Windows Media Player\wmpnetwk.exe 2016-09-14 09:34:34 6F0EABA9B642B2DF42E1EC5DB49E4DEC 494080 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe 2016-09-14 09:34:33 D174FD20DAAFB1CAC913C7E7E2442C9E 477184 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe 2016-09-14 09:34:22 2C4294E7C55267FE51BEBBB0BD47395A 4304896 ----a-w- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe 2016-09-14 09:33:58 9E69C4B4D88960213E21B328AD2864BF 1588736 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\mip.exe 2016-09-14 09:33:19 BDFF881650C66E5F9790CB88DADE0CED 4517888 ----a-w- C:\Program Files\Windows NT\Accessories\wordpad.exe 2016-09-14 09:32:43 04A6FD39C4FDE2FA54C53DF86BE54519 376832 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe 2016-09-14 09:31:51 5415FB9F0CD4F91C336FB495BFA8B952 816320 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2016-09-14 09:31:50 B7D61FD595B1D3C3C8AC74F75407A3B9 820416 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2016-09-10 14:09:37 1346E3009E97A3F618CCEB1C7EBD30B4 42856 ----a-w- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\ActiveCheck\product_line\Detect_ProtectYourFamilyOnline.exe === C: other files == 2016-09-15 19:04:06 5F6005F321AB0B2E80B661E6DFFD6934 4854 ----a-w- C:\Users\Deklerck\AppData\Local\Temp\xpi\tmp.zip 2016-09-14 18:27:40 9516B0A2506DFAD604A0CDC42E21650D 73840 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-stable.sys 2016-09-14 18:27:40 9516B0A2506DFAD604A0CDC42E21650D 73840 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-dev.sys 2016-09-14 18:27:40 9516B0A2506DFAD604A0CDC42E21650D 73840 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-canary.sys 2016-09-14 18:27:40 7D564ACBF730162DFFB3552A84022B15 62064 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_x86\dbx-stable.sys 2016-09-14 18:27:40 7D564ACBF730162DFFB3552A84022B15 62064 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_x86\dbx-dev.sys 2016-09-14 18:27:40 7D564ACBF730162DFFB3552A84022B15 62064 ----a-w- C:\Users\Deklerck\AppData\Roaming\Dropbox\bin\driver_x86\dbx-canary.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "EPSON Stylus DX8400 Series"="C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU C:\WINDOWS\TEMP\E_S4251.tmp /EF HKCU" [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup" [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup" [HKEY_USERS\S-1-5-21-724293850-1803118349-1363280222-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GBMPro8Agent"="C:\Program Files (x86)\GBMPro8\GBMAgent.exe" "PC Suite Tray"="C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray" "Spotify Web Helper"="C:\Users\Deklerck\AppData\Roaming\Spotify\SpotifyWebHelper.exe" @="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload" "Google Update"="C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Dropbox Update"="C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "OneDrive"="C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run] "EPSON Stylus DX8400 Series"="C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU C:\WINDOWS\TEMP\E_S4251.tmp /EF HKCU" [HKEY_USERS\S-1-5-21-724293850-1803118349-1363280222-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun" "GBMPro8Agent"="C:\Program Files (x86)\GBMPro8\GBMAgent.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" "PSUAMain"="C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe /LaunchSysTray" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Easybits Recovery"="C:\Program Files (x86)\Easybits For Kids\ezRecover.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "GBMPro8Agent"="C:\Program Files (x86)\GBMPro8\GBMAgent.exe" "PC Suite Tray"="C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray" "Spotify Web Helper"="C:\Users\Deklerck\AppData\Roaming\Spotify\SpotifyWebHelper.exe" @="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload" "Google Update"="C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Dropbox Update"="C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "OneDrive"="C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" "SmartMenu"="C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background" "PrintDisp"="C:\Windows\system32\PrintDisp.exe" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Google Update" "hkey"="HKCU" "command"="\"C:\\Users\\Deklerck\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LightScribe Control Panel] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LightScribe Control Panel" "hkey"="HKCU" "command"="C:\\Program Files (x86)\\Common Files\\LightScribe\\LightScribeControlPanel.exe -hidden" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NextLive] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NextLive" "hkey"="HKCU" "command"="C:\\Windows\\SysWOW64\\rundll32.exe \"C:\\Users\\Deklerck\\AppData\\Roaming\\newnext.me\\nengine.dll\",EntryPoint -m l" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PC Suite Tray] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PC Suite Tray" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Nokia\\Nokia PC Suite 7\\PCSuite.exe\" -onlytray" ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [13-09-2016 23:52] C:\WINDOWS\tasks\CBU taskID 13086655560408 3.job --a-------- C:.C:\Program Files\COMODO\COMODO BackUp\CBU.exe [] C:\WINDOWS\tasks\CBU taskID 13087691891858 2.job --a-------- C:\Program Files\COMODO\COMODO BackUp\CBU.exe [07-10-2014 13:14] C:\WINDOWS\tasks\CBU taskID 13112222323056 2.job --a-------- C:2.C:\Program Files\COMODO\COMODO BackUp\CBU.exe [] C:\WINDOWS\tasks\CBU taskID 13112222353619 2.job --a-------- C:\Program Files\COMODO\COMODO BackUp\CBU.exe [07-10-2014 13:14] C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000Core.job --a-------- [Undetermined Task] C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000UA.job --a-------- C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe [09-11-2015 10:41] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [02-09-2015 19:10] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [02-09-2015 19:10] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000Core.job --a-------- C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe [29-08-2015 08:24] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000UA.job --a-------- C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe [29-08-2015 08:24] C:\WINDOWS\tasks\HPCeeScheduleForDEKLERCK-HP$.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [16-06-2015 10:51] C:\WINDOWS\tasks\HPCeeScheduleForDeklerck.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [16-06-2015 10:51] C:\WINDOWS\tasks\SDMsgUpdate (TE).job --a-------- C:\PROGRA2\SMARTD1\Messages\SDNotify.exe [] ==== Other Scheduled Tasks ====================== "C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\WINDOWS\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\WINDOWS\SysNative\tasks\CBU taskID 13086655560408 3" [C:\Program Files\COMODO\COMODO BackUp\CBU.exe] "C:\WINDOWS\SysNative\tasks\CBU taskID 13087691891858 2" [C:\Program Files\COMODO\COMODO BackUp\CBU.exe] "C:\WINDOWS\SysNative\tasks\CBU taskID 13112222323056 2" [C:\Program Files\COMODO\COMODO BackUp\CBU.exe] "C:\WINDOWS\SysNative\tasks\CBU taskID 13112222353619 2" [C:\Program Files\COMODO\COMODO BackUp\CBU.exe] "C:\WINDOWS\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000Core" [C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe] "C:\WINDOWS\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000UA" [C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000Core" [C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-724293850-1803118349-1363280222-1000UA" [C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\HPCeeScheduleForDeklerck" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\WINDOWS\SysNative\tasks\HPCeeScheduleForDEKLERCK-HP$" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\WINDOWS\SysNative\tasks\OneDrive Standalone Update Task" [C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe] "C:\WINDOWS\SysNative\tasks\SDMsgUpdate (TE)" [C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe] "C:\WINDOWS\SysNative\tasks\ServicePlan" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"] "C:\WINDOWS\SysNative\tasks\SidebarExecute" [C:\Program Files (x86)\Windows Sidebar\sidebar.exe] "C:\WINDOWS\SysNative\tasks\{23FCA1F9-C525-49FC-875E-7085A6DA39DE}" ["c:\program files (x86)\mozilla firefox\firefox.exe"] "C:\WINDOWS\SysNative\tasks\{422223CC-6037-4A02-8861-4930E506D547}" ["c:\program files (x86)\mozilla firefox\firefox.exe"] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA)" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\77p2cioa.default user_pref("browser.startup.homepage", "http://www.google.be/"); user_pref("browser.search.selectedEngine", "Google (Language: nl)"); ProfilePath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\ct21ydal.Standaardgebruiker user_pref("browser.startup.homepage", "http://www.google.be/"); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" [] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\77p2cioa.default - Undetermined - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - Undetermined - C:\Program Files\Java\jre6\lib\deploy\jqs\ff - Dictionnaire franais Moderne - %ProfilePath%\extensions\fr-moderne@dictionaries.addons.mozilla.org - IE Tab 2 FF 3.6 - %ProfilePath%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} - DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} ProfilePath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\ct21ydal.Standaardgebruiker - Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player_IKEA@2020Technologies.com - Dictionnaire franais - %ProfilePath%\extensions\fr-dicollecte@dictionaries.addons.mozilla.org - Belgium eID - %ProfilePath%\extensions\belgiumeid@eid.belgium.be.xpi - Cookie Controller - %ProfilePath%\extensions\{ac2cfa60-bc96-11e0-962b-0800200c9a66}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ProfilePath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\karwoai3.default - Belgium eID - %ProfilePath%\extensions\belgiumeid@eid.belgium.be.xpi - Print Edit - %ProfilePath%\extensions\printedit@DW-dev.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi AppDir: C:\Program Files\Mozilla Firefox - Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be - Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be.xpi - Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\77p2cioa.default A1E7537CF72A4224926C283B1091AC57 - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll - Garmin Communicator Plug-In D6AD97E45178BAE922AB12538852081D - C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll - Adobe Acrobat 2C84D0C6CD2677FECFA87062E5B0E3FC - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.7 6168D4E6771CF23DAE1D90DEC7715B62 - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.7 0F30E5C65735B6B4867AD115C61E8D23 - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.7 7287F8A69896C6D2FE215DC1EBF31ACC - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.7 F2C93DEFE309CAFC9834E2645FBC8452 - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll - QuickTime Plug-in 7.7.7 92AB52FC695C1D459E3BE9AFD6CE218D - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL - Microsoft Office 2003 2C84D0C6CD2677FECFA87062E5B0E3FC - C:\Program Files (x86)\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.7 6168D4E6771CF23DAE1D90DEC7715B62 - C:\Program Files (x86)\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.7 0F30E5C65735B6B4867AD115C61E8D23 - C:\Program Files (x86)\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.7 7287F8A69896C6D2FE215DC1EBF31ACC - C:\Program Files (x86)\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.7 F2C93DEFE309CAFC9834E2645FBC8452 - C:\Program Files (x86)\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.7 Profilepath: C:\Users\Deklerck\AppData\Roaming\Mozilla\Firefox\Profiles\ct21ydal.Standaardgebruiker A1ED62FB6112C50AAEEF78BFC780662A - C:\Users\Deklerck\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll - Microsoft Lync Web App Plug-in 3EE8AE0ECFE5D79DE1737A855AD1E84C - C:\Users\Deklerck\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll - Google Update A1ED62FB6112C50AAEEF78BFC780662A - C:\Users\Deklerck\AppData\Roaming\Mozilla\plugins\npLWAPlugin15.8.dll - Microsoft Lync Web App Plug-in ==== Chromium Look ====================== YouTube - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Torrent Finder - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkbhdkimaolhkdepilfgpmbhdjbncbj Last updated at time on date - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd Chrome Web Store Payments - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Chrome Media Router - Deklerck\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} - http://nl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF HKLM\Wow6432Node\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3} - http://nl.wikipedia.org/wiki/Special:Search?search={searchTerms} HKLM\Wow6432Node\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc} - http://rover.ebay.com/rover/1/1553-111073-34115-0/4?satitle={searchTerms}&mfe=Desktops HKLM\Wow6432Node\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43} - http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC ==== Deleting Registry Keys ====================== HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully ==== HijackThis Entries ====================== R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKLM\..\Run: [GBMPro8Agent] C:\Program Files (x86)\GBMPro8\GBMAgent.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\Easybits For Kids\ezRecover.exe O4 - HKCU\..\Run: [GBMPro8Agent] C:\Program Files (x86)\GBMPro8\GBMAgent.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Deklerck\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload O4 - HKCU\..\Run: [Google Update] "C:\Users\Deklerck\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Deklerck\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [OneDrive] "C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Deklerck\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU "C:\WINDOWS\TEMP\E_S4251.tmp" /EF "HKCU" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU "C:\WINDOWS\TEMP\E_S4251.tmp" /EF "HKCU" (User 'Default user') O4 - Startup: Dropbox.lnk = Deklerck\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: COMODO Online Storage Service (COSService.exe) - COMODO Security Solutions - C:\Program Files\COMODO\COMMON\COSService.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing) O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe O23 - Service: Printer Control - Unknown owner - C:\Windows\system32\PrintCtrl.exe (file missing) O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: COMODO BackUp Service (SynchronizationService.exe) - COMODO Security Solutions - C:\Program Files\COMODO\COMMON\SynchronizationService.exe O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Deklerck\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Deklerck\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Deklerck\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Deklerck\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Deklerck\AppData\Local\Mozilla\Firefox\Profiles\ct21ydal.Standaardgebruiker\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Deklerck\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=398 folders=66 99967043 bytes) ==== Empty Temp Folders ====================== C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\Deklerck\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on za 17-09-2016 at 9:50:28,54 ======================