Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 01-01-2017
Gestart door ardil (Beheerder) op DESKTOP-JCN71JC (05-01-2017 22:51:22)
Gestart vanaf C:\Users\ardil\Desktop
Geladen Profielen: ardil (Beschikbare Profielen: defaultuser0 & ardil)
Platform: Windows 10 Home Versie 1607 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Edge)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Spotify Ltd) C:\Users\ardil\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
==================== Register (gefilterd) ====================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [454792 2016-06-07] (Power Software Ltd)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25779624 2016-12-21] (Dropbox, Inc.)
HKU\S-1-5-21-3798559552-785042924-2449508695-1001\...\Run: [Chromium] => c:\users\ardil\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-3798559552-785042924-2449508695-1001\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 6\CyberGhost.exe" /autostart /min
HKU\S-1-5-21-3798559552-785042924-2449508695-1001\...\Run: [Spotify Web Helper] => C:\Users\ardil\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-11-21] (Spotify Ltd)
HKU\S-1-5-21-3798559552-785042924-2449508695-1001\...\Run: [Spotify] => C:\Users\ardil\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-11-21] (Spotify Ltd)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
GroupPolicy: Restrictie <======= AANDACHT
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{4237907a-4cc5-423c-846e-11b9059d1b78}: [DhcpNameServer] 192.168.2.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-3f4653f4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-3f4653f4
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-3f4653f4&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-3f4653f4&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3798559552-785042924-2449508695-1001 -> DefaultScope {D80D5CEB-1602-4A72-AF41-BC42A94A2009} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-11-15] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-15] (Microsoft Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-10-11] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: zfmug3hy.default
FF ProfilePath: C:\Users\ardil\AppData\Roaming\Mozilla\Firefox\Profiles\zfmug3hy.default [2017-01-04]
FF NewTab: Mozilla\Firefox\Profiles\zfmug3hy.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\zfmug3hy.default -> Yahoo!
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\zfmug3hy.default -> Yahoo!
FF Homepage: Mozilla\Firefox\Profiles\zfmug3hy.default -> hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
FF Extension: (ZenMate Security, Privacy & Unblock VPN) - C:\Users\ardil\AppData\Roaming\Mozilla\Firefox\Profiles\zfmug3hy.default\Extensions\firefox@zenmate.com.xpi [2016-10-20]
FF SearchPlugin: C:\Users\ardil\AppData\Roaming\Mozilla\Firefox\Profiles\zfmug3hy.default\searchplugins\yhs.xml [2016-09-09]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-14] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-14] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
Chrome:
=======
CHR HomePage: Default -> hxxps://nl.search.yahoo.com/?type=715483&fr=yo-yhp-ch
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://nl.search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=715483&p={searchTerms}
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSuggestURL: Default -> hxxps://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
CHR Profile: C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Presentaties) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-06]
CHR Extension: (Google Documenten) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-06]
CHR Extension: (Google Drive) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-06]
CHR Extension: (YouTube) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-06]
CHR Extension: (Google Spreadsheets) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-06]
CHR Extension: (Offline Documenten) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-06]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-06]
CHR Extension: (searchme.com) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\phdadahhccfhiagplmgfebeggclnaepo [2016-11-06]
CHR Extension: (Gmail) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-06]
CHR Extension: (Chrome Media Router) - C:\Users\ardil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-14]
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-12-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-12-22] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-12-21] (Dropbox, Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-10-25] (NVIDIA Corporation)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [743616 2015-12-02] (@ByELDI) [Bestand niet getekend]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d63x64.sys [468240 2013-04-23] (Intel Corporation)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2017-01-04] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 netr28ux; C:\WINDOWS\System32\drivers\netr28ux.sys [2224128 2016-07-16] (MediaTek Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvaei.inf_amd64_5dec1bec1734f88f\nvlddmkm.sys [14174256 2016-11-18] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47672 2016-10-25] (NVIDIA Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [422656 2016-03-14] (Realsil Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 tapbvpn; C:\WINDOWS\System32\drivers\tapbvpn.sys [27136 2016-08-22] (The OpenVPN Project)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-28] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2016-12-28] (BigNox Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 UHSfiltv; \SystemRoot\system32\drivers\UHSfiltv.sys [X]
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Aangemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-01-05 22:51 - 2017-01-05 22:52 - 00017025 _____ C:\Users\ardil\Desktop\FRST.txt
2017-01-05 22:51 - 2017-01-05 22:51 - 00000000 ____D C:\FRST
2017-01-05 22:49 - 2017-01-05 22:49 - 02418176 _____ (Farbar) C:\Users\ardil\Desktop\FRST64.exe
2017-01-05 11:44 - 2017-01-05 11:44 - 00000000 ____D C:\Users\ardil\Desktop\Donna Essers
2017-01-05 03:24 - 2017-01-05 03:24 - 00000000 ____D C:\Users\ardil\AppData\Local\MultiPlayerManager
2017-01-04 20:28 - 2017-01-04 20:29 - 00692524 _____ C:\WINDOWS\Minidump\010417-24578-01.dmp
2017-01-04 20:22 - 2017-01-04 20:22 - 00079064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\elqd.sys
2017-01-04 16:39 - 2017-01-04 16:39 - 00000000 ___HD C:\$SysReset
2017-01-04 15:48 - 2017-01-04 15:56 - 00000000 ____D C:\Program Files (x86)\F1 2013
2017-01-04 12:31 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-01-04 12:31 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-01-04 12:31 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-01-04 12:31 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-01-04 12:31 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-01-04 12:31 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-01-04 12:31 - 2016-12-09 11:32 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-04 12:31 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-01-04 12:31 - 2016-12-09 11:29 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-04 12:31 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-01-04 12:31 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-01-04 12:31 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-01-04 12:31 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-01-04 12:31 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-01-04 12:31 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-01-04 12:31 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-01-04 12:31 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-01-04 12:31 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-01-04 12:31 - 2016-12-09 11:18 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-04 12:31 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-01-04 12:31 - 2016-12-09 11:15 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-04 12:31 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-01-04 12:31 - 2016-12-09 11:14 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-04 12:31 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-01-04 12:31 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-01-04 12:31 - 2016-12-09 11:09 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-04 12:31 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-01-04 12:31 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-01-04 12:31 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-01-04 12:31 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-01-04 12:31 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-01-04 12:31 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-01-04 12:31 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-01-04 12:31 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-04 12:31 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-01-04 12:31 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-01-04 12:31 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-01-04 12:31 - 2016-12-09 10:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-04 12:31 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-01-04 12:31 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-01-04 12:31 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-01-04 12:31 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-04 12:31 - 2016-12-09 10:38 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-04 12:31 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-01-04 12:31 - 2016-12-09 10:37 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-04 12:31 - 2016-12-09 10:36 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-04 12:31 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-01-04 12:31 - 2016-12-09 10:36 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-04 12:31 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-01-04 12:31 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-01-04 12:31 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-01-04 12:31 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-01-04 12:31 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-01-04 12:31 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-01-04 12:31 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-04 12:31 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-04 12:31 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-04 12:31 - 2016-12-09 10:29 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-04 12:31 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-01-04 12:31 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-01-04 12:31 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-01-04 12:31 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-01-04 12:31 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-01-04 12:31 - 2016-12-09 10:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-04 12:31 - 2016-12-09 10:24 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-04 12:31 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-01-04 12:31 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-01-04 12:31 - 2016-12-09 10:22 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-04 12:31 - 2016-12-09 10:22 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-04 12:31 - 2016-12-09 10:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-04 12:31 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-01-04 12:31 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-01-04 12:31 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-01-04 12:31 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-01-04 12:31 - 2016-12-09 10:19 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-04 12:31 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-01-04 12:31 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-01-04 12:31 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-01-04 12:31 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-01-04 12:31 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-01-04 12:31 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-01-04 12:31 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-04 12:31 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-01-04 12:31 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-04 12:31 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-04 12:31 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-01-04 12:31 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-01-04 12:31 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-01-04 12:31 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-01-04 12:31 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-01-04 12:31 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-01-04 12:31 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-04 12:31 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-01-04 12:31 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-01-04 12:31 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-01-04 12:31 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-01-04 12:31 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-01-04 12:31 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-01-04 12:31 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-01-04 12:31 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-01-04 12:31 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-04 12:31 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-01-04 12:31 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-04 12:31 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-01-04 12:31 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-01-04 12:31 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-01-04 12:31 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-01-04 12:31 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-04 12:31 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-01-04 12:31 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-01-04 12:31 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-01-04 12:31 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-01-04 12:31 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-01-04 12:31 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-01-04 12:31 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-04 12:31 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-01-04 12:31 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-01-04 12:31 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-01-04 12:31 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-01-04 12:31 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-01-04 12:31 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-04 12:31 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-01-04 12:31 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-01-04 12:31 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-01-04 12:31 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-01-04 12:31 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-01-04 12:31 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-01-04 12:31 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-01-04 12:31 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-01-04 12:31 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-01-04 12:31 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-01-04 12:31 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-01-04 12:31 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-01-04 12:31 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-01-04 12:31 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-01-04 12:31 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-01-04 12:31 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-01-04 12:31 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-01-04 12:31 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-01-04 12:31 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-04 12:31 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-01-04 12:31 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-01-04 12:31 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-04 12:31 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-01-04 12:31 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-04 12:31 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-04 12:31 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-01-04 12:31 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-01-04 12:31 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-01-04 12:31 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-01-04 12:31 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-01-04 12:31 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-04 12:31 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-01-04 12:31 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-01-04 12:31 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-01-04 12:31 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-01-04 12:31 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-01-04 12:31 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-01-04 12:31 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-01-04 12:31 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-01-04 12:31 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-01-04 12:31 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-01-04 12:31 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-01-04 12:31 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-01-04 12:31 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-01-04 12:31 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-01-04 12:31 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-01-04 12:31 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-01-04 12:31 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-01-04 12:31 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-01-04 12:31 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-01-04 12:31 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-01-04 12:31 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-01-04 12:31 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-01-04 12:31 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-01-04 12:31 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-01-04 12:31 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-01-04 12:31 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-04 12:31 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-04 12:31 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-01-04 12:31 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-01-04 12:31 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-01-04 12:31 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-01-04 12:31 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-04 12:31 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-04 12:31 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-01-04 12:31 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-01-04 12:31 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-01-04 12:31 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-01-04 12:31 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-04 12:31 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-04 12:31 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-01-04 12:31 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-01-04 12:31 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-01-04 12:31 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-01-04 12:31 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-01-04 12:31 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-01-04 12:31 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-04 12:31 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-01-04 12:31 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-01-04 12:31 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-01-04 12:31 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-01-04 12:31 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-01-04 12:31 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-01-04 12:31 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-01-04 12:31 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-01-04 12:31 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-01-04 12:31 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-04 12:31 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-01-04 12:31 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-01-04 12:31 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-01-04 12:31 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-01-04 12:31 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-01-04 12:31 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-01-04 12:31 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-01-04 12:31 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-01-04 12:31 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-01-04 12:31 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-01-04 12:31 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-01-04 12:31 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-01-04 12:31 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-04 12:31 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-04 12:31 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-04 12:31 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-01-04 12:31 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-01-04 12:31 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-01-04 12:31 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-01-04 12:31 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-01-04 12:31 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-01-04 12:31 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-01-04 12:31 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-01-04 12:31 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-01-04 12:31 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-01-04 12:31 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-01-04 12:31 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-01-04 12:31 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-04 12:31 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-04 12:31 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-01-04 12:31 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-01-04 12:31 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-01-04 12:31 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-01-04 12:31 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-01-04 12:31 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-04 12:31 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-01-04 12:31 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-01-04 12:31 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-01-04 12:31 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-01-04 12:31 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-01-04 12:31 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-01-04 12:31 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-04 12:31 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-01-04 12:31 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-01-04 12:31 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-01-04 12:31 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-01-04 12:31 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-01-04 12:31 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-01-04 12:31 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-01-04 12:31 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-01-04 12:31 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-01-04 12:31 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-01-04 12:31 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-01-04 12:31 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-01-04 12:31 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-01-04 12:31 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-01-04 12:31 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-01-04 12:31 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-01-04 12:31 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-01-04 12:31 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-01-04 12:30 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-01-04 12:30 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-01-04 12:30 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-01-04 12:30 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-01-04 12:30 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-01-04 12:30 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-01-04 12:30 - 2016-12-09 11:11 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-01-04 12:30 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-01-04 12:30 - 2016-12-09 10:47 - 22563328 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-04 12:30 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-01-04 12:30 - 2016-12-09 10:37 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-04 12:30 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-04 12:30 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-04 12:30 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-01-04 12:30 - 2016-12-09 10:30 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-04 12:30 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-04 12:30 - 2016-12-09 10:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-04 12:30 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-01-04 12:30 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-01-04 12:30 - 2016-12-09 10:21 - 01512960 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-04 12:30 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-04 12:30 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-01-04 12:30 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-01-04 12:30 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-04 12:30 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-01-04 12:30 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-01-04 12:30 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-01-04 12:30 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-01-04 12:30 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-04 12:30 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-04 12:30 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-04 12:30 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-04 12:30 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-01-04 12:30 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-04 12:30 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-01-04 12:30 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-01-04 12:30 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-04 12:30 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-01-04 12:30 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-01-04 12:30 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-01-04 12:30 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-01-04 12:30 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-01-04 12:30 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-04 12:30 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-01-04 12:30 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-01-04 12:30 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-01-04 12:30 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-01-04 12:30 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-01-04 12:30 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-01-04 12:30 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-01-04 12:30 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-01-04 12:30 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-01-04 12:30 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-04 12:30 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-04 12:30 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-01-04 12:30 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-01-04 12:30 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-01-04 12:30 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-04 12:30 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-04 12:30 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-01-04 12:30 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-01-04 12:30 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-01-04 12:30 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-01-04 12:30 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-01-04 12:30 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-04 12:30 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-01-04 12:30 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-04 12:30 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-01-04 12:30 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-04 12:30 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-01-04 12:30 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-04 12:30 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-01-04 12:30 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-01-04 12:30 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-01-04 12:30 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-01-04 12:30 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-01-04 12:30 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-01-01 15:32 - 2017-01-01 15:32 - 00000134 _____ C:\Users\ardil\Desktop\klrblndtst.txt
2016-12-31 19:58 - 2016-12-31 19:58 - 55759891 _____ C:\Users\ardil\OneDrive\Documenten\726 Schuss Triplex Power U31299.mp4
2016-12-31 05:55 - 2016-12-31 05:55 - 00001345 _____ C:\need4speed scan.txt
2016-12-28 12:04 - 2017-01-05 22:24 - 00000000 ____D C:\Users\ardil\vmlogs
2016-12-28 12:04 - 2017-01-05 22:24 - 00000000 ____D C:\Users\ardil\.BigNox
2016-12-28 12:04 - 2017-01-05 22:24 - 00000000 ____D C:\Users\ardil\.android
2016-12-28 12:04 - 2016-12-28 12:04 - 00013230 _____ C:\WINDOWS\DPINST.LOG
2016-12-28 12:04 - 2016-12-28 12:04 - 00001117 _____ C:\Users\ardil\Desktop\Multi-Drive.lnk
2016-12-28 12:04 - 2016-12-28 12:04 - 00001036 _____ C:\Users\ardil\Desktop\Nox.lnk
2016-12-28 12:04 - 2016-12-28 12:04 - 00000041 _____ C:\Users\ardil\inst.ini
2016-12-28 12:04 - 2016-12-28 12:04 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE
2016-12-28 12:04 - 2016-12-28 12:04 - 00000000 ____D C:\Users\ardil\Nox_share
2016-12-28 12:04 - 2016-12-28 12:04 - 00000000 ____D C:\Users\ardil\AppData\Roaming\Microsoft\Windows\Start Menu\Nox
2016-12-28 12:04 - 2016-12-28 12:04 - 00000000 ____D C:\Program Files\DIFX
2016-12-28 12:04 - 2016-12-28 12:03 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys
2016-12-28 12:04 - 2016-12-28 12:03 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2016-12-28 12:03 - 2017-01-05 22:50 - 00000000 ____D C:\Users\ardil\AppData\Local\Nox
2016-12-28 12:03 - 2016-12-28 12:03 - 00000000 ____D C:\Program Files (x86)\Nox
2016-12-28 12:03 - 2016-12-28 12:03 - 00000000 ____D C:\Program Files (x86)\Bignox
2016-12-28 11:56 - 2016-12-28 11:57 - 287063432 _____ (Duodian Technology Co. Ltd.) C:\Users\ardil\Downloads\nox_setup_v3.7.6.3_full_intl.exe
2016-12-27 19:30 - 2016-12-27 19:30 - 114916767 _____ C:\Users\ardil\OneDrive\Documenten\MAYHEM NIGHT 600 SHOTS.mp4
2016-12-25 23:37 - 2016-12-25 23:37 - 00203311 _____ C:\Users\ardil\Desktop\TROTSE PAPA EN ZIJN ZONEN.jpg
2016-12-25 23:34 - 2016-12-25 23:34 - 00060568 _____ C:\Users\ardil\Desktop\ELISA SLAAPT.jpg
2016-12-25 23:33 - 2016-12-25 23:33 - 00118316 _____ C:\Users\ardil\Desktop\JOZUA SLAAPT.jpg
2016-12-25 22:55 - 2016-12-25 22:55 - 04320762 _____ C:\Users\ardil\Downloads\Boney James - Wait For Love.mp3
2016-12-25 22:10 - 2016-12-25 22:10 - 05712406 _____ C:\Users\ardil\Downloads\Smooth jazz 001.mp3
2016-12-25 22:10 - 2016-12-25 22:10 - 04025678 _____ C:\Users\ardil\Downloads\Nite and Day - Ronny Jordan (Smooth Jazz Guitar).mp3
2016-12-25 21:40 - 2016-12-25 21:40 - 05712406 _____ C:\Users\ardil\Downloads\Peter White - Good Day.mp3
2016-12-25 20:46 - 2016-12-25 20:46 - 04432775 _____ C:\Users\ardil\Downloads\Autumn Day by Peter White.mp3
2016-12-25 20:45 - 2016-12-25 20:45 - 05343770 _____ C:\Users\ardil\Downloads\Peter White - Turn It Out.mp3
2016-12-25 18:53 - 2016-12-25 18:53 - 05802683 _____ C:\Users\ardil\Downloads\The Baby-Ernie Toppin and His Wife.mp3
2016-12-25 17:05 - 2016-12-25 17:05 - 05849912 _____ C:\Users\ardil\Downloads\Ernie Toppin- Revolution (Judgment Day ).mp3
2016-12-25 17:02 - 2016-12-25 17:02 - 06496913 _____ C:\Users\ardil\Downloads\Oh Man of God-Ernie Toppin and His Wife.mp3
2016-12-25 08:05 - 2016-12-25 08:06 - 04322689 _____ C:\Users\ardil\Downloads\Ernie Toppin - Judgement Day.mp3
2016-12-22 03:06 - 2016-12-22 03:06 - 00215305 _____ C:\Users\ardil\Downloads\IMG-20161111-WA0000.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00165261 _____ C:\Users\ardil\Downloads\IMG-20161017-WA0002.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00144276 _____ C:\Users\ardil\Downloads\IMG-20161007-WA0004.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00142531 _____ C:\Users\ardil\Downloads\IMG-20160927-WA0006.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00117852 _____ C:\Users\ardil\Downloads\IMG-20161017-WA0003.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00116165 _____ C:\Users\ardil\Downloads\IMG-20161017-WA0004.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00112400 _____ C:\Users\ardil\Downloads\IMG-20161112-WA0000.jpg
2016-12-22 03:06 - 2016-12-22 03:06 - 00082159 _____ C:\Users\ardil\Downloads\IMG-20161112-WA0002.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00227095 _____ C:\Users\ardil\Downloads\IMG-20160912-WA0008.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00212820 _____ C:\Users\ardil\Downloads\IMG-20160912-WA0005.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00190620 _____ C:\Users\ardil\Downloads\IMG-20160912-WA0006.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00156810 _____ C:\Users\ardil\Downloads\IMG-20160916-WA0000.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00153179 _____ C:\Users\ardil\Downloads\IMG-20160821-WA0001.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00146864 _____ C:\Users\ardil\Downloads\IMG-20160916-WA0001.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00144632 _____ C:\Users\ardil\Downloads\IMG-20160927-WA0005.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00140695 _____ C:\Users\ardil\Downloads\IMG-20160903-WA0001.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00137679 _____ C:\Users\ardil\Downloads\IMG-20160916-WA0004.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00129850 _____ C:\Users\ardil\Downloads\IMG-20160821-WA0002.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00129820 _____ C:\Users\ardil\Downloads\IMG-20160912-WA0007.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00129226 _____ C:\Users\ardil\Downloads\IMG-20160821-WA0003.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00128429 _____ C:\Users\ardil\Downloads\IMG-20160916-WA0002.jpg
2016-12-22 03:05 - 2016-12-22 03:05 - 00108972 _____ C:\Users\ardil\Downloads\IMG-20160916-WA0003.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00301919 _____ C:\Users\ardil\Downloads\IMG-20160729-WA0012.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00289001 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0002.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00266370 _____ C:\Users\ardil\Downloads\IMG-20160729-WA0003.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00260299 _____ C:\Users\ardil\Downloads\IMG-20160729-WA0011.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00249648 _____ C:\Users\ardil\Downloads\IMG-20160819-WA0001.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00165305 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0001.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00126112 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0003.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00113273 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0005.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00074808 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0006.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00071272 _____ C:\Users\ardil\Downloads\IMG-20160729-WA0002.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00057478 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0004.jpg
2016-12-22 03:04 - 2016-12-22 03:04 - 00028744 _____ C:\Users\ardil\Downloads\IMG-20160722-WA0000.jpg
2016-12-22 03:03 - 2016-12-22 03:04 - 00041988 _____ C:\Users\ardil\Downloads\FB_IMG_1477848499056.jpg
2016-12-22 03:03 - 2016-12-22 03:03 - 07488008 _____ C:\Users\ardil\Downloads\DSCI0496.JPG
2016-12-22 03:03 - 2016-12-22 03:03 - 07484808 _____ C:\Users\ardil\Downloads\DSCI0497.JPG
2016-12-22 03:03 - 2016-12-22 03:03 - 07479500 _____ C:\Users\ardil\Downloads\DSCI0494.JPG
2016-12-22 03:03 - 2016-12-22 03:03 - 07477086 _____ C:\Users\ardil\Downloads\DSCI0495.JPG
2016-12-22 03:03 - 2016-12-22 03:03 - 03529348 _____ C:\Users\ardil\Downloads\20170106_090040.jpg
2016-12-22 03:03 - 2016-12-22 03:03 - 00143382 _____ C:\Users\ardil\Downloads\FB_IMG_1476789013970.jpg
2016-12-22 03:03 - 2016-12-22 03:03 - 00014215 _____ C:\Users\ardil\Downloads\FB_IMG_1473804268625.jpg
2016-12-22 03:03 - 2016-12-22 03:03 - 00014215 _____ C:\Users\ardil\Downloads\FB_IMG_1473804268625(1).jpg
2016-12-22 03:02 - 2016-12-22 03:02 - 03325223 _____ C:\Users\ardil\Downloads\20170105_225221.jpg
2016-12-22 03:02 - 2016-12-22 03:02 - 03302769 _____ C:\Users\ardil\Downloads\20170105_225216.jpg
2016-12-22 03:02 - 2016-12-22 03:02 - 03191915 _____ C:\Users\ardil\Downloads\20170105_225226.jpg
2016-12-22 03:02 - 2016-12-22 03:02 - 02940088 _____ C:\Users\ardil\Downloads\20170105_225232.jpg
2016-12-22 03:02 - 2016-12-22 03:02 - 02843697 _____ C:\Users\ardil\Downloads\20170106_090026.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 04608946 _____ C:\Users\ardil\Downloads\20170105_224550.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 04390936 _____ C:\Users\ardil\Downloads\20170105_224603.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 04052342 _____ C:\Users\ardil\Downloads\20170105_224559.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03938208 _____ C:\Users\ardil\Downloads\20170105_224617.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03755770 _____ C:\Users\ardil\Downloads\20170105_224613.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03180556 _____ C:\Users\ardil\Downloads\20170105_192141.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03154903 _____ C:\Users\ardil\Downloads\20170105_192140.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03070387 _____ C:\Users\ardil\Downloads\20170105_192142.jpg
2016-12-22 03:01 - 2016-12-22 03:01 - 03060741 _____ C:\Users\ardil\Downloads\20170105_225212.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04536002 _____ C:\Users\ardil\Downloads\20161127_052020.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04486639 _____ C:\Users\ardil\Downloads\20161126_200911.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04350621 _____ C:\Users\ardil\Downloads\20161126_200901.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04163127 _____ C:\Users\ardil\Downloads\20170105_192123.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04089482 _____ C:\Users\ardil\Downloads\20161127_052027.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 04050855 _____ C:\Users\ardil\Downloads\20170105_192122.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 03919530 _____ C:\Users\ardil\Downloads\20170105_192121.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 03905429 _____ C:\Users\ardil\Downloads\20161126_183952.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 03565934 _____ C:\Users\ardil\Downloads\20161126_183956.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 03465177 _____ C:\Users\ardil\Downloads\20161127_052013.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 02840766 _____ C:\Users\ardil\Downloads\20170105_192136.jpg
2016-12-22 03:00 - 2016-12-22 03:00 - 02439159 _____ C:\Users\ardil\Downloads\20161126_183955_001.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 04247102 _____ C:\Users\ardil\Downloads\20161120_152353.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 03790786 _____ C:\Users\ardil\Downloads\20161126_183951.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 03759364 _____ C:\Users\ardil\Downloads\20161119_195202.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 03582277 _____ C:\Users\ardil\Downloads\20161119_184256.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 02847827 _____ C:\Users\ardil\Downloads\20161126_183909.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 01598451 _____ C:\Users\ardil\Downloads\20161126_183922.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 01584954 _____ C:\Users\ardil\Downloads\20161126_183927.jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 01584954 _____ C:\Users\ardil\Downloads\20161126_183927(1).jpg
2016-12-22 02:59 - 2016-12-22 02:59 - 01532932 _____ C:\Users\ardil\Downloads\20161126_183942.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 05292125 _____ C:\Users\ardil\Downloads\20161119_125532.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 04247711 _____ C:\Users\ardil\Downloads\20161119_095432.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 03385985 _____ C:\Users\ardil\Downloads\20161118_163008.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 03206056 _____ C:\Users\ardil\Downloads\20161118_163015.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 03184211 _____ C:\Users\ardil\Downloads\20161118_161508.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 03033187 _____ C:\Users\ardil\Downloads\20161118_173143.jpg
2016-12-22 02:58 - 2016-12-22 02:58 - 03024970 _____ C:\Users\ardil\Downloads\20161118_173146.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 03645727 _____ C:\Users\ardil\Downloads\20161112_090725.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 03292194 _____ C:\Users\ardil\Downloads\20161112_090812.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 03286586 _____ C:\Users\ardil\Downloads\20161112_090807.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 03106535 _____ C:\Users\ardil\Downloads\20161112_103618.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 02997339 _____ C:\Users\ardil\Downloads\20161112_103621.jpg
2016-12-22 02:57 - 2016-12-22 02:57 - 02778771 _____ C:\Users\ardil\Downloads\20161112_094414.jpg
2016-12-22 02:56 - 2016-12-22 02:56 - 03522406 _____ C:\Users\ardil\Downloads\20161111_145352.jpg
2016-12-22 02:56 - 2016-12-22 02:56 - 03497763 _____ C:\Users\ardil\Downloads\20161111_145349.jpg
2016-12-22 02:56 - 2016-12-22 02:56 - 02479159 _____ C:\Users\ardil\Downloads\20161111_145332.jpg
2016-12-22 02:56 - 2016-12-22 02:56 - 02479159 _____ C:\Users\ardil\Downloads\20161111_145332(1).jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 05368263 _____ C:\Users\ardil\Downloads\20160729_150927.jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 04735610 _____ C:\Users\ardil\Downloads\20160729_080121.jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 04543786 _____ C:\Users\ardil\Downloads\20160729_080011.jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 04505954 _____ C:\Users\ardil\Downloads\20160729_075747.jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 04162951 _____ C:\Users\ardil\Downloads\20160729_075849.jpg
2016-12-22 02:55 - 2016-12-22 02:55 - 02615536 _____ C:\Users\ardil\Downloads\20160729_080200_001.jpg
2016-12-22 02:54 - 2016-12-22 02:55 - 04507329 _____ C:\Users\ardil\Downloads\20160729_075643.jpg
2016-12-22 02:54 - 2016-12-22 02:55 - 04507329 _____ C:\Users\ardil\Downloads\20160729_075643(1).jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 04485490 _____ C:\Users\ardil\Downloads\20160729_075538.jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 04363158 _____ C:\Users\ardil\Downloads\20160729_075340.jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 00915860 _____ C:\Users\ardil\Downloads\20150902_145716.jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 00913862 _____ C:\Users\ardil\Downloads\20150902_145720.jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 00913858 _____ C:\Users\ardil\Downloads\20150902_145722.jpg
2016-12-22 02:54 - 2016-12-22 02:54 - 00911449 _____ C:\Users\ardil\Downloads\20150902_145719.jpg
2016-12-22 02:53 - 2016-12-22 02:53 - 00956749 _____ C:\Users\ardil\Downloads\20150902_145555.jpg
2016-12-22 02:53 - 2016-12-22 02:53 - 00956749 _____ C:\Users\ardil\Downloads\20150902_145555(1).jpg
2016-12-22 02:53 - 2016-12-22 02:53 - 00923782 _____ C:\Users\ardil\Downloads\20150902_145650.jpg
2016-12-22 02:53 - 2016-12-22 02:53 - 00915481 _____ C:\Users\ardil\Downloads\20150902_145710.jpg
2016-12-22 02:53 - 2016-12-22 02:53 - 00790293 _____ C:\Users\ardil\Downloads\20150902_145657.jpg
2016-12-22 02:52 - 2016-12-22 02:52 - 00951582 _____ C:\Users\ardil\Downloads\20150902_145542.jpg
2016-12-22 02:52 - 2016-12-22 02:52 - 00944281 _____ C:\Users\ardil\Downloads\20150902_145544.jpg
2016-12-22 02:35 - 2017-01-05 22:08 - 00000000 ___RD C:\Users\ardil\Dropbox
2016-12-22 02:35 - 2017-01-04 19:52 - 00000000 ____D C:\Users\ardil\AppData\LocalLow\Mozilla
2016-12-22 02:33 - 2016-12-22 02:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-12-22 02:31 - 2016-12-22 18:01 - 00001044 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-12-22 02:31 - 2016-12-22 18:01 - 00001040 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-12-22 02:31 - 2016-12-22 02:36 - 00004104 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-12-22 02:31 - 2016-12-22 02:36 - 00003872 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-12-22 02:31 - 2016-12-22 02:33 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-12-22 02:31 - 2016-12-22 02:31 - 00688536 _____ (Dropbox, Inc.) C:\Users\ardil\Downloads\DropboxInstaller (1).exe
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-12-20 09:08 - 2016-12-20 09:08 - 00149951 _____ C:\Users\ardil\Downloads\15595662_1395718693813043_1221066184_o.jpg
2016-12-20 09:06 - 2016-12-20 09:06 - 00201157 _____ C:\Users\ardil\Downloads\15609185_1395709167147329_479479935_o (1).jpg
2016-12-20 09:02 - 2016-12-20 09:02 - 00201157 _____ C:\Users\ardil\Downloads\15609185_1395709167147329_479479935_o.jpg
2016-12-19 22:03 - 2016-12-19 22:03 - 00144087 _____ C:\Users\ardil\Downloads\15657865_10210132236613920_855437957_o (1).jpg
2016-12-19 22:03 - 2016-12-19 22:03 - 00143261 _____ C:\Users\ardil\Downloads\15631395_10210132235053881_2108341896_o (1).jpg
2016-12-19 21:52 - 2016-12-19 21:52 - 00148489 _____ C:\Users\ardil\Downloads\15657881_10210132237213935_2034800841_o.jpg
2016-12-19 21:52 - 2016-12-19 21:52 - 00144087 _____ C:\Users\ardil\Downloads\15657865_10210132236613920_855437957_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00246053 _____ C:\Users\ardil\Downloads\14632692_2136903959868023_2049665593_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00207898 _____ C:\Users\ardil\Downloads\14625528_2136904099868009_1317105849_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00193625 _____ C:\Users\ardil\Downloads\14803077_10209532312496192_679286120_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00135113 _____ C:\Users\ardil\Downloads\14803140_10209532621583919_1570035700_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00134219 _____ C:\Users\ardil\Downloads\14678001_10209532650464641_1950061760_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00122334 _____ C:\Users\ardil\Downloads\14803215_10209532651544668_1862552317_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00097425 _____ C:\Users\ardil\Downloads\14787035_10209532650904652_1887622528_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00089500 _____ C:\Users\ardil\Downloads\14808110_10209532651144658_459880944_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00084601 _____ C:\Users\ardil\Downloads\14800152_10209532650944653_1185334763_o.jpg
2016-12-19 21:51 - 2016-12-19 21:51 - 00079749 _____ C:\Users\ardil\Downloads\14795926_10209532650824650_1953646940_o.jpg
2016-12-19 21:50 - 2016-12-19 21:50 - 00143261 _____ C:\Users\ardil\Downloads\15631395_10210132235053881_2108341896_o.jpg
2016-12-19 21:47 - 2016-12-19 21:47 - 00078487 _____ C:\Users\ardil\Downloads\15628919_10210133201998054_178762963_o.jpg
2016-12-19 07:08 - 2017-01-05 22:03 - 1610612736 ___SH C:\pagefile.sys
2016-12-19 06:02 - 2016-12-19 06:02 - 542205935 _____ C:\Users\ardil\OneDrive\Documenten\Fourplay Greatest Hits 2012[1].mp4
2016-12-19 06:02 - 2016-12-19 06:02 - 335972324 _____ C:\Users\ardil\OneDrive\Documenten\An Evening of Fourplay (HD) - Vol.1&2 _THE SMOOTHJAZZ LOFT_.mp4
2016-12-19 06:02 - 2016-12-19 06:02 - 100298302 _____ C:\Users\ardil\OneDrive\Documenten\The Smoothjazz Loft - The Loft Volume 1 (The Album).mp4
2016-12-19 05:54 - 2016-12-19 05:54 - 71971999 _____ C:\Users\ardil\OneDrive\Documenten\FOURPLAY ? Snowbound [full album].mp4
2016-12-19 05:23 - 2016-12-19 05:23 - 542205935 _____ C:\Users\ardil\OneDrive\Documenten\Fourplay Greatest Hits 2012.mp4
2016-12-19 05:20 - 2016-12-19 05:20 - 109956579 _____ C:\Users\ardil\OneDrive\Documenten\Fourplay - Elixir (1995) Full Album.mp4
2016-12-19 05:19 - 2016-12-19 05:19 - 102554330 _____ C:\Users\ardil\OneDrive\Documenten\Fourplay - Fourplay.mp4
2016-12-19 00:57 - 2016-12-19 00:57 - 661364473 _____ C:\Users\ardil\OneDrive\Documenten\FOURPLAY _ All the Best (full album) [HQ].mp4
2016-12-18 23:34 - 2016-12-25 08:21 - 00000000 ____D C:\Users\ardil\AppData\LocalLow\uTorrent
2016-12-18 23:10 - 2016-12-18 23:10 - 05526156 _____ C:\Users\ardil\Downloads\Ronny Jordan - Heaven.mp3
2016-12-18 23:10 - 2016-12-18 23:10 - 05526156 _____ C:\Users\ardil\Downloads\Ronny Jordan - Heaven (1).mp3
2016-12-18 22:30 - 2016-12-18 22:31 - 04365321 _____ C:\Users\ardil\Downloads\PETER WHITE - Groovin'.mp3
2016-12-18 17:52 - 2016-12-18 17:52 - 03612152 _____ C:\Users\ardil\Downloads\video-1482075449.mp4
2016-12-18 17:13 - 2016-12-18 17:13 - 04935418 _____ C:\Users\ardil\Downloads\Jesus I Need You - Hillsong Worship.mp3
2016-12-18 17:07 - 2016-12-18 17:07 - 05322450 _____ C:\Users\ardil\Downloads\Potter's Hand by Hillsong with lyrics.mp3
2016-12-18 17:05 - 2016-12-18 17:05 - 04540190 _____ C:\Users\ardil\Downloads\Eagle's Wings - Hillsong.mp3
2016-12-18 16:58 - 2016-12-18 16:59 - 05544802 _____ C:\Users\ardil\Downloads\God Is Here - Lara Martin (with Lyrics)(1).mp3
2016-12-18 16:50 - 2016-12-18 16:50 - 09122951 _____ C:\Users\ardil\Downloads\Closer_Wrap me in YOUR arms William McDowell feat Blanca lyrics.mp3
2016-12-18 16:35 - 2016-12-18 16:35 - 16803138 _____ C:\Users\ardil\OneDrive\Documenten\Mary Did You Know - Cee Lo Green lyrics.mp4
2016-12-18 16:23 - 2016-12-18 16:23 - 16694896 _____ C:\Users\ardil\OneDrive\Documenten\Casting Crowns-Does Anybody Hear Her_ (With Lyrics).mp4
2016-12-18 16:11 - 2016-12-18 16:11 - 99948257 _____ C:\Users\ardil\OneDrive\Documenten\Chris Tomlin - Holy Is The Lord (Lyrics And Chords).mp4
2016-12-18 15:58 - 2016-12-18 15:58 - 79016074 _____ C:\Users\ardil\OneDrive\Documenten\Chris Tomlin - How Great Is Our God (Lyrics And Chords).mp4
2016-12-18 06:15 - 2016-12-18 06:15 - 00000000 ____D C:\Users\ardil\Desktop\Boekhouden PDF
2016-12-15 05:46 - 2016-12-15 05:46 - 00001204 _____ C:\Users\ardil\Desktop\Kennismaking WINexpert+ Boekhouding.LNK
2016-12-15 05:46 - 2016-12-15 05:46 - 00001172 _____ C:\Users\ardil\Desktop\WINexpert+ Boekhouding Schoolversie.LNK
2016-12-15 05:44 - 2016-12-15 05:44 - 24319760 _____ (Microsoft Corporation) C:\Users\ardil\Downloads\WINexpertEvaluatie.exe
2016-12-14 20:14 - 2016-12-14 20:14 - 52595696 _____ C:\Users\ardil\OneDrive\Documenten\There is No Abortion Agrument After This Video ? Blow Your Mind ?.mp4
2016-12-14 20:02 - 2016-12-14 20:02 - 287252271 _____ C:\Users\ardil\OneDrive\Documenten\_180_ Movie.mp4
2016-12-14 16:38 - 2016-12-14 16:38 - 00688536 _____ (Dropbox, Inc.) C:\Users\ardil\Downloads\DropboxInstaller(3).exe
2016-12-14 15:01 - 2016-12-14 15:01 - 00688536 _____ (Dropbox, Inc.) C:\Users\ardil\Downloads\DropboxInstaller(2).exe
2016-12-14 14:57 - 2016-12-14 14:57 - 00688536 _____ (Dropbox, Inc.) C:\Users\ardil\Downloads\DropboxInstaller(1).exe
2016-12-14 14:55 - 2016-12-22 02:35 - 00000000 ____D C:\Users\ardil\AppData\Local\Dropbox
2016-12-14 14:55 - 2016-12-14 14:55 - 00000000 ____D C:\Users\ardil\AppData\Roaming\Dropbox
2016-12-14 14:55 - 2016-12-14 14:55 - 00000000 ____D C:\ProgramData\Dropbox
2016-12-14 14:51 - 2016-12-14 14:52 - 00688536 _____ (Dropbox, Inc.) C:\Users\ardil\Downloads\DropboxInstaller.exe
2016-12-14 08:53 - 2016-12-14 08:53 - 91083039 _____ C:\Users\ardil\OneDrive\Documenten\LES 06 DEEL 1 DUBBEL BOEKHOUDEN IN BALANS EN RESULTATENREKENING bvds.mp4
2016-12-12 22:18 - 2016-12-12 22:18 - 562770208 _____ C:\Users\ardil\OneDrive\Documenten\Why I Dont have a Girlfriend ...mp4
2016-12-12 21:24 - 2016-12-12 21:24 - 38548773 _____ C:\Users\ardil\OneDrive\Documenten\Max Verstappen Brazil overtakes on-board. Never seen footage. All overtakes on-board!!.mp4
2016-12-11 22:42 - 2016-12-11 22:42 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-12-11 22:42 - 2016-12-11 22:42 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-12-11 18:55 - 2016-12-11 18:55 - 00013225 _____ C:\Users\ardil\OneDrive\Documenten\11 First Computing bvba.docx
2016-12-11 15:44 - 2016-12-18 06:12 - 00000000 ____D C:\Users\ardil\Desktop\Word bestanden
2016-12-11 15:43 - 2016-12-11 15:43 - 00000000 ____D C:\Users\ardil\OneDrive\Documenten\Aangepaste Office-sjablonen
2016-12-11 10:21 - 2016-12-11 10:21 - 00000128 ____H C:\Users\ardil\AppData\Roaming\ecf00c38dc807e105d881c433a6b455dd2c606b6
2016-12-11 10:21 - 2016-12-11 10:21 - 00000128 ____H C:\ProgramData\ecf00c38dc807e105d881c433a6b455dd2c606b6
2016-12-11 10:21 - 2016-12-11 10:21 - 00000000 ____D C:\Users\ardil\AppData\Roaming\iSpring Solutions
2016-12-11 10:20 - 2016-12-11 10:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iSpring Free Cam 8
2016-12-11 10:20 - 2016-12-11 10:20 - 00000000 ____D C:\Program Files (x86)\iSpring
2016-12-11 10:16 - 2016-12-11 10:16 - 23998464 _____ C:\Users\ardil\Downloads\ispring_free_cam_8_3_0.msi
2016-12-11 09:39 - 2016-12-11 09:39 - 46593357 _____ C:\Users\ardil\OneDrive\Documenten\Two White Girls Twerking 3.mp4
2016-12-11 09:36 - 2016-12-11 09:36 - 26499839 _____ C:\Users\ardil\OneDrive\Documenten\Young girl twerking in shorts -- part 2.mp4
2016-12-11 09:36 - 2016-12-11 09:36 - 08207508 _____ C:\Users\ardil\OneDrive\Documenten\Hot Sexy Girl Twerking! November 2016 Girls Twerking! Sexy White Girl Twerking!.mp4
2016-12-11 09:35 - 2016-12-11 09:35 - 13465938 _____ C:\Users\ardil\OneDrive\Documenten\college teens twerking ass shaking girls ptsc.mp4
2016-12-11 09:33 - 2016-12-11 09:33 - 12198829 _____ C:\Users\ardil\OneDrive\Documenten\Sexy Girl Striptease hot strip dance twerk porn erotic playboy.mp4
2016-12-11 09:32 - 2016-12-11 09:32 - 13833027 _____ C:\Users\ardil\OneDrive\Documenten\Two White Girls Twerking 2.mp4
2016-12-11 09:30 - 2016-12-11 09:30 - 05663278 _____ C:\Users\ardil\OneDrive\Documenten\Hot White Girl Twerk! - Ep.3.mp4
2016-12-11 09:28 - 2016-12-11 09:28 - 29422248 _____ C:\Users\ardil\OneDrive\Documenten\Slow Motion Twerkin.mp4
2016-12-10 22:01 - 2016-12-10 22:01 - 16209031 _____ C:\Users\ardil\OneDrive\Documenten\Peter White & Boney James - Walk On By[2].mp4
2016-12-10 21:56 - 2016-12-10 21:56 - 147036888 _____ C:\Users\ardil\OneDrive\Documenten\Peter White and Boney James perform _Together Again_ for the first time - Smooth Jazz Cruise 2014.mp4
2016-12-10 21:40 - 2016-12-10 21:40 - 158368808 _____ C:\Users\ardil\OneDrive\Documenten\Peter White Mindi Abair Dave Koz - Bueno Funk at the Spaghettini Dave Koz 2013 Cruise Party.mp4
2016-12-10 21:34 - 2016-12-10 21:34 - 05015478 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - Just Keep Doing What I'm Doing... (16 of 16).mp4
2016-12-10 21:30 - 2016-12-10 21:30 - 12909123 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - Mindi Abair, Rick Braun & Christmas (15 of 16).mp4
2016-12-10 21:27 - 2016-12-10 21:27 - 08592812 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - Something of the Moment (14 of 16).mp4
2016-12-10 21:18 - 2016-12-10 21:18 - 12648474 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - I Don't Read Music on the Guitar (12 of 16).mp4
2016-12-10 21:18 - 2016-12-10 21:18 - 05986123 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - I Don't Consider What I Do _Jazz_ (13 of 16).mp4
2016-12-10 21:10 - 2016-12-10 21:10 - 07531040 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - A Wide Horizon of Music (11 of 16).mp4
2016-12-10 21:09 - 2016-12-10 21:09 - 01729829 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - I Heard My Name on the Radio!! (10 of 16).mp4
2016-12-10 21:06 - 2016-12-10 21:06 - 06320008 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - My First Record Deal (9 of 16).mp4
2016-12-10 21:06 - 2016-12-10 21:06 - 05386215 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - Making My First Solo CD (8 of 16).mp4
2016-12-10 21:01 - 2016-12-10 21:01 - 04238524 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - At 35, Making My First Album (7 of 16).mp4
2016-12-10 20:56 - 2016-12-10 20:56 - 11730162 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - The Awakening (6 of 16).mp4
2016-12-10 20:53 - 2016-12-10 20:53 - 20940437 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - _On The Border_ & Alan Parsons (4 of 16).mp4
2016-12-10 20:53 - 2016-12-10 20:53 - 09116677 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - My Abbey Road Experience (5 of 16).mp4
2016-12-10 20:47 - 2016-12-10 20:47 - 11723528 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - Miles Copeland & Al Stewart (3 of 16).mp4
2016-12-10 20:43 - 2016-12-10 20:43 - 11836845 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - A Piano and No Furniture (2 of 16).mp4
2016-12-10 20:37 - 2016-12-10 20:37 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-12-10 19:52 - 2017-01-04 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-12-10 19:52 - 2016-12-10 19:52 - 00000000 ____D C:\WINDOWS\PCHEALTH
2016-12-10 19:52 - 2016-12-10 19:52 - 00000000 ____D C:\Program Files\Microsoft.NET
2016-12-10 19:52 - 2016-12-10 19:52 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-10 19:52 - 2016-12-10 19:52 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-10 19:52 - 2016-12-10 19:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-12-10 19:50 - 2017-01-04 13:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-10 19:50 - 2016-12-10 19:52 - 00000000 ____D C:\WINDOWS\SHELLNEW
2016-12-10 19:50 - 2016-12-10 19:52 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-10 19:50 - 2016-12-10 19:50 - 00000000 __RHD C:\MSOCache
2016-12-10 19:50 - 2016-12-10 19:50 - 00000000 ____D C:\Users\ardil\AppData\Local\Microsoft Help
2016-12-10 19:50 - 2016-12-10 19:50 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-12-10 19:50 - 2016-12-10 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-12-10 19:50 - 2016-12-10 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-12-10 19:47 - 2016-12-10 19:47 - 05130438 _____ C:\Users\ardil\OneDrive\Documenten\Peter White - My First Public Performance (1 of 16).mp4
2016-12-07 04:40 - 2016-12-07 04:40 - 08051926 _____ C:\Users\ardil\OneDrive\Documenten\Best of 2016.mp4
2016-12-07 00:21 - 2016-12-07 00:21 - 38857766 _____ C:\Users\ardil\OneDrive\Documenten\flowerbed 100kg airforce one Apeldoorn.mp4
2016-12-07 00:19 - 2016-12-07 00:19 - 63366233 _____ C:\Users\ardil\OneDrive\Documenten\CNY259 - Tears From Heaven 259 schots 29 kilo blok.mp4
2016-12-07 00:10 - 2016-12-07 00:10 - 106771605 _____ C:\Users\ardil\OneDrive\Documenten\de air force one voor onze sander.mp4
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-01-05 22:35 - 2016-08-10 12:26 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-05 22:26 - 2016-08-10 12:37 - 00000000 ____D C:\Users\ardil
2017-01-05 22:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-05 22:11 - 2016-08-10 12:28 - 03074520 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-05 22:11 - 2016-07-16 23:15 - 01330018 _____ C:\WINDOWS\system32\perfh013.dat
2017-01-05 22:11 - 2016-07-16 23:15 - 00338258 _____ C:\WINDOWS\system32\perfc013.dat
2017-01-05 22:09 - 2016-08-10 20:33 - 00004198 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2D3C7740-1C73-4922-B233-8882869016F8}
2017-01-05 22:08 - 2016-11-21 09:49 - 00000000 ____D C:\Users\ardil\AppData\Roaming\Spotify
2017-01-05 22:08 - 2016-11-21 09:49 - 00000000 ____D C:\Users\ardil\AppData\Local\Spotify
2017-01-05 22:07 - 2016-08-10 12:28 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-05 22:04 - 2016-08-10 12:26 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-05 09:17 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-04 23:23 - 2016-08-24 17:40 - 00000000 ____D C:\Users\ardil\AppData\Local\CrashDumps
2017-01-04 23:23 - 2016-08-10 21:06 - 00000000 ____D C:\Users\ardil\AppData\Roaming\vlc
2017-01-04 20:29 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-04 20:28 - 2016-11-03 19:39 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-04 20:22 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-04 19:53 - 2016-08-24 00:57 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-04 19:52 - 2016-09-27 23:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-04 16:36 - 2016-08-10 12:39 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-04 16:32 - 2016-08-10 12:25 - 00370488 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-04 16:28 - 2016-07-16 07:04 - 09437184 _____ C:\WINDOWS\system32\config\BBI
2017-01-04 16:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-01-04 16:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-04 16:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-04 16:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-04 16:26 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-01-04 16:26 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-01-04 16:26 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-01-04 16:26 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-01-04 16:26 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-01-04 16:23 - 2016-11-02 16:01 - 00000000 ____D C:\Users\ardil\AppData\Roaming\uTorrent
2017-01-04 13:38 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-03 17:24 - 2016-08-12 12:15 - 00000000 ____D C:\Users\ardil\AppData\Local\QuickPar
2016-12-28 12:04 - 2016-08-30 12:33 - 00000000 ____D C:\Users\ardil\AppData\Roaming\NVIDIA
2016-12-28 12:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2016-12-26 23:59 - 2016-09-28 08:58 - 00000000 ____D C:\Users\ardil\Desktop\Diversen
2016-12-22 02:35 - 2016-08-10 12:37 - 00000000 ____D C:\Users\ardil\AppData\LocalLow
2016-12-19 07:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-12-18 14:40 - 2016-08-19 18:18 - 00000000 ____D C:\Users\ardil\AppData\Roaming\dvdcss
2016-12-18 08:26 - 2016-07-16 12:47 - 00000167 _____ C:\WINDOWS\win.ini
2016-12-18 08:12 - 2016-11-05 17:22 - 00000000 ____D C:\Users\ardil\Desktop\Jolisa
2016-12-17 00:21 - 2016-11-06 04:16 - 00003574 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 00:21 - 2016-11-06 04:16 - 00003450 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-15 13:07 - 2016-08-10 14:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-12-15 13:06 - 2016-08-10 14:46 - 135632432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-12-14 20:02 - 2016-11-19 23:09 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2016-12-14 19:49 - 2016-09-30 23:04 - 00000940 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-14 19:47 - 2016-11-02 06:12 - 00000000 ____D C:\Users\ardil\AppData\Roaming\The Word
2016-12-14 14:55 - 2016-07-16 12:47 - 00000000 ___HD C:\ProgramData
2016-12-14 04:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-14 04:01 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-11 22:42 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-11 22:42 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-11 20:42 - 2016-08-10 12:39 - 00000000 ___SD C:\Users\ardil\AppData\LocalLow\Microsoft
2016-12-11 10:20 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-10 20:39 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-12-10 20:03 - 2016-11-21 08:43 - 00003476 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2016-12-10 20:03 - 2016-11-21 08:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-12-10 20:03 - 2016-11-21 08:43 - 00000000 ____D C:\Program Files\KMSpico
2016-12-10 20:03 - 2016-08-10 12:37 - 00000000 ___SD C:\Users\ardil\AppData\Roaming\Microsoft
2016-12-10 19:52 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Fonts
2016-12-10 19:52 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-10 19:52 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Microsoft.NET
2016-12-10 19:52 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files\Common Files
2016-12-10 19:51 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-10 03:17 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-12-09 23:26 - 2016-11-06 04:16 - 00002292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-08 20:26 - 2016-12-01 16:59 - 00000000 ____D C:\Users\ardil\Desktop\Syntra Word
==================== Bestanden in de root van sommige mappen =======
2016-12-11 10:21 - 2016-12-11 10:21 - 0000128 ____H () C:\Users\ardil\AppData\Roaming\ecf00c38dc807e105d881c433a6b455dd2c606b6
2016-08-24 15:22 - 2016-11-01 11:22 - 0099384 _____ () C:\Users\ardil\AppData\Roaming\inst.exe
2016-08-24 15:22 - 2016-11-01 11:22 - 0007859 _____ () C:\Users\ardil\AppData\Roaming\pcouffin.cat
2016-08-24 15:22 - 2016-11-01 11:22 - 0001167 _____ () C:\Users\ardil\AppData\Roaming\pcouffin.inf
2016-08-24 15:22 - 2016-11-01 11:22 - 0000055 _____ () C:\Users\ardil\AppData\Roaming\pcouffin.log
2016-08-24 15:22 - 2016-11-01 11:22 - 0082816 _____ (VSO Software) C:\Users\ardil\AppData\Roaming\pcouffin.sys
2016-08-11 00:30 - 2016-09-26 23:21 - 0000208 _____ () C:\Users\ardil\AppData\Roaming\WB.CFG
2016-08-24 01:01 - 2016-08-24 01:08 - 0005120 _____ () C:\Users\ardil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-12-11 10:21 - 2016-12-11 10:21 - 0000128 ____H () C:\ProgramData\ecf00c38dc807e105d881c433a6b455dd2c606b6
Bestanden om te verplaatsen of verwijderen:
====================
C:\Windows\Tasks\{04831CE5-8943-CBC2-4586-6567B09AA5E4}.job
Sommige bestanden in TEMP:
====================
C:\Users\ardil\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\ardil\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\ardil\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2017-01-05 12:35
==================== Eind van FRST.txt ============================
--- Update ---
Bekijk bijlage Addition.txt