My computer is running super super slow. I think I may have malware or a virus. It takes forever for my chrome to pop up, as well as for me to type something into the browser for the keys to actually show up. Below is my information:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by Andrew (administrator) on ANDREW-PC (05-01-2018 10:36:32)
Running from C:\Users\Andrew\Desktop
Loaded Profiles: Andrew (Available Profiles: Andrew)
Platform: Windows 10 Pro Version 1709 16299.125 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-27] ()
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [883840 2012-03-28] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2013-12-16] (Conexant Systems, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-26] (Apple Inc.)
HKLM-x32\...\Run: [Chicony_OSD] => C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe [53248 2011-01-12] ()
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-07-05] (Apple Inc.)
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [25624208 2017-11-10] (Google)
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-08-28] (Valve Corporation)
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [217088 2017-09-29] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{323d16de-a400-4672-9c31-84b8ca31219d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{b763cc00-27d6-496f-9e5a-42a604ed4a59}: [DhcpNameServer] 209.222.18.222 209.222.18.218
Tcpip\..\Interfaces\{d064c2cb-5202-426e-9b46-f8b21d3e07f6}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/USCON/1
SearchScopes: HKLM -> {8C76C316-788B-42E5-9B10-D5F6C84F616E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {8C76C316-788B-42E5-9B10-D5F6C84F616E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3960278461-2044705814-1633424519-1000 -> {921B4CE9-B045-4AC7-A263-134982A3E7A8} URL = hxxps://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=435371&p={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group, Inc.)
FireFox:
========
FF ProfilePath: C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\3cuohms2.default [2017-10-30]
FF SearchPlugin: C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\3cuohms2.default\searchplugins\yahoo_ff.xml [2015-08-09]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore => not found
FF HKLM-x32\...\Thunderbird\Extensions: [
[email protected]] - C:\Program Files\McAfee\MSK => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-12] ()
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-12] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-12] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
Chrome:
=======
CHR NewTab: Default -> Not-active:"chrome-extension://mlnnopicjonfamklpcdfnbcomdlopmof/newtab.html"
CHR Profile: C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default [2018-01-05]
CHR Extension: (Google Translate) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-19]
CHR Extension: (Slides) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Floorplanner) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2017-08-27]
CHR Extension: (Share to Classroom) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\adokjfanaflbkibffcbhihgihpgijcei [2017-10-16]
CHR Extension: (Docs) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Skype Calling) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-06-21]
CHR Extension: (YouTube) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Honey) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2017-12-21]
CHR Extension: (Goobric Web App Launcher) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol [2017-08-09]
CHR Extension: (QR Code Generator) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnehiohlphfeeoajihccdlbioaickhak [2017-07-29]
CHR Extension: (Google Search) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (InsertLearning) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehajjkfchegiinhcmoclkfbnmpgcahj [2017-10-24]
CHR Extension: (Sheets) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Print this page with CleanPrint) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\fklmmmdcofimkjmfjdnobmmgmefbapkf [2017-06-16]
CHR Extension: (The QR Code Generator) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmhlmapohffdglflokbgknlknnmogbb [2016-10-19]
CHR Extension: (Google Docs Offline) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Video Recorder for WeVideo) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaiglpeefdoagfbbfhjfbmomnfobojia [2017-12-14]
CHR Extension: (goo.gl URL Shortener (Unofficial)) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\iblijlcdoidgdpfknkckljiocdbnlagk [2017-07-05]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-05-03]
CHR Extension: (Pocket New Tab) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlnnopicjonfamklpcdfnbcomdlopmof [2017-11-01]
CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2017-12-22]
CHR Extension: (Save to Pocket) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2017-10-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Draftback) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnajoiemfpldioamchanognpjmocgkbg [2017-10-17]
CHR Extension: (Edpuzzle) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\oligonmocnihangdjlloenpndnniikol [2017-11-23]
CHR Extension: (Gmail) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-03]
CHR Extension: (Chrome Media Router) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-12]
CHR HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Andrew\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-14]
CHR HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [208760 2017-07-27] (Dell Inc.)
S2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3294584 2017-07-27] (Dell Inc.)
S2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [217464 2017-07-27] (Dell Inc.)
S2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2016-12-21] (Dell Inc.)
S2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [230248 2017-05-01] (Dell Inc.)
S2 LDrvSvc; c:\program files (x86)\ostotosoft\drivertalent\LDrvSvc.dll [186544 2017-10-16] ()
S2 OSDSvc; C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe [176128 2010-12-01] (Chicony) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-12-10] (Microsoft Corporation)
S2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [53208 2017-09-22] (Dell Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\NisSrv.exe [356176 2017-12-07] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MsMpEng.exe [105792 2017-12-07] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
R3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [32960 2017-07-27] (Dell Inc.)
R3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [32568 2017-07-27] (Dell Computer Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-10] (Malwarebytes Corporation)
S3 mferkdet; C:\WINDOWS\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2015-08-10] (The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2017-12-07] (Microsoft Corporation)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2017-12-07] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2017-12-07] (Microsoft Corporation)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)
U3 idsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-05 10:36 - 2018-01-05 10:37 - 000018804 _____ C:\Users\Andrew\Desktop\FRST.txt
2018-01-05 10:19 - 2018-01-05 10:19 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-01-05 10:10 - 2018-01-05 10:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-01-05 09:56 - 2018-01-05 09:57 - 002393088 _____ (Farbar) C:\Users\Andrew\Desktop\FRST64.exe
2018-01-03 15:55 - 2018-01-03 15:55 - 000000218 _____ C:\Users\Andrew\AppData\Local\recently-used.xbel
2018-01-03 14:11 - 2018-01-03 15:07 - 000000000 ____D C:\Users\Andrew\Downloads\Brawl In Cell Block 99 (2017) [1080p] [YTS.AG]
2018-01-03 14:07 - 2018-01-03 14:08 - 016189143 _____ (Deluge Team) C:\Users\Andrew\Downloads\deluge-1.3.15-win32-py2.7 (1).exe
2017-12-23 10:40 - 2018-01-03 15:07 - 000000000 ____D C:\Users\Andrew\Downloads\Battle Of The Sexes (2017) [1080p] [YTS.AG]
2017-12-23 10:05 - 2017-12-23 10:05 - 000000000 ____D C:\Users\Andrew\Downloads\Krampus (2015) [1080p] [YTS.AG]
2017-12-23 09:56 - 2017-12-23 09:56 - 000031050 _____ C:\Users\Andrew\Downloads\Krampus (2015) [1080p] [YTS.AG].torrent
2017-12-22 21:45 - 2017-12-22 21:45 - 000000000 ___HD C:\OneDriveTemp
2017-12-21 21:53 - 2017-12-21 22:31 - 000000000 ____D C:\Users\Andrew\Downloads\Brad's Status (2017) [1080p] [YTS.AG]
2017-12-19 06:15 - 2017-12-19 06:15 - 001065621 _____ C:\Users\Andrew\Desktop\notificación - Andrew Krueger -Caixa Bank.pdf
2017-12-19 06:14 - 2017-12-19 06:14 - 001065621 _____ C:\Users\Andrew\Downloads\new doc 2017-12-19 06.08.58.pdf
2017-12-19 06:14 - 2017-12-19 06:14 - 001065621 _____ C:\Users\Andrew\Downloads\new doc 2017-12-19 06.08.58 (1).pdf
2017-12-18 23:33 - 2017-12-18 23:45 - 000000000 ____D C:\Users\Andrew\Downloads\Silent Night, Deadly Night (1984) [1080p]
2017-12-18 21:50 - 2017-12-18 21:50 - 000013455 _____ C:\Users\Andrew\Downloads\Silent Night, Deadly Night (1984) [1080p] [YTS.AG].torrent
2017-12-18 19:50 - 2017-12-18 19:57 - 000000000 ____D C:\Users\Andrew\Downloads\Christmas Evil (1980) [1080p]
2017-12-18 18:31 - 2017-12-18 18:31 - 000461388 _____ C:\Users\Andrew\Desktop\CLAVE - Sample answers - Avancemos_2_FALL_16_Written_Practice.pdf
2017-12-18 18:15 - 2017-12-18 18:15 - 000347493 _____ C:\Users\Andrew\Desktop\Avancemos_2_FALL_16_Written_Practice.pdf
2017-12-17 23:44 - 2017-12-17 23:44 - 000320976 _____ C:\Users\Andrew\Desktop\Granada espanol 2018 brochure.pdf
2017-12-17 23:37 - 2017-12-17 23:39 - 000419399 _____ C:\Users\Andrew\Desktop\General_Information-final-2018.pdf
2017-12-16 23:47 - 2017-12-17 00:09 - 000000000 ____D C:\Users\Andrew\Downloads\M.F.A. (2017) [1080p] [YTS.AG]
2017-12-16 00:47 - 2017-12-16 05:38 - 938964114 _____ C:\Users\Andrew\Downloads\Talking.Dead.S06E02.720p.HDTV.x264-FIRST[eztv].mkv
2017-12-15 22:59 - 2017-12-15 23:04 - 000000000 ____D C:\Users\Andrew\Downloads\Office Christmas Party (2016) [1080p] [YTS.AG]
2017-12-14 17:17 - 2017-12-14 17:17 - 000000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2017-12-13 21:29 - 2017-12-08 00:52 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-13 21:29 - 2017-12-07 17:34 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-13 21:29 - 2017-12-07 17:34 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-13 21:29 - 2017-12-07 17:34 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-13 21:29 - 2017-12-07 17:31 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-13 21:29 - 2017-12-07 17:31 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-13 21:29 - 2017-12-07 17:30 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-13 21:29 - 2017-12-07 17:28 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-13 21:29 - 2017-12-07 17:28 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-13 21:29 - 2017-12-07 17:27 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-13 21:29 - 2017-12-07 17:27 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-13 21:29 - 2017-12-07 17:27 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-13 21:29 - 2017-12-07 17:26 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-13 21:29 - 2017-12-07 17:26 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-13 21:29 - 2017-12-07 17:26 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-13 21:29 - 2017-12-07 17:25 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-13 21:29 - 2017-12-07 17:24 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-13 21:29 - 2017-12-07 17:24 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-13 21:29 - 2017-12-07 17:24 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-13 21:29 - 2017-12-07 17:23 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-13 21:29 - 2017-12-07 17:23 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-13 21:29 - 2017-12-07 17:22 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-13 21:29 - 2017-12-07 17:22 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-13 21:29 - 2017-12-07 17:22 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-13 21:29 - 2017-12-07 17:22 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-13 21:29 - 2017-12-07 17:21 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-13 21:29 - 2017-12-07 17:20 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-13 21:29 - 2017-12-07 17:19 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-13 21:29 - 2017-12-07 17:16 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-13 21:29 - 2017-12-07 17:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-13 21:29 - 2017-12-07 17:15 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-13 21:29 - 2017-12-07 17:15 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-13 21:29 - 2017-12-07 17:14 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-13 21:29 - 2017-12-07 17:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-13 21:29 - 2017-12-07 17:10 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-13 21:29 - 2017-12-07 16:58 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-12-13 21:29 - 2017-12-07 16:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-12-13 21:29 - 2017-12-07 16:56 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-12-13 21:29 - 2017-12-07 16:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-12-13 21:29 - 2017-12-07 16:55 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-12-13 21:29 - 2017-12-07 16:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-12-13 21:29 - 2017-12-07 16:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-12-13 21:29 - 2017-12-07 16:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2017-12-13 21:29 - 2017-12-07 16:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-12-13 21:29 - 2017-12-07 16:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-12-13 21:29 - 2017-12-07 16:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-12-13 21:29 - 2017-12-07 16:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2017-12-13 21:29 - 2017-12-07 16:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-12-13 21:29 - 2017-12-07 16:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-12-13 21:29 - 2017-12-07 16:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-12-13 21:29 - 2017-12-07 16:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-12-13 21:29 - 2017-12-07 16:29 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterShim.dll
2017-12-13 21:29 - 2017-12-07 16:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-13 21:29 - 2017-12-07 16:22 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-13 21:29 - 2017-12-07 16:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-12-13 21:29 - 2017-12-07 16:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2017-12-13 21:29 - 2017-12-07 16:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2017-12-13 21:29 - 2017-12-07 16:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-12-13 21:29 - 2017-12-07 16:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2017-12-13 21:29 - 2017-12-07 16:11 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-13 21:29 - 2017-12-07 16:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-12-13 21:29 - 2017-12-07 16:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-12-13 21:29 - 2017-12-07 16:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2017-12-13 21:29 - 2017-12-07 16:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-12-13 21:29 - 2017-12-07 16:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2017-12-13 21:29 - 2017-12-07 16:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2017-12-13 21:29 - 2017-12-07 16:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2017-12-13 21:29 - 2017-12-07 16:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-13 21:29 - 2017-12-07 16:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-12-13 21:29 - 2017-12-07 16:07 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-13 21:29 - 2017-12-07 16:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 21:29 - 2017-12-07 16:07 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-13 21:29 - 2017-12-07 16:07 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-13 21:29 - 2017-12-07 16:07 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-13 21:29 - 2017-12-07 16:07 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-13 21:29 - 2017-12-07 16:06 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-13 21:29 - 2017-12-07 16:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-12-13 21:29 - 2017-12-07 16:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-12-13 21:29 - 2017-12-07 16:06 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-13 21:29 - 2017-12-07 16:06 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-13 21:29 - 2017-12-07 16:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-13 21:29 - 2017-12-07 16:05 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-13 21:29 - 2017-12-07 16:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-12-13 21:29 - 2017-12-07 16:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-12-13 21:29 - 2017-12-07 16:04 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-13 21:29 - 2017-12-07 16:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-12-13 21:29 - 2017-12-07 16:04 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 21:29 - 2017-12-07 16:03 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-13 21:29 - 2017-12-07 16:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-13 21:29 - 2017-12-07 16:01 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-13 21:29 - 2017-12-07 16:01 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-13 21:29 - 2017-12-07 16:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-12-13 21:29 - 2017-12-07 16:01 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-13 21:29 - 2017-12-07 16:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-13 21:29 - 2017-12-07 16:00 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-13 21:29 - 2017-12-07 16:00 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-13 21:29 - 2017-12-07 16:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-12-13 21:29 - 2017-12-07 15:59 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-13 21:29 - 2017-12-07 15:59 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-13 21:29 - 2017-12-07 15:59 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-13 21:29 - 2017-12-07 15:59 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-13 21:29 - 2017-12-07 15:59 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-13 21:29 - 2017-12-07 15:58 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-13 21:29 - 2017-12-07 15:58 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-13 21:29 - 2017-12-07 15:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-13 21:29 - 2017-12-07 15:58 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-13 21:29 - 2017-12-07 15:58 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-13 21:29 - 2017-12-07 15:57 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-13 21:29 - 2017-12-07 15:57 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-13 21:29 - 2017-12-07 15:56 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-13 21:29 - 2017-12-07 15:56 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-13 21:29 - 2017-12-07 15:56 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-13 21:29 - 2017-12-07 15:54 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-13 21:29 - 2017-12-07 15:54 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-13 21:29 - 2017-12-07 15:54 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-13 00:18 - 2018-01-03 12:21 - 000000000 ____D C:\Windows.old
2017-12-12 22:57 - 2017-12-12 22:57 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-12 22:57 - 2017-12-12 22:57 - 000000000 ____D C:\ProgramData\ATI
2017-12-12 22:55 - 2017-12-12 22:55 - 000000000 ___HD C:\Users\Andrew\MicrosoftEdgeBackups
2017-12-12 22:54 - 2017-12-14 00:17 - 000000000 ___RD C:\Users\Andrew\3D Objects
2017-12-12 22:53 - 2017-12-12 22:53 - 000000020 ___SH C:\Users\Andrew\ntuser.ini
2017-12-12 22:50 - 2018-01-05 10:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-12 22:50 - 2018-01-03 11:24 - 000004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5E45B52B-EC63-4571-B0D5-D23995CCD414}
2017-12-12 22:50 - 2017-12-12 23:01 - 000003560 _____ C:\WINDOWS\System32\Tasks\PCDEventLauncherTask
2017-12-12 22:50 - 2017-12-12 22:52 - 000004374 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-12-12 22:50 - 2017-12-12 22:51 - 000003814 _____ C:\WINDOWS\System32\Tasks\PCDoctorBackgroundMonitorTask
2017-12-12 22:50 - 2017-12-12 22:51 - 000003344 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-12 22:50 - 2017-12-12 22:51 - 000003258 _____ C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2017-12-12 22:50 - 2017-12-12 22:51 - 000003098 _____ C:\WINDOWS\System32\Tasks\PCDDataUploadTask
2017-12-12 22:50 - 2017-12-12 22:51 - 000002984 _____ C:\WINDOWS\System32\Tasks\SystemToolsDailyTest
2017-12-12 22:50 - 2017-12-12 22:51 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3960278461-2044705814-1633424519-1000
2017-12-12 22:50 - 2017-12-12 22:51 - 000002350 _____ C:\WINDOWS\System32\Tasks\{DBA83F44-902D-4C39-BA89-85777B6EDCE4}
2017-12-12 22:50 - 2017-12-12 22:51 - 000002350 _____ C:\WINDOWS\System32\Tasks\{A9936503-88F6-46F8-8E84-2743BFD35E91}
2017-12-12 22:50 - 2017-12-12 22:51 - 000002160 _____ C:\WINDOWS\System32\Tasks\{0D8421A0-C776-441E-9A5A-8348A718FF18}
2017-12-12 22:50 - 2017-12-12 22:50 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-12-12 22:50 - 2017-12-12 22:50 - 000003120 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-12 22:50 - 2017-12-12 22:50 - 000002496 _____ C:\WINDOWS\System32\Tasks\Private Internet Access Startup
2017-12-12 22:50 - 2017-12-12 22:50 - 000002160 _____ C:\WINDOWS\System32\Tasks\{69D6DFB6-DD30-49C2-AF4F-0DE759856B3F}
2017-12-12 22:50 - 2017-12-12 22:50 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-12-12 22:50 - 2017-12-12 22:50 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-12-12 22:50 - 2017-12-12 22:50 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-12-12 22:48 - 2017-12-12 22:50 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-12-12 22:48 - 2017-12-12 22:50 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-12-12 22:33 - 2017-12-12 22:33 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-12 22:33 - 2017-12-12 22:33 - 000000000 ____D C:\ProgramData\USOShared
2017-12-12 22:31 - 2017-12-13 22:42 - 000000000 ____D C:\Users\Andrew\AppData\Local\Packages
2017-12-12 22:30 - 2018-01-05 10:19 - 000000000 ____D C:\Users\Andrew
2017-12-12 22:30 - 2017-12-14 17:17 - 000000000 ____D C:\Users\DefaultAppPool
2017-12-12 22:30 - 2017-12-12 22:24 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\ATI
2017-12-12 22:30 - 2017-12-12 22:24 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Local\ATI
2017-12-12 22:30 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\ATI
2017-12-12 22:30 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Andrew\AppData\Local\ATI
2017-12-12 22:25 - 2018-01-05 10:14 - 001052026 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-12 22:25 - 2017-12-12 22:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-12-12 22:25 - 2017-09-29 07:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-12-12 22:24 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI
2017-12-12 22:24 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Default\AppData\Local\ATI
2017-12-12 22:24 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Default User\AppData\Roaming\ATI
2017-12-12 22:24 - 2017-12-12 22:24 - 000000000 ____D C:\Users\Default User\AppData\Local\ATI
2017-12-12 22:22 - 2018-01-05 10:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-12 22:22 - 2017-12-14 00:15 - 000390040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-11 20:41 - 2017-12-11 20:41 - 000495314 _____ C:\Users\Andrew\Downloads\2013_FfTEvalInstrument_Web_v1.2_20140825.pdf
2017-12-11 13:33 - 2017-12-11 13:33 - 000000000 ____D C:\Users\Andrew\AppData\Local\{A99F7B88-9E28-477C-81EA-85FB33BC4086}
2017-12-11 01:33 - 2017-12-11 01:33 - 000000000 ____D C:\Users\Andrew\AppData\Local\{4EAB95DC-1AD2-4FF6-AE26-A55E8A172245}
2017-12-10 15:22 - 2017-12-10 15:22 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2017-12-10 15:22 - 2017-12-10 15:22 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-12-10 15:21 - 2017-12-13 00:18 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-10 15:16 - 2017-12-10 15:21 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-10 15:08 - 2017-12-10 15:08 - 000000000 ____D C:\WINDOWS\containers
2017-12-10 15:04 - 2017-12-10 15:04 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-12-10 15:04 - 2017-12-10 15:04 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-12-10 15:04 - 2017-12-10 15:04 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-10 15:03 - 2017-12-10 15:03 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-12-10 15:03 - 2017-12-10 15:03 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-10 15:03 - 2017-12-10 15:03 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-10 15:03 - 2017-12-10 15:03 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 002220952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001778584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001628056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001490840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001420696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000831384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000819096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000813976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000744856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000669592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000645528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-12-10 15:02 - 2017-12-10 15:02 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-10 15:02 - 2017-12-10 15:02 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-12-10 15:02 - 2017-12-10 15:02 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-12-10 15:02 - 2017-12-10 15:02 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-12-10 14:43 - 2017-12-10 14:43 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-12-10 14:43 - 2017-12-10 14:43 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-12-10 14:43 - 2017-12-10 14:43 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-12-10 14:43 - 2017-12-10 14:43 - 000000000 ____D C:\inetpub
2017-12-10 14:42 - 2017-12-10 14:42 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-12-10 14:42 - 2017-12-10 14:42 - 000000000 ____D C:\Program Files\MSBuild
2017-12-10 14:42 - 2017-12-10 14:42 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-12-10 14:42 - 2017-12-10 14:42 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-12-10 14:40 - 2017-12-10 14:40 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-10 14:40 - 2017-12-10 14:40 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-12-10 14:40 - 2017-12-10 14:40 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-10 14:40 - 2017-12-10 14:40 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-12-10 14:40 - 2017-12-10 14:40 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-12-10 14:40 - 2017-12-10 14:40 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-10 14:18 - 2017-12-10 14:18 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-10 13:33 - 2017-12-10 13:33 - 000000000 ____D C:\Users\Andrew\AppData\Local\{370FD534-C681-403D-A364-43E4782D5608}
2017-12-10 13:30 - 2017-12-10 13:30 - 038901651 _____ C:\Users\Andrew\Downloads\5 minutos para entender qué es la ‘Net Neutrality’ y por qué debería preocuparte..mp4
2017-12-10 12:20 - 2017-12-12 22:53 - 000000000 ___DC C:\WINDOWS\Panther
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-05 10:36 - 2015-04-26 12:24 - 000000000 ____D C:\FRST
2018-01-05 10:20 - 2013-05-10 23:21 - 000607396 _____ C:\WINDOWS\ntbtlog.txt
2018-01-05 10:07 - 2017-11-02 05:07 - 000000000 ____D C:\ProgramData\PlugCache
2018-01-05 10:07 - 2012-05-22 16:00 - 000000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2018-01-05 10:04 - 2017-09-29 02:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-01-05 10:00 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-01-05 10:00 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-01-05 09:57 - 2014-01-14 20:48 - 000000000 ___RD C:\Users\Andrew\Google Drive
2018-01-05 09:56 - 2012-06-05 23:53 - 000000000 ____D C:\Users\Andrew\AppData\Local\Nero
2018-01-05 09:47 - 2016-03-08 06:24 - 000000000 ___RD C:\Users\Andrew\OneDrive
2018-01-05 09:45 - 2016-08-05 18:54 - 000000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2018-01-05 09:45 - 2016-08-05 18:54 - 000000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2018-01-04 15:29 - 2015-12-11 22:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deluge
2018-01-04 15:29 - 2015-12-11 22:12 - 000000000 ____D C:\Program Files (x86)\Deluge
2018-01-04 10:45 - 2017-09-29 07:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-01-04 10:21 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-01-04 01:00 - 2013-02-23 10:00 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\vlc
2018-01-03 15:54 - 2015-12-11 22:12 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\deluge
2018-01-03 15:18 - 2017-09-29 07:44 - 000000000 ____D C:\WINDOWS\INF
2017-12-23 13:11 - 2017-07-23 11:55 - 000000148 _____ C:\WINDOWS\SysWOW64\SmartFlow.txt
2017-12-16 22:34 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\rescache
2017-12-16 02:52 - 2017-09-29 07:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-14 00:17 - 2016-03-08 06:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-14 00:17 - 2012-06-05 09:20 - 000000000 ___RD C:\Users\Andrew\Virtual Machines
2017-12-14 00:14 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-14 00:14 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-12-14 00:14 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-14 00:14 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-14 00:14 - 2017-09-29 02:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-13 21:36 - 2016-03-09 18:41 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-13 21:33 - 2017-10-10 21:51 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-13 21:33 - 2016-03-09 18:41 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-13 06:21 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-13 00:21 - 2017-09-29 07:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\IME
2017-12-13 00:19 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\schemas
2017-12-13 00:19 - 2017-03-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-13 00:19 - 2017-01-24 16:54 - 000000000 ____D C:\WINDOWS\SysWOW64\Dell
2017-12-13 00:19 - 2015-10-30 03:07 - 000000000 ____D C:\WINDOWS\ShellNew
2017-12-13 00:19 - 2012-07-28 15:13 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2017-12-13 00:18 - 2017-09-29 07:49 - 000000000 ____D C:\WINDOWS\Setup
2017-12-13 00:18 - 2017-09-29 07:46 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-12-13 00:18 - 2017-09-29 07:46 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-12-13 00:18 - 2017-09-29 07:46 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-12-13 00:18 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\Cursors
2017-12-13 00:18 - 2017-09-29 07:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-13 00:18 - 2017-07-09 02:55 - 000000000 ____D C:\Program Files\CONEXANT
2017-12-13 00:18 - 2017-04-28 02:34 - 000000000 ____D C:\Program Files\UNP
2017-12-13 00:18 - 2016-08-30 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-12-13 00:18 - 2016-08-05 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Talent
2017-12-13 00:18 - 2015-04-26 21:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-12-13 00:18 - 2015-04-15 05:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-12-13 00:18 - 2015-04-11 10:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Converter 15
2017-12-13 00:18 - 2014-01-14 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-12-13 00:18 - 2013-02-23 10:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-12-13 00:18 - 2012-07-18 22:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-13 00:18 - 2012-07-05 03:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-12-13 00:18 - 2012-06-05 10:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-12-13 00:18 - 2012-05-22 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2017-12-13 00:18 - 2012-05-22 16:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-NFB Reading Technology
2017-12-13 00:18 - 2012-05-22 16:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online
2017-12-13 00:18 - 2012-05-22 16:14 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-12-13 00:18 - 2012-05-22 16:14 - 000000000 ____D C:\WINDOWS\en
2017-12-13 00:18 - 2012-05-22 16:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Stage
2017-12-13 00:18 - 2012-05-22 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe
2017-12-13 00:18 - 2012-05-22 15:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2017-12-13 00:18 - 2009-07-13 23:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-12-12 22:54 - 2016-03-08 06:20 - 000000000 ____D C:\Users\Andrew\AppData\Local\TileDataLayer
2017-12-12 22:52 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-12-12 22:52 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-12-12 22:50 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\Registration
2017-12-12 22:50 - 2017-09-29 02:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-12-12 22:47 - 2017-09-29 07:46 - 000000000 __RSD C:\WINDOWS\media
2017-12-12 22:47 - 2016-03-07 23:54 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-12 22:45 - 2015-05-03 19:40 - 000002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-12 22:45 - 2015-05-03 19:40 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-12 22:39 - 2017-01-15 11:34 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Private Internet Access
2017-12-12 22:39 - 2012-07-19 23:41 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-12 22:33 - 2017-09-29 07:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-12 22:33 - 2017-09-29 07:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-12 22:32 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-12-12 22:32 - 2013-02-23 09:50 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mkv2vob
2017-12-12 22:32 - 2012-07-28 15:16 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e-iceblue
2017-12-12 22:25 - 2017-09-29 02:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-12 22:25 - 2017-07-09 02:56 - 000972260 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-12-12 22:25 - 2017-07-09 02:56 - 000000000 ____D C:\Program Files\ATI Technologies
2017-12-12 22:25 - 2017-07-09 02:56 - 000000000 ____D C:\Program Files (x86)\ATI Technologies
2017-12-12 22:24 - 2013-05-31 22:49 - 000000000 ____D C:\AMD
2017-12-10 15:37 - 2017-09-29 07:46 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-10 15:21 - 2017-07-09 02:55 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-12-10 15:21 - 2017-07-09 02:55 - 000000000 ____D C:\Program Files\AMD
2017-12-10 15:08 - 2017-09-29 08:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-12-10 15:08 - 2017-09-29 08:41 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-10 15:08 - 2017-09-29 07:46 - 000000000 ____D C:\PerfLogs
2017-12-10 14:43 - 2017-09-29 07:46 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-12-10 13:37 - 2014-05-04 11:35 - 000000000 ____D C:\Users\Andrew\AppData\Local\Windows Live
2017-12-06 21:47 - 2016-03-08 06:24 - 000002413 _____ C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
==================== Files in the root of some directories =======
2014-01-14 20:46 - 2014-01-14 23:10 - 050053120 _____ () C:\Program Files (x86)\GUT8D24.tmp
2013-12-12 22:38 - 2014-06-25 02:15 - 000003749 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2015-04-20 15:19 - 2015-05-01 05:14 - 000000020 _____ () C:\Users\Andrew\AppData\Roaming\appdataFr3.bin
2013-12-04 00:50 - 2015-10-13 23:15 - 000016896 _____ () C:\Users\Andrew\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-01-03 15:55 - 2018-01-03 15:55 - 000000218 _____ () C:\Users\Andrew\AppData\Local\recently-used.xbel
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-03 12:39
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018
Ran by Andrew (05-01-2018 10:38:17)
Running from C:\Users\Andrew\Desktop
Windows 10 Pro Version 1709 16299.125 (X64) (2017-12-13 04:52:31)
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3960278461-2044705814-1633424519-500 - Administrator - Disabled)
Andrew (S-1-5-21-3960278461-2044705814-1633424519-1000 - Administrator - Enabled) => C:\Users\Andrew
DefaultAccount (S-1-5-21-3960278461-2044705814-1633424519-503 - Limited - Disabled)
Guest (S-1-5-21-3960278461-2044705814-1633424519-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3960278461-2044705814-1633424519-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3960278461-2044705814-1633424519-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.126 - Adobe Systems Incorporated)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{C8807716-1F6F-5C43-3C32-7295A45CF060}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-bit) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Application Profiles (HKLM-x32\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)
ATI AVIVO64 Codecs (HKLM\...\{262325FE-E6AA-7D56-9071-453A374086C9}) (Version: 11.6.0.10628 - ATI Technologies Inc.) Hidden
Bejeweled 2 Deluxe (HKLM-x32\...\WT089409) (Version: 2.2.0.95 - WildTangent) Hidden
Blackhawk Striker 2 (HKLM-x32\...\WT089410) (Version: 2.2.0.95 - WildTangent) Hidden
Blio (HKLM-x32\...\{400182B4-CA55-46A9-9D88-F8413DCFB36D}) (Version: 2.3.7140 - K-NFB Reading Technology, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Bounce Symphony (HKLM-x32\...\WT089443) (Version: 2.2.0.95 - WildTangent) Hidden
Build-a-lot 2 (HKLM-x32\...\WT089411) (Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (HKLM-x32\...\WT089412) (Version: 2.2.0.95 - WildTangent) Hidden
ccoomPareItApplic (HKLM-x32\...\{88E96402-3BBD-02D9-0A36-6FB806AEE04E}) (Version: - )
Chuzzle Deluxe (HKLM-x32\...\WT089413) (Version: 2.2.0.95 - WildTangent) Hidden
Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.14.50 - Conexant)
Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)
Cozi (HKLM-x32\...\{EA1F3D6C-A6F5-4CDC-B0D3-9C56C06B4D29}) (Version: 1.0.6505.38692 - Cozi Group, Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Customer Connect (HKLM-x32\...\{4FA72FF9-DD64-43A8-8704-6380A11F11D5}) (Version: 1.4.15.0 - Dell Inc.)
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell KM632 Wireless Keyboard Caps Lock Indicator (HKLM-x32\...\{55586382-6704-4237-AAA7-85FF9C055022}) (Version: 2.1.9.0401 - Dell)
Dell MusicStage (HKLM-x32\...\{3BD7DD08-991B-4A2F-A165-614ED14EAADD}) (Version: 1.6.225.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)
Dell Stage (HKLM-x32\...\{FE182796-F6BA-486A-8590-89B7E8D1D60F}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 2.0.6875.668 - Dell)
Dell SupportAssistAgent (HKLM\...\{18EF001B-B005-46CB-917B-112BA69ED85E}) (Version: 2.0.3.10 - Dell)
Dell Update (HKLM-x32\...\{F91263FA-BE4D-439D-9C0A-2E7204E0E9E3}) (Version: 1.9.20.0 - Dell Inc.)
Dell VideoStage (HKLM-x32\...\{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.3.0.2214 - CyberLink Corp.) Hidden
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.3.0.2214 - CyberLink Corp.)
Diner Dash 2 Restaurant Rescue (HKLM-x32\...\WT089414) (Version: 2.2.0.95 - WildTangent) Hidden
Dora's World Adventure (HKLM-x32\...\WT089415) (Version: 2.2.0.95 - WildTangent) Hidden
Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.4.47.146 - OSToto Co., Ltd.)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Escape Whisper Valley (HKLM-x32\...\WT089434) (Version: 2.2.0.95 - WildTangent) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Farm Frenzy (HKLM-x32\...\WT089450) (Version: 2.2.0.95 - WildTangent) Hidden
FATE (HKLM-x32\...\WT089418) (Version: 2.2.0.95 - WildTangent) Hidden
Final Drive Fury (HKLM-x32\...\WT089499) (Version: 2.2.0.95 - WildTangent) Hidden
Final Drive Nitro (HKLM-x32\...\WT089444) (Version: 2.2.0.95 - WildTangent) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Drive (HKLM-x32\...\{9BC95947-92FD-438B-A168-C01F9A5B7292}) (Version: 2.34.7529.6838 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
iTunes (HKLM\...\{955524E7-79EB-4CA9-BA4D-FD2DF587651B}) (Version: 12.4.3.1 - Apple Inc.)
Jewel Quest (HKLM-x32\...\WT089420) (Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire 2 (HKLM-x32\...\WT089422) (Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Luxor (HKLM-x32\...\WT089507) (Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c)
Movavi Video Converter 15 (HKLM-x32\...\Movavi Video Converter 15) (Version: 15.2.2 - Movavi)
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Namco All-Stars PAC-MAN (HKLM-x32\...\WT089440) (Version: 2.2.0.95 - WildTangent) Hidden
NoNoizzeBrowse (HKLM-x32\...\{BDB38365-BCF2-1BF7-0020-507553315EA5}) (Version: - )
Penguins! (HKLM-x32\...\WT089445) (Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (HKLM-x32\...\WT089452) (Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (HKLM-x32\...\WT089426) (Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (HKLM-x32\...\WT089508) (Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (HKLM-x32\...\WT089433) (Version: 2.2.0.95 - WildTangent) Hidden
Private Internet Access Support Files (HKLM-x32\...\{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B}) (Version: 1.0.0.0 - Private Internet Access)
Samantha Swift (HKLM-x32\...\WT089503) (Version: 2.2.0.95 - WildTangent) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spire.PDFConverter (HKLM-x32\...\{7144A11C-9162-4FE1-BA93-2A8CA6DB30CF}) (Version: 1.0.8 - e-iceblue)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SyncUP (HKLM-x32\...\{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}) (Version: 1.12.12400.17.102 - Nero AG) Hidden
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.16100 - Nero AG)
TrustedID (HKLM-x32\...\{C16A92EF-017B-4839-9C75-FBADB5A1FA27}) (Version: 5.0 - TrustedID)
TrustedID IDMonitor Identity Protection (HKLM-x32\...\{0E74474A-1CDF-4249-A507-CE8C1DCEC8BC}) (Version: 1.1.0 - TrustedID Inc)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
Use VLC for YouTube (HKLM-x32\...\{C2E3DB8B-C43B-9203-7BE7-D03BA334FD8A}) (Version: - )
Virtual Villagers 4 - The Tree of Life (HKLM-x32\...\WT089430) (Version: 2.2.0.95 - WildTangent) Hidden
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Web Launch Recorder (HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\WebLaunchRecorder) (Version: 2.0 - )
Wedding Dash - Ready, Aim, Love! (HKLM-x32\...\WT089446) (Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent dell Master Uninstall) (Version: 1.0.2.5 - WildTangent)
WildTangent Games App (Dell Games) (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-dell) (Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Zinio Reader 4 (HKLM-x32\...\{7FB00B6B-6843-97EC-EED6-78BD6D35370A}) (Version: 4.2.4164 - Zinio LLC) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zuma Deluxe (HKLM-x32\...\WT089448) (Version: 2.2.0.95 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-10] (Google)
ContextMenuHandlers1: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} => C:\Program Files (x86)\Movavi Video Converter 15\vcContext\vcContext.dll [2015-02-18] (Movavi)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-10] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers6: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} => C:\Program Files (x86)\Movavi Video Converter 15\vcContext\vcContext.dll [2015-02-18] (Movavi)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {001281C4-B578-4CD0-93A0-C72C97346123} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {05F1DFE5-9CE6-4833-929B-C8B04FAFE981} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2017-09-14] (PC-Doctor, Inc.)
Task: {0CA1DE0B-DBBA-48A6-9ED1-5DE606B3AA18} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-12] (Adobe Systems Incorporated)
Task: {0E9B0B5C-9FF3-4A29-8479-0868A68DD87B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {18E7C743-AB9B-4741-8586-400F4CC9A2F1} - System32\Tasks\{69D6DFB6-DD30-49C2-AF4F-0DE759856B3F} => C:\Program Files (x86)\e-iceblue\Spire.PDFConverter\Bin\PDFConverter.exe [2011-06-07] (e-iceblue)
Task: {1AC52998-29FC-4097-A5F5-FADCD7CB3249} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [2017-01-15] ()
Task: {21EAC519-09FB-4443-89B3-DF7725243841} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2017-09-14] (PC-Doctor, Inc.)
Task: {2615402A-31EF-4621-B92A-B4B5D179074C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {2956E29D-A64D-413D-B892-F5AA2AC347BB} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2D09028D-C7E0-4EE3-AE0A-DB142CF37106} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {2DE43C56-64FD-4EEC-80A7-FABF9CDF0083} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {35235231-8FF3-4940-B0A3-4323BE05C741} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {365A52D1-F788-4B79-8DAC-0E5887A930EF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {3999671B-80BF-4CDF-A95C-93FD2F0FE480} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3CBC40D7-5079-4162-B3CF-8BB086B1F88F} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {40CFC240-561C-4610-BBEC-998E0A3AF824} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {4278AB07-0C14-4A15-9278-855A59B8E2D8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {49072A42-1C33-4821-800D-28DD295D6786} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4FF356D2-FE47-4920-B00B-3E8B260DCA26} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {528B6446-B6F7-44E3-AA71-6203798B4E57} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {53C82D5D-CAA2-4928-AD01-FD5CA9402E42} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {54C24529-FE0D-45F3-921C-72B199731A29} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {63882D74-4B0D-4654-86EE-D96AE3948093} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6563DB5C-54FD-4007-98A3-1F779956369C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {65D60050-8824-44FB-9577-B8BB3B828A09} - System32\Tasks\{A9936503-88F6-46F8-8E84-2743BFD35E91} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ActiveDeals\ActiveDeals.exe" -c /s /n /i:"ExecuteCommands;UninstallCommands" ""
Task: {6A73D90C-B17C-4761-8357-1A346F1A3327} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {74B79B52-5FD9-4C14-BAB0-205B4C4DD9F9} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {775BF3E0-25B4-4CA1-A74E-1F1DE4254F7B} - System32\Tasks\{0D8421A0-C776-441E-9A5A-8348A718FF18} => C:\Program Files (x86)\e-iceblue\Spire.PDFConverter\Bin\PDFConverter.exe [2011-06-07] (e-iceblue)
Task: {92BE7943-78D8-4C4B-883D-3B2AAF434323} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A5FD8BB9-E55C-4E48-87EC-42EC0FDC7826} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {AC070104-CB8D-45B6-B1BB-EE7ECE78AF87} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {AE0D0EB4-D35E-470F-A413-7982C93A37EC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {B1450FE1-82E8-40F1-8F3F-5749E0F9E20E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B6599CC0-6274-4BCC-849A-7120301CDF05} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-07] (Microsoft Corporation)
Task: {BA7F3875-7416-4EF5-B045-A03824D3AFA2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C0832607-22E9-4DD2-A4BE-3256AA57223F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {C1913C94-0842-490C-B755-F95332E09ABA} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C893FA6E-01DF-4301-A3DE-F9D598047CF5} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CA5F0987-1A48-4364-B7E9-DC9751F4C283} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {CA7F2D98-2269-4B8D-9ACA-1CB90B1E77CE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-07] (Microsoft Corporation)
Task: {CB806376-556B-4568-A9BC-A44979CBA558} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {CE4EEC05-AE50-4266-B124-7496745958B2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DA5EBFDD-F0C4-44BB-802B-EC827B4A9BF5} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DA9D1E83-01AA-4187-BDB9-6D13247DE477} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DD7F2149-6BC4-444A-91FF-3C1DF9802CB5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E6B4CE34-0606-4841-981F-09266DC8ED24} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E9A729AD-A8E5-4801-8F76-940088D87934} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {ED2A9559-269D-450B-A4D4-109205A2AF4B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-07] (Microsoft Corporation)
Task: {EDE780D1-95AF-449E-A9A6-B70A9500495B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {F0F682F0-4AED-4E8F-8512-95EB770AF309} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {F4D5B96C-4B5E-4AA0-885D-52C6693CF7A3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F9D85359-97C4-4CB9-B3DB-822095C9EEDA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-07] (Microsoft Corporation)
Task: {FA460248-4A0A-4887-A2A2-03FB0A8818E8} - System32\Tasks\{DBA83F44-902D-4C39-BA89-85777B6EDCE4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ActiveDeals\ActiveDeals.exe" -c /s /n /i:"ExecuteCommands;UninstallCommands" ""
Task: {FF4A68D3-314B-4CD4-BF85-61ED04A68432} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssist.exe [2017-09-22] (Dell Inc.)
Task: {FFD0BCF8-7926-4344-A2B0-908C275D350D} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2017-09-29 07:41 - 2017-09-29 07:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-10 15:03 - 2017-12-10 15:03 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-12-12 22:45 - 2017-12-05 22:24 - 002873688 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\swiftshader\libglesv2.dll
2017-12-12 22:45 - 2017-12-05 22:24 - 000137048 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\swiftshader\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\eztv.ag -> hxxps://eztv.ag
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 20:34 - 2015-05-03 10:29 - 000000035 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{47980681-F642-4852-997D-C887161D0695}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [UDP Query User{E0E4F86F-A1C9-4E1C-948A-113953C2712A}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [TCP Query User{90F851BA-5015-4999-AA96-651BF4A4C3CF}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [UDP Query User{C6004ECC-F4AF-451F-BE1B-EAD50EF2295A}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [{8BA3F465-6FBF-4F45-A4DE-D7943E6F07AB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2254CC99-E6B7-46FE-BDB8-284FD54EB8DC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F6A277C3-9332-4CC0-84C2-1EFD67960323}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C792BD28-E91B-4E29-9167-203DE88574BA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9C9A37BB-6713-4D64-AB1D-1333BCEBE1B4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C53727B8-8E0A-44EF-B26B-B77B6237536D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{AB65381B-C439-438F-8641-064E37DDD778}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
13-12-2017 21:28:40 Windows Update
23-12-2017 02:32:38 Scheduled Checkpoint
03-01-2018 16:35:37 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
Name: Wireless Device
Description: Wireless Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: WUDFRd
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Dell Wireless 1450 Dual-band (802.11a/b/g) USB 2.0 Adapter
Description: Dell Wireless 1450 Dual-band (802.11a/b/g) USB 2.0 Adapter
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/05/2018 09:44:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Andrew-PC.local already in use; will try Andrew-PC-2.local instead
Error: (01/05/2018 09:44:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Andrew-PC.local. Addr 192.168.1.64
Error: (01/05/2018 09:44:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.64:5353 16 Andrew-PC.local. AAAA 2602:0306:3485:C350:0000:0000:0000:03EF
Error: (01/04/2018 03:44:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15578
Error: (01/04/2018 03:44:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15578
Error: (01/04/2018 03:44:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/04/2018 03:27:09 PM) (Source: W3CTRS) (EventID: 2001) (User: )
Description: It has taken too long to refresh the W3SVC counters, the stale counters are being used instead.
Error: (01/04/2018 10:54:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 46860
Error: (01/04/2018 10:54:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 46860
Error: (01/04/2018 10:54:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (01/05/2018 10:39:21 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "Unavailable" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
Error: (01/05/2018 10:39:16 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:38:16 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:37:12 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:36:39 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:36:33 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:35:13 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:35:05 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (01/05/2018 10:35:05 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "Unavailable" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (01/05/2018 10:34:58 AM) (Source: DCOM) (EventID: 10005) (User: Andrew-PC)
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "Unavailable" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
CodeIntegrity:
===================================
Date: 2018-01-05 10:00:25.925
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 10:00:25.924
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:55.547
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:54.838
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:38.311
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:38.310
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:00.809
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:59:00.806
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:58:59.224
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2018-01-05 09:58:59.222
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
Processor: Intel® Core i5-2320 CPU @ 3.00GHz
Percentage of memory in use: 24%
Total physical RAM: 8174.64 MB
Available physical RAM: 6181.79 MB
Total Virtual: 23022.64 MB
Available Virtual: 21008.09 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:1844.7 GB) (Free:1311.9 GB) NTFS
Drive f: () (Removable) (Total:29.31 GB) (Free:0.29 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 1863 GB) (Disk ID: 0EF3ACCD)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=18.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1844.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 29.3 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================