Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Computer running very slow


  • Please log in to reply

#1
RyanM_15

RyanM_15

    Member

  • Member
  • PipPip
  • 15 posts

Good Morning all,

 

I am having a lot of issues with my computer and it seems to be getting slower and slower. My two sons downloaded fortnight (think thats what its called) and since then it has been running slower and slower.

 

I run windows 10 and i am 64-bit

 

Listed below are the logs. Hopefully its an easy fix and the computer comes back to life.

 

Regards,

 

RyanM_15

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.07.2018
Ran by Beck McKee (administrator) on DESKTOP-BBQIE4L (16-07-2018 11:40:52)
Running from C:\Users\the_mckees\Desktop
Loaded Profiles: Beck McKee (Available Profiles: Beck McKee)
Platform: Windows 10 Home Version 1803 17134.165 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Spotify Ltd) C:\Users\the_mckees\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8496344 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [654088 2015-02-18] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2015-06-22] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286960 2016-02-21] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29642368 2016-09-12] (Skype Technologies S.A.)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Spotify Web Helper] => C:\Users\the_mckees\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-03-09] (Spotify Ltd)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32931728 2018-07-07] (Epic Games, Inc.)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Spotify] => C:\Users\the_mckees\AppData\Roaming\Spotify\Spotify.exe [21894544 2018-03-09] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2016-02-21]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 10.1.1.1
Tcpip\..\Interfaces\{1b22b90e-887a-46ac-9ec1-6f54f70714e5}: [DhcpNameServer] 10.1.1.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3333673&octid=EB_ORIGINAL_CTID&ISID=1BEE21AC-809B-43E9-91DD-629A1C5A597E&SearchSource=58&CUI=&UM=8&UP=SP16CEAE5D-4842-45D6-84D0-A1C6EA09E844&D=061316&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-02-03] (RealDownloader)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-02-03] (RealDownloader)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-05-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
 
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-05] (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2016-02-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2016-02-21] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-08] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-08] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-30] (Adobe Systems Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default [2018-07-16]
CHR Extension: (Docs) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-21]
CHR Extension: (YouTube) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-21]
CHR Extension: (Slither.io Skins, Mods, Hack & Guide) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\dggomkijbihggjgcgdbnleolpleddaid [2016-05-08]
CHR Extension: (Google Docs Offline) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (Chrome Web Store Payments) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-21]
CHR Extension: (Chrome Media Router) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-19]
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 AdaptiveSleepService; c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2015-07-07] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-25] ()
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3253664 2017-05-25] (Client Connect LTD)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [775296 2018-03-31] (EasyAntiCheat Ltd)
R2 HPSupportSolutionsFrameworkService; c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-25] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [608520 2015-02-18] (Hewlett-Packard Development Company, L.P.)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2017-12-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265864 2018-03-19] ()
R2 osrss; C:\WINDOWS\system32\osrss.dll [130808 2018-06-08] (Microsoft Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1275776 2018-05-16] (Bitdefender)
S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1095440 2016-02-21] (RealNetworks, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-15] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-07-06] (Realtek Semiconductor)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-11] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-10-14] (Synaptics Incorporated)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [File not signed]
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [239400 2018-06-08] (Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [239400 2018-06-08] (Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [239400 2018-06-08] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3848328 2018-03-19] (Intel® Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 Accelerometer; C:\WINDOWS\System32\drivers\Accelerometer.sys [53760 2017-12-18] (HP)
R3 AmdAS4; C:\WINDOWS\System32\drivers\AmdAS4.sys [18968 2015-07-14] (Advanced Micro Devices, INC.)
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [95080 2017-06-12] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-07-14] (Advanced Micro Devices, Inc.)
R1 amdpsp; C:\WINDOWS\system32\DRIVERS\amdpsp.sys [239976 2017-06-12] (Advanced Micro Devices, Inc. )
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1283464 2018-06-08] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-14] (Advanced Micro Devices)
R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1723552 2018-05-12] (BitDefender)
R0 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [152648 2018-05-12] (Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23032 2018-05-12] (Bitdefender)
R3 clwvd6; C:\WINDOWS\system32\DRIVERS\clwvd6.sys [41704 2013-10-29] (CyberLink Corporation)
S3 EasyAntiCheatSys; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.sys [860872 2018-07-15] (EasyAntiCheat Oy)
R3 edrsensor; C:\WINDOWS\System32\DRIVERS\edrsensor.sys [246064 2018-05-12] (BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\drivers\gzflt.sys [193184 2018-07-07] (BitDefender LLC)
R0 hpdskflt; C:\WINDOWS\System32\drivers\hpdskflt.sys [39936 2017-12-18] (HP)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2017-12-06] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [8623128 2018-04-04] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [301784 2015-06-10] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-06-01] (Realtek )
R3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver_AMDASF.sys [45144 2017-10-14] (Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [33960 2015-07-13] (Synaptics Incorporated)
R2 trufos; C:\WINDOWS\System32\drivers\trufos.sys [607640 2018-05-12] (Bitdefender)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34960 2018-02-02] (HP)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-07-16 11:40 - 2018-07-16 11:45 - 000018905 _____ C:\Users\the_mckees\Desktop\FRST.txt
2018-07-16 11:35 - 2018-07-16 11:35 - 000000000 ____D C:\Users\the_mckees\Downloads\FRST-OlderVersion
2018-07-16 11:32 - 2018-07-16 11:40 - 000000000 ____D C:\FRST
2018-07-16 11:32 - 2018-07-16 11:35 - 002412544 _____ (Farbar) C:\Users\the_mckees\Desktop\FRST64.exe
2018-07-16 11:08 - 2018-07-16 11:08 - 000006206 _____ C:\Users\the_mckees\Downloads\Transactions.csv
2018-07-16 11:07 - 2018-07-16 11:07 - 000009896 _____ C:\Users\the_mckees\Downloads\Transactions.ofx
2018-07-16 11:07 - 2018-07-16 11:07 - 000006035 _____ C:\Users\the_mckees\Downloads\Transactions.qif
2018-07-16 11:05 - 2018-07-16 11:05 - 001742778 _____ C:\Users\the_mckees\Downloads\Orange Everyday.pdf
2018-07-16 11:04 - 2018-07-16 11:04 - 000573483 _____ C:\Users\the_mckees\Downloads\Savings Maximiser (1).pdf
2018-07-16 11:03 - 2018-07-16 11:03 - 000573483 _____ C:\Users\the_mckees\Downloads\Savings Maximiser.pdf
2018-07-16 10:19 - 2018-07-16 11:05 - 000000000 ____D C:\Users\the_mckees\Desktop\Home Loan
2018-07-16 10:00 - 2018-07-16 10:00 - 000126248 _____ C:\WINDOWS\SysWOW64\rsslogs.20180716100057
2018-07-15 20:39 - 2018-07-16 10:00 - 000944764 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715203859
2018-07-15 20:33 - 2018-07-15 20:38 - 000007105 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715203214
2018-07-15 11:51 - 2018-07-15 11:51 - 000061398 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715115031
2018-07-14 22:29 - 2018-07-15 11:51 - 000151134 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714222834
2018-07-14 22:23 - 2018-07-14 22:28 - 000005921 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714222208
2018-07-14 18:46 - 2018-07-14 18:46 - 000000000 ___HD C:\Users\Public\Shared Files
2018-07-14 18:23 - 2018-07-14 22:21 - 000000384 _____ C:\WINDOWS\Tasks\HPCeeScheduleForBeck McKee.job
2018-07-14 18:23 - 2018-07-14 18:23 - 000003296 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForBeck McKee
2018-07-14 17:55 - 2018-07-14 17:55 - 000239669 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714175454
2018-07-13 18:50 - 2018-07-14 17:55 - 000234782 _____ C:\WINDOWS\SysWOW64\rsslogs.20180713184944
2018-07-13 18:38 - 2018-07-13 18:49 - 000013003 _____ C:\WINDOWS\SysWOW64\rsslogs.20180713183746
2018-07-12 10:44 - 2018-07-13 18:38 - 000005932 _____ C:\WINDOWS\SysWOW64\rsslogs.20180712104330
2018-07-11 22:23 - 2018-07-11 22:23 - 000287975 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711222205
2018-07-11 22:13 - 2018-07-11 22:21 - 000010645 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711221229
2018-07-11 19:43 - 2018-07-06 23:26 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-07-11 19:43 - 2018-07-06 20:56 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-07-11 19:43 - 2018-07-06 20:55 - 023863296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-07-11 19:43 - 2018-07-06 16:55 - 009147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-07-11 19:43 - 2018-07-06 16:40 - 025845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-07-11 19:43 - 2018-07-06 16:37 - 022006272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-07-11 19:43 - 2018-07-06 16:34 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-07-11 19:43 - 2018-07-06 16:33 - 004371456 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-07-11 19:43 - 2018-07-06 16:31 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2018-07-11 19:43 - 2018-07-06 16:30 - 019403264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-07-11 19:43 - 2018-07-06 16:28 - 004867584 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-07-11 19:43 - 2018-07-06 16:27 - 007579648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-07-11 19:43 - 2018-07-06 16:27 - 005779456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 002868640 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-07-11 19:42 - 2018-07-06 23:50 - 001610648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000792472 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000689560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000451992 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000309664 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000144792 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-07-11 19:42 - 2018-07-06 23:47 - 003932672 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-07-11 19:42 - 2018-07-06 23:23 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-07-11 19:42 - 2018-07-06 23:22 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-07-11 19:42 - 2018-07-06 23:21 - 003652608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-07-11 19:42 - 2018-07-06 23:21 - 002051584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-07-11 19:42 - 2018-07-06 23:21 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-07-11 19:42 - 2018-07-06 21:36 - 003611368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-07-11 19:42 - 2018-07-06 21:22 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-07-11 19:42 - 2018-07-06 21:21 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-07-11 19:42 - 2018-07-06 17:02 - 000480672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-07-11 19:42 - 2018-07-06 17:01 - 000462752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-07-11 19:42 - 2018-07-06 16:56 - 002712992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-07-11 19:42 - 2018-07-06 16:56 - 001148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-07-11 19:42 - 2018-07-06 16:56 - 000930720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-07-11 19:42 - 2018-07-06 16:55 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 002571728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 002420632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-07-11 19:42 - 2018-07-06 16:55 - 001945784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 001018616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-07-11 19:42 - 2018-07-06 16:54 - 000380824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 001981896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 001175568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 000988640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-07-11 19:42 - 2018-07-06 16:43 - 001620872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-07-11 19:42 - 2018-07-06 16:32 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2018-07-11 19:42 - 2018-07-06 16:31 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 001153536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 001931776 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeangle.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2018-07-11 19:42 - 2018-07-06 16:27 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-07-11 19:42 - 2018-07-06 16:27 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001817600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001567744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 003440128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-07-11 19:42 - 2018-07-06 16:24 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-07-11 19:42 - 2018-07-06 16:23 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2018-07-11 19:42 - 2018-07-06 16:22 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-07-11 19:42 - 2018-05-20 20:44 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-07-11 19:41 - 2018-07-06 23:50 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-07-11 19:41 - 2018-07-06 23:44 - 000541592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-07-11 19:41 - 2018-07-06 23:23 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2018-07-11 19:41 - 2018-07-06 23:21 - 001004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-07-11 19:41 - 2018-07-06 23:21 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-07-11 19:41 - 2018-07-06 23:20 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-07-11 19:41 - 2018-07-06 21:24 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-07-11 19:41 - 2018-07-06 21:24 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-07-11 19:41 - 2018-07-06 21:23 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-07-11 19:41 - 2018-07-06 21:22 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-07-11 19:41 - 2018-07-06 21:22 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-07-11 19:41 - 2018-07-06 20:31 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-07-11 19:41 - 2018-07-06 17:01 - 000035232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2018-07-11 19:41 - 2018-07-06 16:59 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-07-11 19:41 - 2018-07-06 16:59 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-07-11 19:41 - 2018-07-06 16:57 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-07-11 19:41 - 2018-07-06 16:57 - 001012632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-07-11 19:41 - 2018-07-06 16:57 - 000567176 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-07-11 19:41 - 2018-07-06 16:57 - 000057440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.ShellCommon.Broker.dll
2018-07-11 19:41 - 2018-07-06 16:56 - 000766608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-07-11 19:41 - 2018-07-06 16:56 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-07-11 19:41 - 2018-07-06 16:55 - 001026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-07-11 19:41 - 2018-07-06 16:55 - 000885856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000483048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000267680 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2018-07-11 19:41 - 2018-07-06 16:46 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-07-11 19:41 - 2018-07-06 16:44 - 000829856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-07-11 19:41 - 2018-07-06 16:44 - 000573904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-07-11 19:41 - 2018-07-06 16:29 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2018-07-11 19:41 - 2018-07-06 16:29 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProv2faHelper.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000676864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Devices.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProv2faHelper.dll
2018-07-11 19:41 - 2018-07-06 16:25 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-07-11 19:41 - 2018-07-06 16:25 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2018-07-11 19:41 - 2018-07-06 16:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2018-07-11 19:41 - 2018-07-06 16:23 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2018-07-11 19:41 - 2018-06-29 13:46 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-07-11 19:40 - 2018-07-06 23:23 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-07-11 19:40 - 2018-07-06 23:19 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-07-11 19:40 - 2018-07-06 21:23 - 000347136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2018-07-11 19:40 - 2018-07-06 21:21 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-07-11 19:40 - 2018-07-06 16:29 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-07-11 19:40 - 2018-07-06 16:26 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2018-07-11 19:40 - 2018-07-06 16:26 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-07-11 19:40 - 2018-07-06 16:26 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-07-11 19:40 - 2018-07-06 16:25 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-07-11 19:40 - 2018-07-06 16:25 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-07-11 19:40 - 2018-07-06 16:23 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2018-07-11 19:40 - 2018-07-06 15:11 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-07-11 19:39 - 2018-07-06 23:22 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-07-11 19:39 - 2018-07-06 16:31 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2018-07-11 19:39 - 2018-07-06 16:31 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsTelemetry.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2018-07-11 19:39 - 2018-07-06 16:28 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2018-07-11 19:39 - 2018-07-06 16:28 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2018-07-11 19:39 - 2018-07-06 16:27 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2018-07-11 19:39 - 2018-07-06 16:26 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2018-07-11 19:35 - 2018-07-11 19:35 - 000172366 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711193406
2018-07-11 19:25 - 2018-07-11 19:33 - 000007094 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711192425
2018-07-11 18:54 - 2018-07-11 18:54 - 000029509 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711185337
2018-07-11 18:46 - 2018-07-11 18:53 - 000008285 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711184556
2018-07-11 17:38 - 2018-07-11 17:38 - 000076723 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711173727
2018-07-11 17:32 - 2018-07-11 17:37 - 000005922 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711173129
2018-07-11 17:27 - 2018-07-11 17:27 - 000002373 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711172623
2018-07-11 17:19 - 2018-07-11 17:26 - 000008277 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711171840
2018-07-11 15:02 - 2018-07-10 22:23 - 000000000 ____D C:\Windows.old
2018-07-11 14:53 - 2018-07-11 15:02 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-07-11 14:50 - 2018-07-11 14:54 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-07-11 14:50 - 2018-07-11 14:50 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-07-11 14:44 - 2018-07-11 14:44 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-07-11 14:44 - 2018-07-11 14:44 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-07-11 14:44 - 2018-07-11 14:44 - 000024789 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711144357
2018-07-11 14:43 - 2018-07-11 14:43 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 011901952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006817872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006572000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006528600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004788504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004561920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004333568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002563960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002331576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002206528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002163184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-07-11 14:43 - 2018-07-11 14:43 - 002062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002015744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-07-11 14:43 - 2018-07-11 14:43 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001710240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001397192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001380192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001288840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001150408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001145696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001144120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001129640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001112600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001097640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000770152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000661152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-07-11 14:43 - 2018-07-11 14:43 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000500552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000472136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000247984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000232488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2018-07-11 14:43 - 2018-07-11 14:43 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000129192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-07-11 14:42 - 2018-07-11 14:42 - 021388856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006043600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002962944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002903040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002830240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002583552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002548736 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002367488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001805752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001742272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001659296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001632256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001462824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001457128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-07-11 14:42 - 2018-07-11 14:42 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001376576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001251736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001140568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-07-11 14:42 - 2018-07-11 14:42 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001069056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001026896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001011968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000983008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000978432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-07-11 14:42 - 2018-07-11 14:42 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000898760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-07-11 14:42 - 2018-07-11 14:42 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000811520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-07-11 14:42 - 2018-07-11 14:42 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000792984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000761440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000719552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000717208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-07-11 14:42 - 2018-07-11 14:42 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000642088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000611232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-07-11 14:42 - 2018-07-11 14:42 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000562080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000550608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000510904 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000491304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000444240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000433560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000413816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000413080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000348256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000338352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000324000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000281080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000228768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000118872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000116632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000105376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000094104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000083360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000072768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000048544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandlerPS.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-07-11 14:42 - 2018-07-11 14:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-07-11 14:32 - 2018-07-11 14:43 - 000014189 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711143123
2018-07-11 14:30 - 2018-07-11 14:30 - 000000000 ____D C:\inetpub
2018-07-11 14:29 - 2018-07-11 15:02 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files\MSBuild
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-07-11 14:28 - 2018-07-11 14:28 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-07-11 14:28 - 2018-07-11 14:28 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-07-11 14:26 - 2018-07-11 14:26 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-07-11 14:16 - 2018-07-11 14:16 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2018-07-11 14:16 - 2018-07-11 14:16 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2018-07-11 14:16 - 2018-07-11 14:16 - 000058524 _____ C:\WINDOWS\system32\srms.dat
2018-07-10 23:22 - 2018-07-10 23:38 - 000000000 ____D C:\ProgramData\Packages
2018-07-10 23:22 - 2018-07-10 23:22 - 000029209 _____ C:\ProgramData\agent.update.1531230687.bdinstall.bin
2018-07-10 22:37 - 2018-07-11 22:22 - 000000000 ____D C:\Users\the_mckees\AppData\Local\D3DSCache
2018-07-10 22:33 - 2018-07-10 22:33 - 000106262 _____ C:\WINDOWS\SysWOW64\rsslogs.20180710223213
2018-07-10 22:30 - 2018-07-10 22:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-07-10 22:29 - 2018-07-10 22:29 - 000001417 _____ C:\Users\the_mckees\Desktop\Microsoft Edge.lnk
2018-07-10 22:24 - 2018-07-10 22:24 - 000000020 ___SH C:\Users\the_mckees\ntuser.ini
2018-07-10 22:21 - 2018-07-15 20:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-07-10 22:21 - 2018-07-14 19:00 - 000003386 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-11 22:42 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-07-10 22:21 - 2018-07-10 23:24 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2018-07-10 22:21 - 2018-07-10 22:22 - 000002672 _____ C:\WINDOWS\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:22 - 000002494 _____ C:\WINDOWS\System32\Tasks\RealDownloader Update Check
2018-07-10 22:21 - 2018-07-10 22:21 - 000003348 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-07-10 22:21 - 2018-07-10 22:21 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-07-10 22:21 - 2018-07-10 22:21 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-07-10 22:21 - 2018-07-10 22:21 - 000002654 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:21 - 000002616 _____ C:\WINDOWS\System32\Tasks\bvyvdvyxc
2018-07-10 22:21 - 2018-07-10 22:21 - 000002554 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:21 - 000002490 _____ C:\WINDOWS\System32\Tasks\YCMServiceAgent
2018-07-10 22:21 - 2018-07-10 22:21 - 000002172 _____ C:\WINDOWS\System32\Tasks\DropboxOEM
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-07-10 22:17 - 2018-07-10 22:21 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-07-10 22:17 - 2018-07-10 22:21 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-07-10 21:59 - 2018-07-15 20:38 - 000931444 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-07-10 21:54 - 2018-07-10 22:31 - 000043704 _____ C:\WINDOWS\SysWOW64\rsslogs.20180710215304
2018-07-10 21:47 - 2018-07-10 21:47 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-07-10 21:43 - 2018-07-14 18:59 - 000002385 _____ C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-07-10 21:43 - 2018-07-13 18:44 - 000000000 ____D C:\Users\the_mckees
2018-07-10 21:43 - 2018-07-10 21:59 - 000000000 ____D C:\Users\the_mckees\Documents\hp.system.package.metadata
2018-07-10 21:43 - 2016-12-25 08:29 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Intel
2018-07-10 21:43 - 2016-10-07 02:56 - 000000000 ____D C:\Users\the_mckees\Documents\hp.applications.package.appdata
2018-07-10 21:43 - 2016-10-07 02:56 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\RealNetworks
2018-07-10 21:39 - 2018-07-10 21:39 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-07-10 21:39 - 2018-07-10 21:39 - 000000000 ____D C:\Program Files (x86)\Intel
2018-07-10 21:38 - 2018-07-10 21:38 - 000000000 ____D C:\ProgramData\USOShared
2018-07-10 21:38 - 2018-04-12 09:03 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-07-10 21:33 - 2018-07-16 10:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-07-10 21:33 - 2018-07-11 22:11 - 000424904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-07-09 10:20 - 2018-07-09 10:20 - 000935835 _____ C:\WINDOWS\SysWOW64\rsslogs.20180709101915
2018-07-09 10:15 - 2018-07-09 10:18 - 000004736 _____ C:\WINDOWS\SysWOW64\rsslogs.20180709101454
2018-07-08 17:22 - 2018-07-08 17:22 - 000556852 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708172135
2018-07-08 17:18 - 2018-07-08 17:21 - 000003548 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708171730
2018-07-08 13:56 - 2018-07-08 13:56 - 000235959 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708135537
2018-07-08 00:31 - 2018-07-08 13:56 - 000243111 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708003048
2018-07-08 00:27 - 2018-07-08 00:30 - 000003558 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708002634
2018-07-08 00:06 - 2018-07-08 00:06 - 000020069 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708000554
2018-07-08 00:03 - 2018-07-08 00:05 - 000003545 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708000233
2018-07-07 19:33 - 2018-07-07 19:33 - 000234910 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707193242
2018-07-07 19:27 - 2018-07-07 19:32 - 000005917 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707192627
2018-07-07 18:54 - 2018-07-07 18:54 - 000036590 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707185322
2018-07-07 17:16 - 2018-06-08 14:09 - 000130808 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2018-07-07 17:06 - 2018-07-07 18:52 - 000027168 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707170516
2018-07-07 12:56 - 2018-07-07 12:56 - 000028337 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707125524
2018-07-07 12:51 - 2018-07-07 12:55 - 000004742 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707125012
2018-07-07 11:20 - 2018-07-07 11:20 - 000081513 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707111938
2018-07-07 11:17 - 2018-07-07 11:19 - 000002365 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707111648
2018-07-07 01:20 - 2018-07-07 11:47 - 000193184 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2018-07-07 00:51 - 2018-07-07 00:51 - 000090909 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707005041
2018-07-07 00:49 - 2018-07-07 00:50 - 000002374 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707004813
2018-07-07 00:37 - 2018-07-07 00:45 - 000009465 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707003656
2018-07-06 12:06 - 2018-07-06 12:06 - 000566470 _____ C:\WINDOWS\SysWOW64\rsslogs.20180706120518
2018-07-05 20:50 - 2018-07-06 12:06 - 000094388 _____ C:\WINDOWS\SysWOW64\rsslogs.20180705204946
2018-07-04 20:50 - 2018-07-05 20:50 - 000286643 _____ C:\WINDOWS\SysWOW64\rsslogs.20180704204927
2018-07-03 09:45 - 2018-07-04 20:50 - 000848145 _____ C:\WINDOWS\SysWOW64\rsslogs.20180703094531
2018-07-02 11:27 - 2018-07-03 09:45 - 001578133 _____ C:\WINDOWS\SysWOW64\rsslogs.20180702112645
2018-06-30 21:56 - 2018-07-10 22:23 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-30 20:22 - 2018-07-02 11:27 - 000139252 _____ C:\WINDOWS\SysWOW64\rsslogs.20180630202107
2018-06-30 20:17 - 2018-06-30 20:20 - 000003557 _____ C:\WINDOWS\SysWOW64\rsslogs.20180630201650
2018-06-28 07:24 - 2018-06-28 07:24 - 000089682 _____ C:\WINDOWS\SysWOW64\rsslogs.20180628072330
2018-06-27 20:15 - 2018-06-28 07:24 - 000113295 _____ C:\WINDOWS\SysWOW64\rsslogs.20180627201422
2018-06-26 20:45 - 2018-06-27 20:15 - 000034210 _____ C:\WINDOWS\SysWOW64\rsslogs.20180626204421
2018-06-25 07:27 - 2018-06-26 20:45 - 000059032 _____ C:\WINDOWS\SysWOW64\rsslogs.20180625072623
2018-06-23 09:53 - 2018-06-25 07:27 - 000030714 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623095205
2018-06-23 09:45 - 2018-06-23 09:51 - 000008273 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623094426
2018-06-23 08:58 - 2018-06-23 08:58 - 000040138 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623085743
2018-06-22 18:47 - 2018-06-22 18:47 - 000000000 ___HD C:\OneDriveTemp
2018-06-22 18:33 - 2018-06-23 08:58 - 000043644 _____ C:\WINDOWS\SysWOW64\rsslogs.20180622183244
2018-06-20 07:23 - 2018-06-22 18:33 - 000129889 _____ C:\WINDOWS\SysWOW64\rsslogs.20180620072251
2018-06-19 12:22 - 2018-06-20 07:23 - 000154628 _____ C:\WINDOWS\SysWOW64\rsslogs.20180619122111
2018-06-19 12:19 - 2018-06-19 12:20 - 000002370 _____ C:\WINDOWS\SysWOW64\rsslogs.20180619121809
2018-06-16 12:02 - 2018-06-16 12:02 - 000370774 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616120126
2018-06-16 11:54 - 2018-06-16 12:01 - 000008280 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616115314
2018-06-16 09:22 - 2018-06-16 09:22 - 000173504 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616092157
2018-06-16 09:14 - 2018-06-16 09:21 - 000008279 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616091341
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-07-16 11:45 - 2017-09-27 14:15 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2018-07-16 11:42 - 2018-04-12 09:08 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-07-16 11:36 - 2017-10-11 13:07 - 000000000 ____D C:\Users\the_mckees\Desktop\Baseball stuff
2018-07-16 11:36 - 2017-04-11 13:37 - 000000000 ____D C:\Users\the_mckees\Desktop\BECK
2018-07-16 11:36 - 2016-04-20 22:46 - 000000000 ____D C:\Users\the_mckees\Desktop\Home Stuff
2018-07-16 11:34 - 2017-09-14 22:06 - 000000000 ____D C:\Users\the_mckees\Desktop\BLFC2017
2018-07-16 11:33 - 2015-12-26 07:52 - 000000000 ____D C:\Users\the_mckees\Desktop\Work Stuff
2018-07-16 04:36 - 2018-04-12 06:34 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2018-07-15 21:18 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-07-15 21:18 - 2018-04-12 09:06 - 000000000 ____D C:\WINDOWS\INF
2018-07-15 21:17 - 2018-04-12 09:08 - 000000000 ___HD C:\Program Files\WindowsApps
2018-07-15 21:04 - 2015-12-05 16:35 - 000000000 ____D C:\Users\the_mckees\Documents\YouCam
2018-07-15 20:47 - 2015-12-06 18:00 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Skype
2018-07-15 20:44 - 2017-05-28 10:22 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Spotify
2018-07-15 20:41 - 2015-12-05 16:37 - 000000000 ___RD C:\Users\the_mckees\OneDrive
2018-07-14 23:47 - 2016-04-01 16:06 - 000000000 ____D C:\Users\the_mckees\Downloads\PopcornTime
2018-07-14 18:38 - 2018-03-31 19:34 - 000000000 ____D C:\Users\the_mckees\AppData\Local\UnrealEngine
2018-07-13 18:41 - 2018-04-12 09:00 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-07-12 10:19 - 2017-08-25 21:36 - 000000000 ____D C:\Users\the_mckees\AppData\Local\Spotify
2018-07-11 22:40 - 2015-12-21 16:34 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-11 22:10 - 2018-04-12 06:34 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-07-11 22:10 - 2017-11-20 21:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-07-11 22:08 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-07-11 22:08 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-07-11 22:07 - 2018-04-12 09:08 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-07-11 22:07 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-07-11 19:25 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-07-11 18:55 - 2015-12-06 19:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-07-11 18:54 - 2015-12-06 19:47 - 134675576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-07-11 15:02 - 2018-04-12 09:11 - 000000000 ____D C:\WINDOWS\Setup
2018-07-11 15:02 - 2018-04-12 09:08 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 __RHD C:\Users\Public\Libraries
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\spool
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-07-11 15:02 - 2018-03-07 18:54 - 000000000 ____D C:\WINDOWS\system32\tmp000018ad
2018-07-11 15:02 - 2018-03-01 19:20 - 000000000 ____D C:\WINDOWS\system32\tmp000050a3
2018-07-11 15:02 - 2018-02-24 01:13 - 000000000 ____D C:\WINDOWS\system32\tmp000032f9
2018-07-11 15:02 - 2017-11-20 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2018-07-11 15:02 - 2017-11-20 21:14 - 000000000 ____D C:\Program Files\AMD
2018-07-11 15:02 - 2017-09-29 23:16 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-07-11 15:02 - 2017-09-27 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free
2018-07-11 15:02 - 2017-07-11 21:25 - 000000000 ____D C:\Program Files\UNP
2018-07-11 15:02 - 2016-04-01 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2018-07-11 15:02 - 2016-03-29 10:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-07-11 15:02 - 2016-02-27 12:00 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2018-07-11 15:02 - 2016-02-27 11:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-07-11 15:02 - 2016-02-21 17:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2018-07-11 15:02 - 2016-01-11 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2018-07-11 15:02 - 2015-12-24 10:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series
2018-07-11 15:02 - 2015-12-24 10:05 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-07-11 15:02 - 2015-12-06 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-07-11 15:02 - 2015-10-30 18:37 - 000000000 ____D C:\WINDOWS\ShellNew
2018-07-11 15:02 - 2015-10-22 22:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB
2018-07-11 15:02 - 2015-10-22 22:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-07-11 15:02 - 2015-10-22 21:58 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2018-07-11 15:02 - 2015-10-22 21:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2018-07-11 15:02 - 2015-10-22 21:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2018-07-11 15:02 - 2015-10-22 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2018-07-11 15:02 - 2015-07-23 22:21 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2018-07-11 15:02 - 2015-07-23 22:20 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2018-07-11 14:55 - 2017-11-20 21:15 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2018-07-11 14:54 - 2016-01-11 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2018-07-11 14:53 - 2017-11-20 21:15 - 000000000 ____D C:\Program Files\Synaptics
2018-07-11 14:53 - 2017-11-20 21:15 - 000000000 ____D C:\Program Files\Realtek
2018-07-11 14:53 - 2017-11-20 21:14 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\TextInput
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\setup
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\Provisioning
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-07-11 14:46 - 2018-04-12 06:34 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-07-11 14:40 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\appcompat
2018-07-11 14:30 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-07-11 14:29 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-07-11 14:26 - 2018-04-12 18:48 - 000000000 ____D C:\WINDOWS\OCR
2018-07-10 23:34 - 2018-01-20 18:43 - 000000000 ____D C:\Users\the_mckees\AppData\Local\Packages
2018-07-10 23:22 - 2017-09-27 14:12 - 000000000 ____D C:\Program Files\Bitdefender Agent
2018-07-10 22:26 - 2015-12-13 18:03 - 000000000 ___RD C:\Users\the_mckees\3D Objects
2018-07-10 22:26 - 2015-07-16 15:35 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-07-10 22:16 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\Registration
2018-07-10 22:04 - 2015-12-12 03:40 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-07-10 22:03 - 2018-04-12 09:08 - 000000000 __RSD C:\WINDOWS\media
2018-07-10 21:57 - 2016-03-21 19:15 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-07-10 21:57 - 2016-03-21 19:15 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-07-10 21:49 - 2017-09-24 16:26 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-07-10 21:49 - 2017-06-21 23:06 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\4K Video Downloader
2018-07-10 21:47 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-07-10 21:41 - 2017-11-20 21:15 - 000012321 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2018-07-10 21:41 - 2017-11-20 21:15 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-07-10 21:40 - 2015-07-23 22:20 - 000000000 ____D C:\ProgramData\Package Cache
2018-07-10 21:39 - 2016-12-25 08:29 - 000000000 ____D C:\ProgramData\Intel
2018-07-10 21:38 - 2018-04-12 09:08 - 000000000 ____D C:\ProgramData\USOPrivate
2018-07-10 21:38 - 2015-10-22 21:57 - 000000000 ____D C:\Program Files\Intel
2018-07-10 21:37 - 2017-11-20 21:13 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-07-08 17:44 - 2017-09-29 09:01 - 000000000 ____D C:\Program Files\rempl
2018-06-29 10:43 - 2018-04-12 09:11 - 000835064 _____ C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-29 10:43 - 2018-04-12 09:11 - 000179704 _____ C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-22 19:36 - 2017-09-24 16:26 - 000001256 _____ C:\Users\the_mckees\Desktop\Roblox Studio.lnk
 
==================== Files in the root of some directories =======
 
2017-01-08 14:23 - 2017-01-08 14:23 - 000000000 _____ () C:\Users\the_mckees\AppData\Local\{5A3BF1B7-D417-41F7-BC84-D460B7400C21}
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2018-07-10 21:33
 
==================== End of FRST.txt ============================Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.07.2018
Ran by Beck McKee (administrator) on DESKTOP-BBQIE4L (16-07-2018 11:40:52)
Running from C:\Users\the_mckees\Desktop
Loaded Profiles: Beck McKee (Available Profiles: Beck McKee)
Platform: Windows 10 Home Version 1803 17134.165 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Spotify Ltd) C:\Users\the_mckees\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8496344 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [654088 2015-02-18] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2015-06-22] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286960 2016-02-21] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29642368 2016-09-12] (Skype Technologies S.A.)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Spotify Web Helper] => C:\Users\the_mckees\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-03-09] (Spotify Ltd)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32931728 2018-07-07] (Epic Games, Inc.)
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Run: [Spotify] => C:\Users\the_mckees\AppData\Roaming\Spotify\Spotify.exe [21894544 2018-03-09] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2016-02-21]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 10.1.1.1
Tcpip\..\Interfaces\{1b22b90e-887a-46ac-9ec1-6f54f70714e5}: [DhcpNameServer] 10.1.1.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3333673&octid=EB_ORIGINAL_CTID&ISID=1BEE21AC-809B-43E9-91DD-629A1C5A597E&SearchSource=58&CUI=&UM=8&UP=SP16CEAE5D-4842-45D6-84D0-A1C6EA09E844&D=061316&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-593274584-2845798583-2150428693-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-02-03] (RealDownloader)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-02-03] (RealDownloader)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-05-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
 
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-05] (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2016-02-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.3.100 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2016-02-21] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-08] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-08] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-30] (Adobe Systems Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default [2018-07-16]
CHR Extension: (Docs) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-21]
CHR Extension: (YouTube) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-21]
CHR Extension: (Slither.io Skins, Mods, Hack & Guide) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\dggomkijbihggjgcgdbnleolpleddaid [2016-05-08]
CHR Extension: (Google Docs Offline) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (Chrome Web Store Payments) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-21]
CHR Extension: (Chrome Media Router) - C:\Users\the_mckees\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-19]
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 AdaptiveSleepService; c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2015-07-07] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-25] ()
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3253664 2017-05-25] (Client Connect LTD)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [775296 2018-03-31] (EasyAntiCheat Ltd)
R2 HPSupportSolutionsFrameworkService; c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-25] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [608520 2015-02-18] (Hewlett-Packard Development Company, L.P.)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2017-12-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265864 2018-03-19] ()
R2 osrss; C:\WINDOWS\system32\osrss.dll [130808 2018-06-08] (Microsoft Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1275776 2018-05-16] (Bitdefender)
S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1095440 2016-02-21] (RealNetworks, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-15] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-07-06] (Realtek Semiconductor)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-11] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-10-14] (Synaptics Incorporated)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [File not signed]
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [239400 2018-06-08] (Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [239400 2018-06-08] (Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [239400 2018-06-08] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3848328 2018-03-19] (Intel® Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 Accelerometer; C:\WINDOWS\System32\drivers\Accelerometer.sys [53760 2017-12-18] (HP)
R3 AmdAS4; C:\WINDOWS\System32\drivers\AmdAS4.sys [18968 2015-07-14] (Advanced Micro Devices, INC.)
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [95080 2017-06-12] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-07-14] (Advanced Micro Devices, Inc.)
R1 amdpsp; C:\WINDOWS\system32\DRIVERS\amdpsp.sys [239976 2017-06-12] (Advanced Micro Devices, Inc. )
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1283464 2018-06-08] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-14] (Advanced Micro Devices)
R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1723552 2018-05-12] (BitDefender)
R0 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [152648 2018-05-12] (Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23032 2018-05-12] (Bitdefender)
R3 clwvd6; C:\WINDOWS\system32\DRIVERS\clwvd6.sys [41704 2013-10-29] (CyberLink Corporation)
S3 EasyAntiCheatSys; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.sys [860872 2018-07-15] (EasyAntiCheat Oy)
R3 edrsensor; C:\WINDOWS\System32\DRIVERS\edrsensor.sys [246064 2018-05-12] (BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\drivers\gzflt.sys [193184 2018-07-07] (BitDefender LLC)
R0 hpdskflt; C:\WINDOWS\System32\drivers\hpdskflt.sys [39936 2017-12-18] (HP)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2017-12-06] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [8623128 2018-04-04] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [301784 2015-06-10] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-06-01] (Realtek )
R3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver_AMDASF.sys [45144 2017-10-14] (Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [33960 2015-07-13] (Synaptics Incorporated)
R2 trufos; C:\WINDOWS\System32\drivers\trufos.sys [607640 2018-05-12] (Bitdefender)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34960 2018-02-02] (HP)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-07-16 11:40 - 2018-07-16 11:45 - 000018905 _____ C:\Users\the_mckees\Desktop\FRST.txt
2018-07-16 11:35 - 2018-07-16 11:35 - 000000000 ____D C:\Users\the_mckees\Downloads\FRST-OlderVersion
2018-07-16 11:32 - 2018-07-16 11:40 - 000000000 ____D C:\FRST
2018-07-16 11:32 - 2018-07-16 11:35 - 002412544 _____ (Farbar) C:\Users\the_mckees\Desktop\FRST64.exe
2018-07-16 11:08 - 2018-07-16 11:08 - 000006206 _____ C:\Users\the_mckees\Downloads\Transactions.csv
2018-07-16 11:07 - 2018-07-16 11:07 - 000009896 _____ C:\Users\the_mckees\Downloads\Transactions.ofx
2018-07-16 11:07 - 2018-07-16 11:07 - 000006035 _____ C:\Users\the_mckees\Downloads\Transactions.qif
2018-07-16 11:05 - 2018-07-16 11:05 - 001742778 _____ C:\Users\the_mckees\Downloads\Orange Everyday.pdf
2018-07-16 11:04 - 2018-07-16 11:04 - 000573483 _____ C:\Users\the_mckees\Downloads\Savings Maximiser (1).pdf
2018-07-16 11:03 - 2018-07-16 11:03 - 000573483 _____ C:\Users\the_mckees\Downloads\Savings Maximiser.pdf
2018-07-16 10:19 - 2018-07-16 11:05 - 000000000 ____D C:\Users\the_mckees\Desktop\Home Loan
2018-07-16 10:00 - 2018-07-16 10:00 - 000126248 _____ C:\WINDOWS\SysWOW64\rsslogs.20180716100057
2018-07-15 20:39 - 2018-07-16 10:00 - 000944764 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715203859
2018-07-15 20:33 - 2018-07-15 20:38 - 000007105 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715203214
2018-07-15 11:51 - 2018-07-15 11:51 - 000061398 _____ C:\WINDOWS\SysWOW64\rsslogs.20180715115031
2018-07-14 22:29 - 2018-07-15 11:51 - 000151134 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714222834
2018-07-14 22:23 - 2018-07-14 22:28 - 000005921 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714222208
2018-07-14 18:46 - 2018-07-14 18:46 - 000000000 ___HD C:\Users\Public\Shared Files
2018-07-14 18:23 - 2018-07-14 22:21 - 000000384 _____ C:\WINDOWS\Tasks\HPCeeScheduleForBeck McKee.job
2018-07-14 18:23 - 2018-07-14 18:23 - 000003296 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForBeck McKee
2018-07-14 17:55 - 2018-07-14 17:55 - 000239669 _____ C:\WINDOWS\SysWOW64\rsslogs.20180714175454
2018-07-13 18:50 - 2018-07-14 17:55 - 000234782 _____ C:\WINDOWS\SysWOW64\rsslogs.20180713184944
2018-07-13 18:38 - 2018-07-13 18:49 - 000013003 _____ C:\WINDOWS\SysWOW64\rsslogs.20180713183746
2018-07-12 10:44 - 2018-07-13 18:38 - 000005932 _____ C:\WINDOWS\SysWOW64\rsslogs.20180712104330
2018-07-11 22:23 - 2018-07-11 22:23 - 000287975 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711222205
2018-07-11 22:13 - 2018-07-11 22:21 - 000010645 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711221229
2018-07-11 19:43 - 2018-07-06 23:26 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-07-11 19:43 - 2018-07-06 20:56 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-07-11 19:43 - 2018-07-06 20:55 - 023863296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-07-11 19:43 - 2018-07-06 16:55 - 009147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-07-11 19:43 - 2018-07-06 16:40 - 025845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-07-11 19:43 - 2018-07-06 16:37 - 022006272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-07-11 19:43 - 2018-07-06 16:34 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-07-11 19:43 - 2018-07-06 16:33 - 004371456 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-07-11 19:43 - 2018-07-06 16:31 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2018-07-11 19:43 - 2018-07-06 16:30 - 019403264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-07-11 19:43 - 2018-07-06 16:28 - 004867584 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-07-11 19:43 - 2018-07-06 16:27 - 007579648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-07-11 19:43 - 2018-07-06 16:27 - 005779456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 002868640 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-07-11 19:42 - 2018-07-06 23:50 - 001610648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000792472 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000689560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000451992 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000309664 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-07-11 19:42 - 2018-07-06 23:50 - 000144792 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-07-11 19:42 - 2018-07-06 23:47 - 003932672 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-07-11 19:42 - 2018-07-06 23:23 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-07-11 19:42 - 2018-07-06 23:22 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-07-11 19:42 - 2018-07-06 23:21 - 003652608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-07-11 19:42 - 2018-07-06 23:21 - 002051584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-07-11 19:42 - 2018-07-06 23:21 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-07-11 19:42 - 2018-07-06 21:36 - 003611368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-07-11 19:42 - 2018-07-06 21:22 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-07-11 19:42 - 2018-07-06 21:21 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-07-11 19:42 - 2018-07-06 17:02 - 000480672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-07-11 19:42 - 2018-07-06 17:01 - 000462752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-07-11 19:42 - 2018-07-06 16:56 - 002712992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-07-11 19:42 - 2018-07-06 16:56 - 001148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-07-11 19:42 - 2018-07-06 16:56 - 000930720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-07-11 19:42 - 2018-07-06 16:55 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 002571728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 002420632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-07-11 19:42 - 2018-07-06 16:55 - 001945784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-07-11 19:42 - 2018-07-06 16:55 - 001018616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-07-11 19:42 - 2018-07-06 16:54 - 000380824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 001981896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 001175568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-07-11 19:42 - 2018-07-06 16:44 - 000988640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-07-11 19:42 - 2018-07-06 16:43 - 001620872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-07-11 19:42 - 2018-07-06 16:32 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2018-07-11 19:42 - 2018-07-06 16:31 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2018-07-11 19:42 - 2018-07-06 16:29 - 001153536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 001931776 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeangle.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-07-11 19:42 - 2018-07-06 16:28 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2018-07-11 19:42 - 2018-07-06 16:27 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-07-11 19:42 - 2018-07-06 16:27 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001817600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001567744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2018-07-11 19:42 - 2018-07-06 16:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 003440128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-07-11 19:42 - 2018-07-06 16:24 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2018-07-11 19:42 - 2018-07-06 16:24 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-07-11 19:42 - 2018-07-06 16:23 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2018-07-11 19:42 - 2018-07-06 16:22 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-07-11 19:42 - 2018-05-20 20:44 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-07-11 19:41 - 2018-07-06 23:50 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-07-11 19:41 - 2018-07-06 23:44 - 000541592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-07-11 19:41 - 2018-07-06 23:23 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2018-07-11 19:41 - 2018-07-06 23:21 - 001004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-07-11 19:41 - 2018-07-06 23:21 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-07-11 19:41 - 2018-07-06 23:20 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-07-11 19:41 - 2018-07-06 21:24 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-07-11 19:41 - 2018-07-06 21:24 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-07-11 19:41 - 2018-07-06 21:23 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-07-11 19:41 - 2018-07-06 21:22 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-07-11 19:41 - 2018-07-06 21:22 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-07-11 19:41 - 2018-07-06 20:31 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-07-11 19:41 - 2018-07-06 17:01 - 000035232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2018-07-11 19:41 - 2018-07-06 16:59 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-07-11 19:41 - 2018-07-06 16:59 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-07-11 19:41 - 2018-07-06 16:57 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-07-11 19:41 - 2018-07-06 16:57 - 001012632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-07-11 19:41 - 2018-07-06 16:57 - 000567176 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-07-11 19:41 - 2018-07-06 16:57 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-07-11 19:41 - 2018-07-06 16:57 - 000057440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.ShellCommon.Broker.dll
2018-07-11 19:41 - 2018-07-06 16:56 - 000766608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-07-11 19:41 - 2018-07-06 16:56 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-07-11 19:41 - 2018-07-06 16:55 - 001026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-07-11 19:41 - 2018-07-06 16:55 - 000885856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000483048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000267680 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-07-11 19:41 - 2018-07-06 16:55 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2018-07-11 19:41 - 2018-07-06 16:46 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-07-11 19:41 - 2018-07-06 16:44 - 000829856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-07-11 19:41 - 2018-07-06 16:44 - 000573904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-07-11 19:41 - 2018-07-06 16:29 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2018-07-11 19:41 - 2018-07-06 16:29 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProv2faHelper.dll
2018-07-11 19:41 - 2018-07-06 16:28 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000676864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Devices.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-07-11 19:41 - 2018-07-06 16:27 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2018-07-11 19:41 - 2018-07-06 16:26 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProv2faHelper.dll
2018-07-11 19:41 - 2018-07-06 16:25 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-07-11 19:41 - 2018-07-06 16:25 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2018-07-11 19:41 - 2018-07-06 16:24 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2018-07-11 19:41 - 2018-07-06 16:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2018-07-11 19:41 - 2018-07-06 16:23 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2018-07-11 19:41 - 2018-06-29 13:46 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-07-11 19:40 - 2018-07-06 23:23 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-07-11 19:40 - 2018-07-06 23:19 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-07-11 19:40 - 2018-07-06 21:23 - 000347136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2018-07-11 19:40 - 2018-07-06 21:21 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-07-11 19:40 - 2018-07-06 16:29 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-07-11 19:40 - 2018-07-06 16:28 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-07-11 19:40 - 2018-07-06 16:26 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2018-07-11 19:40 - 2018-07-06 16:26 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-07-11 19:40 - 2018-07-06 16:26 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-07-11 19:40 - 2018-07-06 16:25 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-07-11 19:40 - 2018-07-06 16:25 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-07-11 19:40 - 2018-07-06 16:23 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2018-07-11 19:40 - 2018-07-06 15:11 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-07-11 19:39 - 2018-07-06 23:22 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-07-11 19:39 - 2018-07-06 16:31 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2018-07-11 19:39 - 2018-07-06 16:31 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsTelemetry.dll
2018-07-11 19:39 - 2018-07-06 16:30 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2018-07-11 19:39 - 2018-07-06 16:29 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2018-07-11 19:39 - 2018-07-06 16:28 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2018-07-11 19:39 - 2018-07-06 16:28 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2018-07-11 19:39 - 2018-07-06 16:27 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2018-07-11 19:39 - 2018-07-06 16:26 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2018-07-11 19:35 - 2018-07-11 19:35 - 000172366 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711193406
2018-07-11 19:25 - 2018-07-11 19:33 - 000007094 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711192425
2018-07-11 18:54 - 2018-07-11 18:54 - 000029509 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711185337
2018-07-11 18:46 - 2018-07-11 18:53 - 000008285 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711184556
2018-07-11 17:38 - 2018-07-11 17:38 - 000076723 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711173727
2018-07-11 17:32 - 2018-07-11 17:37 - 000005922 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711173129
2018-07-11 17:27 - 2018-07-11 17:27 - 000002373 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711172623
2018-07-11 17:19 - 2018-07-11 17:26 - 000008277 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711171840
2018-07-11 15:02 - 2018-07-10 22:23 - 000000000 ____D C:\Windows.old
2018-07-11 14:53 - 2018-07-11 15:02 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-07-11 14:50 - 2018-07-11 14:54 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-07-11 14:50 - 2018-07-11 14:50 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-07-11 14:44 - 2018-07-11 14:44 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-07-11 14:44 - 2018-07-11 14:44 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-07-11 14:44 - 2018-07-11 14:44 - 000024789 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711144357
2018-07-11 14:43 - 2018-07-11 14:43 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 011901952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006817872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006572000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 006528600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004788504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004561920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 004333568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002563960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002331576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002206528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 002163184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-07-11 14:43 - 2018-07-11 14:43 - 002062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 002015744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-07-11 14:43 - 2018-07-11 14:43 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001710240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001397192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001380192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001288840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001150408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001145696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001144120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001129640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001112600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001097640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000770152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000661152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-07-11 14:43 - 2018-07-11 14:43 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000500552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000472136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000247984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000232488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2018-07-11 14:43 - 2018-07-11 14:43 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-07-11 14:43 - 2018-07-11 14:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2018-07-11 14:43 - 2018-07-11 14:43 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000129192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2018-07-11 14:43 - 2018-07-11 14:43 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-07-11 14:42 - 2018-07-11 14:42 - 021388856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 007436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006043600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002962944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002903040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002830240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002583552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002548736 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002367488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001805752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001742272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001659296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001632256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001462824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001457128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-07-11 14:42 - 2018-07-11 14:42 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001376576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001251736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001140568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-07-11 14:42 - 2018-07-11 14:42 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001069056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 001026896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001011968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000983008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000978432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-07-11 14:42 - 2018-07-11 14:42 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000898760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-07-11 14:42 - 2018-07-11 14:42 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000811520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-07-11 14:42 - 2018-07-11 14:42 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000792984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000761440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000719552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000717208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-07-11 14:42 - 2018-07-11 14:42 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000642088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000611232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-07-11 14:42 - 2018-07-11 14:42 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000562080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000550608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000510904 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000491304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000444240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000433560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000413816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000413080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000348256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000338352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000324000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000281080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000228768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-07-11 14:42 - 2018-07-11 14:42 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000118872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000116632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000105376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000094104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000083360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000072768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000048544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-07-11 14:42 - 2018-07-11 14:42 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-07-11 14:42 - 2018-07-11 14:42 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandlerPS.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-07-11 14:42 - 2018-07-11 14:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-07-11 14:42 - 2018-07-11 14:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-07-11 14:32 - 2018-07-11 14:43 - 000014189 _____ C:\WINDOWS\SysWOW64\rsslogs.20180711143123
2018-07-11 14:30 - 2018-07-11 14:30 - 000000000 ____D C:\inetpub
2018-07-11 14:29 - 2018-07-11 15:02 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files\MSBuild
2018-07-11 14:29 - 2018-07-11 14:29 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-07-11 14:28 - 2018-07-11 14:28 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-07-11 14:28 - 2018-07-11 14:28 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-07-11 14:28 - 2018-07-11 14:28 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-07-11 14:26 - 2018-07-11 14:26 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-07-11 14:26 - 2018-07-11 14:26 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-07-11 14:26 - 2018-07-11 14:26 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-07-11 14:16 - 2018-07-11 14:16 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2018-07-11 14:16 - 2018-07-11 14:16 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2018-07-11 14:16 - 2018-07-11 14:16 - 000058524 _____ C:\WINDOWS\system32\srms.dat
2018-07-10 23:22 - 2018-07-10 23:38 - 000000000 ____D C:\ProgramData\Packages
2018-07-10 23:22 - 2018-07-10 23:22 - 000029209 _____ C:\ProgramData\agent.update.1531230687.bdinstall.bin
2018-07-10 22:37 - 2018-07-11 22:22 - 000000000 ____D C:\Users\the_mckees\AppData\Local\D3DSCache
2018-07-10 22:33 - 2018-07-10 22:33 - 000106262 _____ C:\WINDOWS\SysWOW64\rsslogs.20180710223213
2018-07-10 22:30 - 2018-07-10 22:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-07-10 22:29 - 2018-07-10 22:29 - 000001417 _____ C:\Users\the_mckees\Desktop\Microsoft Edge.lnk
2018-07-10 22:24 - 2018-07-10 22:24 - 000000020 ___SH C:\Users\the_mckees\ntuser.ini
2018-07-10 22:21 - 2018-07-15 20:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-07-10 22:21 - 2018-07-14 19:00 - 000003386 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-11 22:42 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-07-10 22:21 - 2018-07-10 23:24 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2018-07-10 22:21 - 2018-07-10 22:22 - 000002672 _____ C:\WINDOWS\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:22 - 000002494 _____ C:\WINDOWS\System32\Tasks\RealDownloader Update Check
2018-07-10 22:21 - 2018-07-10 22:21 - 000003348 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-07-10 22:21 - 2018-07-10 22:21 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-07-10 22:21 - 2018-07-10 22:21 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-07-10 22:21 - 2018-07-10 22:21 - 000002654 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:21 - 000002616 _____ C:\WINDOWS\System32\Tasks\bvyvdvyxc
2018-07-10 22:21 - 2018-07-10 22:21 - 000002554 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-593274584-2845798583-2150428693-1001
2018-07-10 22:21 - 2018-07-10 22:21 - 000002490 _____ C:\WINDOWS\System32\Tasks\YCMServiceAgent
2018-07-10 22:21 - 2018-07-10 22:21 - 000002172 _____ C:\WINDOWS\System32\Tasks\DropboxOEM
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-07-10 22:21 - 2018-07-10 22:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-07-10 22:17 - 2018-07-10 22:21 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-07-10 22:17 - 2018-07-10 22:21 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-07-10 21:59 - 2018-07-15 20:38 - 000931444 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-07-10 21:54 - 2018-07-10 22:31 - 000043704 _____ C:\WINDOWS\SysWOW64\rsslogs.20180710215304
2018-07-10 21:47 - 2018-07-10 21:47 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-07-10 21:43 - 2018-07-14 18:59 - 000002385 _____ C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-07-10 21:43 - 2018-07-13 18:44 - 000000000 ____D C:\Users\the_mckees
2018-07-10 21:43 - 2018-07-10 21:59 - 000000000 ____D C:\Users\the_mckees\Documents\hp.system.package.metadata
2018-07-10 21:43 - 2016-12-25 08:29 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Intel
2018-07-10 21:43 - 2016-10-07 02:56 - 000000000 ____D C:\Users\the_mckees\Documents\hp.applications.package.appdata
2018-07-10 21:43 - 2016-10-07 02:56 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\RealNetworks
2018-07-10 21:39 - 2018-07-10 21:39 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-07-10 21:39 - 2018-07-10 21:39 - 000000000 ____D C:\Program Files (x86)\Intel
2018-07-10 21:38 - 2018-07-10 21:38 - 000000000 ____D C:\ProgramData\USOShared
2018-07-10 21:38 - 2018-04-12 09:03 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-07-10 21:33 - 2018-07-16 10:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-07-10 21:33 - 2018-07-11 22:11 - 000424904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-07-09 10:20 - 2018-07-09 10:20 - 000935835 _____ C:\WINDOWS\SysWOW64\rsslogs.20180709101915
2018-07-09 10:15 - 2018-07-09 10:18 - 000004736 _____ C:\WINDOWS\SysWOW64\rsslogs.20180709101454
2018-07-08 17:22 - 2018-07-08 17:22 - 000556852 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708172135
2018-07-08 17:18 - 2018-07-08 17:21 - 000003548 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708171730
2018-07-08 13:56 - 2018-07-08 13:56 - 000235959 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708135537
2018-07-08 00:31 - 2018-07-08 13:56 - 000243111 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708003048
2018-07-08 00:27 - 2018-07-08 00:30 - 000003558 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708002634
2018-07-08 00:06 - 2018-07-08 00:06 - 000020069 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708000554
2018-07-08 00:03 - 2018-07-08 00:05 - 000003545 _____ C:\WINDOWS\SysWOW64\rsslogs.20180708000233
2018-07-07 19:33 - 2018-07-07 19:33 - 000234910 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707193242
2018-07-07 19:27 - 2018-07-07 19:32 - 000005917 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707192627
2018-07-07 18:54 - 2018-07-07 18:54 - 000036590 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707185322
2018-07-07 17:16 - 2018-06-08 14:09 - 000130808 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2018-07-07 17:06 - 2018-07-07 18:52 - 000027168 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707170516
2018-07-07 12:56 - 2018-07-07 12:56 - 000028337 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707125524
2018-07-07 12:51 - 2018-07-07 12:55 - 000004742 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707125012
2018-07-07 11:20 - 2018-07-07 11:20 - 000081513 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707111938
2018-07-07 11:17 - 2018-07-07 11:19 - 000002365 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707111648
2018-07-07 01:20 - 2018-07-07 11:47 - 000193184 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2018-07-07 00:51 - 2018-07-07 00:51 - 000090909 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707005041
2018-07-07 00:49 - 2018-07-07 00:50 - 000002374 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707004813
2018-07-07 00:37 - 2018-07-07 00:45 - 000009465 _____ C:\WINDOWS\SysWOW64\rsslogs.20180707003656
2018-07-06 12:06 - 2018-07-06 12:06 - 000566470 _____ C:\WINDOWS\SysWOW64\rsslogs.20180706120518
2018-07-05 20:50 - 2018-07-06 12:06 - 000094388 _____ C:\WINDOWS\SysWOW64\rsslogs.20180705204946
2018-07-04 20:50 - 2018-07-05 20:50 - 000286643 _____ C:\WINDOWS\SysWOW64\rsslogs.20180704204927
2018-07-03 09:45 - 2018-07-04 20:50 - 000848145 _____ C:\WINDOWS\SysWOW64\rsslogs.20180703094531
2018-07-02 11:27 - 2018-07-03 09:45 - 001578133 _____ C:\WINDOWS\SysWOW64\rsslogs.20180702112645
2018-06-30 21:56 - 2018-07-10 22:23 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-30 20:22 - 2018-07-02 11:27 - 000139252 _____ C:\WINDOWS\SysWOW64\rsslogs.20180630202107
2018-06-30 20:17 - 2018-06-30 20:20 - 000003557 _____ C:\WINDOWS\SysWOW64\rsslogs.20180630201650
2018-06-28 07:24 - 2018-06-28 07:24 - 000089682 _____ C:\WINDOWS\SysWOW64\rsslogs.20180628072330
2018-06-27 20:15 - 2018-06-28 07:24 - 000113295 _____ C:\WINDOWS\SysWOW64\rsslogs.20180627201422
2018-06-26 20:45 - 2018-06-27 20:15 - 000034210 _____ C:\WINDOWS\SysWOW64\rsslogs.20180626204421
2018-06-25 07:27 - 2018-06-26 20:45 - 000059032 _____ C:\WINDOWS\SysWOW64\rsslogs.20180625072623
2018-06-23 09:53 - 2018-06-25 07:27 - 000030714 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623095205
2018-06-23 09:45 - 2018-06-23 09:51 - 000008273 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623094426
2018-06-23 08:58 - 2018-06-23 08:58 - 000040138 _____ C:\WINDOWS\SysWOW64\rsslogs.20180623085743
2018-06-22 18:47 - 2018-06-22 18:47 - 000000000 ___HD C:\OneDriveTemp
2018-06-22 18:33 - 2018-06-23 08:58 - 000043644 _____ C:\WINDOWS\SysWOW64\rsslogs.20180622183244
2018-06-20 07:23 - 2018-06-22 18:33 - 000129889 _____ C:\WINDOWS\SysWOW64\rsslogs.20180620072251
2018-06-19 12:22 - 2018-06-20 07:23 - 000154628 _____ C:\WINDOWS\SysWOW64\rsslogs.20180619122111
2018-06-19 12:19 - 2018-06-19 12:20 - 000002370 _____ C:\WINDOWS\SysWOW64\rsslogs.20180619121809
2018-06-16 12:02 - 2018-06-16 12:02 - 000370774 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616120126
2018-06-16 11:54 - 2018-06-16 12:01 - 000008280 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616115314
2018-06-16 09:22 - 2018-06-16 09:22 - 000173504 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616092157
2018-06-16 09:14 - 2018-06-16 09:21 - 000008279 _____ C:\WINDOWS\SysWOW64\rsslogs.20180616091341
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-07-16 11:45 - 2017-09-27 14:15 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2018-07-16 11:42 - 2018-04-12 09:08 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-07-16 11:36 - 2017-10-11 13:07 - 000000000 ____D C:\Users\the_mckees\Desktop\Baseball stuff
2018-07-16 11:36 - 2017-04-11 13:37 - 000000000 ____D C:\Users\the_mckees\Desktop\BECK
2018-07-16 11:36 - 2016-04-20 22:46 - 000000000 ____D C:\Users\the_mckees\Desktop\Home Stuff
2018-07-16 11:34 - 2017-09-14 22:06 - 000000000 ____D C:\Users\the_mckees\Desktop\BLFC2017
2018-07-16 11:33 - 2015-12-26 07:52 - 000000000 ____D C:\Users\the_mckees\Desktop\Work Stuff
2018-07-16 04:36 - 2018-04-12 06:34 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2018-07-15 21:18 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-07-15 21:18 - 2018-04-12 09:06 - 000000000 ____D C:\WINDOWS\INF
2018-07-15 21:17 - 2018-04-12 09:08 - 000000000 ___HD C:\Program Files\WindowsApps
2018-07-15 21:04 - 2015-12-05 16:35 - 000000000 ____D C:\Users\the_mckees\Documents\YouCam
2018-07-15 20:47 - 2015-12-06 18:00 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Skype
2018-07-15 20:44 - 2017-05-28 10:22 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Spotify
2018-07-15 20:41 - 2015-12-05 16:37 - 000000000 ___RD C:\Users\the_mckees\OneDrive
2018-07-14 23:47 - 2016-04-01 16:06 - 000000000 ____D C:\Users\the_mckees\Downloads\PopcornTime
2018-07-14 18:38 - 2018-03-31 19:34 - 000000000 ____D C:\Users\the_mckees\AppData\Local\UnrealEngine
2018-07-13 18:41 - 2018-04-12 09:00 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-07-12 10:19 - 2017-08-25 21:36 - 000000000 ____D C:\Users\the_mckees\AppData\Local\Spotify
2018-07-11 22:40 - 2015-12-21 16:34 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-11 22:10 - 2018-04-12 06:34 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-07-11 22:10 - 2017-11-20 21:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-07-11 22:08 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-07-11 22:08 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-07-11 22:08 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-07-11 22:07 - 2018-04-12 09:08 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-07-11 22:07 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-07-11 19:25 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-07-11 18:55 - 2015-12-06 19:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-07-11 18:54 - 2015-12-06 19:47 - 134675576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-07-11 15:02 - 2018-04-12 09:11 - 000000000 ____D C:\WINDOWS\Setup
2018-07-11 15:02 - 2018-04-12 09:08 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 __RHD C:\Users\Public\Libraries
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\spool
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-07-11 15:02 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-07-11 15:02 - 2018-03-07 18:54 - 000000000 ____D C:\WINDOWS\system32\tmp000018ad
2018-07-11 15:02 - 2018-03-01 19:20 - 000000000 ____D C:\WINDOWS\system32\tmp000050a3
2018-07-11 15:02 - 2018-02-24 01:13 - 000000000 ____D C:\WINDOWS\system32\tmp000032f9
2018-07-11 15:02 - 2017-11-20 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2018-07-11 15:02 - 2017-11-20 21:14 - 000000000 ____D C:\Program Files\AMD
2018-07-11 15:02 - 2017-09-29 23:16 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-07-11 15:02 - 2017-09-27 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free
2018-07-11 15:02 - 2017-07-11 21:25 - 000000000 ____D C:\Program Files\UNP
2018-07-11 15:02 - 2016-04-01 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2018-07-11 15:02 - 2016-03-29 10:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-07-11 15:02 - 2016-02-27 12:00 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2018-07-11 15:02 - 2016-02-27 11:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-07-11 15:02 - 2016-02-21 17:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2018-07-11 15:02 - 2016-01-11 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2018-07-11 15:02 - 2015-12-24 10:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series
2018-07-11 15:02 - 2015-12-24 10:05 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-07-11 15:02 - 2015-12-06 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-07-11 15:02 - 2015-10-30 18:37 - 000000000 ____D C:\WINDOWS\ShellNew
2018-07-11 15:02 - 2015-10-22 22:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB
2018-07-11 15:02 - 2015-10-22 22:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-07-11 15:02 - 2015-10-22 21:58 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2018-07-11 15:02 - 2015-10-22 21:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2018-07-11 15:02 - 2015-10-22 21:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2018-07-11 15:02 - 2015-10-22 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2018-07-11 15:02 - 2015-07-23 22:21 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2018-07-11 15:02 - 2015-07-23 22:20 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2018-07-11 14:55 - 2017-11-20 21:15 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2018-07-11 14:54 - 2016-01-11 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2018-07-11 14:53 - 2017-11-20 21:15 - 000000000 ____D C:\Program Files\Synaptics
2018-07-11 14:53 - 2017-11-20 21:15 - 000000000 ____D C:\Program Files\Realtek
2018-07-11 14:53 - 2017-11-20 21:14 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-07-11 14:46 - 2018-04-12 18:49 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\TextInput
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\setup
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\Provisioning
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-07-11 14:46 - 2018-04-12 09:08 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-07-11 14:46 - 2018-04-12 06:34 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-07-11 14:40 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\appcompat
2018-07-11 14:30 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-07-11 14:29 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-07-11 14:27 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-07-11 14:26 - 2018-04-12 18:48 - 000000000 ____D C:\WINDOWS\OCR
2018-07-10 23:34 - 2018-01-20 18:43 - 000000000 ____D C:\Users\the_mckees\AppData\Local\Packages
2018-07-10 23:22 - 2017-09-27 14:12 - 000000000 ____D C:\Program Files\Bitdefender Agent
2018-07-10 22:26 - 2015-12-13 18:03 - 000000000 ___RD C:\Users\the_mckees\3D Objects
2018-07-10 22:26 - 2015-07-16 15:35 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-07-10 22:16 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\Registration
2018-07-10 22:04 - 2015-12-12 03:40 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-07-10 22:03 - 2018-04-12 09:08 - 000000000 __RSD C:\WINDOWS\media
2018-07-10 21:57 - 2016-03-21 19:15 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-07-10 21:57 - 2016-03-21 19:15 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-07-10 21:49 - 2017-09-24 16:26 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-07-10 21:49 - 2017-06-21 23:06 - 000000000 ____D C:\Users\the_mckees\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\4K Video Downloader
2018-07-10 21:47 - 2018-04-12 09:08 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-07-10 21:41 - 2017-11-20 21:15 - 000012321 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2018-07-10 21:41 - 2017-11-20 21:15 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-07-10 21:40 - 2015-07-23 22:20 - 000000000 ____D C:\ProgramData\Package Cache
2018-07-10 21:39 - 2016-12-25 08:29 - 000000000 ____D C:\ProgramData\Intel
2018-07-10 21:38 - 2018-04-12 09:08 - 000000000 ____D C:\ProgramData\USOPrivate
2018-07-10 21:38 - 2015-10-22 21:57 - 000000000 ____D C:\Program Files\Intel
2018-07-10 21:37 - 2017-11-20 21:13 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-07-08 17:44 - 2017-09-29 09:01 - 000000000 ____D C:\Program Files\rempl
2018-06-29 10:43 - 2018-04-12 09:11 - 000835064 _____ C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-29 10:43 - 2018-04-12 09:11 - 000179704 _____ C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-22 19:36 - 2017-09-24 16:26 - 000001256 _____ C:\Users\the_mckees\Desktop\Roblox Studio.lnk
 
==================== Files in the root of some directories =======
 
2017-01-08 14:23 - 2017-01-08 14:23 - 000000000 _____ () C:\Users\the_mckees\AppData\Local\{5A3BF1B7-D417-41F7-BC84-D460B7400C21}
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2018-07-10 21:33
 
==================== End of FRST.txt ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15.07.2018
Ran by Beck McKee (16-07-2018 11:49:16)
Running from C:\Users\the_mckees\Desktop
Windows 10 Home Version 1803 17134.165 (X64) (2018-07-10 12:53:44)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-593274584-2845798583-2150428693-500 - Administrator - Disabled)
Beck McKee (S-1-5-21-593274584-2845798583-2150428693-1001 - Administrator - Enabled) => C:\Users\the_mckees
DefaultAccount (S-1-5-21-593274584-2845798583-2150428693-503 - Limited - Disabled)
Guest (S-1-5-21-593274584-2845798583-2150428693-501 - Limited - Disabled)
tyson (S-1-5-21-593274584-2845798583-2150428693-1002 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-593274584-2845798583-2150428693-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {51405D0C-825B-964D-00BD-77E435F203F3}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
4K Video Downloader 4.3 (HKLM-x32\...\{F944D21A-044E-439E-B7F6-865A901798E8}) (Version: 4.3.1.2205 - Open Media LLC)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20055 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{E7659924-9EC9-B722-0136-A6D414E6E29E}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.25.59 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.8.33 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version:  - Canon Inc.)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
CyberLink PhotoDirector (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6713 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6713 - CyberLink Corp.)
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.1.5418 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4.4301 - CyberLink Corp.) Hidden
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4.4301 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\{A9CEDD6E-4792-493e-BB35-D86D2E188A5A}) (Version: 6.0.1.4301 - CyberLink Corp.)
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Dropbox 25 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.8.2 - Dropbox, Inc.)
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
Epic Games Launcher (HKLM-x32\...\{3ECF91A4-EE22-4A3A-921F-36ECAA04C13D}) (Version: 1.1.147.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Evernote v. 5.8.6 (HKLM-x32\...\{FEDC7C10-EF67-11E4-9B07-00505695D7B0}) (Version: 5.8.6.7519 - Evernote Corp.)
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: 6.18 - NCH Software)
Foxtel GO (HKLM-x32\...\{6539476A-FFFE-4014-BABA-2014EC87AA6D}) (Version: 1.84 - Foxtel) Hidden
Foxtel GO (HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Foxtel GO 1.84) (Version: 1.84 - Foxtel)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP CoolSense (HKLM-x32\...\{1504CF6F-8139-497F-86FC-46174B67CF7F}) (Version: 2.20.51 - Hewlett-Packard Company)
HP Documentation (HKLM\...\HP_Documentation) (Version:  - HP)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8293.5264 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{D7D5F438-26EF-45AB-AB89-C476FBCF8584}) (Version: 12.9.24.3 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{D17A3B70-B75E-4C49-83D6-C17DDF65B35F}) (Version: 1.3.4 - Hewlett-Packard Company)
HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)
HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{EFA01423-3857-468C-B7B6-F30AA08E50BC}) (Version: 1.1.5.1 - Hewlett-Packard)
Intel® Wireless Bluetooth® (HKLM-x32\...\{1A51AA9E-D4BC-4318-9419-B55EA4C95B3C}) (Version: 17.1.1525.1443 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{8c595286-0f9e-42de-a0d4-969aba282637}) (Version: 20.50.0 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4693.1005 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\OneDriveSetup.exe) (Version: 18.111.0603.0006 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
PhotoStage Slideshow Producer (HKLM-x32\...\PhotoStage) (Version: 4.17 - NCH Software)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.5.1.2 - Popcorn Time) <==== ATTENTION
Prism Video File Converter (HKLM-x32\...\Prism) (Version: 3.04 - NCH Software)
RealDownloader (HKLM-x32\...\{13743594-F75E-491E-9EFF-203C8F8DF705}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealDownloader (HKLM-x32\...\{48D18738-099C-4FAA-AFD9-80B592A25478}) (Version: 18.1.3.103 - RealNetworks, Inc.) Hidden
RealDownloader (HKLM-x32\...\{f05bfa4b-0c78-4a3e-aa74-8c220b4a7782}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM\...\{21E47F47-C9A7-4454-BA48-388327B0EA00}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.3 - RealNetworks)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.87 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM-x32\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Roblox Player for Beck McKee (HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - Roblox Corporation)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 3.1.5.104 - Client Connect LTD) <==== ATTENTION
Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-593274584-2845798583-2150428693-1001\...\Spotify) (Version: 1.0.75.483.g7ff4a0dc - Spotify AB)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{8CFAB044-7D2E-4655-B86D-99932E988980}) (Version: 2.45.0.0 - Microsoft Corporation)
UpdateService (HKLM-x32\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
Video Downloader (HKLM-x32\...\{8B6202FD-3790-4DD4-B343-51736F7FF4E5}) (Version: 1.2.0 - RealNetworks) Hidden
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 5.03 - NCH Software)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 7.14 - NCH Software)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ContextMenuHandlers3-x32: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpcontextmenu.dll [2016-02-21] (RealNetworks, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-07-07] (Advanced Micro Devices, Inc.)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {07ED2B61-099C-4451-97EA-5F3A3931849E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-07-11] (Microsoft Corporation)
Task: {1B1AD729-5082-421E-92A2-221E4AFC0152} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {1C4817DF-AF69-450E-B764-49AA6AB03644} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2015-05-22] (Hewlett-Packard Development Company, L.P.)
Task: {21269D49-59A4-4515-9E4C-D3DCDDA07A68} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-25] ()
Task: {5AB4F332-A337-46C8-A604-749D5B4AAA3A} - System32\Tasks\Microsoft\Windows\rempl\shell => C:\Program Files\rempl\sedlauncher.exe [2018-06-28] (Microsoft Corporation)
Task: {5EBB7587-BA89-40AE-9786-C02EB7356A2C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-06-27] (HP Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {662455CC-5E36-4C10-9403-F287F27C9A03} - System32\Tasks\bvyvdvyxc => bvyvdvyxc\bvyvdvyxc.exe
Task: {75514023-1788-4211-A13A-79F94A27169D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-21] (Google Inc.)
Task: {7B9E074B-F275-4524-805E-9A094250EBE7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {81CBCD00-27A6-4936-A4F0-2C197F011C8C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe [2017-02-20] (Adobe Systems Incorporated)
Task: {86AA0B9D-8847-4815-891E-2A7615A690BA} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe [2015-07-01] (CyberLink Corp.)
Task: {870C4B3F-CF4F-454B-9EB6-EDC6BEBCC307} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2015-06-20] ()
Task: {94C89C08-9407-403D-BA1D-563F0F3222C1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-21] (Google Inc.)
Task: {A748742D-6034-4F2C-B222-8AA1F827C4D6} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {C6059189-B4A3-4045-9960-ABA3C757489E} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {C879766E-8F39-4C49-B45E-E1E1B732CE27} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-06-28] (HP Inc.)
Task: {CE739527-06FC-4B2B-B5AF-A3D77530ABB0} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-593274584-2845798583-2150428693-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2016-02-03] (RealNetworks, Inc.)
Task: {D561A907-0DA2-4D63-920E-39D94E2F41D1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {D7337FE8-7783-40F6-93F9-DD9B7BB10110} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-593274584-2845798583-2150428693-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {DBB8CACF-2F34-4F2E-B7A2-AEE6AB5E2F4E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {E675CA6F-ECB0-4394-B12B-E8E69A104501} - System32\Tasks\HPCeeScheduleForBeck McKee => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-17] (Hewlett-Packard)
Task: {F3848291-8540-47FD-98B5-EFEFD12F32F5} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-05-16] (Bitdefender)
Task: {F76A1704-1709-440A-9611-B35D53AD2EE5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {FBB87082-6D9A-4005-A89E-06FB717958B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForBeck McKee.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
Shortcut: C:\Users\the_mckees\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm
 
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.booking.com/index.html?aid=398438&label=square
ShortcutWithArgument: C:\Users\Public\Desktop\Get Wi-Fi Offer.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=*&locale=*&pf=cnnb&s=iPass&tp=dticon
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-10-22 22:44 - 2014-04-15 11:29 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2018-05-04 23:32 - 2018-06-08 18:46 - 000278280 _____ () C:\Program Files\Bitdefender Antivirus Free\txmlutil.dll
2018-05-09 19:04 - 2018-05-09 19:04 - 000992704 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02639_001\ashttpbr.mdl
2018-05-09 19:04 - 2018-05-09 19:04 - 000543344 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02639_001\ashttpdsp.mdl
2018-05-09 19:04 - 2018-05-09 19:04 - 003228632 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02639_001\ashttpph.mdl
2018-05-09 19:04 - 2018-05-09 19:04 - 001527808 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02639_001\ashttprbl.mdl
2018-04-12 09:04 - 2018-04-12 09:04 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-04-12 09:04 - 2018-04-12 09:04 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 09:04 - 2018-04-12 09:04 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-07-11 19:42 - 2018-07-06 16:25 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-06-08 19:27 - 2018-06-08 19:28 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-06-08 19:27 - 2018-06-08 19:28 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-06-08 19:27 - 2018-06-08 19:28 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-06-08 19:27 - 2018-06-08 19:28 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll
2018-06-08 19:27 - 2018-06-08 19:28 - 000654848 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-03-31 19:34 - 2018-03-31 19:35 - 098275328 _____ () C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libcef.dll
2018-03-31 19:35 - 2018-03-31 19:35 - 003922432 _____ () C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libGLESv2.dll
2018-03-31 19:35 - 2018-03-31 19:35 - 000092672 _____ () C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libEGL.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-06-08 19:33 - 2018-06-08 19:35 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-11-21 15:41 - 2017-11-21 15:45 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-04-26 10:23 - 2018-04-26 10:26 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-03-30 21:33 - 2018-03-30 21:40 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-08 19:33 - 2018-06-08 19:35 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-07-14 18:01 - 2018-07-14 18:02 - 000199168 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-07-14 18:01 - 2018-07-14 18:02 - 002449952 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-07-14 18:01 - 2018-07-14 18:02 - 007813632 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2018-06-26 20:57 - 2018-06-26 20:57 - 027126784 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-06-26 20:57 - 2018-06-26 20:57 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-06-26 20:57 - 2018-06-26 20:57 - 006735872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 19:43 - 2017-09-26 20:13 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-26 20:57 - 2018-06-26 20:57 - 009360384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntPlat.dll
2016-07-05 18:18 - 2016-07-05 18:18 - 000714992 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 18:18 - 2016-07-05 18:18 - 000077552 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\dtvhooks.dll
2018-06-27 20:58 - 2018-06-23 04:34 - 003867480 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll
2018-06-27 20:58 - 2018-06-23 04:34 - 000085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll
2016-02-03 16:53 - 2016-02-03 16:53 - 001382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll
2016-02-21 17:30 - 2016-02-21 17:30 - 000654608 _____ () C:\Program Files (x86)\Real\RealPlayer\RPDS\Lib\r1api.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\Public\AppData:CSM [472]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2015-07-10 20:34 - 2015-07-10 20:32 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-593274584-2845798583-2150428693-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\the_mckees\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\flag1.jpg
DNS Servers: 10.1.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{CAAD526E-56E9-4DD9-AD24-B93BE02A8379}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [UDP Query User{F011F7BB-4D61-4B4D-BA3C-A8B7A6E773B1}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{839CD0CB-4304-4D82-983E-22EFDCF65051}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{3A013654-3584-4AD9-8622-C2884F45B591}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{44BB723D-0071-473B-88CC-76CEEDAFE43D}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{A0CD94EA-2B5E-4AFF-8DB6-2478F3004AA7}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{1E9FBD99-694E-424A-82AA-38D841C7BF68}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{61BD292B-57DD-4652-80CA-6A09EAACA8B8}C:\users\the_mckees\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\the_mckees\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{C9448ECC-6D8A-4D6C-B532-86F39BC47A4A}C:\users\the_mckees\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\the_mckees\appdata\roaming\spotify\spotify.exe
FirewallRules: [{77DE8395-5B38-4BE9-AE14-569E15559B3C}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{831872E3-734D-486E-9251-3E4C865C9E60}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{5C1D0DE1-6DFD-481F-A219-9A59CDA15671}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{AD362A59-7FB6-4231-AFE8-935391E3D1CA}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{C28F739E-50A2-4FEF-8875-A1585247AD6E}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{06B470C4-F834-47BA-B8C6-C34CDCB07942}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{80F43125-E49E-49C6-BDDE-6200318A5A7F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BD2A79E-897B-435D-A2CD-3CA4608BDF0A}] => (Allow) c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [{9CDFF650-C14E-4D55-9441-20053DFAC978}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{05C31B55-FBAC-4C75-83F0-29FFB1CB0F64}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe
FirewallRules: [{236D9BC1-5A86-4A67-B1C4-6F1D543EC9ED}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe
FirewallRules: [{E38AF5E0-4367-4FFE-BD3F-B5C323445EEC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe
FirewallRules: [{AE7BE98A-7D5D-4AA2-B942-C5187A3E5E56}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe
FirewallRules: [{A592FD55-1366-446C-9AFB-8EFE5D75CCC0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FBAE2A27-9603-431F-8746-40982BB30FE7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{420D17B1-C111-4793-BAE2-79841732D8B0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CAA350B9-6061-4B66-98DA-4B021E7A72FC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1727BFBC-4819-4225-A964-FA639362D20F}] => (Allow) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{81983415-F37A-4865-A81C-7DAAF569B5A7}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{43C9EFE8-73A4-4C1C-ADB1-661381355CA3}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{0115E2E4-68A2-4CDE-917E-363711B06BE0}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{36144EA0-BE2D-4002-9A73-39603259DC15}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{1D033AED-5AF3-474A-9477-448D6DEBC8D0}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{5BBD999C-2CF0-4CEB-A5CF-311B907101C8}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{30D7D16C-760B-4F0B-BCF8-67E34BC847D2}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EE9BD7F4-1F86-4279-9679-86CBCB01ECE7}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3A793BB7-92BF-4B25-AF36-512C0A360A33}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{24007789-BC58-42E1-9738-B35A8E05B903}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{03BC1832-DE54-4B01-8139-F352D1620F63}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E9D2E150-C17B-47B3-81BF-644A3E49A3F3}] => (Allow) C:\Users\the_mckees\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{6764AB8E-2CBF-41D5-AF35-4312441170ED}C:\users\the_mckees\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\the_mckees\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{E924B76E-6420-4136-A6E1-1B2FF61387C8}C:\users\the_mckees\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\the_mckees\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [{880C2E76-08AF-47C0-97FD-D3D2DFB1CDCE}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
 
==================== Restore Points =========================
 
11-07-2018 18:41:30 Windows Update
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (07/16/2018 10:32:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: downloader2.exe, version: 18.1.4.144, time stamp: 0x577c5c60
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0xb58
Faulting application start time: 0x01d41c8fdf1bdbfe
Faulting application path: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 32c46ac8-458e-4237-981d-d0483ce06b40
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/16/2018 07:32:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: downloader2.exe, version: 18.1.4.144, time stamp: 0x577c5c60
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0x2670
Faulting application start time: 0x01d41c76b9ce412a
Faulting application path: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: f22a9d5d-80ad-40c4-b7cd-74612d37311b
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/16/2018 04:32:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: downloader2.exe, version: 18.1.4.144, time stamp: 0x577c5c60
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0x25a4
Faulting application start time: 0x01d41c5d9480b72f
Faulting application path: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 0ff5a332-781c-4253-bbc9-cd989472a61c
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/16/2018 01:32:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: downloader2.exe, version: 18.1.4.144, time stamp: 0x577c5c60
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0x2738
Faulting application start time: 0x01d41c446f335de2
Faulting application path: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 85a1c489-f698-453e-befe-b8da41737a41
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/15/2018 10:37:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: downloader2.exe, version: 18.1.4.144, time stamp: 0x577c5c60
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0x2324
Faulting application start time: 0x01d41c2c0679c8f7
Faulting application path: C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: c07a3f31-1b3f-44f5-9a4f-48c754d0cf38
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/15/2018 09:11:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AdaptiveSleepService.exe, version: 0.0.0.0, time stamp: 0x559b2d64
Faulting module name: AdaptiveSleepService.exe, version: 0.0.0.0, time stamp: 0x559b2d64
Exception code: 0xc0000005
Fault offset: 0x000000000000b9f4
Faulting process id: 0x518
Faulting application start time: 0x01d41c2b87dbfc84
Faulting application path: c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
Faulting module path: c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
Report Id: 99be5ff5-7de2-44c5-b0a6-78820c6ff088
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/15/2018 09:01:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RealPlayerUpdateSvc.exe, version: 0.0.0.0, time stamp: 0x56b2bc35
Faulting module name: ntdll.dll, version: 10.0.17134.165, time stamp: 0x845de87a
Exception code: 0xc0000005
Fault offset: 0x00092be4
Faulting process id: 0xb64
Faulting application start time: 0x01d41c2b38a895d8
Faulting application path: C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: cfe227ec-5af7-402a-a0d9-6c7ba470dcfb
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (07/15/2018 08:55:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AUDIODG.EXE, version: 10.0.17134.137, time stamp: 0xecd85e98
Faulting module name: combase.dll, version: 10.0.17134.112, time stamp: 0xfad18dc5
Exception code: 0xc0000409
Fault offset: 0x000000000015147f
Faulting process id: 0x1e68
Faulting application start time: 0x01d41c2c8943b0e4
Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE
Faulting module path: C:\WINDOWS\System32\combase.dll
Report Id: 7cd834bc-1d26-4846-b606-0f9d7aa090e1
Faulting package full name: 
Faulting package-relative application ID:
 
 
System errors:
=============
Error: (07/16/2018 11:16:09 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-BBQIE4L)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (07/16/2018 10:02:41 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-BBQIE4L)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (07/16/2018 03:54:26 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (07/15/2018 09:11:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The AdaptiveSleepService service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (07/15/2018 09:07:43 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (07/15/2018 09:02:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The RealPlayer Update Service service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (07/15/2018 08:52:08 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (07/15/2018 08:46:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BBQIE4L)
Description: The server Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c!App did not register with DCOM within the required timeout.
 
 
CodeIntegrity:
===================================
 
Date: 2018-07-15 20:35:58.727
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-14 22:24:26.041
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-12 10:45:03.572
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-11 22:14:30.626
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-11 20:14:32.248
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-11 19:32:32.132
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-11 18:48:14.569
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
Date: 2018-07-11 18:18:04.876
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\vsservppl.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\agentctrl.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 
==================== Memory info =========================== 
 
Processor: AMD A6-6310 APU with AMD Radeon R4 Graphics 
Percentage of memory in use: 70%
Total physical RAM: 3518.88 MB
Available physical RAM: 1030.28 MB
Total Virtual: 4862.88 MB
Available Virtual: 1330.14 MB
 
==================== Drives ================================
 
Drive c: (Windows) (Fixed) (Total:443.84 GB) (Free:72.93 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:19.78 GB) (Free:2.24 GB) NTFS ==>[system with boot components (obtained from drive)]
 
\\?\Volume{65ae5575-5a27-4cf5-bfc1-118566c293b1}\ () (Fixed) (Total:1.76 GB) (Free:1.18 GB) NTFS
\\?\Volume{d25ad8c4-08fb-412f-93ad-852f7e2842e7}\ () (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 26B683D0)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Open an elevated command prompt:

http://www.howtogeek...-in-windows-10/
http://www.eightforu...indows-8-a.html

(If you open an elevated Command Prompt properly it will say Administrator: Command Prompt in the margin at the top of the window)


Once you have an elevated command prompt:

Type:

 DISM  /Online  /Cleanup-Image  /RestoreHealth

 (I use two spaces so you can be sure to see where one space goes.)
Hit Enter.  This will take a while (10-20 minutes) to complete.  Once the prompt returns:

Reboot.  Open an elevated Command Prompt again and type (with an Enter after the line):

sfc  /scannow



This will also take a few minutes.  

When it finishes it will say one of the following:

Windows did not find any integrity violations (a good thing)
Windows Resource Protection found corrupt files and repaired them (a good thing)
Windows Resource Protection found corrupt files but was unable to fix some (or all) of them (not a good thing)

If you get the last result then type:
findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  %UserProfile%\desktop\junk.txt


Hit Enter.  Then type::


notepad %UserProfile%\desktop\junk.txt

Hit Enter.

 Copy the text from notepad and paste it into a reply.


After you finish SFC, regardless of the result:



1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

 

 

 

 

Get Process Explorer

http://live.sysinter...com/procexp.exe
Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).  

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

Wait a full minute then:

File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.


Copy the next 2 lines:

TASKLIST /SVC  > \junk.txt
notepad \junk.txt

Open an Elevated Command Prompt:
Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator
Win 8: http://www.eightforu...indows-8-a.html
win 10: http://www.howtogeek...-in-windows-10/

Right click and Paste (or Edit then Paste) and the copied lines should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.


Get the free version of Speccy:

http://www.filehippo...ownload_speccy/ 

(Look in the upper right for the Download
Latest Version button  - Do NOT press the large Start Download button on the upper left!)  
Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving),
File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  
(It will be near the top,  10-20  lines down.) Save the file.  Attach the file to your next post.  Attaching the log is the best option as it is too big for the forum.  Attaching is a multi step process.

First click on More Reply Options
Then scroll down to where you see
Choose File and click on it.  Point it at the file and hit Open.
Now click on Attach this file.

 


  • 0

#3
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts

I Attempted the first step and got this response:

 

Version: 10.0.17134.1
 
Image Version: 10.0.17134.165
 
[===========================85.9%=================         ]
Error: 0x800f081f
 
The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see http://go.microsoft..../?LinkId=243077.
 
The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log
 
C:\WINDOWS\system32> DISM  /Online  /Cleanup-Image  /RestoreHealth
 
Deployment Image Servicing and Management tool
Version: 10.0.17134.1
 
Image Version: 10.0.17134.165
 
[===========================85.8%=================         ]
Error: 0x800f081f
 
The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see http://go.microsoft..../?LinkId=243077.
 
The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log
 
C:\WINDOWS\system32>
 
Do i need to do anything before moving to the next step?

  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Can you post the log at:

C:\WINDOWS\Logs\DISM\dism.log

This is probably a hidden location so you may need to tell windows to let you see it:

 

C:\WINDOWS\Logs\DISM\dism.log

 

Go on with the other things.


  • 0

#5
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 DismApi.dll:                                            - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 DismApi.dll:                                            - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 DismApi.dll: Version 10.0.17134.1 - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 DismApi.dll: Parent process command line: C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:cEkUCKc/4U+WeSdk.1 - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 Enter DismInitializeInternal - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2018-07-14 18:08:33, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:08:33, Info                  DISM   API: PID=10540 TID=11268 Initialized GlobalConfig - DismInitializeInternal
2018-07-14 18:08:34, Info                  DISM   API: PID=10540 TID=11268 Initialized SessionTable - DismInitializeInternal
2018-07-14 18:08:34, Info                  DISM   API: PID=10540 TID=11268 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-07-14 18:08:34, Info                  DISM   API: PID=10540 TID=11268 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-14 18:08:34, Info                  DISM   API: PID=10540 TID=6728 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=6728 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 m_pInternalThread started - CCommandThread::Start
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 Created g_internalDismSession - DismInitializeInternal
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 Leave DismInitializeInternal - DismInitializeInternal
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-14 18:08:36, Info                  DISM   API: PID=10540 TID=11268 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11268 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11268 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11196 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11196 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11268 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11268 m_pInternalThread started - CCommandThread::Start
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:08:37, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:08:38, Info                  DISM   PID=10540 TID=11196 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2018-07-14 18:08:38, Info                  DISM   PID=10540 TID=11196 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-14 18:08:38, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:08:38, Info                  DISM   PID=10540 TID=11196 Successfully loaded the ImageSession at "C:\Windows\System32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-14 18:08:39, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:08:39, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-14 18:08:39, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:08:39, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:08:39, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:08:39, Info                  DISM   DISM Manager: PID=10540 TID=11196 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2018-07-14 18:08:40, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Getting the collection of providers from a local provider store type. - CDISMProviderStore::GetProviderCollection
2018-07-14 18:08:40, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:40, Warning               DISM   DISM Provider Store: PID=10540 TID=11196 Failed to load the provider: C:\Windows\System32\Dism\SiloedPackageProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-14 18:08:40, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\FfuProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:41, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:43, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\VHDProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:44, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:44, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Connecting to the provider located at C:\Windows\System32\Dism\CompatProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:08:44, Warning               DISM   DISM Provider Store: PID=10540 TID=11196 Failed to load the provider: C:\Windows\System32\Dism\MetaDeployProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-14 18:08:44, Info                  DISM   DISM FFU Provider: PID=10540 TID=11196 [C:\] is not recognized by the DISM FFU provider. - CFfuImage::Initialize
[10540] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10540] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10540] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-14 18:08:45, Info                  DISM   DISM WIM Provider: PID=10540 TID=11196 [C:\] is not a WIM mount point. - CWimMountedImageInfo::Initialize
2018-07-14 18:08:46, Info                  DISM   DISM VHD Provider: PID=10540 TID=11196 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2018-07-14 18:08:46, Info                  DISM   DISM FFU Provider: PID=10540 TID=11196 [C:\] is not recognized by the DISM FFU provider. - CFfuImage::Initialize
2018-07-14 18:08:46, Info                  DISM   DISM Imaging Provider: PID=10540 TID=11196 The provider FfuManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
2018-07-14 18:08:47, Info                  DISM   DISM VHD Provider: PID=10540 TID=11196 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2018-07-14 18:08:50, Info                  DISM   DISM Imaging Provider: PID=10540 TID=11196 The provider VHDManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
[10540] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10540] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10540] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-14 18:08:52, Info                  DISM   DISM WIM Provider: PID=10540 TID=11196 [C:\] is not a WIM mount point. - CWimMountedImageInfo::Initialize
2018-07-14 18:08:52, Info                  DISM   DISM Imaging Provider: PID=10540 TID=11196 The provider WimManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
2018-07-14 18:08:52, Info                  DISM   DISM Imaging Provider: PID=10540 TID=11196 No imaging provider supported CreateDismImage for this path - CGenericImagingManager::CreateDismImage
2018-07-14 18:08:53, Info                  DISM   DISM Manager: PID=10540 TID=11196 physical location path: C:\ - CDISMManager::CreateImageSession
2018-07-14 18:08:53, Info                  DISM   DISM Manager: PID=10540 TID=11196 Event name for current DISM session is Global\{5658C90F-EE35-41B9-BE7E-9839C9BA1D76} - CDISMManager::CheckSessionAndLock
2018-07-14 18:08:53, Info                  DISM   DISM Manager: PID=10540 TID=11196 Create session event 0xe7c for current DISM session and event name is Global\{5658C90F-EE35-41B9-BE7E-9839C9BA1D76}  - CDISMManager::CheckSessionAndLock
2018-07-14 18:08:53, Info                  DISM   DISM Manager: PID=10540 TID=11196 Copying DISM from "C:\Windows\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2018-07-14 18:09:47, Info                  DISM   DISM Manager: PID=10540 TID=11196 Successfully loaded the ImageSession at "C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F" - CDISMManager::LoadRemoteImageSession
2018-07-14 18:09:47, Info                  DISM   DISM Image Session: PID=9828 TID=7892 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2018-07-14 18:09:47, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:09:48, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Connecting to the provider located at C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:09:48, Info                  DISM   DISM OS Provider: PID=9828 TID=7892 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2018-07-14 18:09:48, Info                  DISM   DISM OS Provider: PID=9828 TID=7892 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2018-07-14 18:09:49, Info                  DISM   DISM OS Provider: PID=9828 TID=7892 Host OS verion is 10.0 - CDISMOSServiceManager::SetDllSearchPath
2018-07-14 18:09:49, Warning               DISM   DISM OS Provider: PID=9828 TID=7892 Unable to set the DLL search path to the servicing stack folder. C:\Windows may not point to a valid Windows folder. - CDISMOSServiceManager::Final_OnConnect
2018-07-14 18:09:49, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:09:51, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Connecting to the provider located at C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:09:56, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:09:56, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-14 18:09:57, Warning               DISM   DISM Provider Store: PID=9828 TID=7892 Failed to load the provider: C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-14 18:09:57, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:09:58, Info                  DISM   DISM Provider Store: PID=9828 TID=7892 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-14 18:09:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:09:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:09:58, Info                  DISM   DISM Manager: PID=10540 TID=11196 Image session successfully loaded from the temporary location: C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F - CDISMManager::CreateImageSession
2018-07-14 18:09:59, Info                  DISM   API: PID=10540 TID=11196 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-14 18:10:00, Info                  DISM   API: PID=10540 TID=11268 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-14 18:10:01, Info                  DISM   API: PID=10540 TID=11268 Session id is: 2 - DismOpenSessionInternal
2018-07-14 18:10:02, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:10:03, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem70.inf - DismGetDriverInfoInternal
2018-07-14 18:10:03, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:10:03, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:10:03, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:10:05, Info                  DISM   DISM Provider Store: PID=9828 TID=6284 Connecting to the provider located at C:\WINDOWS\TEMP\4A2C18B4-BD43-4581-96C8-8CDE6C5D099F\DmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:10:07, Info                  DISM   DISM Provider Store: PID=9828 TID=6284 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-14 18:10:08, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-14 18:10:08, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-14 18:10:08, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Further logs for driver related operations can be found in the target operating system at %WINDIR%\inf\setupapi.offline.log - CDriverManager::Initialize
2018-07-14 18:10:08, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem70.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:10:21, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\netwtw04.inf_amd64_c53ef67295f6f731\netwtw04.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:10:30, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:10:31, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:10:31, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\netwtw04.inf_amd64_c53ef67295f6f731\netwtw04.inf - DismGetDriverInfoInternal
2018-07-14 18:10:31, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:10:31, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:10:32, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:10:42, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\netwtw04.inf_amd64_c53ef67295f6f731\netwtw04.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:10:47, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\netwtw04.inf_amd64_c53ef67295f6f731\netwtw04.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:10:48, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:10:50, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:50, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:51, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:51, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:51, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:52, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:10:53, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:10:53, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem31.inf - DismGetDriverInfoInternal
2018-07-14 18:10:53, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:10:53, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:10:53, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:10:53, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem31.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:10:58, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rtsp2storx.inf_amd64_0d08b1c00e5ee122\rtsp2storx.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:01, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:01, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:01, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\rtsp2storx.inf_amd64_0d08b1c00e5ee122\rtsp2storx.inf - DismGetDriverInfoInternal
2018-07-14 18:11:01, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:01, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:02, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:06, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rtsp2storx.inf_amd64_0d08b1c00e5ee122\rtsp2storx.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:11, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rtsp2storx.inf_amd64_0d08b1c00e5ee122\rtsp2storx.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:14, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:14, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:14, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem53.inf - DismGetDriverInfoInternal
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:16, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:17, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem53.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:11:19, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:19, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:21, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:21, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:21, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf - DismGetDriverInfoInternal
2018-07-14 18:11:22, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:22, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:22, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:22, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:22, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:24, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:27, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdpsp.inf_amd64_2c8bb141af1bb3b0\amdpsp.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:27, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:27, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:27, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:27, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:27, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:28, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:29, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:29, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:30, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem74.inf - DismGetDriverInfoInternal
2018-07-14 18:11:31, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:31, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:32, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:32, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem74.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:11:36, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:36, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:37, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:37, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:38, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf - DismGetDriverInfoInternal
2018-07-14 18:11:38, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:38, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:38, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:39, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:40, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:41, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:41, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\accelerometer.inf_amd64_45c725ed0f52ab3a\accelerometer.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:41, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem0.inf - DismGetDriverInfoInternal
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:42, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:42, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem0.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:11:43, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:43, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:43, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:43, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:43, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf - DismGetDriverInfoInternal
2018-07-14 18:11:43, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:43, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:44, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:44, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:46, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:46, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:46, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdas4.inf_amd64_4c00b1d13f656ffb\amdas4.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:46, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:46, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:46, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem37.inf - DismGetDriverInfoInternal
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:47, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:48, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:48, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem37.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:11:48, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:49, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:49, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:50, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:50, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf - DismGetDriverInfoInternal
2018-07-14 18:11:50, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:50, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:50, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:51, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:53, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:53, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:53, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synsmbdrv.inf_amd64_25c6b6b83127e406\synsmbdrv.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:53, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:11:54, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:55, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem24.inf - DismGetDriverInfoInternal
2018-07-14 18:11:55, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:55, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:56, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:11:56, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem24.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:11:58, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:11:59, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf - DismGetDriverInfoInternal
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:11:59, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_37b7477243021901\amdkmpfd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:00, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:01, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:02, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem39.inf - DismGetDriverInfoInternal
2018-07-14 18:12:02, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:02, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:03, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:03, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem39.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:12:04, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_860984e04b1a8b0f\atihdwt6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:05, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:07, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:08, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_860984e04b1a8b0f\atihdwt6.inf - DismGetDriverInfoInternal
2018-07-14 18:12:08, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:08, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:10, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:11, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_860984e04b1a8b0f\atihdwt6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:11, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_860984e04b1a8b0f\atihdwt6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:11, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem65.inf - DismGetDriverInfoInternal
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:12, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:12, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem65.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:12:13, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:14, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf - DismGetDriverInfoInternal
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:14, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:15, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:15, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:16, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:16, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\wirelessbuttondriver.inf_amd64_810bb98b714f6a55\wirelessbuttondriver.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:16, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:16, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem44.inf - DismGetDriverInfoInternal
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:17, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:17, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem44.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:12:29, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:12:33, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:12:47, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:53, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:12:53, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf - DismGetDriverInfoInternal
2018-07-14 18:12:53, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:12:53, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:12:53, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:12:59, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:13:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:13:10, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:13:10, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\synpd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:13:15, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:13:16, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:17, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:20, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:20, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:20, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:20, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:13:21, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:13:21, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem57.inf - DismGetDriverInfoInternal
2018-07-14 18:13:21, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:13:21, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:13:21, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:13:21, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem57.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:13:33, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\c0188821.inf_amd64_f616cdec919d6636\c0188821.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:13:39, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:13:45, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:13:46, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\c0188821.inf_amd64_f616cdec919d6636\c0188821.inf - DismGetDriverInfoInternal
2018-07-14 18:13:48, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:13:48, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:13:52, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:14:28, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\c0188821.inf_amd64_f616cdec919d6636\c0188821.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:14:40, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\c0188821.inf_amd64_f616cdec919d6636\c0188821.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:14:45, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:14:46, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:46, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:49, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:49, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:49, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:49, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:14:51, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:14:51, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem55.inf - DismGetDriverInfoInternal
2018-07-14 18:14:51, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:14:51, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:14:51, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:14:51, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem55.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:15:00, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_7ad5aa3ac16f12c7\hdxhpnb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:15:04, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:15:28, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:15:28, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_7ad5aa3ac16f12c7\hdxhpnb.inf - DismGetDriverInfoInternal
2018-07-14 18:15:28, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:15:28, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:15:29, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:15:37, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_7ad5aa3ac16f12c7\hdxhpnb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:15:38, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_7ad5aa3ac16f12c7\hdxhpnb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:15:40, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:15:40, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:40, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:41, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:41, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:41, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:41, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:15:42, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:15:42, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem54.inf - DismGetDriverInfoInternal
2018-07-14 18:15:42, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:15:42, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:15:42, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:15:42, Error                 DISM   DISM Driver Manager: PID=9828 TID=6284 Error, file not found 'oem54.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:16:27, Info                  DISM   DISM Driver Manager: PID=9828 TID=6284 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rt640x64.inf_amd64_099459f60f2e1617\rt640x64.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:17:35, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:17:38, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:17:38, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\rt640x64.inf_amd64_099459f60f2e1617\rt640x64.inf - DismGetDriverInfoInternal
2018-07-14 18:17:38, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:17:38, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:17:38, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:17:56, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rt640x64.inf_amd64_099459f60f2e1617\rt640x64.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:18:07, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\rt640x64.inf_amd64_099459f60f2e1617\rt640x64.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:20:55, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:20:58, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:20:58, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:01, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:01, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:01, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:02, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:02, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:02, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem41.inf - DismGetDriverInfoInternal
2018-07-14 18:21:03, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:03, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:04, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:07, Error                 DISM   DISM Driver Manager: PID=9828 TID=3208 Error, file not found 'oem41.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:21:11, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_17253f48964efd13\ibtusb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:17, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:18, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:18, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_17253f48964efd13\ibtusb.inf - DismGetDriverInfoInternal
2018-07-14 18:21:18, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:18, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:18, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:28, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_17253f48964efd13\ibtusb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:32, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_17253f48964efd13\ibtusb.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:32, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:32, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:32, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:33, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem11.inf - DismGetDriverInfoInternal
2018-07-14 18:21:34, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:34, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:34, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:34, Error                 DISM   DISM Driver Manager: PID=9828 TID=3208 Error, file not found 'oem11.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:21:36, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:21:36, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:37, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:37, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:37, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf - DismGetDriverInfoInternal
2018-07-14 18:21:38, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:38, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:40, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:41, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:21:41, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:42, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is boot-critical. - CDriverPackage::FillInPackageDetails
2018-07-14 18:21:43, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\smbusamd.inf_amd64_a1f6e32f30c39b3d\smbusamd.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:45, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:45, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:45, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:45, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: oem13.inf - DismGetDriverInfoInternal
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:46, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:47, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:47, Error                 DISM   DISM Driver Manager: PID=9828 TID=3208 Error, file not found 'oem13.inf'. - CDriverManager::OpenPackageByFile(hr:0x80070002)
2018-07-14 18:21:48, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\clwvd6.inf_amd64_4cebb61f4d422ce4\clwvd6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11268 Enter DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11268 Input parameters: Session: 2, DriverPath: C:\Windows\System32\DriverStore\FileRepository\clwvd6.inf_amd64_4cebb61f4d422ce4\clwvd6.inf - DismGetDriverInfoInternal
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11268 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:21:49, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:21:49, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\clwvd6.inf_amd64_4cebb61f4d422ce4\clwvd6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:50, Info                  DISM   DISM Driver Manager: PID=9828 TID=3208 Signature status of driver C:\Windows\System32\DriverStore\FileRepository\clwvd6.inf_amd64_4cebb61f4d422ce4\clwvd6.inf is: SIGNED - CDriverPackage::InitSignatureStatus
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Leave DismGetDriverInfoInternal - DismGetDriverInfoInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Enter DismDeleteInternal - DismDeleteInternal
2018-07-14 18:21:50, Info                  DISM   API: PID=10540 TID=11268 Leave DismDeleteInternal - DismDeleteInternal
2018-07-14 18:22:10, Info                  CONX   End CDriverMap::GetDrivers
 
2018-07-14 18:22:11, Warning               CONX   Stop Time:  08:52:11.704
 
2018-07-14 18:22:11, Info                  CONX   End CDriverMap::GetDrivers
 
2018-07-14 18:22:12, Info                  CONX   DeviceMap Initialized
 
2018-07-14 18:22:13, Info                  CONX   Freeing cfgmgr32.dll
 
2018-07-14 18:22:13, Info                  CONX   Releasing crypto context
 
2018-07-14 18:22:13, Info                  CONX   Freeing memory for ContainerList and DeviceList
 
2018-07-14 18:22:15, Info                  CONX   Closing SCM Manager handle
 
2018-07-14 18:22:15, Info                  CONX   Freeing psapi.dll
 
2018-07-14 18:22:15, Info                  CONX   Freeing memory for DriverList and DriverPackageList
 
2018-07-14 18:22:16, Info                  CONX   Releasing cat admin context
 
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=10980 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=10980 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=10980 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=10980 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=10980 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=11196 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:22:18, Info                  DISM   API: PID=10540 TID=11196 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-14 18:22:19, Info                  DISM   API: PID=10540 TID=11196 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-14 18:22:22, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-14 18:22:22, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-14 18:22:22, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-14 18:22:23, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Finalizing the servicing provider(DriverManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:26, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Disconnecting Provider: DriverManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:26, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:26, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:26, Info                  DISM   DISM Provider Store: PID=9828 TID=3208 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:39, Info                  DISM   DISM Manager: PID=10540 TID=11196 Closing session event handle 0xe7c - CDISMManager::CleanupImageSessionEntry
2018-07-14 18:22:54, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-14 18:22:57, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:57, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: FfuManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:22:58, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:23:03, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: VHDManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:23:03, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:23:04, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Disconnecting Provider: Compatibility Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:23:04, Info                  DISM   DISM Provider Store: PID=10540 TID=11196 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-14 18:23:27, Info                  DISM   API: PID=10540 TID=11196 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=10980 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=10980 Enter DismShutdownInternal - DismShutdownInternal
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=10980 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=10980 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=10980 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=6728 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=6728 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=6728 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-14 18:23:28, Info                  DISM   API: PID=10540 TID=6728 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-14 18:23:29, Info                  DISM   PID=10540 TID=6728 Temporarily setting the scratch directory. This may be overridden by user later. - CDISMManager::FinalConstruct
2018-07-14 18:23:29, Info                  DISM   PID=10540 TID=6728 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2018-07-14 18:23:29, Info                  DISM   PID=10540 TID=6728 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-14 18:23:29, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=6728 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 Deleted g_internalDismSession - DismShutdownInternal
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 Shutdown SessionTable - DismShutdownInternal
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 Leave DismShutdownInternal - DismShutdownInternal
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 DismApi.dll:                                          - DismShutdownInternal
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-07-14 18:23:29, Info                  DISM   API: PID=10540 TID=10980 DismApi.dll:                                          - DismShutdownInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll:                                            - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll:                                            - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll: Version 10.0.17134.1 - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll: Parent process command line: C:\WINDOWS\system32\cleanmgr.exe /autoclean /d C: - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 Enter DismInitializeInternal - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 Initialized GlobalConfig - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 Initialized SessionTable - DismInitializeInternal
2018-07-15 21:09:58, Info                  DISM   API: PID=5996 TID=3436 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-07-15 21:09:59, Info                  DISM   API: PID=5996 TID=3436 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-15 21:09:59, Info                  DISM   API: PID=5996 TID=9464 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=9464 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 m_pInternalThread started - CCommandThread::Start
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 Created g_internalDismSession - DismInitializeInternal
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 Leave DismInitializeInternal - DismInitializeInternal
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-15 21:10:00, Info                  DISM   API: PID=5996 TID=3436 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=3436 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=3436 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=10256 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=10256 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=3436 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=3436 m_pInternalThread started - CCommandThread::Start
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=3436 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=10256 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-15 21:10:01, Info                  DISM   API: PID=5996 TID=10256 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-15 21:10:02, Info                  DISM   PID=5996 TID=10256 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-15 21:10:02, Info                  DISM   PID=5996 TID=10256 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-15 21:10:02, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:10:02, Info                  DISM   PID=5996 TID=10256 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-15 21:10:03, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
[5996] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5996] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5996] [0xc142011c] WIMGetMountedImageHandle:(2897)
[5996] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5996] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5996] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-15 21:10:38, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:10:38, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-15 21:10:38, Warning               DISM   DISM Provider Store: PID=11052 TID=9308 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\AB5EA816-AC60-4B8A-8F3F-844BACF543A0\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-15 21:10:38, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-15 21:10:38, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-15 21:10:39, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:10:39, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:10:40, Info                  DISM   API: PID=5996 TID=10256 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-15 21:10:40, Info                  DISM   API: PID=5996 TID=3436 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-15 21:10:40, Info                  DISM   API: PID=5996 TID=3436 Session id is: 2 - DismOpenSessionInternal
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 DismInitialize: 2 - DismInitializeInternal
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Returning existing DismSession=2 for path DRIVE_C. RefCount=2 - CSessionTable::CreateSession
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=10256 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=10256 Successfully dequeued command object - CCommandThread::DequeueCommandObject
[5996] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5996] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5996] [0xc142011c] WIMGetMountedImageHandle:(2897)
[5996] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5996] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5996] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=10256 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-15 21:11:13, Info                  DISM   API: PID=5996 TID=3436 Session id is: 2 - DismOpenSessionInternal
2018-07-15 21:14:50, Info                  DISM   API: PID=5996 TID=3436 Enter DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-15 21:14:50, Info                  DISM   API: PID=5996 TID=3436 Input parameters: Session: 2, Type: 1,  - DismGetUsedSpaceInternal
2018-07-15 21:14:50, Info                  DISM   API: PID=5996 TID=10256 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-15 21:14:50, Info                  DISM   API: PID=5996 TID=3436 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-15 21:14:50, Info                  DISM   API: PID=5996 TID=10256 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-15 21:14:52, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\AB5EA816-AC60-4B8A-8F3F-844BACF543A0\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-15 21:14:52, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-15 21:14:52, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-15 21:14:53, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-15 21:15:00, Info                  DISM   DISM Package Manager: PID=11052 TID=9308 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-15 21:15:00, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-15 21:15:00, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-15 21:15:00, Info                  DISM   DISM Package Manager: PID=11052 TID=9308 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-15 21:15:01, Info                  DISM   DISM Package Manager: PID=11052 TID=9308 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-15 21:16:08, Error                 DISM   DISM Package Manager: PID=11052 TID=9308 get_CleanupSize: Failed to create the CBS Package enumeration. - CDISMPackageManager::get_CleanupSize(hr:0x800f0900)
2018-07-15 21:16:08, Error                 DISM   API: PID=5996 TID=10256 Get cleanupSize failed 800f0900. - CGetUsedSpaceCommandObject::InternalExecute(hr:0x800f0900)
2018-07-15 21:16:09, Error                 DISM   API: PID=5996 TID=10256 InternalExecute failed - CBaseCommandObject::Execute(hr:0x800f0900)
2018-07-15 21:16:09, Error                 DISM   API: PID=5996 TID=3436 CCleanupSessionCommandObject internal execution failed - DismGetUsedSpaceInternal(hr:0x800f0900)
2018-07-15 21:16:09, Info                  DISM   API: PID=5996 TID=3436 Exit DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-15 21:19:30, Info                  DISM   API: PID=5996 TID=3436 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-15 21:19:31, Info                  DISM   API: PID=5996 TID=3436 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-15 21:19:31, Info                  DISM   API: PID=5996 TID=3436 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-15 21:19:31, Info                  DISM   API: PID=5996 TID=3436 Refcount for DismSession= 2s 1 - CSessionTable::RemoveSession
2018-07-15 21:19:31, Info                  DISM   API: PID=5996 TID=3436 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-15 21:19:31, Info                  DISM   API: PID=5996 TID=3436 DismShutdown: 1 - DismShutdownInternal
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=3436 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=3436 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=3436 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=3436 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=3436 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=10256 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-15 21:19:33, Info                  DISM   API: PID=5996 TID=10256 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-15 21:19:34, Info                  DISM   API: PID=5996 TID=10256 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-15 21:19:34, Info                  DISM   API: PID=5996 TID=10256 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-15 21:19:36, Info                  DISM   DISM Package Manager: PID=11052 TID=9308 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-15 21:19:36, Info                  DISM   DISM Provider Store: PID=11052 TID=9308 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=10256 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=3436 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=3436 Enter DismShutdownInternal - DismShutdownInternal
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=3436 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=3436 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=3436 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=9464 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=9464 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=9464 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-15 21:19:41, Info                  DISM   API: PID=5996 TID=9464 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-15 21:19:41, Info                  DISM   PID=5996 TID=9464 Temporarily setting the scratch directory. This may be overridden by user later. - CDISMManager::FinalConstruct
2018-07-15 21:19:41, Info                  DISM   PID=5996 TID=9464 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-15 21:19:41, Info                  DISM   PID=5996 TID=9464 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-15 21:19:41, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=9464 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 Deleted g_internalDismSession - DismShutdownInternal
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 Shutdown SessionTable - DismShutdownInternal
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 Leave DismShutdownInternal - DismShutdownInternal
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll:                                          - DismShutdownInternal
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-07-15 21:19:42, Info                  DISM   API: PID=5996 TID=3436 DismApi.dll:                                          - DismShutdownInternal
2018-07-17 14:48:50, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll:                                            - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll:                                            - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll: Version 10.0.17134.1 - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll: Parent process command line: C:\WINDOWS\system32\cleanmgr.exe /autoclean /d C: - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Enter DismInitializeInternal - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Initialized GlobalConfig - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Initialized SessionTable - DismInitializeInternal
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=11016 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-17 14:48:51, Info                  DISM   API: PID=10368 TID=6836 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=6836 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 m_pInternalThread started - CCommandThread::Start
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 Created g_internalDismSession - DismInitializeInternal
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 Leave DismInitializeInternal - DismInitializeInternal
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-17 14:48:53, Info                  DISM   API: PID=10368 TID=11016 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=11016 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=11016 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=2516 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=2516 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=11016 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=11016 m_pInternalThread started - CCommandThread::Start
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=11016 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=2516 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-17 14:48:54, Info                  DISM   API: PID=10368 TID=2516 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-17 14:48:55, Info                  DISM   PID=10368 TID=2516 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-17 14:48:55, Info                  DISM   PID=10368 TID=2516 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-17 14:48:55, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:48:55, Info                  DISM   PID=10368 TID=2516 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-17 14:48:56, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
[10368] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10368] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10368] [0xc142011c] WIMGetMountedImageHandle:(2897)
[10368] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10368] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10368] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-17 14:49:17, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:49:17, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-17 14:49:17, Warning               DISM   DISM Provider Store: PID=4712 TID=8700 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\01622FD9-9BEB-4663-A2F7-3C622E930C96\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-17 14:49:17, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-17 14:49:17, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-17 14:49:17, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:49:17, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:49:17, Info                  DISM   API: PID=10368 TID=2516 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-17 14:49:17, Info                  DISM   API: PID=10368 TID=11016 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-17 14:49:17, Info                  DISM   API: PID=10368 TID=11016 Session id is: 2 - DismOpenSessionInternal
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 DismInitialize: 2 - DismInitializeInternal
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Returning existing DismSession=2 for path DRIVE_C. RefCount=2 - CSessionTable::CreateSession
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=2516 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=2516 Successfully dequeued command object - CCommandThread::DequeueCommandObject
[10368] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10368] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10368] [0xc142011c] WIMGetMountedImageHandle:(2897)
[10368] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[10368] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[10368] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=2516 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-17 14:49:29, Info                  DISM   API: PID=10368 TID=11016 Session id is: 2 - DismOpenSessionInternal
2018-07-17 14:50:17, Info                  DISM   API: PID=10368 TID=11016 Enter DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-17 14:50:17, Info                  DISM   API: PID=10368 TID=11016 Input parameters: Session: 2, Type: 1,  - DismGetUsedSpaceInternal
2018-07-17 14:50:17, Info                  DISM   API: PID=10368 TID=11016 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-17 14:50:17, Info                  DISM   API: PID=10368 TID=2516 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-17 14:50:17, Info                  DISM   API: PID=10368 TID=2516 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-17 14:50:17, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\01622FD9-9BEB-4663-A2F7-3C622E930C96\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-17 14:50:17, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-17 14:50:17, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-17 14:50:17, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-17 14:50:21, Info                  DISM   DISM Package Manager: PID=4712 TID=8700 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-17 14:50:21, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-17 14:50:21, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-17 14:50:21, Info                  DISM   DISM Package Manager: PID=4712 TID=8700 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-17 14:50:21, Info                  DISM   DISM Package Manager: PID=4712 TID=8700 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-17 14:50:51, Error                 DISM   DISM Package Manager: PID=4712 TID=8700 get_CleanupSize: Failed to create the CBS Package enumeration. - CDISMPackageManager::get_CleanupSize(hr:0x800f0900)
2018-07-17 14:50:51, Error                 DISM   API: PID=10368 TID=2516 Get cleanupSize failed 800f0900. - CGetUsedSpaceCommandObject::InternalExecute(hr:0x800f0900)
2018-07-17 14:50:51, Error                 DISM   API: PID=10368 TID=2516 InternalExecute failed - CBaseCommandObject::Execute(hr:0x800f0900)
2018-07-17 14:50:51, Error                 DISM   API: PID=10368 TID=11016 CCleanupSessionCommandObject internal execution failed - DismGetUsedSpaceInternal(hr:0x800f0900)
2018-07-17 14:50:51, Info                  DISM   API: PID=10368 TID=11016 Exit DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Refcount for DismSession= 2s 1 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 DismShutdown: 1 - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=2516 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=2516 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=2516 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=2516 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-17 14:50:58, Info                  DISM   DISM Package Manager: PID=4712 TID=8700 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-17 14:50:58, Info                  DISM   DISM Provider Store: PID=4712 TID=8700 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=2516 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Enter DismShutdownInternal - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=6836 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=6836 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=6836 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=6836 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-17 14:50:58, Info                  DISM   PID=10368 TID=6836 Temporarily setting the scratch directory. This may be overridden by user later. - CDISMManager::FinalConstruct
2018-07-17 14:50:58, Info                  DISM   PID=10368 TID=6836 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-17 14:50:58, Info                  DISM   PID=10368 TID=6836 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-17 14:50:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=6836 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Deleted g_internalDismSession - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Shutdown SessionTable - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 Leave DismShutdownInternal - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll:                                          - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-07-17 14:50:58, Info                  DISM   API: PID=10368 TID=11016 DismApi.dll:                                          - DismShutdownInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll:                                            - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll:                                            - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll: Version 10.0.17134.1 - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll: Parent process command line: C:\WINDOWS\system32\cleanmgr.exe /autoclean /d C: - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Enter DismInitializeInternal - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Initialized GlobalConfig - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Initialized SessionTable - DismInitializeInternal
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=11732 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-18 16:35:44, Info                  DISM   API: PID=5312 TID=8920 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=8920 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 m_pInternalThread started - CCommandThread::Start
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Created g_internalDismSession - DismInitializeInternal
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Leave DismInitializeInternal - DismInitializeInternal
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=8016 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=8016 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 m_pInternalThread started - CCommandThread::Start
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=11732 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=8016 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-18 16:35:45, Info                  DISM   API: PID=5312 TID=8016 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-18 16:35:45, Info                  DISM   PID=5312 TID=8016 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-18 16:35:45, Info                  DISM   PID=5312 TID=8016 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-18 16:35:45, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:35:45, Info                  DISM   PID=5312 TID=8016 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-18 16:35:46, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
[5312] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5312] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5312] [0xc142011c] WIMGetMountedImageHandle:(2897)
[5312] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5312] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5312] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-18 16:36:02, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:36:02, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-18 16:36:02, Warning               DISM   DISM Provider Store: PID=11660 TID=10508 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\73065D9B-A144-4EF1-BA39-3C7B6DE05A0B\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-18 16:36:02, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-18 16:36:02, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-18 16:36:02, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:36:02, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:36:02, Info                  DISM   API: PID=5312 TID=8016 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-18 16:36:02, Info                  DISM   API: PID=5312 TID=11732 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-18 16:36:02, Info                  DISM   API: PID=5312 TID=11732 Session id is: 2 - DismOpenSessionInternal
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 DismInitialize: 2 - DismInitializeInternal
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Returning existing DismSession=2 for path DRIVE_C. RefCount=2 - CSessionTable::CreateSession
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=8016 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=8016 Successfully dequeued command object - CCommandThread::DequeueCommandObject
[5312] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5312] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5312] [0xc142011c] WIMGetMountedImageHandle:(2897)
[5312] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[5312] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[5312] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=8016 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-18 16:36:07, Info                  DISM   API: PID=5312 TID=11732 Session id is: 2 - DismOpenSessionInternal
2018-07-18 16:36:54, Info                  DISM   API: PID=5312 TID=11732 Enter DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-18 16:36:54, Info                  DISM   API: PID=5312 TID=11732 Input parameters: Session: 2, Type: 1,  - DismGetUsedSpaceInternal
2018-07-18 16:36:54, Info                  DISM   API: PID=5312 TID=11732 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-18 16:36:54, Info                  DISM   API: PID=5312 TID=8016 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-18 16:36:54, Info                  DISM   API: PID=5312 TID=8016 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-18 16:36:55, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\73065D9B-A144-4EF1-BA39-3C7B6DE05A0B\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-18 16:36:55, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-18 16:36:56, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-18 16:36:56, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-18 16:37:02, Info                  DISM   DISM Package Manager: PID=11660 TID=10508 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-18 16:37:02, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-18 16:37:02, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-18 16:37:02, Info                  DISM   DISM Package Manager: PID=11660 TID=10508 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-18 16:37:03, Info                  DISM   DISM Package Manager: PID=11660 TID=10508 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-18 16:37:32, Error                 DISM   DISM Package Manager: PID=11660 TID=10508 get_CleanupSize: Failed to create the CBS Package enumeration. - CDISMPackageManager::get_CleanupSize(hr:0x800f0900)
2018-07-18 16:37:32, Error                 DISM   API: PID=5312 TID=8016 Get cleanupSize failed 800f0900. - CGetUsedSpaceCommandObject::InternalExecute(hr:0x800f0900)
2018-07-18 16:37:33, Error                 DISM   API: PID=5312 TID=8016 InternalExecute failed - CBaseCommandObject::Execute(hr:0x800f0900)
2018-07-18 16:37:33, Error                 DISM   API: PID=5312 TID=11732 CCleanupSessionCommandObject internal execution failed - DismGetUsedSpaceInternal(hr:0x800f0900)
2018-07-18 16:37:33, Info                  DISM   API: PID=5312 TID=11732 Exit DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Refcount for DismSession= 2s 1 - CSessionTable::RemoveSession
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 DismShutdown: 1 - DismShutdownInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=11732 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=8016 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=8016 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=8016 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-18 16:37:40, Info                  DISM   API: PID=5312 TID=8016 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-18 16:37:40, Info                  DISM   DISM Package Manager: PID=11660 TID=10508 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-18 16:37:40, Info                  DISM   DISM Provider Store: PID=11660 TID=10508 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8016 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Enter DismShutdownInternal - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8920 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8920 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8920 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8920 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-18 16:37:41, Info                  DISM   PID=5312 TID=8920 Temporarily setting the scratch directory. This may be overridden by user later. - CDISMManager::FinalConstruct
2018-07-18 16:37:41, Info                  DISM   PID=5312 TID=8920 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-18 16:37:41, Info                  DISM   PID=5312 TID=8920 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-18 16:37:41, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=8920 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Deleted g_internalDismSession - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Shutdown SessionTable - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 Leave DismShutdownInternal - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll:                                          - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-07-18 16:37:41, Info                  DISM   API: PID=5312 TID=11732 DismApi.dll:                                          - DismShutdownInternal
2018-07-19 18:35:40, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll:                                            - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll:                                            - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll: Version 10.0.17134.1 - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll: Parent process command line: C:\WINDOWS\system32\cleanmgr.exe /autoclean /d C: - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Enter DismInitializeInternal - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Initialized GlobalConfig - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Initialized SessionTable - DismInitializeInternal
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=5140 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-19 18:35:41, Info                  DISM   API: PID=4216 TID=8552 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=8552 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 m_pInternalThread started - CCommandThread::Start
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Created g_internalDismSession - DismInitializeInternal
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Leave DismInitializeInternal - DismInitializeInternal
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=7056 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=7056 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 m_pInternalThread started - CCommandThread::Start
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=5140 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=7056 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-19 18:35:44, Info                  DISM   API: PID=4216 TID=7056 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-19 18:35:45, Info                  DISM   PID=4216 TID=7056 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-19 18:35:45, Info                  DISM   PID=4216 TID=7056 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-19 18:35:45, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:35:45, Info                  DISM   PID=4216 TID=7056 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-19 18:35:46, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
[4216] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4216] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4216] [0xc142011c] WIMGetMountedImageHandle:(2897)
[4216] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4216] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4216] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-19 18:35:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:35:59, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-19 18:35:59, Warning               DISM   DISM Provider Store: PID=216 TID=3932 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\1CBFF049-1866-4B1B-9F66-CC5FC0DD31C6\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-19 18:35:59, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-19 18:35:59, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-19 18:35:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:35:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:36:00, Info                  DISM   API: PID=4216 TID=7056 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-19 18:36:00, Info                  DISM   API: PID=4216 TID=5140 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-19 18:36:00, Info                  DISM   API: PID=4216 TID=5140 Session id is: 2 - DismOpenSessionInternal
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 DismInitialize: 2 - DismInitializeInternal
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Returning existing DismSession=2 for path DRIVE_C. RefCount=2 - CSessionTable::CreateSession
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=7056 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=7056 Successfully dequeued command object - CCommandThread::DequeueCommandObject
[4216] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4216] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4216] [0xc142011c] WIMGetMountedImageHandle:(2897)
[4216] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4216] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4216] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=7056 Target image information: OS Version=10.0.17134.165, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-07-19 18:36:06, Info                  DISM   API: PID=4216 TID=5140 Session id is: 2 - DismOpenSessionInternal
2018-07-19 18:36:38, Info                  DISM   API: PID=4216 TID=5140 Enter DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-19 18:36:38, Info                  DISM   API: PID=4216 TID=5140 Input parameters: Session: 2, Type: 1,  - DismGetUsedSpaceInternal
2018-07-19 18:36:38, Info                  DISM   API: PID=4216 TID=5140 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-19 18:36:38, Info                  DISM   API: PID=4216 TID=7056 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-19 18:36:38, Info                  DISM   API: PID=4216 TID=7056 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-19 18:36:39, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1CBFF049-1866-4B1B-9F66-CC5FC0DD31C6\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 18:36:39, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 18:36:39, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-19 18:36:39, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-19 18:36:42, Info                  DISM   DISM Package Manager: PID=216 TID=3932 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-19 18:36:42, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-19 18:36:42, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-19 18:36:42, Info                  DISM   DISM Package Manager: PID=216 TID=3932 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-19 18:36:42, Info                  DISM   DISM Package Manager: PID=216 TID=3932 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-19 18:37:07, Error                 DISM   DISM Package Manager: PID=216 TID=3932 get_CleanupSize: Failed to create the CBS Package enumeration. - CDISMPackageManager::get_CleanupSize(hr:0x800f0900)
2018-07-19 18:37:07, Error                 DISM   API: PID=4216 TID=7056 Get cleanupSize failed 800f0900. - CGetUsedSpaceCommandObject::InternalExecute(hr:0x800f0900)
2018-07-19 18:37:07, Error                 DISM   API: PID=4216 TID=7056 InternalExecute failed - CBaseCommandObject::Execute(hr:0x800f0900)
2018-07-19 18:37:07, Error                 DISM   API: PID=4216 TID=5140 CCleanupSessionCommandObject internal execution failed - DismGetUsedSpaceInternal(hr:0x800f0900)
2018-07-19 18:37:07, Info                  DISM   API: PID=4216 TID=5140 Exit DismGetUsedSpaceInternal - DismGetUsedSpaceInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Refcount for DismSession= 2s 1 - CSessionTable::RemoveSession
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 DismShutdown: 1 - DismShutdownInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Input parameters: Session: 2 - DismCloseSessionInternal
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=5140 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=7056 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=7056 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=7056 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-19 18:37:14, Info                  DISM   API: PID=4216 TID=7056 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-19 18:37:14, Info                  DISM   DISM Package Manager: PID=216 TID=3932 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-19 18:37:14, Info                  DISM   DISM Provider Store: PID=216 TID=3932 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=7056 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Enter DismShutdownInternal - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=8552 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=8552 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=8552 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=8552 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-07-19 18:37:15, Info                  DISM   PID=4216 TID=8552 Temporarily setting the scratch directory. This may be overridden by user later. - CDISMManager::FinalConstruct
2018-07-19 18:37:15, Info                  DISM   PID=4216 TID=8552 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-19 18:37:15, Info                  DISM   PID=4216 TID=8552 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-19 18:37:15, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=8552 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Deleted g_internalDismSession - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Shutdown SessionTable - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 Leave DismShutdownInternal - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll:                                          - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-07-19 18:37:15, Info                  DISM   API: PID=4216 TID=5140 DismApi.dll:                                          - DismShutdownInternal
2018-07-19 21:40:03, Info                  DISM   PID=12060 TID=8732 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-19 21:40:03, Info                  DISM   PID=12060 TID=8732 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-19 21:40:03, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:03, Info                  DISM   PID=12060 TID=8732 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-19 21:40:03, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:03, Info                  DISM   DISM Provider Store: PID=12060 TID=8732 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-19 21:40:03, Info                  DISM   DISM Provider Store: PID=12060 TID=8732 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:03, Info                  DISM   DISM Provider Store: PID=12060 TID=8732 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:03, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:03, Info                  DISM   DISM Manager: PID=12060 TID=8732 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: 
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: <----- Starting Dism.exe session ----->
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: 
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: Host machine information: OS Version=10.0.17134, Running architecture=amd64, Number of processors=4
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: Dism.exe version: 10.0.17134.1
2018-07-19 21:40:03, Info                  DISM   DISM.EXE: Executing command line: DISM   /Online  /Cleanup-Image  /RestoreHealth
2018-07-19 21:40:03, Info                  DISM   DISM Provider Store: PID=12060 TID=8732 Connecting to the provider located at C:\WINDOWS\system32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:03, Info                  DISM   DISM Manager: PID=12060 TID=8732 physical location path: C:\ - CDISMManager::CreateImageSession
2018-07-19 21:40:03, Info                  DISM   DISM Manager: PID=12060 TID=8732 Event name for current DISM session is Global\{31DB6AB2-DB73-410C-A846-C8A2849A915E} - CDISMManager::CheckSessionAndLock
2018-07-19 21:40:03, Info                  DISM   DISM Manager: PID=12060 TID=8732 Create session event 0x1a8 for current DISM session and event name is Global\{31DB6AB2-DB73-410C-A846-C8A2849A915E}  - CDISMManager::CheckSessionAndLock
2018-07-19 21:40:04, Info                  DISM   DISM Manager: PID=12060 TID=8732 Copying DISM from "C:\WINDOWS\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2018-07-19 21:40:05, Info                  DISM   DISM Manager: PID=12060 TID=8732 Successfully loaded the ImageSession at "C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19" - CDISMManager::LoadRemoteImageSession
2018-07-19 21:40:05, Info                  DISM   DISM Image Session: PID=6652 TID=2472 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2018-07-19 21:40:05, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:06, Info                  DISM   DISM OS Provider: PID=6652 TID=2472 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM OS Provider: PID=6652 TID=2472 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM OS Provider: PID=6652 TID=2472 Host OS verion is 10.0 - CDISMOSServiceManager::SetDllSearchPath
2018-07-19 21:40:06, Warning               DISM   DISM OS Provider: PID=6652 TID=2472 Unable to set the DLL search path to the servicing stack folder. C:\Windows may not point to a valid Windows folder. - CDISMOSServiceManager::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:06, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-19 21:40:06, Warning               DISM   DISM Provider Store: PID=6652 TID=2472 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-19 21:40:06, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:06, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-19 21:40:06, Info                  DISM   DISM Manager: PID=12060 TID=8732 Image session successfully loaded from the temporary location: C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19 - CDISMManager::CreateImageSession
2018-07-19 21:40:06, Info                  DISM   DISM.EXE: Target image information: OS Version=10.0.17134.165, Image architecture=amd64
2018-07-19 21:40:06, Info                  DISM   DISM.EXE: Image session version: 10.0.17134.1
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Getting the collection of providers from an image provider store type. - CDISMProviderStore::GetProviderCollection
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:06, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:06, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-19 21:40:06, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-19 21:40:07, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-19 21:40:07, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-19 21:40:07, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-19 21:40:07, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-19 21:40:07, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\MsiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\IntlProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\IBSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\DmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-19 21:40:07, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-19 21:40:07, Info                  DISM   DISM Driver Manager: PID=6652 TID=2472 Further logs for driver related operations can be found in the target operating system at %WINDIR%\inf\setupapi.offline.log - CDriverManager::Initialize
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\UnattendProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\SmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Warning               DISM   DISM Provider Store: PID=6652 TID=2472 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\EmbeddedProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\AppxProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\ProvProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\AssocProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\GenericProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\OfflineSetupProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:07, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\SysprepProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\TransmogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Transmog Provider: PID=6652 TID=2472 Current image session is [ONLINE] - CTransmogManager::GetMode
2018-07-19 21:40:08, Info                  DISM   DISM Transmog Provider: PID=6652 TID=2472 Audit Mode: [No] - CTransmogManager::Initialize
2018-07-19 21:40:08, Info                  DISM   DISM Transmog Provider: PID=6652 TID=2472 GetProductType: ProductType = [WinNT] - CTransmogManager::GetProductType
2018-07-19 21:40:08, Info                  DISM   DISM Transmog Provider: PID=6652 TID=2472 Product Type: [WinNT] - CTransmogManager::Initialize
2018-07-19 21:40:08, Info                  DISM   DISM Transmog Provider: PID=6652 TID=2472 Product Type ServerNT : [No] - CTransmogManager::Initialize
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\1906DDB4-CE57-4234-B6E3-5956BE6D4F19\SetupPlatformProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM Provider Store: PID=6652 TID=2472 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Log Provider
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OSServices
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Package Manager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Package Manager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: MsiManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: MsiManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IntlManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: IntlManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IBSManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DriverManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DriverManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Unattend Manager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Unattend Manager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SmiManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AppxManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AppxManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: ProvManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: ProvManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AssocManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AssocManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: GenericManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: GenericManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OfflineSetupManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: OfflineSetupManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SysprepManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SysprepManager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: Edition Manager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: Edition Manager.
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SetupPlatformManager
2018-07-19 21:40:08, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SetupPlatformManager.
2018-07-19 21:40:08, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 Processing the top level command token(cleanup-image). - CPackageManagerCLIHandler::Private_ValidateCmdLine
2018-07-19 21:40:08, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 Attempting to route to appropriate command handler. - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-19 21:40:08, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 Routing the command... - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-19 21:40:08, Info                  DISM   DISM Package Manager: PID=6652 TID=2472 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize
2018-07-20 13:03:05, Info                  DISM   PID=6372 TID=872 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-20 13:03:05, Info                  DISM   PID=6372 TID=872 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-20 13:03:05, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:05, Info                  DISM   PID=6372 TID=872 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-20 13:03:05, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:05, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-20 13:03:05, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:05, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:05, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:05, Info                  DISM   DISM Manager: PID=6372 TID=872 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: 
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: <----- Starting Dism.exe session ----->
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: 
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: Host machine information: OS Version=10.0.17134, Running architecture=amd64, Number of processors=4
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: Dism.exe version: 10.0.17134.1
2018-07-20 13:03:05, Info                  DISM   DISM.EXE: Executing command line: DISM   /Online  /Cleanup-Image  /RestoreHealth
2018-07-20 13:03:05, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Connecting to the provider located at C:\WINDOWS\system32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:05, Info                  DISM   DISM Manager: PID=6372 TID=872 physical location path: C:\ - CDISMManager::CreateImageSession
2018-07-20 13:03:05, Info                  DISM   DISM Manager: PID=6372 TID=872 Event name for current DISM session is Global\{60AFE1FE-4B4D-431D-898B-909E0B174114} - CDISMManager::CheckSessionAndLock
2018-07-20 13:03:05, Info                  DISM   DISM Manager: PID=6372 TID=872 Create session event 0x198 for current DISM session and event name is Global\{60AFE1FE-4B4D-431D-898B-909E0B174114}  - CDISMManager::CheckSessionAndLock
2018-07-20 13:03:05, Info                  DISM   DISM Manager: PID=6372 TID=872 Copying DISM from "C:\WINDOWS\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2018-07-20 13:03:08, Info                  DISM   DISM Manager: PID=6372 TID=872 Successfully loaded the ImageSession at "C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE" - CDISMManager::LoadRemoteImageSession
2018-07-20 13:03:08, Info                  DISM   DISM Image Session: PID=8288 TID=11184 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:08, Info                  DISM   DISM OS Provider: PID=8288 TID=11184 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM OS Provider: PID=8288 TID=11184 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM OS Provider: PID=8288 TID=11184 Host OS verion is 10.0 - CDISMOSServiceManager::SetDllSearchPath
2018-07-20 13:03:08, Warning               DISM   DISM OS Provider: PID=8288 TID=11184 Unable to set the DLL search path to the servicing stack folder. C:\Windows may not point to a valid Windows folder. - CDISMOSServiceManager::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:08, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-20 13:03:08, Warning               DISM   DISM Provider Store: PID=8288 TID=11184 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-20 13:03:08, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:08, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 13:03:08, Info                  DISM   DISM Manager: PID=6372 TID=872 Image session successfully loaded from the temporary location: C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE - CDISMManager::CreateImageSession
2018-07-20 13:03:08, Info                  DISM   DISM.EXE: Target image information: OS Version=10.0.17134.165, Image architecture=amd64
2018-07-20 13:03:08, Info                  DISM   DISM.EXE: Image session version: 10.0.17134.1
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Getting the collection of providers from an image provider store type. - CDISMProviderStore::GetProviderCollection
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:08, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:08, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 13:03:08, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 13:03:09, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-20 13:03:09, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 13:03:09, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 13:03:09, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-20 13:03:10, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\MsiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\IntlProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\IBSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\DmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 13:03:10, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 13:03:10, Info                  DISM   DISM Driver Manager: PID=8288 TID=11184 Further logs for driver related operations can be found in the target operating system at %WINDIR%\inf\setupapi.offline.log - CDriverManager::Initialize
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\UnattendProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\SmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Warning               DISM   DISM Provider Store: PID=8288 TID=11184 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\EmbeddedProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\AppxProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\ProvProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\AssocProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\GenericProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\OfflineSetupProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:10, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\SysprepProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\TransmogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Transmog Provider: PID=8288 TID=11184 Current image session is [ONLINE] - CTransmogManager::GetMode
2018-07-20 13:03:11, Info                  DISM   DISM Transmog Provider: PID=8288 TID=11184 Audit Mode: [No] - CTransmogManager::Initialize
2018-07-20 13:03:11, Info                  DISM   DISM Transmog Provider: PID=8288 TID=11184 GetProductType: ProductType = [WinNT] - CTransmogManager::GetProductType
2018-07-20 13:03:11, Info                  DISM   DISM Transmog Provider: PID=8288 TID=11184 Product Type: [WinNT] - CTransmogManager::Initialize
2018-07-20 13:03:11, Info                  DISM   DISM Transmog Provider: PID=8288 TID=11184 Product Type ServerNT : [No] - CTransmogManager::Initialize
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\58D27B80-0F17-4C2A-94D5-4DC254F9BCBE\SetupPlatformProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Log Provider
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OSServices
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Package Manager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Package Manager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: MsiManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: MsiManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IntlManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: IntlManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IBSManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DriverManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DriverManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Unattend Manager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Unattend Manager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SmiManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AppxManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AppxManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: ProvManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: ProvManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AssocManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AssocManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: GenericManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: GenericManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OfflineSetupManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: OfflineSetupManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SysprepManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SysprepManager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: Edition Manager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: Edition Manager.
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SetupPlatformManager
2018-07-20 13:03:11, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SetupPlatformManager.
2018-07-20 13:03:11, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Processing the top level command token(cleanup-image). - CPackageManagerCLIHandler::Private_ValidateCmdLine
2018-07-20 13:03:11, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Attempting to route to appropriate command handler. - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 13:03:11, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Routing the command... - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 13:03:11, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize
2018-07-20 14:00:30, Info                  DISM   DISM Package Manager: PID=8288 TID=11928  Error in operation: source for package or file not found, ResolveSource() unsuccessful. (CBS HRESULT=0x800f081f) - CCbsConUIHandler::Error
2018-07-20 14:00:30, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x800f081f)
2018-07-20 14:00:30, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 The source files could not be found; their location must be specified using the /source option to restore the feature. - GetCbsErrorMsg
2018-07-20 14:00:30, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 Failed processing package changes with session option CbsSessionOptionRepairStoreCorruption - CDISMPackageManager::RestoreHealth(hr:0x800f081f)
2018-07-20 14:00:30, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 The source files could not be found; their location must be specified using the /source option to restore the feature. - GetCbsErrorMsg
2018-07-20 14:00:43, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 Failed to restore the image health. - CPackageManagerCLIHandler::ProcessCmdLine_CleanupImage(hr:0x800f081f)
2018-07-20 14:00:43, Error                 DISM   DISM Package Manager: PID=8288 TID=11184 Failed while processing command cleanup-image. - CPackageManagerCLIHandler::ExecuteCmdLine(hr:0x800f081f)
2018-07-20 14:00:43, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Further logs for online package and feature related operations can be found at %WINDIR%\logs\CBS\cbs.log - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Package Manager: PID=8288 TID=11184 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(MsiManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: MsiManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(IntlManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: IntlManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(IBSManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: IBSManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(DriverManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: DriverManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(DISM Unattend Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: DISM Unattend Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(SmiManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: SmiManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(AppxManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: AppxManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(ProvManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: ProvManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(AssocManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: AssocManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(GenericManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: GenericManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(OfflineSetupManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: OfflineSetupManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(SysprepManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: SysprepManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(Edition Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: Edition Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Finalizing the servicing provider(SetupPlatformManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: SetupPlatformManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:43, Info                  DISM   DISM Provider Store: PID=8288 TID=11184 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:44, Info                  DISM   DISM Manager: PID=6372 TID=872 Closing session event handle 0x198 - CDISMManager::CleanupImageSessionEntry
2018-07-20 14:00:44, Info                  DISM   DISM.EXE: Image session has been closed. Reboot required=no.
2018-07-20 14:00:44, Info                  DISM   DISM.EXE: 
2018-07-20 14:00:44, Info                  DISM   DISM.EXE: <----- Ending Dism.exe session ----->
2018-07-20 14:00:44, Info                  DISM   DISM.EXE: 
2018-07-20 14:00:44, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:00:44, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:00:44, Info                  DISM   DISM Provider Store: PID=6372 TID=872 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:03:58, Info                  DISM   PID=3596 TID=9872 Scratch directory set to 'C:\Users\THE_MC~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-07-20 14:03:58, Info                  DISM   PID=3596 TID=9872 DismCore.dll version: 10.0.17134.1 - CDISMManager::FinalConstruct
2018-07-20 14:03:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:58, Info                  DISM   PID=3596 TID=9872 Successfully loaded the ImageSession at "C:\WINDOWS\system32\Dism" - CDISMManager::LoadLocalImageSession
2018-07-20 14:03:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:58, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-20 14:03:58, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:58, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:58, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:58, Info                  DISM   DISM Manager: PID=3596 TID=9872 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: 
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: <----- Starting Dism.exe session ----->
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: 
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: Host machine information: OS Version=10.0.17134, Running architecture=amd64, Number of processors=4
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: Dism.exe version: 10.0.17134.1
2018-07-20 14:03:58, Info                  DISM   DISM.EXE: Executing command line: DISM   /Online  /Cleanup-Image  /RestoreHealth
2018-07-20 14:03:58, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Connecting to the provider located at C:\WINDOWS\system32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:03:58, Info                  DISM   DISM Manager: PID=3596 TID=9872 physical location path: C:\ - CDISMManager::CreateImageSession
2018-07-20 14:03:58, Info                  DISM   DISM Manager: PID=3596 TID=9872 Event name for current DISM session is Global\{5BED72D4-823D-4D8A-9832-5548720644B0} - CDISMManager::CheckSessionAndLock
2018-07-20 14:03:58, Info                  DISM   DISM Manager: PID=3596 TID=9872 Create session event 0x1a8 for current DISM session and event name is Global\{5BED72D4-823D-4D8A-9832-5548720644B0}  - CDISMManager::CheckSessionAndLock
2018-07-20 14:03:58, Info                  DISM   DISM Manager: PID=3596 TID=9872 Copying DISM from "C:\WINDOWS\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2018-07-20 14:03:59, Info                  DISM   DISM Manager: PID=3596 TID=9872 Successfully loaded the ImageSession at "C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4" - CDISMManager::LoadRemoteImageSession
2018-07-20 14:03:59, Info                  DISM   DISM Image Session: PID=1352 TID=9296 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:03:59, Info                  DISM   DISM OS Provider: PID=1352 TID=9296 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM OS Provider: PID=1352 TID=9296 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM OS Provider: PID=1352 TID=9296 Host OS verion is 10.0 - CDISMOSServiceManager::SetDllSearchPath
2018-07-20 14:03:59, Warning               DISM   DISM OS Provider: PID=1352 TID=9296 Unable to set the DLL search path to the servicing stack folder. C:\Windows may not point to a valid Windows folder. - CDISMOSServiceManager::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:03:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-07-20 14:03:59, Warning               DISM   DISM Provider Store: PID=1352 TID=9296 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-07-20 14:03:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:59, Info                  DISM   Initialized Panther logging at C:\WINDOWS\Logs\DISM\dism.log
2018-07-20 14:03:59, Info                  DISM   DISM Manager: PID=3596 TID=9872 Image session successfully loaded from the temporary location: C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4 - CDISMManager::CreateImageSession
2018-07-20 14:03:59, Info                  DISM   DISM.EXE: Target image information: OS Version=10.0.17134.165, Image architecture=amd64
2018-07-20 14:03:59, Info                  DISM   DISM.EXE: Image session version: 10.0.17134.1
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Getting the collection of providers from an image provider store type. - CDISMProviderStore::GetProviderCollection
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:03:59, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:03:59, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 14:03:59, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 14:04:00, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-07-20 14:04:00, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 14:04:00, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 14:04:00, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-07-20 14:04:00, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\MsiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\IntlProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\IBSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\DmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  CSI    00000001 Shim considered [l:125]'\??\C:\WINDOWS\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-07-20 14:04:00, Info                  CSI    00000002 Shim considered [l:122]'\??\C:\WINDOWS\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.165_none_eaf410441d6d7311\wcp.dll' : got STATUS_SUCCESS
2018-07-20 14:04:00, Info                  DISM   DISM Driver Manager: PID=1352 TID=9296 Further logs for driver related operations can be found in the target operating system at %WINDIR%\inf\setupapi.offline.log - CDriverManager::Initialize
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\UnattendProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\SmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:00, Warning               DISM   DISM Provider Store: PID=1352 TID=9296 Failed to load the provider: C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\EmbeddedProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\AppxProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\ProvProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\AssocProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\GenericProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\OfflineSetupProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\SysprepProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\TransmogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Transmog Provider: PID=1352 TID=9296 Current image session is [ONLINE] - CTransmogManager::GetMode
2018-07-20 14:04:01, Info                  DISM   DISM Transmog Provider: PID=1352 TID=9296 Audit Mode: [No] - CTransmogManager::Initialize
2018-07-20 14:04:01, Info                  DISM   DISM Transmog Provider: PID=1352 TID=9296 GetProductType: ProductType = [WinNT] - CTransmogManager::GetProductType
2018-07-20 14:04:01, Info                  DISM   DISM Transmog Provider: PID=1352 TID=9296 Product Type: [WinNT] - CTransmogManager::Initialize
2018-07-20 14:04:01, Info                  DISM   DISM Transmog Provider: PID=1352 TID=9296 Product Type ServerNT : [No] - CTransmogManager::Initialize
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Connecting to the provider located at C:\Users\THE_MC~1\AppData\Local\Temp\7D84CF01-817E-4EFA-BB99-ED774E9F2BB4\SetupPlatformProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Log Provider
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OSServices
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Package Manager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Package Manager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: MsiManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: MsiManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IntlManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: IntlManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IBSManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DriverManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DriverManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Unattend Manager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Unattend Manager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SmiManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AppxManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AppxManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: ProvManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: ProvManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AssocManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AssocManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: GenericManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: GenericManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OfflineSetupManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: OfflineSetupManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SysprepManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SysprepManager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: Edition Manager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: Edition Manager.
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SetupPlatformManager
2018-07-20 14:04:01, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: SetupPlatformManager.
2018-07-20 14:04:01, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Processing the top level command token(cleanup-image). - CPackageManagerCLIHandler::Private_ValidateCmdLine
2018-07-20 14:04:01, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Attempting to route to appropriate command handler. - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 14:04:01, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Routing the command... - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 14:04:01, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize
2018-07-20 14:39:23, Info                  DISM   DISM Package Manager: PID=1352 TID=11024  Error in operation: source for package or file not found, ResolveSource() unsuccessful. (CBS HRESULT=0x800f081f) - CCbsConUIHandler::Error
2018-07-20 14:39:23, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x800f081f)
2018-07-20 14:39:23, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 The source files could not be found; their location must be specified using the /source option to restore the feature. - GetCbsErrorMsg
2018-07-20 14:39:23, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 Failed processing package changes with session option CbsSessionOptionRepairStoreCorruption - CDISMPackageManager::RestoreHealth(hr:0x800f081f)
2018-07-20 14:39:23, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 The source files could not be found; their location must be specified using the /source option to restore the feature. - GetCbsErrorMsg
2018-07-20 14:39:37, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 Failed to restore the image health. - CPackageManagerCLIHandler::ProcessCmdLine_CleanupImage(hr:0x800f081f)
2018-07-20 14:39:37, Error                 DISM   DISM Package Manager: PID=1352 TID=9296 Failed while processing command cleanup-image. - CPackageManagerCLIHandler::ExecuteCmdLine(hr:0x800f081f)
2018-07-20 14:39:37, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Further logs for online package and feature related operations can be found at %WINDIR%\logs\CBS\cbs.log - CPackageManagerCLIHandler::ExecuteCmdLine
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Package Manager: PID=1352 TID=9296 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(MsiManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: MsiManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(IntlManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: IntlManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(IBSManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: IBSManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(DriverManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: DriverManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(DISM Unattend Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: DISM Unattend Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(SmiManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: SmiManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(AppxManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: AppxManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(ProvManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: ProvManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(AssocManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: AssocManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(GenericManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: GenericManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(OfflineSetupManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: OfflineSetupManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(SysprepManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: SysprepManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(Edition Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: Edition Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Finalizing the servicing provider(SetupPlatformManager) - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: SetupPlatformManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:37, Info                  DISM   DISM Provider Store: PID=1352 TID=9296 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:38, Info                  DISM   DISM Manager: PID=3596 TID=9872 Closing session event handle 0x1a8 - CDISMManager::CleanupImageSessionEntry
2018-07-20 14:39:38, Info                  DISM   DISM.EXE: Image session has been closed. Reboot required=no.
2018-07-20 14:39:38, Info                  DISM   DISM.EXE: 
2018-07-20 14:39:38, Info                  DISM   DISM.EXE: <----- Ending Dism.exe session ----->
2018-07-20 14:39:38, Info                  DISM   DISM.EXE: 
2018-07-20 14:39:38, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-07-20 14:39:38, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2018-07-20 14:39:38, Info                  DISM   DISM Provider Store: PID=3596 TID=9872 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider

  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

You might try rerunning dism after you finish SFC /Scannow.  Sometimes that will fix it.  Another possibility is letting Windows check the hard drive.

 

https://www.tekrevue...dsk-windows-10/


  • 0

#7
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts
2018-07-22 11:31:06, Info                  CSI    00000006 [SR] Verifying 1 components
2018-07-22 11:31:06, Info                  CSI    00000007 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:07, Info                  CSI    0000000b [SR] Verify complete
2018-07-22 11:31:07, Info                  CSI    0000000c [SR] Verifying 1 components
2018-07-22 11:31:07, Info                  CSI    0000000d [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:07, Info                  CSI    00000010 [SR] Verify complete
2018-07-22 11:31:07, Info                  CSI    00000011 [SR] Verifying 1 components
2018-07-22 11:31:07, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:08, Info                  CSI    00000015 [SR] Verify complete
2018-07-22 11:31:08, Info                  CSI    00000016 [SR] Verifying 1 components
2018-07-22 11:31:08, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:09, Info                  CSI    0000001d [SR] Verify complete
2018-07-22 21:32:38, Info                  CSI    00000006 [SR] Verifying 100 components
2018-07-22 21:32:38, Info                  CSI    00000007 [SR] Beginning Verify and Repair transaction
2018-07-22 21:33:29, Info                  CSI    0000006e [SR] Verify complete
2018-07-22 21:33:29, Info                  CSI    0000006f [SR] Verifying 100 components
2018-07-22 21:33:29, Info                  CSI    00000070 [SR] Beginning Verify and Repair transaction
2018-07-22 21:33:53, Info                  CSI    000000d8 [SR] Verify complete
2018-07-22 21:33:53, Info                  CSI    000000d9 [SR] Verifying 100 components
2018-07-22 21:33:53, Info                  CSI    000000da [SR] Beginning Verify and Repair transaction
2018-07-22 21:34:21, Info                  CSI    00000144 [SR] Verify complete
2018-07-22 21:34:21, Info                  CSI    00000145 [SR] Verifying 100 components
2018-07-22 21:34:21, Info                  CSI    00000146 [SR] Beginning Verify and Repair transaction
2018-07-22 21:34:24, Info                  CSI    00000149 [SR] Cannot verify component files for 3475b27c3010e81c80d3f71f288b133b, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:34:48, Info                  CSI    000001b1 [SR] Verify complete
2018-07-22 21:34:55, Info                  CSI    000001b7 [SR] Verifying 100 components
2018-07-22 21:34:55, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:00, Info                  CSI    000001bb [SR] Cannot verify component files for 4c7ef8d9e6645daf85073446b81f88eb, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:35:17, Info                  CSI    0000021f [SR] Verify complete
2018-07-22 21:35:18, Info                  CSI    00000225 [SR] Verifying 100 components
2018-07-22 21:35:18, Info                  CSI    00000226 [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:38, Info                  CSI    0000028b [SR] Verify complete
2018-07-22 21:35:38, Info                  CSI    0000028c [SR] Verifying 100 components
2018-07-22 21:35:38, Info                  CSI    0000028d [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:56, Info                  CSI    000002f6 [SR] Verify complete
2018-07-22 21:35:56, Info                  CSI    000002f7 [SR] Verifying 100 components
2018-07-22 21:35:56, Info                  CSI    000002f8 [SR] Beginning Verify and Repair transaction
2018-07-22 21:36:25, Info                  CSI    00000361 [SR] Verify complete
2018-07-22 21:36:25, Info                  CSI    00000362 [SR] Verifying 100 components
2018-07-22 21:36:25, Info                  CSI    00000363 [SR] Beginning Verify and Repair transaction
2018-07-22 21:36:57, Info                  CSI    000003ca [SR] Verify complete
2018-07-22 21:36:57, Info                  CSI    000003cb [SR] Verifying 100 components
2018-07-22 21:36:57, Info                  CSI    000003cc [SR] Beginning Verify and Repair transaction
2018-07-22 21:37:23, Info                  CSI    00000435 [SR] Verify complete
2018-07-22 21:37:24, Info                  CSI    00000436 [SR] Verifying 100 components
2018-07-22 21:37:24, Info                  CSI    00000437 [SR] Beginning Verify and Repair transaction
2018-07-22 21:37:26, Info                  CSI    0000043a [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:37:59, Info                  CSI    000004ab [SR] Verify complete
2018-07-22 21:38:02, Info                  CSI    000004b1 [SR] Verifying 100 components
2018-07-22 21:38:02, Info                  CSI    000004b2 [SR] Beginning Verify and Repair transaction
2018-07-22 21:38:52, Info                  CSI    00000533 [SR] Verify complete
2018-07-22 21:38:52, Info                  CSI    00000534 [SR] Verifying 100 components
2018-07-22 21:38:52, Info                  CSI    00000535 [SR] Beginning Verify and Repair transaction
2018-07-22 21:39:29, Info                  CSI    000005a7 [SR] Verify complete
2018-07-22 21:39:30, Info                  CSI    000005a8 [SR] Verifying 100 components
2018-07-22 21:39:30, Info                  CSI    000005a9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:39:50, Info                  CSI    00000612 [SR] Verify complete
2018-07-22 21:39:50, Info                  CSI    00000613 [SR] Verifying 100 components
2018-07-22 21:39:50, Info                  CSI    00000614 [SR] Beginning Verify and Repair transaction
2018-07-22 21:40:09, Info                  CSI    0000067d [SR] Verify complete
2018-07-22 21:40:10, Info                  CSI    0000067e [SR] Verifying 100 components
2018-07-22 21:40:10, Info                  CSI    0000067f [SR] Beginning Verify and Repair transaction
2018-07-22 21:40:33, Info                  CSI    000006e5 [SR] Verify complete
2018-07-22 21:40:33, Info                  CSI    000006e6 [SR] Verifying 100 components
2018-07-22 21:40:33, Info                  CSI    000006e7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:41:15, Info                  CSI    0000074e [SR] Verify complete
2018-07-22 21:41:15, Info                  CSI    0000074f [SR] Verifying 100 components
2018-07-22 21:41:15, Info                  CSI    00000750 [SR] Beginning Verify and Repair transaction
2018-07-22 21:41:59, Info                  CSI    000007b5 [SR] Verify complete
2018-07-22 21:41:59, Info                  CSI    000007b6 [SR] Verifying 100 components
2018-07-22 21:41:59, Info                  CSI    000007b7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:43:12, Info                  CSI    00000822 [SR] Verify complete
2018-07-22 21:43:13, Info                  CSI    00000823 [SR] Verifying 100 components
2018-07-22 21:43:13, Info                  CSI    00000824 [SR] Beginning Verify and Repair transaction
2018-07-22 21:45:11, Info                  CSI    0000088d [SR] Verify complete
2018-07-22 21:45:11, Info                  CSI    0000088e [SR] Verifying 100 components
2018-07-22 21:45:11, Info                  CSI    0000088f [SR] Beginning Verify and Repair transaction
2018-07-22 21:48:49, Info                  CSI    000008f5 [SR] Verify complete
2018-07-22 21:48:49, Info                  CSI    000008f6 [SR] Verifying 100 components
2018-07-22 21:48:49, Info                  CSI    000008f7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:50:45, Info                  CSI    0000096a [SR] Verify complete
2018-07-22 21:50:45, Info                  CSI    0000096b [SR] Verifying 100 components
2018-07-22 21:50:45, Info                  CSI    0000096c [SR] Beginning Verify and Repair transaction
2018-07-22 21:51:17, Info                  CSI    000009d3 [SR] Verify complete
2018-07-22 21:51:17, Info                  CSI    000009d4 [SR] Verifying 100 components
2018-07-22 21:51:17, Info                  CSI    000009d5 [SR] Beginning Verify and Repair transaction
2018-07-22 21:51:42, Info                  CSI    00000a3b [SR] Verify complete
2018-07-22 21:51:43, Info                  CSI    00000a3c [SR] Verifying 100 components
2018-07-22 21:51:43, Info                  CSI    00000a3d [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:03, Info                  CSI    00000aa7 [SR] Verify complete
2018-07-22 21:52:03, Info                  CSI    00000aa8 [SR] Verifying 100 components
2018-07-22 21:52:03, Info                  CSI    00000aa9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:21, Info                  CSI    00000b0e [SR] Verify complete
2018-07-22 21:52:21, Info                  CSI    00000b0f [SR] Verifying 100 components
2018-07-22 21:52:21, Info                  CSI    00000b10 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:28, Info                  CSI    00000b75 [SR] Verify complete
2018-07-22 21:52:29, Info                  CSI    00000b76 [SR] Verifying 100 components
2018-07-22 21:52:29, Info                  CSI    00000b77 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:46, Info                  CSI    00000be4 [SR] Verify complete
2018-07-22 21:52:47, Info                  CSI    00000be5 [SR] Verifying 100 components
2018-07-22 21:52:47, Info                  CSI    00000be6 [SR] Beginning Verify and Repair transaction
2018-07-22 21:53:14, Info                  CSI    00000c61 [SR] Verify complete
2018-07-22 21:53:14, Info                  CSI    00000c62 [SR] Verifying 100 components
2018-07-22 21:53:14, Info                  CSI    00000c63 [SR] Beginning Verify and Repair transaction
2018-07-22 21:53:39, Info                  CSI    00000cce [SR] Verify complete
2018-07-22 21:53:39, Info                  CSI    00000ccf [SR] Verifying 100 components
2018-07-22 21:53:39, Info                  CSI    00000cd0 [SR] Beginning Verify and Repair transaction
2018-07-22 21:54:17, Info                  CSI    00000d54 [SR] Verify complete
2018-07-22 21:54:17, Info                  CSI    00000d55 [SR] Verifying 100 components
2018-07-22 21:54:17, Info                  CSI    00000d56 [SR] Beginning Verify and Repair transaction
2018-07-22 21:54:53, Info                  CSI    00000ddd [SR] Verify complete
2018-07-22 21:54:53, Info                  CSI    00000dde [SR] Verifying 100 components
2018-07-22 21:54:53, Info                  CSI    00000ddf [SR] Beginning Verify and Repair transaction
2018-07-22 21:55:32, Info                  CSI    00000e52 [SR] Verify complete
2018-07-22 21:55:32, Info                  CSI    00000e53 [SR] Verifying 100 components
2018-07-22 21:55:32, Info                  CSI    00000e54 [SR] Beginning Verify and Repair transaction
2018-07-22 21:57:15, Info                  CSI    00000ed7 [SR] Verify complete
2018-07-22 21:57:18, Info                  CSI    00000ed8 [SR] Verifying 100 components
2018-07-22 21:57:18, Info                  CSI    00000ed9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:58:18, Info                  CSI    00000f4d [SR] Verify complete
2018-07-22 21:58:18, Info                  CSI    00000f4e [SR] Verifying 100 components
2018-07-22 21:58:18, Info                  CSI    00000f4f [SR] Beginning Verify and Repair transaction
2018-07-22 21:58:53, Info                  CSI    00000fcc [SR] Verify complete
2018-07-22 21:58:53, Info                  CSI    00000fcd [SR] Verifying 100 components
2018-07-22 21:58:53, Info                  CSI    00000fce [SR] Beginning Verify and Repair transaction
2018-07-22 21:59:32, Info                  CSI    00001047 [SR] Verify complete
2018-07-22 21:59:32, Info                  CSI    00001048 [SR] Verifying 100 components
2018-07-22 21:59:32, Info                  CSI    00001049 [SR] Beginning Verify and Repair transaction
2018-07-22 22:01:23, Info                  CSI    0000110e [SR] Verify complete
2018-07-22 22:01:23, Info                  CSI    0000110f [SR] Verifying 100 components
2018-07-22 22:01:23, Info                  CSI    00001110 [SR] Beginning Verify and Repair transaction
2018-07-22 22:02:23, Info                  CSI    000011fc [SR] Verify complete
2018-07-22 22:02:24, Info                  CSI    000011fd [SR] Verifying 100 components
2018-07-22 22:02:24, Info                  CSI    000011fe [SR] Beginning Verify and Repair transaction
2018-07-22 22:03:19, Info                  CSI    000012ac [SR] Verify complete
2018-07-22 22:03:19, Info                  CSI    000012ad [SR] Verifying 100 components
2018-07-22 22:03:19, Info                  CSI    000012ae [SR] Beginning Verify and Repair transaction
2018-07-22 22:04:02, Info                  CSI    0000137e [SR] Verify complete
2018-07-22 22:04:02, Info                  CSI    0000137f [SR] Verifying 100 components
2018-07-22 22:04:02, Info                  CSI    00001380 [SR] Beginning Verify and Repair transaction
2018-07-22 22:04:36, Info                  CSI    000013f5 [SR] Verify complete
2018-07-22 22:04:37, Info                  CSI    000013f6 [SR] Verifying 100 components
2018-07-22 22:04:37, Info                  CSI    000013f7 [SR] Beginning Verify and Repair transaction
2018-07-22 22:05:10, Info                  CSI    00001467 [SR] Verify complete
2018-07-22 22:05:11, Info                  CSI    00001468 [SR] Verifying 100 components
2018-07-22 22:05:11, Info                  CSI    00001469 [SR] Beginning Verify and Repair transaction
2018-07-22 22:05:51, Info                  CSI    000014e8 [SR] Verify complete
2018-07-22 22:05:52, Info                  CSI    000014e9 [SR] Verifying 100 components
2018-07-22 22:05:52, Info                  CSI    000014ea [SR] Beginning Verify and Repair transaction
2018-07-22 22:06:34, Info                  CSI    00001567 [SR] Verify complete
2018-07-22 22:06:35, Info                  CSI    00001568 [SR] Verifying 100 components
2018-07-22 22:06:35, Info                  CSI    00001569 [SR] Beginning Verify and Repair transaction
2018-07-22 22:07:07, Info                  CSI    000015db [SR] Verify complete
2018-07-22 22:07:08, Info                  CSI    000015dc [SR] Verifying 100 components
2018-07-22 22:07:08, Info                  CSI    000015dd [SR] Beginning Verify and Repair transaction
2018-07-22 22:08:24, Info                  CSI    00001653 [SR] Verify complete
2018-07-22 22:08:26, Info                  CSI    00001654 [SR] Verifying 100 components
2018-07-22 22:08:26, Info                  CSI    00001655 [SR] Beginning Verify and Repair transaction
2018-07-22 22:09:04, Info                  CSI    000016c0 [SR] Verify complete
2018-07-22 22:09:04, Info                  CSI    000016c1 [SR] Verifying 100 components
2018-07-22 22:09:04, Info                  CSI    000016c2 [SR] Beginning Verify and Repair transaction
2018-07-22 22:09:43, Info                  CSI    00001733 [SR] Verify complete
2018-07-22 22:09:43, Info                  CSI    00001734 [SR] Verifying 100 components
2018-07-22 22:09:43, Info                  CSI    00001735 [SR] Beginning Verify and Repair transaction
2018-07-22 22:10:20, Info                  CSI    000017ac [SR] Verify complete
2018-07-22 22:10:20, Info                  CSI    000017ad [SR] Verifying 100 components
2018-07-22 22:10:20, Info                  CSI    000017ae [SR] Beginning Verify and Repair transaction
2018-07-22 22:11:14, Info                  CSI    00001862 [SR] Verify complete
2018-07-22 22:11:14, Info                  CSI    00001863 [SR] Verifying 100 components
2018-07-22 22:11:14, Info                  CSI    00001864 [SR] Beginning Verify and Repair transaction
2018-07-22 22:12:17, Info                  CSI    0000192e [SR] Verify complete
2018-07-22 22:12:17, Info                  CSI    0000192f [SR] Verifying 100 components
2018-07-22 22:12:17, Info                  CSI    00001930 [SR] Beginning Verify and Repair transaction
2018-07-22 22:13:17, Info                  CSI    000019f1 [SR] Verify complete
2018-07-22 22:13:18, Info                  CSI    000019f2 [SR] Verifying 100 components
2018-07-22 22:13:18, Info                  CSI    000019f3 [SR] Beginning Verify and Repair transaction
2018-07-22 22:14:25, Info                  CSI    00001a75 [SR] Verify complete
2018-07-22 22:14:26, Info                  CSI    00001a76 [SR] Verifying 100 components
2018-07-22 22:14:26, Info                  CSI    00001a77 [SR] Beginning Verify and Repair transaction
2018-07-22 22:15:42, Info                  CSI    00001b04 [SR] Verify complete
2018-07-22 22:15:43, Info                  CSI    00001b05 [SR] Verifying 100 components
2018-07-22 22:15:43, Info                  CSI    00001b06 [SR] Beginning Verify and Repair transaction
2018-07-22 22:16:34, Info                  CSI    00001bd1 [SR] Verify complete
2018-07-22 22:16:34, Info                  CSI    00001bd2 [SR] Verifying 100 components
2018-07-22 22:16:34, Info                  CSI    00001bd3 [SR] Beginning Verify and Repair transaction
2018-07-22 22:16:58, Info                  CSI    00001c47 [SR] Verify complete
2018-07-22 22:16:59, Info                  CSI    00001c48 [SR] Verifying 100 components
2018-07-22 22:16:59, Info                  CSI    00001c49 [SR] Beginning Verify and Repair transaction
2018-07-22 22:17:44, Info                  CSI    00001cd7 [SR] Verify complete
2018-07-22 22:17:45, Info                  CSI    00001cd8 [SR] Verifying 100 components
2018-07-22 22:17:45, Info                  CSI    00001cd9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:18:43, Info                  CSI    00001d4d [SR] Verify complete
2018-07-22 22:18:44, Info                  CSI    00001d4e [SR] Verifying 100 components
2018-07-22 22:18:44, Info                  CSI    00001d4f [SR] Beginning Verify and Repair transaction
2018-07-22 22:19:44, Info                  CSI    00001dd6 [SR] Verify complete
2018-07-22 22:19:45, Info                  CSI    00001dd7 [SR] Verifying 100 components
2018-07-22 22:19:45, Info                  CSI    00001dd8 [SR] Beginning Verify and Repair transaction
2018-07-22 22:21:02, Info                  CSI    00001e6c [SR] Verify complete
2018-07-22 22:21:02, Info                  CSI    00001e6d [SR] Verifying 100 components
2018-07-22 22:21:02, Info                  CSI    00001e6e [SR] Beginning Verify and Repair transaction
2018-07-22 22:21:56, Info                  CSI    00001ee3 [SR] Verify complete
2018-07-22 22:21:56, Info                  CSI    00001ee4 [SR] Verifying 100 components
2018-07-22 22:21:56, Info                  CSI    00001ee5 [SR] Beginning Verify and Repair transaction
2018-07-22 22:22:30, Info                  CSI    00001f5d [SR] Verify complete
2018-07-22 22:22:31, Info                  CSI    00001f5e [SR] Verifying 100 components
2018-07-22 22:22:31, Info                  CSI    00001f5f [SR] Beginning Verify and Repair transaction
2018-07-22 22:23:38, Info                  CSI    00001fe3 [SR] Verify complete
2018-07-22 22:23:39, Info                  CSI    00001fe4 [SR] Verifying 100 components
2018-07-22 22:23:39, Info                  CSI    00001fe5 [SR] Beginning Verify and Repair transaction
2018-07-22 22:25:12, Info                  CSI    00002089 [SR] Verify complete
2018-07-22 22:25:13, Info                  CSI    0000208a [SR] Verifying 100 components
2018-07-22 22:25:13, Info                  CSI    0000208b [SR] Beginning Verify and Repair transaction
2018-07-22 22:28:19, Info                  CSI    00002125 [SR] Verify complete
2018-07-22 22:28:21, Info                  CSI    00002126 [SR] Verifying 100 components
2018-07-22 22:28:21, Info                  CSI    00002127 [SR] Beginning Verify and Repair transaction
2018-07-22 22:30:02, Info                  CSI    000021a6 [SR] Verify complete
2018-07-22 22:30:04, Info                  CSI    000021a7 [SR] Verifying 100 components
2018-07-22 22:30:04, Info                  CSI    000021a8 [SR] Beginning Verify and Repair transaction
2018-07-22 22:31:49, Info                  CSI    00002245 [SR] Verify complete
2018-07-22 22:31:51, Info                  CSI    00002246 [SR] Verifying 100 components
2018-07-22 22:31:51, Info                  CSI    00002247 [SR] Beginning Verify and Repair transaction
2018-07-22 22:34:42, Info                  CSI    0000236a [SR] Verify complete
2018-07-22 22:34:43, Info                  CSI    0000236b [SR] Verifying 100 components
2018-07-22 22:34:43, Info                  CSI    0000236c [SR] Beginning Verify and Repair transaction
2018-07-22 22:35:29, Info                  CSI    000023e5 [SR] Verify complete
2018-07-22 22:35:30, Info                  CSI    000023e6 [SR] Verifying 100 components
2018-07-22 22:35:30, Info                  CSI    000023e7 [SR] Beginning Verify and Repair transaction
2018-07-22 22:36:34, Info                  CSI    00002476 [SR] Verify complete
2018-07-22 22:36:35, Info                  CSI    00002477 [SR] Verifying 100 components
2018-07-22 22:36:35, Info                  CSI    00002478 [SR] Beginning Verify and Repair transaction
2018-07-22 22:37:26, Info                  CSI    000024ec [SR] Verify complete
2018-07-22 22:37:27, Info                  CSI    000024ed [SR] Verifying 100 components
2018-07-22 22:37:27, Info                  CSI    000024ee [SR] Beginning Verify and Repair transaction
2018-07-22 22:38:01, Info                  CSI    0000257a [SR] Verify complete
2018-07-22 22:38:02, Info                  CSI    0000257b [SR] Verifying 100 components
2018-07-22 22:38:02, Info                  CSI    0000257c [SR] Beginning Verify and Repair transaction
2018-07-22 22:38:55, Info                  CSI    000025f2 [SR] Verify complete
2018-07-22 22:38:56, Info                  CSI    000025f3 [SR] Verifying 100 components
2018-07-22 22:38:56, Info                  CSI    000025f4 [SR] Beginning Verify and Repair transaction
2018-07-22 22:39:59, Info                  CSI    00002684 [SR] Verify complete
2018-07-22 22:40:00, Info                  CSI    00002685 [SR] Verifying 100 components
2018-07-22 22:40:00, Info                  CSI    00002686 [SR] Beginning Verify and Repair transaction
2018-07-22 22:40:44, Info                  CSI    0000270d [SR] Verify complete
2018-07-22 22:40:44, Info                  CSI    0000270e [SR] Verifying 100 components
2018-07-22 22:40:44, Info                  CSI    0000270f [SR] Beginning Verify and Repair transaction
2018-07-22 22:41:34, Info                  CSI    00002798 [SR] Verify complete
2018-07-22 22:41:35, Info                  CSI    00002799 [SR] Verifying 100 components
2018-07-22 22:41:35, Info                  CSI    0000279a [SR] Beginning Verify and Repair transaction
2018-07-22 22:42:41, Info                  CSI    0000281c [SR] Verify complete
2018-07-22 22:42:42, Info                  CSI    0000281d [SR] Verifying 100 components
2018-07-22 22:42:42, Info                  CSI    0000281e [SR] Beginning Verify and Repair transaction
2018-07-22 22:43:40, Info                  CSI    00002939 [SR] Verify complete
2018-07-22 22:43:41, Info                  CSI    0000293a [SR] Verifying 100 components
2018-07-22 22:43:41, Info                  CSI    0000293b [SR] Beginning Verify and Repair transaction
2018-07-22 22:44:20, Info                  CSI    000029aa [SR] Verify complete
2018-07-22 22:44:20, Info                  CSI    000029ab [SR] Verifying 100 components
2018-07-22 22:44:20, Info                  CSI    000029ac [SR] Beginning Verify and Repair transaction
2018-07-22 22:44:56, Info                  CSI    00002a21 [SR] Verify complete
2018-07-22 22:44:57, Info                  CSI    00002a22 [SR] Verifying 100 components
2018-07-22 22:44:57, Info                  CSI    00002a23 [SR] Beginning Verify and Repair transaction
2018-07-22 22:45:26, Info                  CSI    00002a9c [SR] Verify complete
2018-07-22 22:45:26, Info                  CSI    00002a9d [SR] Verifying 100 components
2018-07-22 22:45:26, Info                  CSI    00002a9e [SR] Beginning Verify and Repair transaction
2018-07-22 22:46:00, Info                  CSI    00002b14 [SR] Verify complete
2018-07-22 22:46:01, Info                  CSI    00002b15 [SR] Verifying 100 components
2018-07-22 22:46:01, Info                  CSI    00002b16 [SR] Beginning Verify and Repair transaction
2018-07-22 22:46:44, Info                  CSI    00002b93 [SR] Verify complete
2018-07-22 22:46:44, Info                  CSI    00002b94 [SR] Verifying 100 components
2018-07-22 22:46:44, Info                  CSI    00002b95 [SR] Beginning Verify and Repair transaction
2018-07-22 22:47:14, Info                  CSI    00002c0d [SR] Verify complete
2018-07-22 22:47:15, Info                  CSI    00002c0e [SR] Verifying 100 components
2018-07-22 22:47:15, Info                  CSI    00002c0f [SR] Beginning Verify and Repair transaction
2018-07-22 22:47:48, Info                  CSI    00002c87 [SR] Verify complete
2018-07-22 22:47:48, Info                  CSI    00002c88 [SR] Verifying 100 components
2018-07-22 22:47:48, Info                  CSI    00002c89 [SR] Beginning Verify and Repair transaction
2018-07-22 22:48:22, Info                  CSI    00002d0d [SR] Verify complete
2018-07-22 22:48:22, Info                  CSI    00002d0e [SR] Verifying 100 components
2018-07-22 22:48:22, Info                  CSI    00002d0f [SR] Beginning Verify and Repair transaction
2018-07-22 22:49:10, Info                  CSI    00002d87 [SR] Verify complete
2018-07-22 22:49:10, Info                  CSI    00002d88 [SR] Verifying 100 components
2018-07-22 22:49:10, Info                  CSI    00002d89 [SR] Beginning Verify and Repair transaction
2018-07-22 22:49:47, Info                  CSI    00002dfa [SR] Verify complete
2018-07-22 22:49:48, Info                  CSI    00002dfb [SR] Verifying 100 components
2018-07-22 22:49:48, Info                  CSI    00002dfc [SR] Beginning Verify and Repair transaction
2018-07-22 22:50:46, Info                  CSI    00002eb2 [SR] Verify complete
2018-07-22 22:50:46, Info                  CSI    00002eb3 [SR] Verifying 100 components
2018-07-22 22:50:46, Info                  CSI    00002eb4 [SR] Beginning Verify and Repair transaction
2018-07-22 22:51:39, Info                  CSI    00002f34 [SR] Verify complete
2018-07-22 22:51:39, Info                  CSI    00002f35 [SR] Verifying 100 components
2018-07-22 22:51:39, Info                  CSI    00002f36 [SR] Beginning Verify and Repair transaction
2018-07-22 22:52:16, Info                  CSI    00002fa7 [SR] Verify complete
2018-07-22 22:52:16, Info                  CSI    00002fa8 [SR] Verifying 100 components
2018-07-22 22:52:16, Info                  CSI    00002fa9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:53:00, Info                  CSI    00003050 [SR] Verify complete
2018-07-22 22:53:00, Info                  CSI    00003051 [SR] Verifying 100 components
2018-07-22 22:53:00, Info                  CSI    00003052 [SR] Beginning Verify and Repair transaction
2018-07-22 22:53:51, Info                  CSI    000030d8 [SR] Verify complete
2018-07-22 22:53:52, Info                  CSI    000030d9 [SR] Verifying 100 components
2018-07-22 22:53:52, Info                  CSI    000030da [SR] Beginning Verify and Repair transaction
2018-07-22 22:54:23, Info                  CSI    0000314f [SR] Verify complete
2018-07-22 22:54:24, Info                  CSI    00003150 [SR] Verifying 100 components
2018-07-22 22:54:24, Info                  CSI    00003151 [SR] Beginning Verify and Repair transaction
2018-07-22 22:54:55, Info                  CSI    000031ca [SR] Verify complete
2018-07-22 22:54:55, Info                  CSI    000031cb [SR] Verifying 100 components
2018-07-22 22:54:55, Info                  CSI    000031cc [SR] Beginning Verify and Repair transaction
2018-07-22 22:55:48, Info                  CSI    00003252 [SR] Verify complete
2018-07-22 22:55:49, Info                  CSI    00003253 [SR] Verifying 100 components
2018-07-22 22:55:49, Info                  CSI    00003254 [SR] Beginning Verify and Repair transaction
2018-07-22 22:56:23, Info                  CSI    000032da [SR] Verify complete
2018-07-22 22:56:24, Info                  CSI    000032db [SR] Verifying 100 components
2018-07-22 22:56:24, Info                  CSI    000032dc [SR] Beginning Verify and Repair transaction
2018-07-22 22:56:57, Info                  CSI    0000334f [SR] Verify complete
2018-07-22 22:56:57, Info                  CSI    00003350 [SR] Verifying 100 components
2018-07-22 22:56:57, Info                  CSI    00003351 [SR] Beginning Verify and Repair transaction
2018-07-22 22:57:38, Info                  CSI    000033c7 [SR] Verify complete
2018-07-22 22:57:39, Info                  CSI    000033c8 [SR] Verifying 100 components
2018-07-22 22:57:39, Info                  CSI    000033c9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:58:20, Info                  CSI    00003457 [SR] Verify complete
2018-07-22 22:58:21, Info                  CSI    00003458 [SR] Verifying 100 components
2018-07-22 22:58:21, Info                  CSI    00003459 [SR] Beginning Verify and Repair transaction
2018-07-22 22:58:54, Info                  CSI    000034c4 [SR] Verify complete
2018-07-22 22:58:55, Info                  CSI    000034c5 [SR] Verifying 100 components
2018-07-22 22:58:55, Info                  CSI    000034c6 [SR] Beginning Verify and Repair transaction
2018-07-22 22:59:23, Info                  CSI    0000352d [SR] Verify complete
2018-07-22 22:59:25, Info                  CSI    0000352e [SR] Verifying 100 components
2018-07-22 22:59:25, Info                  CSI    0000352f [SR] Beginning Verify and Repair transaction
2018-07-22 23:00:00, Info                  CSI    000035a3 [SR] Verify complete
2018-07-22 23:00:00, Info                  CSI    000035a4 [SR] Verifying 100 components
2018-07-22 23:00:00, Info                  CSI    000035a5 [SR] Beginning Verify and Repair transaction
2018-07-22 23:00:35, Info                  CSI    00003629 [SR] Verify complete
2018-07-22 23:00:38, Info                  CSI    0000362a [SR] Verifying 100 components
2018-07-22 23:00:38, Info                  CSI    0000362b [SR] Beginning Verify and Repair transaction
2018-07-22 23:02:00, Info                  CSI    000036df [SR] Verify complete
2018-07-22 23:02:01, Info                  CSI    000036e0 [SR] Verifying 100 components
2018-07-22 23:02:01, Info                  CSI    000036e1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:02:42, Info                  CSI    0000375f [SR] Verify complete
2018-07-22 23:02:43, Info                  CSI    00003760 [SR] Verifying 100 components
2018-07-22 23:02:43, Info                  CSI    00003761 [SR] Beginning Verify and Repair transaction
2018-07-22 23:03:03, Info                  CSI    000037cb [SR] Verify complete
2018-07-22 23:03:04, Info                  CSI    000037cc [SR] Verifying 100 components
2018-07-22 23:03:04, Info                  CSI    000037cd [SR] Beginning Verify and Repair transaction
2018-07-22 23:03:46, Info                  CSI    00003833 [SR] Verify complete
2018-07-22 23:03:47, Info                  CSI    00003834 [SR] Verifying 100 components
2018-07-22 23:03:47, Info                  CSI    00003835 [SR] Beginning Verify and Repair transaction
2018-07-22 23:04:49, Info                  CSI    0000389b [SR] Verify complete
2018-07-22 23:04:49, Info                  CSI    0000389c [SR] Verifying 100 components
2018-07-22 23:04:49, Info                  CSI    0000389d [SR] Beginning Verify and Repair transaction
2018-07-22 23:05:38, Info                  CSI    00003904 [SR] Verify complete
2018-07-22 23:05:38, Info                  CSI    00003905 [SR] Verifying 100 components
2018-07-22 23:05:38, Info                  CSI    00003906 [SR] Beginning Verify and Repair transaction
2018-07-22 23:06:20, Info                  CSI    00003971 [SR] Verify complete
2018-07-22 23:06:21, Info                  CSI    00003972 [SR] Verifying 100 components
2018-07-22 23:06:21, Info                  CSI    00003973 [SR] Beginning Verify and Repair transaction
2018-07-22 23:06:41, Info                  CSI    000039db [SR] Verify complete
2018-07-22 23:06:41, Info                  CSI    000039dc [SR] Verifying 100 components
2018-07-22 23:06:41, Info                  CSI    000039dd [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:04, Info                  CSI    00003a46 [SR] Verify complete
2018-07-22 23:07:05, Info                  CSI    00003a47 [SR] Verifying 100 components
2018-07-22 23:07:05, Info                  CSI    00003a48 [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:23, Info                  CSI    00003aaf [SR] Verify complete
2018-07-22 23:07:24, Info                  CSI    00003ab0 [SR] Verifying 100 components
2018-07-22 23:07:24, Info                  CSI    00003ab1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:40, Info                  CSI    00003b16 [SR] Verify complete
2018-07-22 23:07:42, Info                  CSI    00003b17 [SR] Verifying 100 components
2018-07-22 23:07:42, Info                  CSI    00003b18 [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:01, Info                  CSI    00003b7f [SR] Verify complete
2018-07-22 23:08:01, Info                  CSI    00003b80 [SR] Verifying 100 components
2018-07-22 23:08:01, Info                  CSI    00003b81 [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:30, Info                  CSI    00003bfa [SR] Verify complete
2018-07-22 23:08:30, Info                  CSI    00003bfb [SR] Verifying 100 components
2018-07-22 23:08:30, Info                  CSI    00003bfc [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:49, Info                  CSI    00003c65 [SR] Verify complete
2018-07-22 23:08:50, Info                  CSI    00003c66 [SR] Verifying 100 components
2018-07-22 23:08:50, Info                  CSI    00003c67 [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:12, Info                  CSI    00003cd1 [SR] Verify complete
2018-07-22 23:09:12, Info                  CSI    00003cd2 [SR] Verifying 100 components
2018-07-22 23:09:12, Info                  CSI    00003cd3 [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:25, Info                  CSI    00003d38 [SR] Verify complete
2018-07-22 23:09:26, Info                  CSI    00003d39 [SR] Verifying 100 components
2018-07-22 23:09:26, Info                  CSI    00003d3a [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:49, Info                  CSI    00003da2 [SR] Verify complete
2018-07-22 23:09:49, Info                  CSI    00003da3 [SR] Verifying 100 components
2018-07-22 23:09:49, Info                  CSI    00003da4 [SR] Beginning Verify and Repair transaction
2018-07-22 23:10:10, Info                  CSI    00003e0b [SR] Verify complete
2018-07-22 23:10:10, Info                  CSI    00003e0c [SR] Verifying 100 components
2018-07-22 23:10:10, Info                  CSI    00003e0d [SR] Beginning Verify and Repair transaction
2018-07-22 23:10:41, Info                  CSI    00003e78 [SR] Verify complete
2018-07-22 23:10:42, Info                  CSI    00003e79 [SR] Verifying 100 components
2018-07-22 23:10:42, Info                  CSI    00003e7a [SR] Beginning Verify and Repair transaction
2018-07-22 23:11:21, Info                  CSI    00003eed [SR] Verify complete
2018-07-22 23:11:22, Info                  CSI    00003eee [SR] Verifying 100 components
2018-07-22 23:11:22, Info                  CSI    00003eef [SR] Beginning Verify and Repair transaction
2018-07-22 23:11:56, Info                  CSI    00003f5f [SR] Verify complete
2018-07-22 23:11:57, Info                  CSI    00003f60 [SR] Verifying 100 components
2018-07-22 23:11:57, Info                  CSI    00003f61 [SR] Beginning Verify and Repair transaction
2018-07-22 23:12:14, Info                  CSI    00003fca [SR] Verify complete
2018-07-22 23:12:14, Info                  CSI    00003fcb [SR] Verifying 100 components
2018-07-22 23:12:14, Info                  CSI    00003fcc [SR] Beginning Verify and Repair transaction
2018-07-22 23:12:33, Info                  CSI    00004043 [SR] Verify complete
2018-07-22 23:12:34, Info                  CSI    00004044 [SR] Verifying 100 components
2018-07-22 23:12:34, Info                  CSI    00004045 [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:17, Info                  CSI    000040b4 [SR] Verify complete
2018-07-22 23:13:18, Info                  CSI    000040b5 [SR] Verifying 100 components
2018-07-22 23:13:18, Info                  CSI    000040b6 [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:41, Info                  CSI    0000411d [SR] Verify complete
2018-07-22 23:13:42, Info                  CSI    0000411e [SR] Verifying 100 components
2018-07-22 23:13:42, Info                  CSI    0000411f [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:58, Info                  CSI    00004186 [SR] Verify complete
2018-07-22 23:13:59, Info                  CSI    00004187 [SR] Verifying 100 components
2018-07-22 23:13:59, Info                  CSI    00004188 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:17, Info                  CSI    000041ef [SR] Verify complete
2018-07-22 23:14:18, Info                  CSI    000041f0 [SR] Verifying 100 components
2018-07-22 23:14:18, Info                  CSI    000041f1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:37, Info                  CSI    00004257 [SR] Verify complete
2018-07-22 23:14:37, Info                  CSI    00004258 [SR] Verifying 100 components
2018-07-22 23:14:38, Info                  CSI    00004259 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:52, Info                  CSI    0000425c [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch Host= amd64 Guest= x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:15:00, Info                  CSI    000042c1 [SR] Verify complete
2018-07-22 23:15:08, Info                  CSI    000042c7 [SR] Verifying 100 components
2018-07-22 23:15:08, Info                  CSI    000042c8 [SR] Beginning Verify and Repair transaction
2018-07-22 23:15:33, Info                  CSI    00004341 [SR] Verify complete
2018-07-22 23:15:34, Info                  CSI    00004342 [SR] Verifying 100 components
2018-07-22 23:15:34, Info                  CSI    00004343 [SR] Beginning Verify and Repair transaction
2018-07-22 23:15:58, Info                  CSI    000043b9 [SR] Verify complete
2018-07-22 23:15:58, Info                  CSI    000043ba [SR] Verifying 100 components
2018-07-22 23:15:58, Info                  CSI    000043bb [SR] Beginning Verify and Repair transaction
2018-07-22 23:16:31, Info                  CSI    00004424 [SR] Verify complete
2018-07-22 23:16:32, Info                  CSI    00004425 [SR] Verifying 100 components
2018-07-22 23:16:32, Info                  CSI    00004426 [SR] Beginning Verify and Repair transaction
2018-07-22 23:16:53, Info                  CSI    00004491 [SR] Verify complete
2018-07-22 23:16:53, Info                  CSI    00004492 [SR] Verifying 100 components
2018-07-22 23:16:53, Info                  CSI    00004493 [SR] Beginning Verify and Repair transaction
2018-07-22 23:17:21, Info                  CSI    00004546 [SR] Verify complete
2018-07-22 23:17:21, Info                  CSI    00004547 [SR] Verifying 100 components
2018-07-22 23:17:21, Info                  CSI    00004548 [SR] Beginning Verify and Repair transaction
2018-07-22 23:17:51, Info                  CSI    00004602 [SR] Verify complete
2018-07-22 23:17:51, Info                  CSI    00004603 [SR] Verifying 100 components
2018-07-22 23:17:51, Info                  CSI    00004604 [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:11, Info                  CSI    0000467a [SR] Verify complete
2018-07-22 23:18:11, Info                  CSI    0000467b [SR] Verifying 100 components
2018-07-22 23:18:11, Info                  CSI    0000467c [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:34, Info                  CSI    000046f8 [SR] Verify complete
2018-07-22 23:18:35, Info                  CSI    000046f9 [SR] Verifying 100 components
2018-07-22 23:18:35, Info                  CSI    000046fa [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:53, Info                  CSI    00004762 [SR] Verify complete
2018-07-22 23:18:54, Info                  CSI    00004763 [SR] Verifying 100 components
2018-07-22 23:18:54, Info                  CSI    00004764 [SR] Beginning Verify and Repair transaction
2018-07-22 23:19:20, Info                  CSI    000047cf [SR] Verify complete
2018-07-22 23:19:21, Info                  CSI    000047d0 [SR] Verifying 100 components
2018-07-22 23:19:21, Info                  CSI    000047d1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:19:53, Info                  CSI    00004856 [SR] Verify complete
2018-07-22 23:19:53, Info                  CSI    00004857 [SR] Verifying 100 components
2018-07-22 23:19:53, Info                  CSI    00004858 [SR] Beginning Verify and Repair transaction
2018-07-22 23:20:18, Info                  CSI    00004954 [SR] Verify complete
2018-07-22 23:20:19, Info                  CSI    00004955 [SR] Verifying 100 components
2018-07-22 23:20:19, Info                  CSI    00004956 [SR] Beginning Verify and Repair transaction
2018-07-22 23:20:47, Info                  CSI    000049fd [SR] Verify complete
2018-07-22 23:20:48, Info                  CSI    000049fe [SR] Verifying 100 components
2018-07-22 23:20:48, Info                  CSI    000049ff [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:20, Info                  CSI    00004ad8 [SR] Verify complete
2018-07-22 23:21:20, Info                  CSI    00004ad9 [SR] Verifying 100 components
2018-07-22 23:21:20, Info                  CSI    00004ada [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:35, Info                  CSI    00004b3f [SR] Verify complete
2018-07-22 23:21:35, Info                  CSI    00004b40 [SR] Verifying 100 components
2018-07-22 23:21:35, Info                  CSI    00004b41 [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:55, Info                  CSI    00004bb3 [SR] Verify complete
2018-07-22 23:21:55, Info                  CSI    00004bb4 [SR] Verifying 100 components
2018-07-22 23:21:55, Info                  CSI    00004bb5 [SR] Beginning Verify and Repair transaction
2018-07-22 23:22:48, Info                  CSI    00004c32 [SR] Verify complete
2018-07-22 23:22:48, Info                  CSI    00004c33 [SR] Verifying 100 components
2018-07-22 23:22:48, Info                  CSI    00004c34 [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:06, Info                  CSI    00004ca0 [SR] Verify complete
2018-07-22 23:23:07, Info                  CSI    00004ca1 [SR] Verifying 100 components
2018-07-22 23:23:07, Info                  CSI    00004ca2 [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:27, Info                  CSI    00004d0b [SR] Verify complete
2018-07-22 23:23:27, Info                  CSI    00004d0c [SR] Verifying 100 components
2018-07-22 23:23:27, Info                  CSI    00004d0d [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:55, Info                  CSI    00004d73 [SR] Verify complete
2018-07-22 23:23:56, Info                  CSI    00004d74 [SR] Verifying 100 components
2018-07-22 23:23:56, Info                  CSI    00004d75 [SR] Beginning Verify and Repair transaction
2018-07-22 23:24:21, Info                  CSI    00004ddb [SR] Verify complete
2018-07-22 23:24:21, Info                  CSI    00004ddc [SR] Verifying 100 components
2018-07-22 23:24:21, Info                  CSI    00004ddd [SR] Beginning Verify and Repair transaction
2018-07-22 23:25:10, Info                  CSI    00004e9b [SR] Verify complete
2018-07-22 23:25:10, Info                  CSI    00004e9c [SR] Verifying 100 components
2018-07-22 23:25:10, Info                  CSI    00004e9d [SR] Beginning Verify and Repair transaction
2018-07-22 23:25:43, Info                  CSI    00004f47 [SR] Verify complete
2018-07-22 23:25:44, Info                  CSI    00004f48 [SR] Verifying 100 components
2018-07-22 23:25:44, Info                  CSI    00004f49 [SR] Beginning Verify and Repair transaction
2018-07-22 23:26:16, Info                  CSI    00004fb7 [SR] Verify complete
2018-07-22 23:26:17, Info                  CSI    00004fb8 [SR] Verifying 100 components
2018-07-22 23:26:17, Info                  CSI    00004fb9 [SR] Beginning Verify and Repair transaction
2018-07-22 23:26:45, Info                  CSI    00005032 [SR] Verify complete
2018-07-22 23:26:46, Info                  CSI    00005033 [SR] Verifying 100 components
2018-07-22 23:26:46, Info                  CSI    00005034 [SR] Beginning Verify and Repair transaction
2018-07-22 23:27:23, Info                  CSI    000050a2 [SR] Verify complete
2018-07-22 23:27:23, Info                  CSI    000050a3 [SR] Verifying 100 components
2018-07-22 23:27:23, Info                  CSI    000050a4 [SR] Beginning Verify and Repair transaction
2018-07-22 23:27:43, Info                  CSI    00005111 [SR] Verify complete
2018-07-22 23:27:43, Info                  CSI    00005112 [SR] Verifying 100 components
2018-07-22 23:27:43, Info                  CSI    00005113 [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:09, Info                  CSI    0000521d [SR] Verify complete
2018-07-22 23:28:09, Info                  CSI    0000521e [SR] Verifying 100 components
2018-07-22 23:28:09, Info                  CSI    0000521f [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:35, Info                  CSI    00005294 [SR] Verify complete
2018-07-22 23:28:35, Info                  CSI    00005295 [SR] Verifying 100 components
2018-07-22 23:28:35, Info                  CSI    00005296 [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:59, Info                  CSI    0000530d [SR] Verify complete
2018-07-22 23:29:00, Info                  CSI    0000530e [SR] Verifying 100 components
2018-07-22 23:29:00, Info                  CSI    0000530f [SR] Beginning Verify and Repair transaction
2018-07-22 23:29:27, Info                  CSI    0000538b [SR] Verify complete
2018-07-22 23:29:27, Info                  CSI    0000538c [SR] Verifying 100 components
2018-07-22 23:29:27, Info                  CSI    0000538d [SR] Beginning Verify and Repair transaction
2018-07-22 23:29:51, Info                  CSI    000053fa [SR] Verify complete
2018-07-22 23:29:53, Info                  CSI    000053fb [SR] Verifying 100 components
2018-07-22 23:29:53, Info                  CSI    000053fc [SR] Beginning Verify and Repair transaction
2018-07-22 23:30:20, Info                  CSI    0000547f [SR] Verify complete
2018-07-22 23:30:20, Info                  CSI    00005480 [SR] Verifying 100 components
2018-07-22 23:30:20, Info                  CSI    00005481 [SR] Beginning Verify and Repair transaction
2018-07-22 23:30:45, Info                  CSI    000054f0 [SR] Verify complete
2018-07-22 23:30:46, Info                  CSI    000054f1 [SR] Verifying 100 components
2018-07-22 23:30:46, Info                  CSI    000054f2 [SR] Beginning Verify and Repair transaction
2018-07-22 23:31:07, Info                  CSI    00005571 [SR] Verify complete
2018-07-22 23:31:07, Info                  CSI    00005572 [SR] Verifying 100 components
2018-07-22 23:31:07, Info                  CSI    00005573 [SR] Beginning Verify and Repair transaction
2018-07-22 23:31:29, Info                  CSI    000055dd [SR] Verify complete
2018-07-22 23:31:29, Info                  CSI    000055de [SR] Verifying 100 components
2018-07-22 23:31:29, Info                  CSI    000055df [SR] Beginning Verify and Repair transaction
2018-07-22 23:32:04, Info                  CSI    00005660 [SR] Verify complete
2018-07-22 23:32:05, Info                  CSI    00005661 [SR] Verifying 100 components
2018-07-22 23:32:05, Info                  CSI    00005662 [SR] Beginning Verify and Repair transaction
2018-07-22 23:32:40, Info                  CSI    000056d5 [SR] Verify complete
2018-07-22 23:32:41, Info                  CSI    000056d6 [SR] Verifying 100 components
2018-07-22 23:32:41, Info                  CSI    000056d7 [SR] Beginning Verify and Repair transaction
2018-07-22 23:33:03, Info                  CSI    0000573f [SR] Verify complete
2018-07-22 23:33:03, Info                  CSI    00005740 [SR] Verifying 100 components
2018-07-22 23:33:03, Info                  CSI    00005741 [SR] Beginning Verify and Repair transaction
2018-07-22 23:33:22, Info                  CSI    000057ae [SR] Verify complete
2018-07-22 23:33:22, Info                  CSI    000057af [SR] Verifying 100 components
2018-07-22 23:33:22, Info                  CSI    000057b0 [SR] Beginning Verify and Repair transaction
2018-07-22 23:34:07, Info                  CSI    00005853 [SR] Verify complete
2018-07-22 23:34:07, Info                  CSI    00005854 [SR] Verifying 100 components
2018-07-22 23:34:07, Info                  CSI    00005855 [SR] Beginning Verify and Repair transaction
2018-07-22 23:34:38, Info                  CSI    00005903 [SR] Verify complete
2018-07-22 23:34:39, Info                  CSI    00005904 [SR] Verifying 100 components
2018-07-22 23:34:39, Info                  CSI    00005905 [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:03, Info                  CSI    0000596e [SR] Verify complete
2018-07-22 23:35:03, Info                  CSI    0000596f [SR] Verifying 100 components
2018-07-22 23:35:03, Info                  CSI    00005970 [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:31, Info                  CSI    00005a39 [SR] Verify complete
2018-07-22 23:35:31, Info                  CSI    00005a3a [SR] Verifying 100 components
2018-07-22 23:35:31, Info                  CSI    00005a3b [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:57, Info                  CSI    00005aab [SR] Verify complete
2018-07-22 23:35:58, Info                  CSI    00005aac [SR] Verifying 100 components
2018-07-22 23:35:58, Info                  CSI    00005aad [SR] Beginning Verify and Repair transaction
2018-07-22 23:36:25, Info                  CSI    00005b25 [SR] Verify complete
2018-07-22 23:36:25, Info                  CSI    00005b26 [SR] Verifying 100 components
2018-07-22 23:36:25, Info                  CSI    00005b27 [SR] Beginning Verify and Repair transaction
2018-07-22 23:36:57, Info                  CSI    00005bad [SR] Verify complete
2018-07-22 23:36:57, Info                  CSI    00005bae [SR] Verifying 100 components
2018-07-22 23:36:57, Info                  CSI    00005baf [SR] Beginning Verify and Repair transaction
2018-07-22 23:37:30, Info                  CSI    00005c29 [SR] Verify complete
2018-07-22 23:37:32, Info                  CSI    00005c2a [SR] Verifying 100 components
2018-07-22 23:37:32, Info                  CSI    00005c2b [SR] Beginning Verify and Repair transaction
2018-07-22 23:37:59, Info                  CSI    00005c91 [SR] Verify complete
2018-07-22 23:37:59, Info                  CSI    00005c92 [SR] Verifying 100 components
2018-07-22 23:37:59, Info                  CSI    00005c93 [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:15, Info                  CSI    00005cfb [SR] Verify complete
2018-07-22 23:38:16, Info                  CSI    00005cfc [SR] Verifying 100 components
2018-07-22 23:38:16, Info                  CSI    00005cfd [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:32, Info                  CSI    00005d62 [SR] Verify complete
2018-07-22 23:38:32, Info                  CSI    00005d63 [SR] Verifying 100 components
2018-07-22 23:38:32, Info                  CSI    00005d64 [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:48, Info                  CSI    00005dca [SR] Verify complete
2018-07-22 23:38:48, Info                  CSI    00005dcb [SR] Verifying 100 components
2018-07-22 23:38:48, Info                  CSI    00005dcc [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:01, Info                  CSI    00005e32 [SR] Verify complete
2018-07-22 23:39:02, Info                  CSI    00005e33 [SR] Verifying 100 components
2018-07-22 23:39:02, Info                  CSI    00005e34 [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:17, Info                  CSI    00005e9b [SR] Verify complete
2018-07-22 23:39:18, Info                  CSI    00005e9c [SR] Verifying 80 components
2018-07-22 23:39:18, Info                  CSI    00005e9d [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:30, Info                  CSI    00005ef1 [SR] Verify complete
2018-07-22 23:39:30, Info                  CSI    00005ef2 [SR] Repairing 4 components
2018-07-22 23:39:30, Info                  CSI    00005ef3 [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:31, Info                  CSI    00005ef6 [SR] Cannot verify component files for 3475b27c3010e81c80d3f71f288b133b, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005ef9 [SR] Cannot verify component files for 4c7ef8d9e6645daf85073446b81f88eb, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005efc [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005eff [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch Host= amd64 Guest= x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005f00 [SR] Repair complete
2018-07-22 23:39:35, Info                  CSI    00005f15 [SR] Committing transaction
2018-07-22 23:39:35, Info                  CSI    00005f1a [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired
2018-07-22 11:31:06, Info                  CSI    00000006 [SR] Verifying 1 components
2018-07-22 11:31:06, Info                  CSI    00000007 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:07, Info                  CSI    0000000b [SR] Verify complete
2018-07-22 11:31:07, Info                  CSI    0000000c [SR] Verifying 1 components
2018-07-22 11:31:07, Info                  CSI    0000000d [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:07, Info                  CSI    00000010 [SR] Verify complete
2018-07-22 11:31:07, Info                  CSI    00000011 [SR] Verifying 1 components
2018-07-22 11:31:07, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:08, Info                  CSI    00000015 [SR] Verify complete
2018-07-22 11:31:08, Info                  CSI    00000016 [SR] Verifying 1 components
2018-07-22 11:31:08, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2018-07-22 11:31:09, Info                  CSI    0000001d [SR] Verify complete
2018-07-22 21:32:38, Info                  CSI    00000006 [SR] Verifying 100 components
2018-07-22 21:32:38, Info                  CSI    00000007 [SR] Beginning Verify and Repair transaction
2018-07-22 21:33:29, Info                  CSI    0000006e [SR] Verify complete
2018-07-22 21:33:29, Info                  CSI    0000006f [SR] Verifying 100 components
2018-07-22 21:33:29, Info                  CSI    00000070 [SR] Beginning Verify and Repair transaction
2018-07-22 21:33:53, Info                  CSI    000000d8 [SR] Verify complete
2018-07-22 21:33:53, Info                  CSI    000000d9 [SR] Verifying 100 components
2018-07-22 21:33:53, Info                  CSI    000000da [SR] Beginning Verify and Repair transaction
2018-07-22 21:34:21, Info                  CSI    00000144 [SR] Verify complete
2018-07-22 21:34:21, Info                  CSI    00000145 [SR] Verifying 100 components
2018-07-22 21:34:21, Info                  CSI    00000146 [SR] Beginning Verify and Repair transaction
2018-07-22 21:34:24, Info                  CSI    00000149 [SR] Cannot verify component files for 3475b27c3010e81c80d3f71f288b133b, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:34:48, Info                  CSI    000001b1 [SR] Verify complete
2018-07-22 21:34:55, Info                  CSI    000001b7 [SR] Verifying 100 components
2018-07-22 21:34:55, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:00, Info                  CSI    000001bb [SR] Cannot verify component files for 4c7ef8d9e6645daf85073446b81f88eb, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:35:17, Info                  CSI    0000021f [SR] Verify complete
2018-07-22 21:35:18, Info                  CSI    00000225 [SR] Verifying 100 components
2018-07-22 21:35:18, Info                  CSI    00000226 [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:38, Info                  CSI    0000028b [SR] Verify complete
2018-07-22 21:35:38, Info                  CSI    0000028c [SR] Verifying 100 components
2018-07-22 21:35:38, Info                  CSI    0000028d [SR] Beginning Verify and Repair transaction
2018-07-22 21:35:56, Info                  CSI    000002f6 [SR] Verify complete
2018-07-22 21:35:56, Info                  CSI    000002f7 [SR] Verifying 100 components
2018-07-22 21:35:56, Info                  CSI    000002f8 [SR] Beginning Verify and Repair transaction
2018-07-22 21:36:25, Info                  CSI    00000361 [SR] Verify complete
2018-07-22 21:36:25, Info                  CSI    00000362 [SR] Verifying 100 components
2018-07-22 21:36:25, Info                  CSI    00000363 [SR] Beginning Verify and Repair transaction
2018-07-22 21:36:57, Info                  CSI    000003ca [SR] Verify complete
2018-07-22 21:36:57, Info                  CSI    000003cb [SR] Verifying 100 components
2018-07-22 21:36:57, Info                  CSI    000003cc [SR] Beginning Verify and Repair transaction
2018-07-22 21:37:23, Info                  CSI    00000435 [SR] Verify complete
2018-07-22 21:37:24, Info                  CSI    00000436 [SR] Verifying 100 components
2018-07-22 21:37:24, Info                  CSI    00000437 [SR] Beginning Verify and Repair transaction
2018-07-22 21:37:26, Info                  CSI    0000043a [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 21:37:59, Info                  CSI    000004ab [SR] Verify complete
2018-07-22 21:38:02, Info                  CSI    000004b1 [SR] Verifying 100 components
2018-07-22 21:38:02, Info                  CSI    000004b2 [SR] Beginning Verify and Repair transaction
2018-07-22 21:38:52, Info                  CSI    00000533 [SR] Verify complete
2018-07-22 21:38:52, Info                  CSI    00000534 [SR] Verifying 100 components
2018-07-22 21:38:52, Info                  CSI    00000535 [SR] Beginning Verify and Repair transaction
2018-07-22 21:39:29, Info                  CSI    000005a7 [SR] Verify complete
2018-07-22 21:39:30, Info                  CSI    000005a8 [SR] Verifying 100 components
2018-07-22 21:39:30, Info                  CSI    000005a9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:39:50, Info                  CSI    00000612 [SR] Verify complete
2018-07-22 21:39:50, Info                  CSI    00000613 [SR] Verifying 100 components
2018-07-22 21:39:50, Info                  CSI    00000614 [SR] Beginning Verify and Repair transaction
2018-07-22 21:40:09, Info                  CSI    0000067d [SR] Verify complete
2018-07-22 21:40:10, Info                  CSI    0000067e [SR] Verifying 100 components
2018-07-22 21:40:10, Info                  CSI    0000067f [SR] Beginning Verify and Repair transaction
2018-07-22 21:40:33, Info                  CSI    000006e5 [SR] Verify complete
2018-07-22 21:40:33, Info                  CSI    000006e6 [SR] Verifying 100 components
2018-07-22 21:40:33, Info                  CSI    000006e7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:41:15, Info                  CSI    0000074e [SR] Verify complete
2018-07-22 21:41:15, Info                  CSI    0000074f [SR] Verifying 100 components
2018-07-22 21:41:15, Info                  CSI    00000750 [SR] Beginning Verify and Repair transaction
2018-07-22 21:41:59, Info                  CSI    000007b5 [SR] Verify complete
2018-07-22 21:41:59, Info                  CSI    000007b6 [SR] Verifying 100 components
2018-07-22 21:41:59, Info                  CSI    000007b7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:43:12, Info                  CSI    00000822 [SR] Verify complete
2018-07-22 21:43:13, Info                  CSI    00000823 [SR] Verifying 100 components
2018-07-22 21:43:13, Info                  CSI    00000824 [SR] Beginning Verify and Repair transaction
2018-07-22 21:45:11, Info                  CSI    0000088d [SR] Verify complete
2018-07-22 21:45:11, Info                  CSI    0000088e [SR] Verifying 100 components
2018-07-22 21:45:11, Info                  CSI    0000088f [SR] Beginning Verify and Repair transaction
2018-07-22 21:48:49, Info                  CSI    000008f5 [SR] Verify complete
2018-07-22 21:48:49, Info                  CSI    000008f6 [SR] Verifying 100 components
2018-07-22 21:48:49, Info                  CSI    000008f7 [SR] Beginning Verify and Repair transaction
2018-07-22 21:50:45, Info                  CSI    0000096a [SR] Verify complete
2018-07-22 21:50:45, Info                  CSI    0000096b [SR] Verifying 100 components
2018-07-22 21:50:45, Info                  CSI    0000096c [SR] Beginning Verify and Repair transaction
2018-07-22 21:51:17, Info                  CSI    000009d3 [SR] Verify complete
2018-07-22 21:51:17, Info                  CSI    000009d4 [SR] Verifying 100 components
2018-07-22 21:51:17, Info                  CSI    000009d5 [SR] Beginning Verify and Repair transaction
2018-07-22 21:51:42, Info                  CSI    00000a3b [SR] Verify complete
2018-07-22 21:51:43, Info                  CSI    00000a3c [SR] Verifying 100 components
2018-07-22 21:51:43, Info                  CSI    00000a3d [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:03, Info                  CSI    00000aa7 [SR] Verify complete
2018-07-22 21:52:03, Info                  CSI    00000aa8 [SR] Verifying 100 components
2018-07-22 21:52:03, Info                  CSI    00000aa9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:21, Info                  CSI    00000b0e [SR] Verify complete
2018-07-22 21:52:21, Info                  CSI    00000b0f [SR] Verifying 100 components
2018-07-22 21:52:21, Info                  CSI    00000b10 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:28, Info                  CSI    00000b75 [SR] Verify complete
2018-07-22 21:52:29, Info                  CSI    00000b76 [SR] Verifying 100 components
2018-07-22 21:52:29, Info                  CSI    00000b77 [SR] Beginning Verify and Repair transaction
2018-07-22 21:52:46, Info                  CSI    00000be4 [SR] Verify complete
2018-07-22 21:52:47, Info                  CSI    00000be5 [SR] Verifying 100 components
2018-07-22 21:52:47, Info                  CSI    00000be6 [SR] Beginning Verify and Repair transaction
2018-07-22 21:53:14, Info                  CSI    00000c61 [SR] Verify complete
2018-07-22 21:53:14, Info                  CSI    00000c62 [SR] Verifying 100 components
2018-07-22 21:53:14, Info                  CSI    00000c63 [SR] Beginning Verify and Repair transaction
2018-07-22 21:53:39, Info                  CSI    00000cce [SR] Verify complete
2018-07-22 21:53:39, Info                  CSI    00000ccf [SR] Verifying 100 components
2018-07-22 21:53:39, Info                  CSI    00000cd0 [SR] Beginning Verify and Repair transaction
2018-07-22 21:54:17, Info                  CSI    00000d54 [SR] Verify complete
2018-07-22 21:54:17, Info                  CSI    00000d55 [SR] Verifying 100 components
2018-07-22 21:54:17, Info                  CSI    00000d56 [SR] Beginning Verify and Repair transaction
2018-07-22 21:54:53, Info                  CSI    00000ddd [SR] Verify complete
2018-07-22 21:54:53, Info                  CSI    00000dde [SR] Verifying 100 components
2018-07-22 21:54:53, Info                  CSI    00000ddf [SR] Beginning Verify and Repair transaction
2018-07-22 21:55:32, Info                  CSI    00000e52 [SR] Verify complete
2018-07-22 21:55:32, Info                  CSI    00000e53 [SR] Verifying 100 components
2018-07-22 21:55:32, Info                  CSI    00000e54 [SR] Beginning Verify and Repair transaction
2018-07-22 21:57:15, Info                  CSI    00000ed7 [SR] Verify complete
2018-07-22 21:57:18, Info                  CSI    00000ed8 [SR] Verifying 100 components
2018-07-22 21:57:18, Info                  CSI    00000ed9 [SR] Beginning Verify and Repair transaction
2018-07-22 21:58:18, Info                  CSI    00000f4d [SR] Verify complete
2018-07-22 21:58:18, Info                  CSI    00000f4e [SR] Verifying 100 components
2018-07-22 21:58:18, Info                  CSI    00000f4f [SR] Beginning Verify and Repair transaction
2018-07-22 21:58:53, Info                  CSI    00000fcc [SR] Verify complete
2018-07-22 21:58:53, Info                  CSI    00000fcd [SR] Verifying 100 components
2018-07-22 21:58:53, Info                  CSI    00000fce [SR] Beginning Verify and Repair transaction
2018-07-22 21:59:32, Info                  CSI    00001047 [SR] Verify complete
2018-07-22 21:59:32, Info                  CSI    00001048 [SR] Verifying 100 components
2018-07-22 21:59:32, Info                  CSI    00001049 [SR] Beginning Verify and Repair transaction
2018-07-22 22:01:23, Info                  CSI    0000110e [SR] Verify complete
2018-07-22 22:01:23, Info                  CSI    0000110f [SR] Verifying 100 components
2018-07-22 22:01:23, Info                  CSI    00001110 [SR] Beginning Verify and Repair transaction
2018-07-22 22:02:23, Info                  CSI    000011fc [SR] Verify complete
2018-07-22 22:02:24, Info                  CSI    000011fd [SR] Verifying 100 components
2018-07-22 22:02:24, Info                  CSI    000011fe [SR] Beginning Verify and Repair transaction
2018-07-22 22:03:19, Info                  CSI    000012ac [SR] Verify complete
2018-07-22 22:03:19, Info                  CSI    000012ad [SR] Verifying 100 components
2018-07-22 22:03:19, Info                  CSI    000012ae [SR] Beginning Verify and Repair transaction
2018-07-22 22:04:02, Info                  CSI    0000137e [SR] Verify complete
2018-07-22 22:04:02, Info                  CSI    0000137f [SR] Verifying 100 components
2018-07-22 22:04:02, Info                  CSI    00001380 [SR] Beginning Verify and Repair transaction
2018-07-22 22:04:36, Info                  CSI    000013f5 [SR] Verify complete
2018-07-22 22:04:37, Info                  CSI    000013f6 [SR] Verifying 100 components
2018-07-22 22:04:37, Info                  CSI    000013f7 [SR] Beginning Verify and Repair transaction
2018-07-22 22:05:10, Info                  CSI    00001467 [SR] Verify complete
2018-07-22 22:05:11, Info                  CSI    00001468 [SR] Verifying 100 components
2018-07-22 22:05:11, Info                  CSI    00001469 [SR] Beginning Verify and Repair transaction
2018-07-22 22:05:51, Info                  CSI    000014e8 [SR] Verify complete
2018-07-22 22:05:52, Info                  CSI    000014e9 [SR] Verifying 100 components
2018-07-22 22:05:52, Info                  CSI    000014ea [SR] Beginning Verify and Repair transaction
2018-07-22 22:06:34, Info                  CSI    00001567 [SR] Verify complete
2018-07-22 22:06:35, Info                  CSI    00001568 [SR] Verifying 100 components
2018-07-22 22:06:35, Info                  CSI    00001569 [SR] Beginning Verify and Repair transaction
2018-07-22 22:07:07, Info                  CSI    000015db [SR] Verify complete
2018-07-22 22:07:08, Info                  CSI    000015dc [SR] Verifying 100 components
2018-07-22 22:07:08, Info                  CSI    000015dd [SR] Beginning Verify and Repair transaction
2018-07-22 22:08:24, Info                  CSI    00001653 [SR] Verify complete
2018-07-22 22:08:26, Info                  CSI    00001654 [SR] Verifying 100 components
2018-07-22 22:08:26, Info                  CSI    00001655 [SR] Beginning Verify and Repair transaction
2018-07-22 22:09:04, Info                  CSI    000016c0 [SR] Verify complete
2018-07-22 22:09:04, Info                  CSI    000016c1 [SR] Verifying 100 components
2018-07-22 22:09:04, Info                  CSI    000016c2 [SR] Beginning Verify and Repair transaction
2018-07-22 22:09:43, Info                  CSI    00001733 [SR] Verify complete
2018-07-22 22:09:43, Info                  CSI    00001734 [SR] Verifying 100 components
2018-07-22 22:09:43, Info                  CSI    00001735 [SR] Beginning Verify and Repair transaction
2018-07-22 22:10:20, Info                  CSI    000017ac [SR] Verify complete
2018-07-22 22:10:20, Info                  CSI    000017ad [SR] Verifying 100 components
2018-07-22 22:10:20, Info                  CSI    000017ae [SR] Beginning Verify and Repair transaction
2018-07-22 22:11:14, Info                  CSI    00001862 [SR] Verify complete
2018-07-22 22:11:14, Info                  CSI    00001863 [SR] Verifying 100 components
2018-07-22 22:11:14, Info                  CSI    00001864 [SR] Beginning Verify and Repair transaction
2018-07-22 22:12:17, Info                  CSI    0000192e [SR] Verify complete
2018-07-22 22:12:17, Info                  CSI    0000192f [SR] Verifying 100 components
2018-07-22 22:12:17, Info                  CSI    00001930 [SR] Beginning Verify and Repair transaction
2018-07-22 22:13:17, Info                  CSI    000019f1 [SR] Verify complete
2018-07-22 22:13:18, Info                  CSI    000019f2 [SR] Verifying 100 components
2018-07-22 22:13:18, Info                  CSI    000019f3 [SR] Beginning Verify and Repair transaction
2018-07-22 22:14:25, Info                  CSI    00001a75 [SR] Verify complete
2018-07-22 22:14:26, Info                  CSI    00001a76 [SR] Verifying 100 components
2018-07-22 22:14:26, Info                  CSI    00001a77 [SR] Beginning Verify and Repair transaction
2018-07-22 22:15:42, Info                  CSI    00001b04 [SR] Verify complete
2018-07-22 22:15:43, Info                  CSI    00001b05 [SR] Verifying 100 components
2018-07-22 22:15:43, Info                  CSI    00001b06 [SR] Beginning Verify and Repair transaction
2018-07-22 22:16:34, Info                  CSI    00001bd1 [SR] Verify complete
2018-07-22 22:16:34, Info                  CSI    00001bd2 [SR] Verifying 100 components
2018-07-22 22:16:34, Info                  CSI    00001bd3 [SR] Beginning Verify and Repair transaction
2018-07-22 22:16:58, Info                  CSI    00001c47 [SR] Verify complete
2018-07-22 22:16:59, Info                  CSI    00001c48 [SR] Verifying 100 components
2018-07-22 22:16:59, Info                  CSI    00001c49 [SR] Beginning Verify and Repair transaction
2018-07-22 22:17:44, Info                  CSI    00001cd7 [SR] Verify complete
2018-07-22 22:17:45, Info                  CSI    00001cd8 [SR] Verifying 100 components
2018-07-22 22:17:45, Info                  CSI    00001cd9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:18:43, Info                  CSI    00001d4d [SR] Verify complete
2018-07-22 22:18:44, Info                  CSI    00001d4e [SR] Verifying 100 components
2018-07-22 22:18:44, Info                  CSI    00001d4f [SR] Beginning Verify and Repair transaction
2018-07-22 22:19:44, Info                  CSI    00001dd6 [SR] Verify complete
2018-07-22 22:19:45, Info                  CSI    00001dd7 [SR] Verifying 100 components
2018-07-22 22:19:45, Info                  CSI    00001dd8 [SR] Beginning Verify and Repair transaction
2018-07-22 22:21:02, Info                  CSI    00001e6c [SR] Verify complete
2018-07-22 22:21:02, Info                  CSI    00001e6d [SR] Verifying 100 components
2018-07-22 22:21:02, Info                  CSI    00001e6e [SR] Beginning Verify and Repair transaction
2018-07-22 22:21:56, Info                  CSI    00001ee3 [SR] Verify complete
2018-07-22 22:21:56, Info                  CSI    00001ee4 [SR] Verifying 100 components
2018-07-22 22:21:56, Info                  CSI    00001ee5 [SR] Beginning Verify and Repair transaction
2018-07-22 22:22:30, Info                  CSI    00001f5d [SR] Verify complete
2018-07-22 22:22:31, Info                  CSI    00001f5e [SR] Verifying 100 components
2018-07-22 22:22:31, Info                  CSI    00001f5f [SR] Beginning Verify and Repair transaction
2018-07-22 22:23:38, Info                  CSI    00001fe3 [SR] Verify complete
2018-07-22 22:23:39, Info                  CSI    00001fe4 [SR] Verifying 100 components
2018-07-22 22:23:39, Info                  CSI    00001fe5 [SR] Beginning Verify and Repair transaction
2018-07-22 22:25:12, Info                  CSI    00002089 [SR] Verify complete
2018-07-22 22:25:13, Info                  CSI    0000208a [SR] Verifying 100 components
2018-07-22 22:25:13, Info                  CSI    0000208b [SR] Beginning Verify and Repair transaction
2018-07-22 22:28:19, Info                  CSI    00002125 [SR] Verify complete
2018-07-22 22:28:21, Info                  CSI    00002126 [SR] Verifying 100 components
2018-07-22 22:28:21, Info                  CSI    00002127 [SR] Beginning Verify and Repair transaction
2018-07-22 22:30:02, Info                  CSI    000021a6 [SR] Verify complete
2018-07-22 22:30:04, Info                  CSI    000021a7 [SR] Verifying 100 components
2018-07-22 22:30:04, Info                  CSI    000021a8 [SR] Beginning Verify and Repair transaction
2018-07-22 22:31:49, Info                  CSI    00002245 [SR] Verify complete
2018-07-22 22:31:51, Info                  CSI    00002246 [SR] Verifying 100 components
2018-07-22 22:31:51, Info                  CSI    00002247 [SR] Beginning Verify and Repair transaction
2018-07-22 22:34:42, Info                  CSI    0000236a [SR] Verify complete
2018-07-22 22:34:43, Info                  CSI    0000236b [SR] Verifying 100 components
2018-07-22 22:34:43, Info                  CSI    0000236c [SR] Beginning Verify and Repair transaction
2018-07-22 22:35:29, Info                  CSI    000023e5 [SR] Verify complete
2018-07-22 22:35:30, Info                  CSI    000023e6 [SR] Verifying 100 components
2018-07-22 22:35:30, Info                  CSI    000023e7 [SR] Beginning Verify and Repair transaction
2018-07-22 22:36:34, Info                  CSI    00002476 [SR] Verify complete
2018-07-22 22:36:35, Info                  CSI    00002477 [SR] Verifying 100 components
2018-07-22 22:36:35, Info                  CSI    00002478 [SR] Beginning Verify and Repair transaction
2018-07-22 22:37:26, Info                  CSI    000024ec [SR] Verify complete
2018-07-22 22:37:27, Info                  CSI    000024ed [SR] Verifying 100 components
2018-07-22 22:37:27, Info                  CSI    000024ee [SR] Beginning Verify and Repair transaction
2018-07-22 22:38:01, Info                  CSI    0000257a [SR] Verify complete
2018-07-22 22:38:02, Info                  CSI    0000257b [SR] Verifying 100 components
2018-07-22 22:38:02, Info                  CSI    0000257c [SR] Beginning Verify and Repair transaction
2018-07-22 22:38:55, Info                  CSI    000025f2 [SR] Verify complete
2018-07-22 22:38:56, Info                  CSI    000025f3 [SR] Verifying 100 components
2018-07-22 22:38:56, Info                  CSI    000025f4 [SR] Beginning Verify and Repair transaction
2018-07-22 22:39:59, Info                  CSI    00002684 [SR] Verify complete
2018-07-22 22:40:00, Info                  CSI    00002685 [SR] Verifying 100 components
2018-07-22 22:40:00, Info                  CSI    00002686 [SR] Beginning Verify and Repair transaction
2018-07-22 22:40:44, Info                  CSI    0000270d [SR] Verify complete
2018-07-22 22:40:44, Info                  CSI    0000270e [SR] Verifying 100 components
2018-07-22 22:40:44, Info                  CSI    0000270f [SR] Beginning Verify and Repair transaction
2018-07-22 22:41:34, Info                  CSI    00002798 [SR] Verify complete
2018-07-22 22:41:35, Info                  CSI    00002799 [SR] Verifying 100 components
2018-07-22 22:41:35, Info                  CSI    0000279a [SR] Beginning Verify and Repair transaction
2018-07-22 22:42:41, Info                  CSI    0000281c [SR] Verify complete
2018-07-22 22:42:42, Info                  CSI    0000281d [SR] Verifying 100 components
2018-07-22 22:42:42, Info                  CSI    0000281e [SR] Beginning Verify and Repair transaction
2018-07-22 22:43:40, Info                  CSI    00002939 [SR] Verify complete
2018-07-22 22:43:41, Info                  CSI    0000293a [SR] Verifying 100 components
2018-07-22 22:43:41, Info                  CSI    0000293b [SR] Beginning Verify and Repair transaction
2018-07-22 22:44:20, Info                  CSI    000029aa [SR] Verify complete
2018-07-22 22:44:20, Info                  CSI    000029ab [SR] Verifying 100 components
2018-07-22 22:44:20, Info                  CSI    000029ac [SR] Beginning Verify and Repair transaction
2018-07-22 22:44:56, Info                  CSI    00002a21 [SR] Verify complete
2018-07-22 22:44:57, Info                  CSI    00002a22 [SR] Verifying 100 components
2018-07-22 22:44:57, Info                  CSI    00002a23 [SR] Beginning Verify and Repair transaction
2018-07-22 22:45:26, Info                  CSI    00002a9c [SR] Verify complete
2018-07-22 22:45:26, Info                  CSI    00002a9d [SR] Verifying 100 components
2018-07-22 22:45:26, Info                  CSI    00002a9e [SR] Beginning Verify and Repair transaction
2018-07-22 22:46:00, Info                  CSI    00002b14 [SR] Verify complete
2018-07-22 22:46:01, Info                  CSI    00002b15 [SR] Verifying 100 components
2018-07-22 22:46:01, Info                  CSI    00002b16 [SR] Beginning Verify and Repair transaction
2018-07-22 22:46:44, Info                  CSI    00002b93 [SR] Verify complete
2018-07-22 22:46:44, Info                  CSI    00002b94 [SR] Verifying 100 components
2018-07-22 22:46:44, Info                  CSI    00002b95 [SR] Beginning Verify and Repair transaction
2018-07-22 22:47:14, Info                  CSI    00002c0d [SR] Verify complete
2018-07-22 22:47:15, Info                  CSI    00002c0e [SR] Verifying 100 components
2018-07-22 22:47:15, Info                  CSI    00002c0f [SR] Beginning Verify and Repair transaction
2018-07-22 22:47:48, Info                  CSI    00002c87 [SR] Verify complete
2018-07-22 22:47:48, Info                  CSI    00002c88 [SR] Verifying 100 components
2018-07-22 22:47:48, Info                  CSI    00002c89 [SR] Beginning Verify and Repair transaction
2018-07-22 22:48:22, Info                  CSI    00002d0d [SR] Verify complete
2018-07-22 22:48:22, Info                  CSI    00002d0e [SR] Verifying 100 components
2018-07-22 22:48:22, Info                  CSI    00002d0f [SR] Beginning Verify and Repair transaction
2018-07-22 22:49:10, Info                  CSI    00002d87 [SR] Verify complete
2018-07-22 22:49:10, Info                  CSI    00002d88 [SR] Verifying 100 components
2018-07-22 22:49:10, Info                  CSI    00002d89 [SR] Beginning Verify and Repair transaction
2018-07-22 22:49:47, Info                  CSI    00002dfa [SR] Verify complete
2018-07-22 22:49:48, Info                  CSI    00002dfb [SR] Verifying 100 components
2018-07-22 22:49:48, Info                  CSI    00002dfc [SR] Beginning Verify and Repair transaction
2018-07-22 22:50:46, Info                  CSI    00002eb2 [SR] Verify complete
2018-07-22 22:50:46, Info                  CSI    00002eb3 [SR] Verifying 100 components
2018-07-22 22:50:46, Info                  CSI    00002eb4 [SR] Beginning Verify and Repair transaction
2018-07-22 22:51:39, Info                  CSI    00002f34 [SR] Verify complete
2018-07-22 22:51:39, Info                  CSI    00002f35 [SR] Verifying 100 components
2018-07-22 22:51:39, Info                  CSI    00002f36 [SR] Beginning Verify and Repair transaction
2018-07-22 22:52:16, Info                  CSI    00002fa7 [SR] Verify complete
2018-07-22 22:52:16, Info                  CSI    00002fa8 [SR] Verifying 100 components
2018-07-22 22:52:16, Info                  CSI    00002fa9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:53:00, Info                  CSI    00003050 [SR] Verify complete
2018-07-22 22:53:00, Info                  CSI    00003051 [SR] Verifying 100 components
2018-07-22 22:53:00, Info                  CSI    00003052 [SR] Beginning Verify and Repair transaction
2018-07-22 22:53:51, Info                  CSI    000030d8 [SR] Verify complete
2018-07-22 22:53:52, Info                  CSI    000030d9 [SR] Verifying 100 components
2018-07-22 22:53:52, Info                  CSI    000030da [SR] Beginning Verify and Repair transaction
2018-07-22 22:54:23, Info                  CSI    0000314f [SR] Verify complete
2018-07-22 22:54:24, Info                  CSI    00003150 [SR] Verifying 100 components
2018-07-22 22:54:24, Info                  CSI    00003151 [SR] Beginning Verify and Repair transaction
2018-07-22 22:54:55, Info                  CSI    000031ca [SR] Verify complete
2018-07-22 22:54:55, Info                  CSI    000031cb [SR] Verifying 100 components
2018-07-22 22:54:55, Info                  CSI    000031cc [SR] Beginning Verify and Repair transaction
2018-07-22 22:55:48, Info                  CSI    00003252 [SR] Verify complete
2018-07-22 22:55:49, Info                  CSI    00003253 [SR] Verifying 100 components
2018-07-22 22:55:49, Info                  CSI    00003254 [SR] Beginning Verify and Repair transaction
2018-07-22 22:56:23, Info                  CSI    000032da [SR] Verify complete
2018-07-22 22:56:24, Info                  CSI    000032db [SR] Verifying 100 components
2018-07-22 22:56:24, Info                  CSI    000032dc [SR] Beginning Verify and Repair transaction
2018-07-22 22:56:57, Info                  CSI    0000334f [SR] Verify complete
2018-07-22 22:56:57, Info                  CSI    00003350 [SR] Verifying 100 components
2018-07-22 22:56:57, Info                  CSI    00003351 [SR] Beginning Verify and Repair transaction
2018-07-22 22:57:38, Info                  CSI    000033c7 [SR] Verify complete
2018-07-22 22:57:39, Info                  CSI    000033c8 [SR] Verifying 100 components
2018-07-22 22:57:39, Info                  CSI    000033c9 [SR] Beginning Verify and Repair transaction
2018-07-22 22:58:20, Info                  CSI    00003457 [SR] Verify complete
2018-07-22 22:58:21, Info                  CSI    00003458 [SR] Verifying 100 components
2018-07-22 22:58:21, Info                  CSI    00003459 [SR] Beginning Verify and Repair transaction
2018-07-22 22:58:54, Info                  CSI    000034c4 [SR] Verify complete
2018-07-22 22:58:55, Info                  CSI    000034c5 [SR] Verifying 100 components
2018-07-22 22:58:55, Info                  CSI    000034c6 [SR] Beginning Verify and Repair transaction
2018-07-22 22:59:23, Info                  CSI    0000352d [SR] Verify complete
2018-07-22 22:59:25, Info                  CSI    0000352e [SR] Verifying 100 components
2018-07-22 22:59:25, Info                  CSI    0000352f [SR] Beginning Verify and Repair transaction
2018-07-22 23:00:00, Info                  CSI    000035a3 [SR] Verify complete
2018-07-22 23:00:00, Info                  CSI    000035a4 [SR] Verifying 100 components
2018-07-22 23:00:00, Info                  CSI    000035a5 [SR] Beginning Verify and Repair transaction
2018-07-22 23:00:35, Info                  CSI    00003629 [SR] Verify complete
2018-07-22 23:00:38, Info                  CSI    0000362a [SR] Verifying 100 components
2018-07-22 23:00:38, Info                  CSI    0000362b [SR] Beginning Verify and Repair transaction
2018-07-22 23:02:00, Info                  CSI    000036df [SR] Verify complete
2018-07-22 23:02:01, Info                  CSI    000036e0 [SR] Verifying 100 components
2018-07-22 23:02:01, Info                  CSI    000036e1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:02:42, Info                  CSI    0000375f [SR] Verify complete
2018-07-22 23:02:43, Info                  CSI    00003760 [SR] Verifying 100 components
2018-07-22 23:02:43, Info                  CSI    00003761 [SR] Beginning Verify and Repair transaction
2018-07-22 23:03:03, Info                  CSI    000037cb [SR] Verify complete
2018-07-22 23:03:04, Info                  CSI    000037cc [SR] Verifying 100 components
2018-07-22 23:03:04, Info                  CSI    000037cd [SR] Beginning Verify and Repair transaction
2018-07-22 23:03:46, Info                  CSI    00003833 [SR] Verify complete
2018-07-22 23:03:47, Info                  CSI    00003834 [SR] Verifying 100 components
2018-07-22 23:03:47, Info                  CSI    00003835 [SR] Beginning Verify and Repair transaction
2018-07-22 23:04:49, Info                  CSI    0000389b [SR] Verify complete
2018-07-22 23:04:49, Info                  CSI    0000389c [SR] Verifying 100 components
2018-07-22 23:04:49, Info                  CSI    0000389d [SR] Beginning Verify and Repair transaction
2018-07-22 23:05:38, Info                  CSI    00003904 [SR] Verify complete
2018-07-22 23:05:38, Info                  CSI    00003905 [SR] Verifying 100 components
2018-07-22 23:05:38, Info                  CSI    00003906 [SR] Beginning Verify and Repair transaction
2018-07-22 23:06:20, Info                  CSI    00003971 [SR] Verify complete
2018-07-22 23:06:21, Info                  CSI    00003972 [SR] Verifying 100 components
2018-07-22 23:06:21, Info                  CSI    00003973 [SR] Beginning Verify and Repair transaction
2018-07-22 23:06:41, Info                  CSI    000039db [SR] Verify complete
2018-07-22 23:06:41, Info                  CSI    000039dc [SR] Verifying 100 components
2018-07-22 23:06:41, Info                  CSI    000039dd [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:04, Info                  CSI    00003a46 [SR] Verify complete
2018-07-22 23:07:05, Info                  CSI    00003a47 [SR] Verifying 100 components
2018-07-22 23:07:05, Info                  CSI    00003a48 [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:23, Info                  CSI    00003aaf [SR] Verify complete
2018-07-22 23:07:24, Info                  CSI    00003ab0 [SR] Verifying 100 components
2018-07-22 23:07:24, Info                  CSI    00003ab1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:07:40, Info                  CSI    00003b16 [SR] Verify complete
2018-07-22 23:07:42, Info                  CSI    00003b17 [SR] Verifying 100 components
2018-07-22 23:07:42, Info                  CSI    00003b18 [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:01, Info                  CSI    00003b7f [SR] Verify complete
2018-07-22 23:08:01, Info                  CSI    00003b80 [SR] Verifying 100 components
2018-07-22 23:08:01, Info                  CSI    00003b81 [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:30, Info                  CSI    00003bfa [SR] Verify complete
2018-07-22 23:08:30, Info                  CSI    00003bfb [SR] Verifying 100 components
2018-07-22 23:08:30, Info                  CSI    00003bfc [SR] Beginning Verify and Repair transaction
2018-07-22 23:08:49, Info                  CSI    00003c65 [SR] Verify complete
2018-07-22 23:08:50, Info                  CSI    00003c66 [SR] Verifying 100 components
2018-07-22 23:08:50, Info                  CSI    00003c67 [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:12, Info                  CSI    00003cd1 [SR] Verify complete
2018-07-22 23:09:12, Info                  CSI    00003cd2 [SR] Verifying 100 components
2018-07-22 23:09:12, Info                  CSI    00003cd3 [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:25, Info                  CSI    00003d38 [SR] Verify complete
2018-07-22 23:09:26, Info                  CSI    00003d39 [SR] Verifying 100 components
2018-07-22 23:09:26, Info                  CSI    00003d3a [SR] Beginning Verify and Repair transaction
2018-07-22 23:09:49, Info                  CSI    00003da2 [SR] Verify complete
2018-07-22 23:09:49, Info                  CSI    00003da3 [SR] Verifying 100 components
2018-07-22 23:09:49, Info                  CSI    00003da4 [SR] Beginning Verify and Repair transaction
2018-07-22 23:10:10, Info                  CSI    00003e0b [SR] Verify complete
2018-07-22 23:10:10, Info                  CSI    00003e0c [SR] Verifying 100 components
2018-07-22 23:10:10, Info                  CSI    00003e0d [SR] Beginning Verify and Repair transaction
2018-07-22 23:10:41, Info                  CSI    00003e78 [SR] Verify complete
2018-07-22 23:10:42, Info                  CSI    00003e79 [SR] Verifying 100 components
2018-07-22 23:10:42, Info                  CSI    00003e7a [SR] Beginning Verify and Repair transaction
2018-07-22 23:11:21, Info                  CSI    00003eed [SR] Verify complete
2018-07-22 23:11:22, Info                  CSI    00003eee [SR] Verifying 100 components
2018-07-22 23:11:22, Info                  CSI    00003eef [SR] Beginning Verify and Repair transaction
2018-07-22 23:11:56, Info                  CSI    00003f5f [SR] Verify complete
2018-07-22 23:11:57, Info                  CSI    00003f60 [SR] Verifying 100 components
2018-07-22 23:11:57, Info                  CSI    00003f61 [SR] Beginning Verify and Repair transaction
2018-07-22 23:12:14, Info                  CSI    00003fca [SR] Verify complete
2018-07-22 23:12:14, Info                  CSI    00003fcb [SR] Verifying 100 components
2018-07-22 23:12:14, Info                  CSI    00003fcc [SR] Beginning Verify and Repair transaction
2018-07-22 23:12:33, Info                  CSI    00004043 [SR] Verify complete
2018-07-22 23:12:34, Info                  CSI    00004044 [SR] Verifying 100 components
2018-07-22 23:12:34, Info                  CSI    00004045 [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:17, Info                  CSI    000040b4 [SR] Verify complete
2018-07-22 23:13:18, Info                  CSI    000040b5 [SR] Verifying 100 components
2018-07-22 23:13:18, Info                  CSI    000040b6 [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:41, Info                  CSI    0000411d [SR] Verify complete
2018-07-22 23:13:42, Info                  CSI    0000411e [SR] Verifying 100 components
2018-07-22 23:13:42, Info                  CSI    0000411f [SR] Beginning Verify and Repair transaction
2018-07-22 23:13:58, Info                  CSI    00004186 [SR] Verify complete
2018-07-22 23:13:59, Info                  CSI    00004187 [SR] Verifying 100 components
2018-07-22 23:13:59, Info                  CSI    00004188 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:17, Info                  CSI    000041ef [SR] Verify complete
2018-07-22 23:14:18, Info                  CSI    000041f0 [SR] Verifying 100 components
2018-07-22 23:14:18, Info                  CSI    000041f1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:37, Info                  CSI    00004257 [SR] Verify complete
2018-07-22 23:14:37, Info                  CSI    00004258 [SR] Verifying 100 components
2018-07-22 23:14:38, Info                  CSI    00004259 [SR] Beginning Verify and Repair transaction
2018-07-22 23:14:52, Info                  CSI    0000425c [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch Host= amd64 Guest= x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:15:00, Info                  CSI    000042c1 [SR] Verify complete
2018-07-22 23:15:08, Info                  CSI    000042c7 [SR] Verifying 100 components
2018-07-22 23:15:08, Info                  CSI    000042c8 [SR] Beginning Verify and Repair transaction
2018-07-22 23:15:33, Info                  CSI    00004341 [SR] Verify complete
2018-07-22 23:15:34, Info                  CSI    00004342 [SR] Verifying 100 components
2018-07-22 23:15:34, Info                  CSI    00004343 [SR] Beginning Verify and Repair transaction
2018-07-22 23:15:58, Info                  CSI    000043b9 [SR] Verify complete
2018-07-22 23:15:58, Info                  CSI    000043ba [SR] Verifying 100 components
2018-07-22 23:15:58, Info                  CSI    000043bb [SR] Beginning Verify and Repair transaction
2018-07-22 23:16:31, Info                  CSI    00004424 [SR] Verify complete
2018-07-22 23:16:32, Info                  CSI    00004425 [SR] Verifying 100 components
2018-07-22 23:16:32, Info                  CSI    00004426 [SR] Beginning Verify and Repair transaction
2018-07-22 23:16:53, Info                  CSI    00004491 [SR] Verify complete
2018-07-22 23:16:53, Info                  CSI    00004492 [SR] Verifying 100 components
2018-07-22 23:16:53, Info                  CSI    00004493 [SR] Beginning Verify and Repair transaction
2018-07-22 23:17:21, Info                  CSI    00004546 [SR] Verify complete
2018-07-22 23:17:21, Info                  CSI    00004547 [SR] Verifying 100 components
2018-07-22 23:17:21, Info                  CSI    00004548 [SR] Beginning Verify and Repair transaction
2018-07-22 23:17:51, Info                  CSI    00004602 [SR] Verify complete
2018-07-22 23:17:51, Info                  CSI    00004603 [SR] Verifying 100 components
2018-07-22 23:17:51, Info                  CSI    00004604 [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:11, Info                  CSI    0000467a [SR] Verify complete
2018-07-22 23:18:11, Info                  CSI    0000467b [SR] Verifying 100 components
2018-07-22 23:18:11, Info                  CSI    0000467c [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:34, Info                  CSI    000046f8 [SR] Verify complete
2018-07-22 23:18:35, Info                  CSI    000046f9 [SR] Verifying 100 components
2018-07-22 23:18:35, Info                  CSI    000046fa [SR] Beginning Verify and Repair transaction
2018-07-22 23:18:53, Info                  CSI    00004762 [SR] Verify complete
2018-07-22 23:18:54, Info                  CSI    00004763 [SR] Verifying 100 components
2018-07-22 23:18:54, Info                  CSI    00004764 [SR] Beginning Verify and Repair transaction
2018-07-22 23:19:20, Info                  CSI    000047cf [SR] Verify complete
2018-07-22 23:19:21, Info                  CSI    000047d0 [SR] Verifying 100 components
2018-07-22 23:19:21, Info                  CSI    000047d1 [SR] Beginning Verify and Repair transaction
2018-07-22 23:19:53, Info                  CSI    00004856 [SR] Verify complete
2018-07-22 23:19:53, Info                  CSI    00004857 [SR] Verifying 100 components
2018-07-22 23:19:53, Info                  CSI    00004858 [SR] Beginning Verify and Repair transaction
2018-07-22 23:20:18, Info                  CSI    00004954 [SR] Verify complete
2018-07-22 23:20:19, Info                  CSI    00004955 [SR] Verifying 100 components
2018-07-22 23:20:19, Info                  CSI    00004956 [SR] Beginning Verify and Repair transaction
2018-07-22 23:20:47, Info                  CSI    000049fd [SR] Verify complete
2018-07-22 23:20:48, Info                  CSI    000049fe [SR] Verifying 100 components
2018-07-22 23:20:48, Info                  CSI    000049ff [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:20, Info                  CSI    00004ad8 [SR] Verify complete
2018-07-22 23:21:20, Info                  CSI    00004ad9 [SR] Verifying 100 components
2018-07-22 23:21:20, Info                  CSI    00004ada [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:35, Info                  CSI    00004b3f [SR] Verify complete
2018-07-22 23:21:35, Info                  CSI    00004b40 [SR] Verifying 100 components
2018-07-22 23:21:35, Info                  CSI    00004b41 [SR] Beginning Verify and Repair transaction
2018-07-22 23:21:55, Info                  CSI    00004bb3 [SR] Verify complete
2018-07-22 23:21:55, Info                  CSI    00004bb4 [SR] Verifying 100 components
2018-07-22 23:21:55, Info                  CSI    00004bb5 [SR] Beginning Verify and Repair transaction
2018-07-22 23:22:48, Info                  CSI    00004c32 [SR] Verify complete
2018-07-22 23:22:48, Info                  CSI    00004c33 [SR] Verifying 100 components
2018-07-22 23:22:48, Info                  CSI    00004c34 [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:06, Info                  CSI    00004ca0 [SR] Verify complete
2018-07-22 23:23:07, Info                  CSI    00004ca1 [SR] Verifying 100 components
2018-07-22 23:23:07, Info                  CSI    00004ca2 [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:27, Info                  CSI    00004d0b [SR] Verify complete
2018-07-22 23:23:27, Info                  CSI    00004d0c [SR] Verifying 100 components
2018-07-22 23:23:27, Info                  CSI    00004d0d [SR] Beginning Verify and Repair transaction
2018-07-22 23:23:55, Info                  CSI    00004d73 [SR] Verify complete
2018-07-22 23:23:56, Info                  CSI    00004d74 [SR] Verifying 100 components
2018-07-22 23:23:56, Info                  CSI    00004d75 [SR] Beginning Verify and Repair transaction
2018-07-22 23:24:21, Info                  CSI    00004ddb [SR] Verify complete
2018-07-22 23:24:21, Info                  CSI    00004ddc [SR] Verifying 100 components
2018-07-22 23:24:21, Info                  CSI    00004ddd [SR] Beginning Verify and Repair transaction
2018-07-22 23:25:10, Info                  CSI    00004e9b [SR] Verify complete
2018-07-22 23:25:10, Info                  CSI    00004e9c [SR] Verifying 100 components
2018-07-22 23:25:10, Info                  CSI    00004e9d [SR] Beginning Verify and Repair transaction
2018-07-22 23:25:43, Info                  CSI    00004f47 [SR] Verify complete
2018-07-22 23:25:44, Info                  CSI    00004f48 [SR] Verifying 100 components
2018-07-22 23:25:44, Info                  CSI    00004f49 [SR] Beginning Verify and Repair transaction
2018-07-22 23:26:16, Info                  CSI    00004fb7 [SR] Verify complete
2018-07-22 23:26:17, Info                  CSI    00004fb8 [SR] Verifying 100 components
2018-07-22 23:26:17, Info                  CSI    00004fb9 [SR] Beginning Verify and Repair transaction
2018-07-22 23:26:45, Info                  CSI    00005032 [SR] Verify complete
2018-07-22 23:26:46, Info                  CSI    00005033 [SR] Verifying 100 components
2018-07-22 23:26:46, Info                  CSI    00005034 [SR] Beginning Verify and Repair transaction
2018-07-22 23:27:23, Info                  CSI    000050a2 [SR] Verify complete
2018-07-22 23:27:23, Info                  CSI    000050a3 [SR] Verifying 100 components
2018-07-22 23:27:23, Info                  CSI    000050a4 [SR] Beginning Verify and Repair transaction
2018-07-22 23:27:43, Info                  CSI    00005111 [SR] Verify complete
2018-07-22 23:27:43, Info                  CSI    00005112 [SR] Verifying 100 components
2018-07-22 23:27:43, Info                  CSI    00005113 [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:09, Info                  CSI    0000521d [SR] Verify complete
2018-07-22 23:28:09, Info                  CSI    0000521e [SR] Verifying 100 components
2018-07-22 23:28:09, Info                  CSI    0000521f [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:35, Info                  CSI    00005294 [SR] Verify complete
2018-07-22 23:28:35, Info                  CSI    00005295 [SR] Verifying 100 components
2018-07-22 23:28:35, Info                  CSI    00005296 [SR] Beginning Verify and Repair transaction
2018-07-22 23:28:59, Info                  CSI    0000530d [SR] Verify complete
2018-07-22 23:29:00, Info                  CSI    0000530e [SR] Verifying 100 components
2018-07-22 23:29:00, Info                  CSI    0000530f [SR] Beginning Verify and Repair transaction
2018-07-22 23:29:27, Info                  CSI    0000538b [SR] Verify complete
2018-07-22 23:29:27, Info                  CSI    0000538c [SR] Verifying 100 components
2018-07-22 23:29:27, Info                  CSI    0000538d [SR] Beginning Verify and Repair transaction
2018-07-22 23:29:51, Info                  CSI    000053fa [SR] Verify complete
2018-07-22 23:29:53, Info                  CSI    000053fb [SR] Verifying 100 components
2018-07-22 23:29:53, Info                  CSI    000053fc [SR] Beginning Verify and Repair transaction
2018-07-22 23:30:20, Info                  CSI    0000547f [SR] Verify complete
2018-07-22 23:30:20, Info                  CSI    00005480 [SR] Verifying 100 components
2018-07-22 23:30:20, Info                  CSI    00005481 [SR] Beginning Verify and Repair transaction
2018-07-22 23:30:45, Info                  CSI    000054f0 [SR] Verify complete
2018-07-22 23:30:46, Info                  CSI    000054f1 [SR] Verifying 100 components
2018-07-22 23:30:46, Info                  CSI    000054f2 [SR] Beginning Verify and Repair transaction
2018-07-22 23:31:07, Info                  CSI    00005571 [SR] Verify complete
2018-07-22 23:31:07, Info                  CSI    00005572 [SR] Verifying 100 components
2018-07-22 23:31:07, Info                  CSI    00005573 [SR] Beginning Verify and Repair transaction
2018-07-22 23:31:29, Info                  CSI    000055dd [SR] Verify complete
2018-07-22 23:31:29, Info                  CSI    000055de [SR] Verifying 100 components
2018-07-22 23:31:29, Info                  CSI    000055df [SR] Beginning Verify and Repair transaction
2018-07-22 23:32:04, Info                  CSI    00005660 [SR] Verify complete
2018-07-22 23:32:05, Info                  CSI    00005661 [SR] Verifying 100 components
2018-07-22 23:32:05, Info                  CSI    00005662 [SR] Beginning Verify and Repair transaction
2018-07-22 23:32:40, Info                  CSI    000056d5 [SR] Verify complete
2018-07-22 23:32:41, Info                  CSI    000056d6 [SR] Verifying 100 components
2018-07-22 23:32:41, Info                  CSI    000056d7 [SR] Beginning Verify and Repair transaction
2018-07-22 23:33:03, Info                  CSI    0000573f [SR] Verify complete
2018-07-22 23:33:03, Info                  CSI    00005740 [SR] Verifying 100 components
2018-07-22 23:33:03, Info                  CSI    00005741 [SR] Beginning Verify and Repair transaction
2018-07-22 23:33:22, Info                  CSI    000057ae [SR] Verify complete
2018-07-22 23:33:22, Info                  CSI    000057af [SR] Verifying 100 components
2018-07-22 23:33:22, Info                  CSI    000057b0 [SR] Beginning Verify and Repair transaction
2018-07-22 23:34:07, Info                  CSI    00005853 [SR] Verify complete
2018-07-22 23:34:07, Info                  CSI    00005854 [SR] Verifying 100 components
2018-07-22 23:34:07, Info                  CSI    00005855 [SR] Beginning Verify and Repair transaction
2018-07-22 23:34:38, Info                  CSI    00005903 [SR] Verify complete
2018-07-22 23:34:39, Info                  CSI    00005904 [SR] Verifying 100 components
2018-07-22 23:34:39, Info                  CSI    00005905 [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:03, Info                  CSI    0000596e [SR] Verify complete
2018-07-22 23:35:03, Info                  CSI    0000596f [SR] Verifying 100 components
2018-07-22 23:35:03, Info                  CSI    00005970 [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:31, Info                  CSI    00005a39 [SR] Verify complete
2018-07-22 23:35:31, Info                  CSI    00005a3a [SR] Verifying 100 components
2018-07-22 23:35:31, Info                  CSI    00005a3b [SR] Beginning Verify and Repair transaction
2018-07-22 23:35:57, Info                  CSI    00005aab [SR] Verify complete
2018-07-22 23:35:58, Info                  CSI    00005aac [SR] Verifying 100 components
2018-07-22 23:35:58, Info                  CSI    00005aad [SR] Beginning Verify and Repair transaction
2018-07-22 23:36:25, Info                  CSI    00005b25 [SR] Verify complete
2018-07-22 23:36:25, Info                  CSI    00005b26 [SR] Verifying 100 components
2018-07-22 23:36:25, Info                  CSI    00005b27 [SR] Beginning Verify and Repair transaction
2018-07-22 23:36:57, Info                  CSI    00005bad [SR] Verify complete
2018-07-22 23:36:57, Info                  CSI    00005bae [SR] Verifying 100 components
2018-07-22 23:36:57, Info                  CSI    00005baf [SR] Beginning Verify and Repair transaction
2018-07-22 23:37:30, Info                  CSI    00005c29 [SR] Verify complete
2018-07-22 23:37:32, Info                  CSI    00005c2a [SR] Verifying 100 components
2018-07-22 23:37:32, Info                  CSI    00005c2b [SR] Beginning Verify and Repair transaction
2018-07-22 23:37:59, Info                  CSI    00005c91 [SR] Verify complete
2018-07-22 23:37:59, Info                  CSI    00005c92 [SR] Verifying 100 components
2018-07-22 23:37:59, Info                  CSI    00005c93 [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:15, Info                  CSI    00005cfb [SR] Verify complete
2018-07-22 23:38:16, Info                  CSI    00005cfc [SR] Verifying 100 components
2018-07-22 23:38:16, Info                  CSI    00005cfd [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:32, Info                  CSI    00005d62 [SR] Verify complete
2018-07-22 23:38:32, Info                  CSI    00005d63 [SR] Verifying 100 components
2018-07-22 23:38:32, Info                  CSI    00005d64 [SR] Beginning Verify and Repair transaction
2018-07-22 23:38:48, Info                  CSI    00005dca [SR] Verify complete
2018-07-22 23:38:48, Info                  CSI    00005dcb [SR] Verifying 100 components
2018-07-22 23:38:48, Info                  CSI    00005dcc [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:01, Info                  CSI    00005e32 [SR] Verify complete
2018-07-22 23:39:02, Info                  CSI    00005e33 [SR] Verifying 100 components
2018-07-22 23:39:02, Info                  CSI    00005e34 [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:17, Info                  CSI    00005e9b [SR] Verify complete
2018-07-22 23:39:18, Info                  CSI    00005e9c [SR] Verifying 80 components
2018-07-22 23:39:18, Info                  CSI    00005e9d [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:30, Info                  CSI    00005ef1 [SR] Verify complete
2018-07-22 23:39:30, Info                  CSI    00005ef2 [SR] Repairing 4 components
2018-07-22 23:39:30, Info                  CSI    00005ef3 [SR] Beginning Verify and Repair transaction
2018-07-22 23:39:31, Info                  CSI    00005ef6 [SR] Cannot verify component files for 3475b27c3010e81c80d3f71f288b133b, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005ef9 [SR] Cannot verify component files for 4c7ef8d9e6645daf85073446b81f88eb, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005efc [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005eff [SR] Cannot verify component files for Adobe-Flash-For-Windows, version 10.0.17134.163, arch Host= amd64 Guest= x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}, manifest is damaged (true)
2018-07-22 23:39:31, Info                  CSI    00005f00 [SR] Repair complete
2018-07-22 23:39:35, Info                  CSI    00005f15 [SR] Committing transaction
2018-07-22 23:39:35, Info                  CSI    00005f1a [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired
 
 
I am going to run the first step again before moving on. Hopefully i get to 100%

  • 0

#8
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

The errors in SFC are for Adobe Flash.  There is a new update that just came out recently.  If you don't already have it it might fix the sfc errors:

 

KB4338832

 

https://support.micr...be-flash-player


  • 0

#9
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts
Vino's Event Viewer v01c run on Windows 7 in English
Report run at 24/07/2018 10:06:31 AM
 
Note: All dates below are in the format dd/mm/yyyy
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/07/2018 6:53:32 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 22/07/2018 11:49:57 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 20/07/2018 12:32:45 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 15/07/2018 11:01:07 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 14/07/2018 12:50:42 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 12/07/2018 1:12:11 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 12:36:59 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 9:53:04 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 9:14:37 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 7:59:51 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 7:47:07 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 4:59:28 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 24/07/2018 12:28:11 AM
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca did not register with DCOM within the required timeout.
 
Log: 'System' Date/Time: 24/07/2018 12:27:58 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 9:54:06 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 9:21:18 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:41:37 AM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The AdaptiveSleepService service terminated unexpectedly.  It has done this 1 time(s).
 
Log: 'System' Date/Time: 23/07/2018 7:24:26 AM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The RealPlayer Update Service service terminated unexpectedly.  It has done this 1 time(s).
 
Log: 'System' Date/Time: 23/07/2018 7:13:09 AM
Type: Error Category: 1
Event: 20 Source: Microsoft-Windows-WindowsUpdateClient
Installation Failure: Windows failed to install the following update with error 0x800F0900: 2018-07 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x64-based Systems (KB4338832).
 
Log: 'System' Date/Time: 23/07/2018 7:05:05 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:05:05 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:04:24 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:01:24 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:00:50 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:59:22 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  Windows.SecurityCenter.WscBrokerManager  and APPID  Unavailable  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Touchpoint Analytics service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPTouchpointAnalyticsService service to connect.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Support Solutions Framework Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPSupportSolutionsFrameworkService service to connect.
 
Log: 'System' Date/Time: 23/07/2018 6:55:50 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:53:55 AM
Type: Error Category: 0
Event: 6008 Source: EventLog
The previous system shutdown at 4:09:14 PM on ?7/?23/?2018 was unexpected.
 
Log: 'System' Date/Time: 23/07/2018 6:42:14 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/07/2018 6:54:04 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 23/07/2018 6:53:50 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 11:50:29 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 22/07/2018 11:50:26 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 11:50:01 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 7:08:41 AM
Type: Warning Category: 1014
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name a.config.skype.com timed out after none of the configured DNS servers responded.
 
Log: 'System' Date/Time: 22/07/2018 1:57:58 AM
Type: Warning Category: 0
Event: 134 Source: Microsoft-Windows-Time-Service
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
 
Log: 'System' Date/Time: 20/07/2018 12:33:16 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 20/07/2018 12:33:16 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 20/07/2018 12:32:49 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 3:28:34 PM
Type: Warning Category: 1014
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name wpad timed out after none of the configured DNS servers responded.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:01:45 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Vino's Event Viewer v01c run on Windows 7 in English
Report run at 24/07/2018 10:06:31 AM
 
Note: All dates below are in the format dd/mm/yyyy
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/07/2018 6:53:32 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 22/07/2018 11:49:57 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 20/07/2018 12:32:45 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 15/07/2018 11:01:07 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 14/07/2018 12:50:42 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 12/07/2018 1:12:11 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 12:36:59 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 9:53:04 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 9:14:37 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 7:59:51 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 7:47:07 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
Log: 'System' Date/Time: 11/07/2018 4:59:28 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 24/07/2018 12:28:11 AM
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca did not register with DCOM within the required timeout.
 
Log: 'System' Date/Time: 24/07/2018 12:27:58 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 9:54:06 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 9:21:18 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:41:37 AM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The AdaptiveSleepService service terminated unexpectedly.  It has done this 1 time(s).
 
Log: 'System' Date/Time: 23/07/2018 7:24:26 AM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The RealPlayer Update Service service terminated unexpectedly.  It has done this 1 time(s).
 
Log: 'System' Date/Time: 23/07/2018 7:13:09 AM
Type: Error Category: 1
Event: 20 Source: Microsoft-Windows-WindowsUpdateClient
Installation Failure: Windows failed to install the following update with error 0x800F0900: 2018-07 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x64-based Systems (KB4338832).
 
Log: 'System' Date/Time: 23/07/2018 7:05:05 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:05:05 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:04:24 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:01:24 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 7:00:50 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user DESKTOP-BBQIE4L\Beck McKee SID (S-1-5-21-593274584-2845798583-2150428693-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:59:22 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  Windows.SecurityCenter.WscBrokerManager  and APPID  Unavailable  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Touchpoint Analytics service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPTouchpointAnalyticsService service to connect.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Support Solutions Framework Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPSupportSolutionsFrameworkService service to connect.
 
Log: 'System' Date/Time: 23/07/2018 6:55:50 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Log: 'System' Date/Time: 23/07/2018 6:53:55 AM
Type: Error Category: 0
Event: 6008 Source: EventLog
The previous system shutdown at 4:09:14 PM on ?7/?23/?2018 was unexpected.
 
Log: 'System' Date/Time: 23/07/2018 6:42:14 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID  {D63B10C5-BB46-4990-A94F-E40B9D520160}  and APPID  {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/07/2018 6:54:04 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 23/07/2018 6:53:50 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 11:50:29 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 22/07/2018 11:50:26 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 11:50:01 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 22/07/2018 7:08:41 AM
Type: Warning Category: 1014
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name a.config.skype.com timed out after none of the configured DNS servers responded.
 
Log: 'System' Date/Time: 22/07/2018 1:57:58 AM
Type: Warning Category: 0
Event: 134 Source: Microsoft-Windows-Time-Service
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
 
Log: 'System' Date/Time: 20/07/2018 12:33:16 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 20/07/2018 12:33:16 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 
Log: 'System' Date/Time: 20/07/2018 12:32:49 AM
Type: Warning Category: 0
Event: 34 Source: BTHUSB
The local adapter does not support an important Low Energy controller state to support peripheral mode.  The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff.  Low Energy peripheral role functionality will not be available.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 16/07/2018 11:17:41 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3160 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 3:28:34 PM
Type: Warning Category: 1014
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name wpad timed out after none of the configured DNS servers responded.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:12:40 AM
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
 
Log: 'System' Date/Time: 15/07/2018 11:01:45 AM
Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.
 

  • 0

#10
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 79.13 52 K 8 K 0
procexp64.exe 7.08 31,420 K 64,732 K 8916 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
dwm.exe 1.79 61,136 K 52,572 K 1144 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
TiWorker.exe 2.99 34,312 K 42,528 K 8760 Windows Modules Installer Worker Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 7.18 10,484 K 25,156 K 2620 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Interrupts 1.39 0 K 0 K n/a Hardware Interrupts and DPCs
System 0.85 192 K 1,468 K 4
svchost.exe 0.03 13,680 K 28,096 K 1608 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
csrss.exe 0.65 3,532 K 4,832 K 820 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
EpicGamesLauncher.exe 0.81 168,288 K 69,512 K 7832 EpicGamesLauncher Epic Games, Inc. (Verified) Epic Games Inc.
downloader2.exe 0.58 6,340 K 19,004 K 6392 RealDownloader (Verified) RealNetworks
svchost.exe 0.03 83,104 K 87,264 K 1284 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
chrome.exe 0.35 63,512 K 104,988 K 2008 Google Chrome Google Inc. (Verified) Google Inc
vsserv.exe 0.13 646,344 K 202,320 K 2932 Bitdefender Security Service Bitdefender (Verified) Bitdefender SRL
svchost.exe 0.04 51,668 K 82,292 K 1232 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.04 13,188 K 31,044 K 1508 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Skype.exe 0.23 58,436 K 83,244 K 6608 Skype Skype Technologies S.A. (Verified) Skype Software Sarl
chrome.exe 0.08 56,176 K 76,012 K 4632 Google Chrome Google Inc. (Verified) Google Inc
svchost.exe 0.28 22,172 K 32,956 K 1288 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
lsass.exe 0.02 7,572 K 15,576 K 940 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.03 7,344 K 12,676 K 1044 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 5,408 K 13,240 K 2264 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.02 21,208 K 31,196 K 1324 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
chrome.exe 0.03 22,500 K 32,140 K 12072 Google Chrome Google Inc. (Verified) Google Inc
explorer.exe 0.16 104,992 K 117,516 K 5176 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
Video.UI.exe 0.09 29,120 K 49,564 K 8524 (No signature was present in the subject)
SettingSyncHost.exe 0.04 13,220 K 17,332 K 7876 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows
OneDrive.exe 0.02 16,012 K 44,472 K 6536 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation
smartscreen.exe 0.01 20,176 K 29,816 K 6168 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows
vsservppl.exe 0.05 21,552 K 22,312 K 2972 Bitdefender Correlation Service Bitdefender (Verified) Bitdefender SRL
svchost.exe 0.03 17,380 K 54,292 K 1056 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Spotify.exe 0.03 49,236 K 34,580 K 8568 Spotify Spotify Ltd (Verified) Spotify AB
Updater.exe 0.01 5,284 K 10,912 K 2888 Updater Popcorn Time (No signature was present in the subject) Popcorn Time
CltMngSvc.exe 0.01 4,280 K 13,256 K 3540 Search Protect Client Connect LTD (Verified) ClientConnect LTD
svchost.exe 0.01 2,636 K 10,344 K 2692 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchIndexer.exe 0.05 30,628 K 35,704 K 6724 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
AdobeARM.exe 0.03 4,148 K 5,884 K 2636 Adobe Reader and Acrobat Manager Adobe Systems Incorporated (Verified) Adobe Systems
updatesrv.exe < 0.01 7,816 K 11,476 K 2912 Bitdefender Update Service Bitdefender (Verified) Bitdefender SRL
TrustedInstaller.exe 0.01 2,108 K 7,168 K 11464 Windows Modules Installer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.01 3,704 K 11,196 K 2072 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
ZeroConfigService.exe 0.01 4,724 K 14,488 K 2984 Intel® PROSet/Wireless Zero Configure Service Intel® Corporation (Verified) Intel Corporation
conhost.exe < 0.01 7,000 K 1,480 K 9956 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
wlanext.exe 0.01 4,496 K 12,768 K 3724 Windows Wireless LAN 802.11 Extensibility Framework Microsoft Corporation (Verified) Microsoft Windows
conhost.exe < 0.01 7,020 K 1,596 K 9564 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
csrss.exe < 0.01 1,832 K 4,564 K 696 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.03 13,136 K 28,328 K 608 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
YouCamService6.exe 0.03 4,896 K 2,836 K 5728 CyberLink YouCam Service CyberLink Corp. (Verified) CyberLink Corp.
RuntimeBroker.exe 0.02 8,320 K 22,844 K 1220 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
EvtEng.exe 0.01 4,664 K 11,384 K 2548 Intel® PROSet/Wireless Event Log Service Intel® Corporation (Verified) Intel Corporation
rpdsvc.exe < 0.01 15,504 K 8,972 K 7128 RealTimes Desktop Service RealNetworks, Inc. (Verified) RealNetworks
SynTPEnh.exe 0.01 7,652 K 20,040 K 1952 Synaptics TouchPad 64-bit Enhancements Synaptics Incorporated (Verified) Synaptics Incorporated
chrome.exe 0.01 23,692 K 35,516 K 12044 Google Chrome Google Inc. (Verified) Google Inc
Memory Compression 0.05 788 K 86,372 K 1892
bdagent.exe 0.01 16,588 K 17,760 K 1500 bdagent.exe Bitdefender (Verified) Bitdefender SRL
wuauclt.exe 1,740 K 7,812 K 11996 Windows Update Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe < 0.01 4,268 K 11,764 K 4996 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe < 0.01 2,560 K 8,212 K 916 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe < 0.01 1,432 K 5,840 K 808 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows Publisher
wermgr.exe 0.02 1,416 K 696 K 11012 Windows Problem Reporting Microsoft Corporation (Verified) Microsoft Windows
unsecapp.exe < 0.01 1,476 K 6,292 K 4512 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
taskhostw.exe < 0.01 8,192 K 16,188 K 1664 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
SystemSettings.exe Suspended 29,780 K 59,408 K 4548 Settings Microsoft Corporation (Verified) Microsoft Windows
SynTPHelper.exe < 0.01 2,308 K 4,516 K 3004 Synaptics Pointing Device Helper Synaptics Incorporated (Verified) Synaptics Incorporated
SynTPEnhService.exe < 0.01 1,240 K 4,484 K 2844 64-bit Synaptics Pointing Enhance Service Synaptics Incorporated (Verified) Synaptics Incorporated
svchost.exe < 0.01 6,648 K 15,204 K 1592 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 3,528 K 12,008 K 1108 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 4,136 K 8,028 K 2540 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 1,972 K 6,244 K 2076 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 1,480 K 5,708 K 2556 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 3,944 K 12,316 K 3220 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 2,208 K 7,056 K 3936 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
SpotifyWebHelper.exe < 0.01 2,260 K 7,484 K 6800 SpotifyWebHelper Spotify Ltd (Verified) Spotify AB
Spotify.exe 0.01 28,664 K 14,436 K 8276 Spotify Spotify Ltd (Verified) Spotify AB
Spotify.exe 0.02 42,248 K 49,160 K 7776 Spotify Spotify Ltd (Verified) Spotify AB
Spotify.exe 0.01 51,332 K 28,544 K 9036 Spotify Spotify Ltd (Verified) Spotify AB
spoolsv.exe 0.01 6,712 K 12,064 K 2400 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
smss.exe < 0.01 524 K 900 K 440 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows Publisher
SkypeHost.exe Suspended 41,392 K 24,476 K 6516 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
sihost.exe 0.01 7,920 K 24,812 K 5316 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
ShellExperienceHost.exe 0.03 47,424 K 79,724 K 5364 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
SgrmBroker.exe < 0.01 2,708 K 4,620 K 6176 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher
services.exe < 0.01 4,248 K 7,356 K 880 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows Publisher
SecurityHealthService.exe 0.01 4,280 K 14,204 K 2868 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchUI.exe Suspended 95,632 K 82,792 K 2044 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 6,444 K 19,208 K 11196 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,180 K 8,928 K 3648 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 0.02 7,456 K 21,200 K 9292 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe < 0.01 1,936 K 6,512 K 2348 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 0.01 2,932 K 16,200 K 6256 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe < 0.01 6,016 K 16,008 K 5336 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 0.01 6,556 K 22,492 K 6580 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RtkNGUI64.exe 0.01 8,888 K 13,076 K 8144 Realtek HD Audio Manager Realtek Semiconductor (Verified) Realtek Semiconductor Corp
RtkAudioService64.exe 0.01 2,232 K 8,328 K 1944 Realtek Audio Service Realtek Semiconductor (Verified) Realtek Semiconductor Corp
RichVideo64.exe < 0.01 1,520 K 6,164 K 2776 RichVideo Module (Verified) CyberLink Corp.
RegSrvc.exe < 0.01 2,012 K 8,328 K 2760 Intel® PROSet/Wireless Registry Service Intel® Corporation (Verified) Intel Corporation
Registry 4,624 K 41,356 K 104
realsched.exe 0.02 2,856 K 696 K 7764 RealNetworks Scheduler RealNetworks, Inc. (Verified) RealNetworks
RAVBg64.exe 0.01 6,204 K 11,048 K 2288 HD Audio Background Process Realtek Semiconductor (Verified) Realtek Semiconductor Corp
ProductAgentService.exe 0.01 6,492 K 15,012 K 2728 Bitdefender Agent Bitdefender (Verified) Bitdefender SRL
procexp.exe 3,044 K 10,264 K 2240 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
MSASCuiL.exe < 0.01 3,276 K 8,952 K 8116 Windows Defender notification icon Microsoft Corporation (Verified) Microsoft Windows
MicrosoftEdgeCP.exe Suspended 5,264 K 19,288 K 5948 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Corporation
MicrosoftEdgeCP.exe Suspended 6,000 K 21,224 K 5648 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Corporation
MicrosoftEdge.exe Suspended 28,112 K 52,828 K 6700 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
mDNSResponder.exe < 0.01 1,976 K 6,280 K 2520 Bonjour Service Apple Inc. (Verified) Apple Inc.
ibtsiva.exe < 0.01 1,236 K 4,160 K 2588 Intel® Wireless Bluetooth® iBtSiva Service Intel Corporation (Verified) Intel® Wireless Connectivity Solutions
HxTsr.exe Suspended 19,140 K 37,828 K 4924 Microsoft Outlook Communications Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
HxOutlook.exe Suspended 47,812 K 52,108 K 5052 Microsoft Outlook Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
HPWMISVC.exe 0.01 1,728 K 7,920 K 2580 HP WMI Service Hewlett-Packard Development Company, L.P. (Verified) Hewlett-Packard Company
HPSupportSolutionsFrameworkService.exe 0.01 34,652 K 36,064 K 9952 HP Support Solutions Framework Service HP Inc. (Verified) HP Inc.
HPSFReport.exe < 0.01 2,580 K 1,176 K 11708 HPSFReport HP Inc. (Verified) HP Inc.
hpqwmiex.exe 0.01 2,640 K 9,384 K 5344 HP Software Framework WMI Service Hewlett-Packard Company (Verified) Hewlett-Packard Company
HPMSGSVC.exe < 0.01 2,356 K 8,352 K 6124 HP Message Service Hewlett-Packard Development Company, L.P. (Verified) Hewlett-Packard Company
fontdrvhost.exe < 0.01 2,608 K 5,980 K 632 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe < 0.01 1,740 K 3,368 K 636 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe < 0.01 3,192 K 9,668 K 1672 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe < 0.01 2,092 K 9,696 K 11776 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
DeviceCensus.exe 0.01 4,248 K 7,624 K 11636 Device Census Microsoft Corporation (Verified) Microsoft Windows
dasHost.exe < 0.01 1,172 K 4,592 K 3120 Device Association Framework Provider Host Microsoft Corporation (Verified) Microsoft Windows
ctfmon.exe 0.04 6,204 K 15,076 K 2904 CTF Loader Microsoft Corporation (Verified) Microsoft Windows
CoolSense.exe 0.06 3,136 K 2,048 K 2196 HP CoolSense Hewlett-Packard Development Company, L.P. (Verified) Hewlett-Packard Company
conhost.exe < 0.01 5,352 K 5,120 K 3852 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
CompatTelRunner.exe 4,936 K 3,108 K 11656 Microsoft Compatibility Telemetry Microsoft Corporation (Verified) Microsoft Windows
CompatTelRunner.exe 0.01 2,124 K 432 K 7752 Microsoft Compatibility Telemetry Microsoft Corporation (Verified) Microsoft Windows
chrome.exe 0.01 74,144 K 81,692 K 7808 Google Chrome Google Inc. (Verified) Google Inc
chrome.exe 0.01 21,712 K 32,560 K 12052 Google Chrome Google Inc. (Verified) Google Inc
chrome.exe 13,552 K 19,576 K 1772 Google Chrome Google Inc. (Verified) Google Inc
chrome.exe 0.01 7,584 K 10,512 K 6676 Google Chrome Google Inc. (Verified) Google Inc
chrome.exe 0.01 7,304 K 10,800 K 840 Google Chrome Google Inc. (Verified) Google Inc
browser_broker.exe < 0.01 1,988 K 8,464 K 7004 Browser_Broker Microsoft Corporation (Verified) Microsoft Windows
backgroundTaskHost.exe 0.02 8,308 K 15,040 K 9444 Background Task Host Microsoft Corporation (Verified) Microsoft Windows
audiodg.exe 0.01 13,860 K 19,788 K 6804 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
atiesrxx.exe < 0.01 1,352 K 5,088 K 1728 AMD External Events Service Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher
atieclxx.exe < 0.01 2,360 K 8,868 K 1856 AMD External Events Client Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher
armsvc.exe < 0.01 1,424 K 6,116 K 2528 Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems
ApplicationFrameHost.exe 0.01 19,004 K 31,156 K 6412 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows

  • 0

Advertisements


#11
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Speccy log?


  • 0

#12
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts

Attached is the file

Attached Files


  • 0

#13
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts

Speccy log?

is that the one i just completed?


  • 0

#14
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

That was it.  Guess we crossed our posts.

 

You can uninstall Speccy now.  We don't need it any more.

 

You have two programs that are slowing down the boot:

 

Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Touchpoint Analytics service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:47 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPTouchpointAnalyticsService service to connect.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The HP Support Solutions Framework Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
 
Log: 'System' Date/Time: 23/07/2018 6:57:16 AM
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the HPSupportSolutionsFrameworkService service to connect.
 
Both
HP Support Solutions Framework
HP Touchpoint Analytics Client

need to be either updated or removed.  HP support should have newer versions for your PC.

 

Process Explorer says Windows update is in the process of updating your system.  Give it an hour or so and then reboot and make a new Process Explorer log.  Remember to wait a full minute after starting process explorer before saving the log.

 

OK.  Let's try Latency Monitor:

Go to

http://www.resplendence.com/downloads

Scroll down to

System Monitoring Tools

and then find

LatencyMon 6.70 (or it may be a higher number if they update)

Click on Download free home edition

Save it then right click and Run As Admin.  It will install and then start the program.  
It will tell you to click on the Start button but there isn't one.  
Instead click on the green arrowhead (looks like a Play button).   Let it run for at least 20 seconds.  Then hit the red box to stop it.

Edit, Copy Report text to Clipboard then move to a REPLY and Ctrl + v to paste the text into a reply.


  • 0

#15
RyanM_15

RyanM_15

    Member

  • Topic Starter
  • Member
  • PipPip
  • 15 posts

Sorry for the late reply. I was deployed (Air force member) for 4 weeks and never had access to the computer.

 

_________________________________________________________________________________________________________
REPORT
_________________________________________________________________________________________________________
In Depth Latency Tests has been analyzing your system for  0:00:25  (h:mm:ss) on all processors in the system.
 
Test performed: Tight Loop Latency Test at HIGH_LEVEL IRQL
Tight Loop Latency Test at HIGH_LEVEL IRQL:  measure SMIs and CPU stalls. Run test with all maskable interrupts disabled.
NOTE: SMIs that are initiated by software have not been measuded.
 
 
Highest latency measured:      23.93812 µs
This value reflects the highest measured interruption interval of a tight loop spinning at HIGH_LEVEL interrupt request level.
 
 
_________________________________________________________________________________________________________
PER CPU MEASURINGS
_________________________________________________________________________________________________________
Highest latency on CPU 0:      13.67892 µs
Highest latency on CPU 1:      23.93812 µs
Highest latency on CPU 2:      16.52870 µs
Highest latency on CPU 3:      23.93812 µs
 
 
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name:                                        DESKTOP-BBQIE4L
OS version:                                           Windows 10 , 10.0, build: 17134Highest latency on CPU 3:      23.93812 µs
Hardware:                                             HP Pavilion Notebook , HP, 80B2
CPU:                                                  AuthenticAMD AMD A6-6310 APU with AMD Radeon R4 Graphics 
Logical processors:                                   4
Processor groups:                                     1
RAM:                                                  3518 MB total
 
I hope this helps

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP