Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

computer running slowwww, Chrome will not open up, freezes, pop-up ads

Started by Krueg9651 , Sep 15 2018 06:04 PM

Please log in to reply

#31
Krueg9651

Posted 02 May 2019 - 08:09 PM

Member

Topic Starter
Member
136 posts

Result from earlier elevated command prompt: "Windows did not find any integrity violations"

Vino's Event Viewer v01c run on Windows 7 in English

Report run at 02/05/2019 8:43:59 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Critical Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Error Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'System' Date/Time: 03/05/2019 1:17:25 AM

Type: Error Category: 0

Event: 137 Source: Microsoft-Windows-Kernel-Power

The system firmware has changed the processor's memory type range registers (MTRRs) across a sleep state transition (S4). This can result in reduced resume performance.

Log: 'System' Date/Time: 03/05/2019 12:12:57 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 03/05/2019 12:12:57 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 03/05/2019 12:12:57 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscDataProtection and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 03/05/2019 12:12:05 AM

Type: Error Category: 0

Event: 10010 Source: Microsoft-Windows-DistributedCOM

The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 03/05/2019 12:12:05 AM

Type: Error Category: 0

Event: 7022 Source: Service Control Manager

The Background Intelligent Transfer Service service hung on starting.

Log: 'System' Date/Time: 03/05/2019 12:11:55 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscCloudBackupProvider and APPID Unavailable to the user Andrew-PC\Andrew SID (S-1-5-21-3960278461-2044705814-1633424519-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 03/05/2019 12:11:48 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 03/05/2019 12:11:45 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 03/05/2019 12:11:38 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 03/05/2019 12:10:13 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user Andrew-PC\Andrew SID (S-1-5-21-3960278461-2044705814-1633424519-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 03/05/2019 12:09:39 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 03/05/2019 12:07:55 AM

Type: Error Category: 0

Event: 1500 Source: SNMP

The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Log: 'System' Date/Time: 02/05/2019 10:30:33 AM

Type: Error Category: 0

Event: 137 Source: Microsoft-Windows-Kernel-Power

The system firmware has changed the processor's memory type range registers (MTRRs) across a sleep state transition (S4). This can result in reduced resume performance.

Log: 'System' Date/Time: 02/05/2019 9:16:23 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 02/05/2019 9:16:23 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 02/05/2019 9:16:23 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 02/05/2019 9:16:22 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

Log: 'System' Date/Time: 02/05/2019 8:27:52 AM

Type: Error Category: 0

Event: 137 Source: Microsoft-Windows-Kernel-Power

The system firmware has changed the processor's memory type range registers (MTRRs) across a sleep state transition (S4). This can result in reduced resume performance.

Log: 'System' Date/Time: 02/05/2019 7:26:46 AM

Type: Error Category: 0

Event: 10016 Source: Microsoft-Windows-DistributedCOM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Warning Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'System' Date/Time: 03/05/2019 12:07:59 AM

Type: Warning Category: 0

Event: 11 Source: Microsoft-Windows-Wininit

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit http://support.microsoft.com/kb/197571for more information.

Log: 'System' Date/Time: 03/05/2019 12:07:40 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device {C5A047D8-CB5B-40E9-B9E3-316AB06B5A18}\WirelessKeyboardFilter\9&20ddc34b&0&01.

Log: 'System' Date/Time: 03/05/2019 12:07:26 AM

Type: Warning Category: 0

Event: 1 Source: RTL8167

Realtek PCIe GBE Family Controller is disconnected from network.

Log: 'System' Date/Time: 02/05/2019 7:22:25 AM

Type: Warning Category: 0

Event: 11 Source: Microsoft-Windows-Wininit

Log: 'System' Date/Time: 02/05/2019 7:22:04 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device {C5A047D8-CB5B-40E9-B9E3-316AB06B5A18}\WirelessKeyboardFilter\9&20ddc34b&0&01.

Log: 'System' Date/Time: 02/05/2019 7:21:53 AM

Type: Warning Category: 0

Event: 1 Source: RTL8167

Realtek PCIe GBE Family Controller is disconnected from network.

Log: 'System' Date/Time: 02/05/2019 12:43:22 AM

Type: Warning Category: 0

Event: 11 Source: Microsoft-Windows-Wininit

Log: 'System' Date/Time: 02/05/2019 12:42:55 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device {C5A047D8-CB5B-40E9-B9E3-316AB06B5A18}\WirelessKeyboardFilter\9&20ddc34b&0&01.

Log: 'System' Date/Time: 02/05/2019 12:42:49 AM

Type: Warning Category: 0

Event: 1 Source: RTL8167

Realtek PCIe GBE Family Controller is disconnected from network.

Log: 'System' Date/Time: 02/05/2019 12:16:39 AM

Type: Warning Category: 0

Event: 134 Source: Microsoft-Windows-Time-Service

NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)

Log: 'System' Date/Time: 01/05/2019 12:42:45 AM

Type: Warning Category: 0

Event: 134 Source: Microsoft-Windows-Time-Service

Log: 'System' Date/Time: 30/04/2019 11:40:48 AM

Type: Warning Category: 0

Event: 134 Source: Microsoft-Windows-Time-Service

Log: 'System' Date/Time: 30/04/2019 5:01:02 AM

Type: Warning Category: 0

Event: 134 Source: Microsoft-Windows-Time-Service

Log: 'System' Date/Time: 30/04/2019 3:40:36 AM

Type: Warning Category: 0

Event: 11 Source: Microsoft-Windows-Wininit

Log: 'System' Date/Time: 30/04/2019 3:40:05 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device {C5A047D8-CB5B-40E9-B9E3-316AB06B5A18}\WirelessKeyboardFilter\9&20ddc34b&0&01.

Log: 'System' Date/Time: 30/04/2019 3:40:02 AM

Type: Warning Category: 0

Event: 1 Source: RTL8167

Realtek PCIe GBE Family Controller is disconnected from network.

Vino's Event Viewer v01c run on Windows 7 in English

Report run at 02/05/2019 8:45:23 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Critical Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Error Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'Application' Date/Time: 03/05/2019 12:06:42 AM

Type: Error Category: 0

Event: 1000 Source: Microsoft-Windows-Perflib

Access to performance data was denied to user "SYSTEM" (value from GetUserName() for the running thread) as attempted from module "C:\Program Files\Rivet Networks\SmartByte\RNDBWM.exe" (value from GetModuleFileName() for the binary that issued the query).

Log: 'Application' Date/Time: 02/05/2019 10:30:32 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: m->NextScheduledSPRetry 1797

Log: 'Application' Date/Time: 02/05/2019 10:30:32 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: m->NextScheduledEvent 1797

Log: 'Application' Date/Time: 02/05/2019 10:30:32 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: Continuously busy for more than a second

Log: 'Application' Date/Time: 02/05/2019 2:48:49 AM

Type: Error Category: 0

Event: 1000 Source: Microsoft-Windows-Perflib

Log: 'Application' Date/Time: 01/05/2019 1:55:23 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: m->NextScheduledSPRetry 1844

Log: 'Application' Date/Time: 01/05/2019 1:55:23 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: m->NextScheduledEvent 1844

Log: 'Application' Date/Time: 01/05/2019 1:55:23 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: Continuously busy for more than a second

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Warning Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'Application' Date/Time: 03/05/2019 1:44:45 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:44:44 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:44:44 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:42:59 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:42:59 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:42:59 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:23:44 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:23:44 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 1:23:44 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 12:18:50 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 12:18:50 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 12:13:51 AM

Type: Warning Category: 7

Event: 508 Source: ESENT

Video.UI (4608,D,0) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb" at offset 24576 (0x0000000000006000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (20 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 03/05/2019 12:12:18 AM

Type: Warning Category: 7

Event: 510 Source: ESENT

Video.UI (4608,U,98) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\edb.chk" at offset 0 (0x0000000000000000) for 4096 (0x00001000) bytes succeeded, but took an abnormally long time (15 seconds) to be serviced by the OS. In addition, 0 other I/O requests to this file have also taken an abnormally long time to be serviced since the last message regarding this problem was posted 82 seconds ago. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 03/05/2019 12:12:05 AM

Type: Warning Category: 0

Event: 1008 Source: Microsoft-Windows-Perflib

The Open procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed with error code An internal error occurred.. Performance data for this service will not be available.

Log: 'Application' Date/Time: 03/05/2019 12:11:48 AM

Type: Warning Category: 7

Event: 508 Source: ESENT

Video.UI (4608,U,98) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\EntClientDb.edb" at offset 0 (0x0000000000000000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (18 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 03/05/2019 12:11:30 AM

Type: Warning Category: 1

Event: 533 Source: ESENT

Video.UI (4608,U,0) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\edb.chk" at offset 4096 (0x0000000000001000) for 4096 (0x00001000) bytes has not completed for 36 second(s). This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 03/05/2019 12:11:13 AM

Type: Warning Category: 7

Event: 508 Source: ESENT

Video.UI (4608,U,98) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\edb.chk" at offset 4096 (0x0000000000001000) for 4096 (0x00001000) bytes succeeded, but took an abnormally long time (17 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 03/05/2019 12:08:04 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 12:08:04 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

Log: 'Application' Date/Time: 03/05/2019 12:08:04 AM

Type: Warning Category: 0

Event: 1534 Source: Microsoft-Windows-User Profiles Service

Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

_________________________________________________________________________________________________________

CONCLUSION

_________________________________________________________________________________________________________

Your system appears to be suitable for handling real-time audio and other tasks without dropouts.

LatencyMon has been analyzing your system for 0:00:23 (h:mm:ss) on all processors.

_________________________________________________________________________________________________________

SYSTEM INFORMATION

_________________________________________________________________________________________________________

Computer name: ANDREW-PC

OS version: Windows 10 , 10.0, build: 17763 (x64)

Hardware: Inspiron 620 , Dell Inc., 0GDG8Y

CPU: GenuineIntel Intel® Core™ i5-2320 CPU @ 3.00GHz

Logical processors: 4

Processor groups: 1

RAM: 8174 MB total

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer

System Idle Process 90.62 56 K 8 K 0

procexp64.exe 3.71 53,324 K 86,044 K 29588 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

SyncUP.exe 1.04 168,832 K 52,972 K 9372 SyncUP Nero AG (Verified) Nero AG

dwm.exe 0.90 46,016 K 36,628 K 1056 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows

Interrupts 0.66 0 K 0 K n/a Hardware Interrupts and DPCs

csrss.exe 0.35 3,852 K 2,760 K 620 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher

accuweather.exe 0.33 79,556 K 3,052 K 9760 AccuWeather.com desktop weather widget (Verified) Unlimited Realities

MsMpEng.exe 0.33 166,648 K 137,088 K 3476 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Corporation

IndicatorOSD.exe 0.30 1,640 K 3,020 K 9752 OSD Tool DELL (No signature was present in the subject) DELL

WmiPrvSE.exe 0.29 9,872 K 15,968 K 5508 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows

svchost.exe 0.26 97,704 K 96,476 K 1896 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

System 0.19 200 K 3,596 K 4

svchost.exe 0.15 12,636 K 17,456 K 3188 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

SmartByteNetworkService.exe 0.13 87,696 K 89,380 K 3412 SmartByte Network Service Rivet Networks (Verified) Rivet Networks LLC

Toaster.exe 0.12 42,240 K 23,628 K 5992 Dell DataSafe Local Backup SoftThinks - Dell (Verified) Dell Inc

chrome.exe 0.10 70,560 K 95,128 K 5156 Google Chrome Google Inc. (Verified) Google LLC

pcdrwi.exe 0.06 93,424 K 73,392 K 12832 PC-Doctor Communications Manager PC-Doctor, Inc. (Verified) PC-Doctor, Inc.

SmartByteTelemetry.exe 0.06 48,552 K 16,524 K 8276 SmartByteTelemetry DELL (Verified) Rivet Networks LLC

chrome.exe 0.05 137,756 K 194,100 K 9136 Google Chrome Google Inc. (Verified) Google LLC

explorer.exe 0.05 76,284 K 102,968 K 6888 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows

svchost.exe 0.04 3,060 K 4,688 K 2252 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

DSAPI.exe 0.04 46,320 K 32,328 K 12440 PC-Doctor, Inc. (Verified) PC-Doctor, Inc.

chrome.exe 0.03 23,064 K 40,436 K 10532 Google Chrome Google Inc. (Verified) Google LLC

SmartAudio.exe 0.03 52,896 K 42,876 K 9432 SmartAudio Conexant Systems, Inc (Verified) Conexant Systems, Inc.

svchost.exe 0.02 2,852 K 5,388 K 2284 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

googledrivesync.exe 0.02 63,072 K 66,184 K 10460 Google Drive Google (Verified) Google Inc

SupportAssistAgent.exe 0.02 603,620 K 78,808 K 14056 Service Dell Inc. (Verified) Dell Inc.

svchost.exe 0.02 8,004 K 11,636 K 460 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

ServiceShell.exe 0.01 43,648 K 27,028 K 12780 ServiceShell (Verified) Dell Inc

iPodService.exe 0.01 2,336 K 3,688 K 9484 iPodService Module (64-bit) Apple Inc. (Verified) Apple Inc.

lsass.exe 0.01 6,748 K 11,396 K 696 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher

AppleMobileDeviceService.exe 0.01 3,560 K 4,684 K 3456 MobileDeviceService Apple Inc. (Verified) Apple Inc.

svchost.exe 0.01 11,292 K 22,584 K 3172 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

MOM.exe 0.01 28,040 K 6,212 K 9948 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc. (Verified) Advanced Micro Devices, Inc.

smartscreen.exe 0.01 10,104 K 20,560 K 5132 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows

chrome.exe 0.01 21,220 K 29,776 K 9308 Google Chrome Google Inc. (Verified) Google LLC

svchost.exe 0.01 2,328 K 4,176 K 1748 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

NOBuAgent.exe < 0.01 2,060 K 2,724 K 3448 Dell DataSafe Online Service Dell, Inc. (Verified) Symantec Corporation

DCCService.exe < 0.01 24,364 K 14,372 K 12300 DCCService Dell Inc. (Verified) Dell Inc

Nero.AndroidServer.exe < 0.01 1,832 K 2,608 K 11756 Nero.AndroidServer.exe Nero AG (Verified) Nero AG

conhost.exe < 0.01 6,656 K 6,972 K 2748 Console Window Host Microsoft Corporation (Verified) Microsoft Windows

fontdrvhost.exe < 0.01 3,504 K 4,588 K 364 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows

svchost.exe < 0.01 2,136 K 5,900 K 8456 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 18,612 K 16,636 K 1460 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 11,356 K 17,260 K 932 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

csrss.exe < 0.01 2,152 K 3,004 K 516 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 2,700 K 4,384 K 624 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

OneDrive.exe < 0.01 14,828 K 23,132 K 9332 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation

WmiPrvSE.exe < 0.01 28,660 K 37,188 K 26724 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows

svchost.exe < 0.01 1,848 K 2,672 K 1384 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

iTunesHelper.exe < 0.01 4,368 K 6,088 K 3576 iTunesHelper Apple Inc. (Verified) Apple Inc.

svchost.exe < 0.01 3,624 K 6,556 K 4628 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

YourPhone.exe Suspended 15,132 K 6,852 K 8068 (No signature was present in the subject)

WUDFHost.exe 1,632 K 2,644 K 900 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows

WUDFHost.exe 2,020 K 2,676 K 1596 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows

WmiPrvSE.exe 7,188 K 8,960 K 8168 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows

WmiPrvSE.exe 2,436 K 8,328 K 32664 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows

WinStore.App.exe Suspended 54,068 K 1,208 K 9512 Store Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

winlogon.exe 2,704 K 6,660 K 840 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows

wininit.exe 1,372 K 1,772 K 612 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows Publisher

WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe Suspended 20,540 K 45,896 K 10072 WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe Microsoft Corporation (Verified) Microsoft Windows

Windows.WARP.JITService.exe 1,280 K 1,572 K 2544 (Verified) Microsoft Windows

Video.UI.exe Suspended 24,076 K 8,200 K 4608 (No signature was present in the subject)

taskhostw.exe 6,484 K 12,100 K 6132 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows

svchost.exe 1,352 K 1,928 K 1924 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,840 K 14,696 K 3692 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,000 K 4,868 K 1364 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 10,280 K 9,592 K 3248 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,084 K 6,208 K 6608 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,116 K 9,132 K 6256 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,324 K 7,756 K 2204 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,928 K 7,192 K 1440 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,820 K 2,876 K 3364 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 33,204 K 33,660 K 3180 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 5,692 K 10,192 K 6048 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 8,812 K 26,096 K 6084 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,976 K 5,424 K 1916 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,584 K 2,516 K 1204 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,432 K 4,164 K 4620 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,200 K 4,792 K 3304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,324 K 5,964 K 9124 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,120 K 4,896 K 3196 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,896 K 6,932 K 2908 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,216 K 3,988 K 4184 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,736 K 5,276 K 1780 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,428 K 7,676 K 3532 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,868 K 5,564 K 3916 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,328 K 1,840 K 3736 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,248 K 3,208 K 3896 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,332 K 2,368 K 3848 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 9,448 K 12,752 K 2236 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,656 K 2,196 K 3512 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,296 K 1,424 K 3560 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,612 K 2,764 K 3156 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,856 K 7,564 K 2964 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,380 K 1,884 K 3164 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,712 K 11,940 K 2648 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,004 K 8,612 K 3140 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,052 K 3,168 K 2632 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,484 K 7,344 K 2496 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,276 K 4,816 K 1904 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,892 K 3,912 K 2768 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,728 K 2,928 K 2504 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,872 K 8,384 K 2408 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,108 K 9,560 K 1528 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,904 K 5,520 K 1044 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,724 K 5,716 K 1696 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,788 K 3,428 K 1484 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,080 K 4,324 K 1404 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,476 K 3,932 K 1640 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,956 K 6,308 K 1632 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,476 K 5,348 K 1236 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 956 K 1,032 K 892 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,092 K 3,292 K 11176 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,380 K 5,448 K 23308 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,440 K 8,596 K 3636 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,764 K 3,792 K 3708 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,180 K 7,796 K 32604 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,820 K 9,516 K 6788 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,792 K 2,412 K 1264 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,948 K 4,156 K 10036 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 5,284 K 7,664 K 12900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,244 K 4,928 K 5392 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 16,372 K 21,476 K 17356 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,564 K 5,736 K 30480 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

SupportAssistAppWire.exe 17,196 K 8,280 K 15928 SupportAssistAppWire (Verified) Dell Inc.

STService.exe 4,228 K 8,468 K 6192 ST Service Scheduling (Verified) Dell Inc

spoolsv.exe 5,564 K 7,160 K 3052 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows

snmp.exe 3,616 K 4,268 K 3592 SNMP Service Microsoft Corporation (Verified) Microsoft Windows

SMSvcHost.exe 22,556 K 3,976 K 5760 SMSvcHost.exe Microsoft Corporation (Verified) Microsoft Corporation

SMSvcHost.exe 25,352 K 6,440 K 4316 SMSvcHost.exe Microsoft Corporation (Verified) Microsoft Corporation

smss.exe 488 K 528 K 376 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows Publisher

SkypeBackgroundHost.exe Suspended 1,960 K 1,624 K 8036 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

SkypeApp.exe Suspended 19,568 K 6,272 K 8012 SkypeApp Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

sihost.exe 7,016 K 17,544 K 6004 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows

ShellExperienceHost.exe 37,612 K 56,092 K 7312 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows

SgrmBroker.exe 8,052 K 8,260 K 13724 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher

SftService.exe 2,664 K 4,060 K 3404 SoftThinks Agent Service SoftThinks SAS (Verified) Dell Inc

services.exe 5,504 K 7,560 K 684 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows Publisher

SecurityHealthSystray.exe 1,792 K 2,932 K 3400 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows

SecurityHealthService.exe 4,312 K 9,196 K 3760 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher

SearchUI.exe Suspended 75,744 K 63,908 K 7456 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows

SearchIndexer.exe 38,060 K 32,172 K 7988 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows

SASrv.exe 1,356 K 1,764 K 3496 SmartAudio Service Application Conexant Systems, Inc. (Verified) Conexant Systems, Inc.

RuntimeBroker.exe 1,792 K 4,064 K 4640 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 5,676 K 14,108 K 7492 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 13,932 K 25,468 K 11712 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 2,756 K 4,128 K 6044 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 4,296 K 14,852 K 8880 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 1,700 K 2,536 K 8284 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 6,528 K 13,792 K 7804 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 2,584 K 3,316 K 9300 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 5,324 K 11,912 K 7808 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 2,072 K 3,072 K 10688 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RNDBWMService.exe 13,588 K 4,208 K 4268 Windows Service Wrapper CloudBees, Inc. (Verified) Rivet Networks LLC

RNDBWM.exe 6,064 K 8,020 K 3860 Rivet Networks Dynamic Bandwidth Manager Rivet Networks LLC (Verified) Rivet Networks LLC

Registry 1,668 K 26,368 K 104

procexp.exe 3,288 K 10,720 K 31616 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

PresentationFontCache.exe 30,444 K 11,304 K 2072 PresentationFontCache.exe Microsoft Corporation (Verified) Microsoft Corporation

OSDSrv.exe 12,224 K 13,204 K 3440 OSD Service Application Chicony (No signature was present in the subject) Chicony

NisSrv.exe 8,216 K 6,916 K 7220 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Corporation

NASvc.exe 2,700 K 3,452 K 10192 NeroUpdate Nero AG (Verified) Nero AG

msdtc.exe 3,084 K 3,348 K 13692 Microsoft Distributed Transaction Coordinator Service Microsoft Corporation (Verified) Microsoft Windows

mqsvc.exe 4,720 K 4,796 K 4460 Message Queuing Service Microsoft Corporation (Verified) Microsoft Windows

MicrosoftEdgeSH.exe Suspended 3,972 K 3,244 K 8560 Microsoft Edge Web Platform Microsoft Corporation (Verified) Microsoft Windows

MicrosoftEdgeCP.exe Suspended 5,928 K 4,980 K 8356 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows

MicrosoftEdge.exe Suspended 20,740 K 15,388 K 6992 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation

Microsoft.Photos.exe Suspended 59,744 K 43,588 K 5472 (No signature was present in the subject)

Memory Compression 284 K 71,936 K 2004

mDNSResponder.exe 1,696 K 3,604 K 3132 Bonjour Service Apple Inc. (Verified) Apple Inc.

LaunchOSDSrv.exe 4,124 K 3,292 K 9604 (No signature was present in the subject)

googledrivesync.exe 1,128 K 1,288 K 9232 Google Drive Google (Verified) Google Inc

GoogleCrashHandler64.exe 1,688 K 280 K 9296 Google Crash Handler Google LLC (Verified) Google Inc

GoogleCrashHandler.exe 1,732 K 272 K 9012 Google Crash Handler Google LLC (Verified) Google Inc

fontdrvhost.exe 1,788 K 1,920 K 976 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows

DSUpd.exe 17,520 K 9,264 K 6768 DataSafe Update Launcher SoftThinks - Dell (Verified) Dell Inc

dllhost.exe 3,956 K 4,748 K 13552 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows

dllhost.exe 1,532 K 3,712 K 7048 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows

dllhost.exe 3,420 K 3,308 K 1612 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows

DDVRulesProcessor.exe 16,848 K 5,252 K 10716 Dell Data Vault Rules Processor Dell Inc. (Verified) Dell Inc

DDVDataCollector.exe 19,168 K 16,524 K 14232 Dell Data Vault Data Collector Service Dell Inc. (Verified) Dell Inc

DDVCollectorSvcApi.exe 1,612 K 2,460 K 14328 Dell Data Vault Data Collector Service API Dell Inc. (Verified) Dell Inc

dasHost.exe 1,120 K 1,560 K 3660 Device Association Framework Provider Host Microsoft Corporation (Verified) Microsoft Windows

ctfmon.exe 4,868 K 10,584 K 3152 CTF Loader Microsoft Corporation (Verified) Microsoft Windows

conhost.exe 2,628 K 13,452 K 23604 Console Window Host Microsoft Corporation (Verified) Microsoft Windows

conhost.exe 6,456 K 6,824 K 12868 Console Window Host Microsoft Corporation (Verified) Microsoft Windows

cmd.exe 3,388 K 3,992 K 12056 Windows Command Processor Microsoft Corporation (Verified) Microsoft Windows

chrome.exe 24,436 K 42,480 K 10540 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 86,180 K 76,032 K 6436 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 19,996 K 13,328 K 3220 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 20,396 K 13,764 K 10364 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 56,852 K 55,628 K 10372 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 20,440 K 13,668 K 10356 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 14,220 K 23,724 K 29048 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 25,000 K 23,200 K 10380 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 21,056 K 35,268 K 19212 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 2,224 K 3,680 K 3604 Google Chrome Google Inc. (Verified) Google LLC

chrome.exe 2,144 K 3,572 K 7700 Google Chrome Google Inc. (Verified) Google LLC

CCC.exe 73,048 K 9,988 K 1972 Catalyst Control Center: Host application Advanced Micro Devices Inc. (Verified) Advanced Micro Devices, Inc.

caudiofilteragent64.exe 2,044 K 4,672 K 6272 Conexant High Definition Audio Filter Agent Conexant Systems, Inc. (Verified) Conexant Systems, Inc.

browser_broker.exe 3,212 K 5,664 K 1376 Browser_Broker Microsoft Corporation (Verified) Microsoft Windows

backgroundTaskHost.exe 9,072 K 2,936 K 11964 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

audiodg.exe 6,964 K 13,280 K 24452 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows

atiw.exe 2,676 K 4,448 K 13308 DDV ATI Graphics Worker Dell Inc. (Verified) Dell Inc

atiesrxx.exe 1,404 K 2,148 K 1840 AMD External Events Service Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher

atieclxx.exe 2,484 K 4,736 K 1872 AMD External Events Client Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher

armsvc.exe 1,364 K 2,172 K 3424 Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems, Incorporated

ApplicationFrameHost.exe 12,132 K 15,796 K 8092 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows

Image Name PID Services

========================= ======== ============================================

System Idle Process 0 N/A

System 4 N/A

Registry 104 N/A

smss.exe 376 N/A

csrss.exe 516 N/A

wininit.exe 612 N/A

csrss.exe 620 N/A

services.exe 684 N/A

lsass.exe 696 KeyIso, SamSs, VaultSvc

winlogon.exe 840 N/A

svchost.exe 892 PlugPlay

WUDFHost.exe 900 N/A

svchost.exe 932 BrokerInfrastructure, DcomLaunch, Power,

SystemEventsBroker

fontdrvhost.exe 976 N/A

fontdrvhost.exe 364 N/A

svchost.exe 460 RpcEptMapper, RpcSs

svchost.exe 624 LSM

dwm.exe 1056 N/A

svchost.exe 1204 CoreMessagingRegistrar

svchost.exe 1236 NcbService

svchost.exe 1364 TimeBrokerSvc

svchost.exe 1384 hidserv

svchost.exe 1460 EventLog

svchost.exe 1528 Schedule

WUDFHost.exe 1596 N/A

svchost.exe 1632 ProfSvc

svchost.exe 1640 SEMgrSvc

svchost.exe 1696 nsi

svchost.exe 1748 Dhcp

svchost.exe 1780 UserManager

atiesrxx.exe 1840 AMD External Events Utility

atieclxx.exe 1872 N/A

svchost.exe 1896 SysMain

svchost.exe 1904 CscService

svchost.exe 1916 EventSystem

svchost.exe 1924 Themes

Memory Compression 2004 N/A

svchost.exe 1044 SENS

svchost.exe 1404 AudioEndpointBuilder

svchost.exe 1484 FontCache

svchost.exe 2204 NlaSvc

svchost.exe 2252 Dnscache

svchost.exe 2284 netprofm

svchost.exe 2408 Audiosrv

svchost.exe 2496 Wcmsvc

svchost.exe 2504 DusmSvc

svchost.exe 2648 StateRepository

svchost.exe 2768 WinHttpAutoProxySvc

svchost.exe 2908 WlanSvc

svchost.exe 2964 ShellHWDetection

spoolsv.exe 3052 Spooler

svchost.exe 2236 BFE, mpssvc

svchost.exe 2632 LanmanWorkstation

mDNSResponder.exe 3132 Bonjour Service

svchost.exe 3140 CryptSvc

svchost.exe 3156 fdPHost

svchost.exe 3164 DeviceAssociationService

svchost.exe 3172 DiagTrack

svchost.exe 3180 DPS

svchost.exe 3188 Winmgmt

svchost.exe 3196 AppHostSvc

svchost.exe 3304 W3SVC, WAS

SftService.exe 3404 SftService

SmartByteNetworkService.e 3412 SmartByte Network Service x64

armsvc.exe 3424 AdobeARMservice

OSDSrv.exe 3440 OSDSvc

NOBuAgent.exe 3448 NOBU

AppleMobileDeviceService. 3456 Apple Mobile Device Service

MsMpEng.exe 3476 WinDefend

SASrv.exe 3496 SAService

svchost.exe 3512 SstpSvc

svchost.exe 3532 iphlpsvc

svchost.exe 3560 TrkWks

snmp.exe 3592 SNMP

dasHost.exe 3660 N/A

svchost.exe 3692 WpnService

svchost.exe 3736 WdiServiceHost

svchost.exe 3848 Netman

svchost.exe 3896 TapiSrv

svchost.exe 3916 FDResPub

svchost.exe 4184 SSDPSRV

RNDBWMService.exe 4268 RNDBWM

SMSvcHost.exe 4316 NetPipeActivator, NetTcpActivator,

NetTcpPortSharing

mqsvc.exe 4460 MSMQ

svchost.exe 4620 LanmanServer

svchost.exe 4628 RasMan

RNDBWM.exe 3860 N/A

conhost.exe 2748 N/A

WmiPrvSE.exe 5508 N/A

SMSvcHost.exe 5760 NetMsmqActivator

sihost.exe 6004 N/A

svchost.exe 6048 CDPUserSvc_49052

svchost.exe 6084 WpnUserService_49052

taskhostw.exe 6132 N/A

svchost.exe 1440 TokenBroker

svchost.exe 3364 TabletInputService

ctfmon.exe 3152 N/A

Toaster.exe 5992 N/A

STService.exe 6192 N/A

svchost.exe 6256 CDPSvc

svchost.exe 6608 PcaSvc

DSUpd.exe 6768 N/A

explorer.exe 6888 N/A

svchost.exe 6788 cbdhsvc_49052

dllhost.exe 7048 N/A

NisSrv.exe 7220 WdNisSvc

ShellExperienceHost.exe 7312 N/A

SearchUI.exe 7456 N/A

RuntimeBroker.exe 7492 N/A

RuntimeBroker.exe 7808 N/A

SearchIndexer.exe 7988 WSearch

SkypeApp.exe 8012 N/A

SkypeBackgroundHost.exe 8036 N/A

YourPhone.exe 8068 N/A

ApplicationFrameHost.exe 8092 N/A

MicrosoftEdge.exe 6992 N/A

svchost.exe 1264 WarpJITSvc

browser_broker.exe 1376 N/A

dllhost.exe 1612 N/A

Windows.WARP.JITService.e 2544 N/A

RuntimeBroker.exe 8284 N/A

MicrosoftEdgeCP.exe 8356 N/A

svchost.exe 8456 LicenseManager

MicrosoftEdgeSH.exe 8560 N/A

RuntimeBroker.exe 8880 N/A

svchost.exe 3636 lfsvc

svchost.exe 3708 camsvc

RuntimeBroker.exe 4640 N/A

Video.UI.exe 4608 N/A

smartscreen.exe 5132 N/A

SecurityHealthSystray.exe 3400 N/A

caudiofilteragent64.exe 6272 N/A

SecurityHealthService.exe 3760 SecurityHealthService

iTunesHelper.exe 3576 N/A

googledrivesync.exe 9232 N/A

OneDrive.exe 9332 N/A

SyncUP.exe 9372 N/A

SmartAudio.exe 9432 N/A

iPodService.exe 9484 iPod Service

LaunchOSDSrv.exe 9604 N/A

IndicatorOSD.exe 9752 N/A

accuweather.exe 9760 N/A

MOM.exe 9948 N/A

CCC.exe 1972 N/A

Microsoft.Photos.exe 5472 N/A

GoogleCrashHandler.exe 9012 N/A

GoogleCrashHandler64.exe 9296 N/A

RuntimeBroker.exe 9300 N/A

chrome.exe 9136 N/A

chrome.exe 3604 N/A

chrome.exe 7700 N/A

chrome.exe 6436 N/A

chrome.exe 9308 N/A

svchost.exe 3248 BITS

svchost.exe 10036 OneSyncSvc_49052

chrome.exe 3220 N/A

chrome.exe 10356 N/A

chrome.exe 10364 N/A

chrome.exe 10372 N/A

chrome.exe 10380 N/A

googledrivesync.exe 10460 N/A

RuntimeBroker.exe 11712 N/A

chrome.exe 5156 N/A

PresentationFontCache.exe 2072 FontCache3.0.0.0

svchost.exe 9124 wscsvc

NASvc.exe 10192 NAUpdate

Nero.AndroidServer.exe 11756 N/A

RuntimeBroker.exe 10688 N/A

DDVRulesProcessor.exe 10716 DDVRulesProcessor

SmartByteTelemetry.exe 8276 N/A

DCCService.exe 12300 Dell Customer Connect

DSAPI.exe 12440 Dell Hardware Support

ServiceShell.exe 12780 DellClientManagementService

pcdrwi.exe 12832 N/A

conhost.exe 12868 N/A

svchost.exe 12900 UsoSvc

dllhost.exe 13552 COMSysApp

msdtc.exe 13692 MSDTC

SgrmBroker.exe 13724 SgrmBroker

SupportAssistAgent.exe 14056 SupportAssistAgent

DDVDataCollector.exe 14232 DDVDataCollector

DDVCollectorSvcApi.exe 14328 DDVCollectorSvcApi

WmiPrvSE.exe 8168 N/A

atiw.exe 13308 N/A

WinStore.App.exe 9512 N/A

RuntimeBroker.exe 7804 N/A

svchost.exe 11176 StorSvc

backgroundTaskHost.exe 11964 N/A

RuntimeBroker.exe 6044 N/A

svchost.exe 5392 Appinfo

SupportAssistAppWire.exe 15928 N/A

svchost.exe 17356 wuauserv

svchost.exe 23308 lmhosts

WindowsInternal.Composabl 10072 N/A

WmiPrvSE.exe 26724 N/A

svchost.exe 30480 WdiSystemHost

WmiPrvSE.exe 32664 N/A

chrome.exe 33632 N/A

dllhost.exe 32532 N/A

chrome.exe 3016 N/A

chrome.exe 30116 N/A

svchost.exe 35668 p2pimsvc

svchost.exe 33352 PNRPsvc

chrome.exe 35676 N/A

chrome.exe 35456 N/A

chrome.exe 35012 N/A

chrome.exe 33960 N/A

chrome.exe 33880 N/A

chrome.exe 33252 N/A

chrome.exe 34776 N/A

chrome.exe 34820 N/A

chrome.exe 35728 N/A

svchost.exe 33740 AppXSvc

notepad.exe 34732 N/A

chrome.exe 34456 N/A

SearchProtocolHost.exe 37784 N/A

chrome.exe 37628 N/A

svchost.exe 18992 ClipSVC

notepad.exe 39152 N/A

SearchFilterHost.exe 39352 N/A

backgroundTaskHost.exe 39308 N/A

CompatTelRunner.exe 38412 N/A

conhost.exe 39068 N/A

audiodg.exe 31996 N/A

dllhost.exe 9804 N/A

dllhost.exe 16656 N/A

cmd.exe 34788 N/A

conhost.exe 39664 N/A

tasklist.exe 38976 N/A

_________________________________________________________________________________________________________

CPU SPEED

_________________________________________________________________________________________________________

Reported CPU speed: 2993 MHz

Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.

WARNING: the CPU speed that was measured is only a fraction of the CPU speed reported. Your CPUs may be throttled back due to variable speed settings and thermal issues. It is suggested that you run a utility which reports your actual CPU frequency and temperature.

_________________________________________________________________________________________________________

MEASURED INTERRUPT TO USER PROCESS LATENCIES

_________________________________________________________________________________________________________

The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.

Highest measured interrupt to process latency (µs): 205.10

Average measured interrupt to process latency (µs): 5.286235

Highest measured interrupt to DPC latency (µs): 175.90

Average measured interrupt to DPC latency (µs): 1.311209

_________________________________________________________________________________________________________

REPORTED ISRs

_________________________________________________________________________________________________________

Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.

Highest ISR routine execution time (µs): 173.595055

Driver with highest ISR routine execution time: ataport.SYS - ATAPI Driver Extension, Microsoft Corporation

Highest reported total ISR routine time (%): 0.008215

Driver with highest ISR total time: ataport.SYS - ATAPI Driver Extension, Microsoft Corporation

Total time spent in ISRs (%) 0.013993

ISR count (execution time <250 µs): 1557

ISR count (execution time 250-500 µs): 0

ISR count (execution time 500-999 µs): 0

ISR count (execution time 1000-1999 µs): 0

ISR count (execution time 2000-3999 µs): 0

ISR count (execution time >=4000 µs): 0

_________________________________________________________________________________________________________

REPORTED DPCs

_________________________________________________________________________________________________________

DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.

Highest DPC routine execution time (µs): 128.276980

Driver with highest DPC routine execution time: tcpip.sys - TCP/IP Driver, Microsoft Corporation

Highest reported total DPC routine time (%): 0.075054

Driver with highest DPC total execution time: rspLLL64.sys - Resplendence Latency Monitoring and Auxiliary Kernel Library, Resplendence Software Projects Sp.

Total time spent in DPCs (%) 0.191934

DPC count (execution time <250 µs): 59063

DPC count (execution time 250-500 µs): 0

DPC count (execution time 500-999 µs): 0

DPC count (execution time 1000-1999 µs): 0

DPC count (execution time 2000-3999 µs): 0

DPC count (execution time >=4000 µs): 0

_________________________________________________________________________________________________________

REPORTED HARD PAGEFAULTS

_________________________________________________________________________________________________________

Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.

NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.

Process with highest pagefault count: latmon.exe

Total number of hard pagefaults 7

Hard pagefault count of hardest hit process: 2

Number of processes hit: 4

_________________________________________________________________________________________________________

PER CPU DATA

_________________________________________________________________________________________________________

CPU 0 Interrupt cycle time (s): 0.723281

CPU 0 ISR highest execution time (µs): 173.595055

CPU 0 ISR total execution time (s): 0.012873

CPU 0 ISR count: 1557

CPU 0 DPC highest execution time (µs): 128.276980

CPU 0 DPC total execution time (s): 0.169175

CPU 0 DPC count: 58353

_________________________________________________________________________________________________________

CPU 1 Interrupt cycle time (s): 0.597639

CPU 1 ISR highest execution time (µs): 0.0

CPU 1 ISR total execution time (s): 0.0

CPU 1 ISR count: 0

CPU 1 DPC highest execution time (µs): 125.220180

CPU 1 DPC total execution time (s): 0.004004

CPU 1 DPC count: 375

_________________________________________________________________________________________________________

CPU 2 Interrupt cycle time (s): 0.459015

CPU 2 ISR highest execution time (µs): 0.0

CPU 2 ISR total execution time (s): 0.0

CPU 2 ISR count: 0

CPU 2 DPC highest execution time (µs): 82.457735

CPU 2 DPC total execution time (s): 0.002828

CPU 2 DPC count: 258

_________________________________________________________________________________________________________

CPU 3 Interrupt cycle time (s): 0.279242

CPU 3 ISR highest execution time (µs): 0.0

CPU 3 ISR total execution time (s): 0.0

CPU 3 ISR count: 0

CPU 3 DPC highest execution time (µs): 27.950551

CPU 3 DPC total execution time (s): 0.000572

CPU 3 DPC count: 77

_________________________________________________________________________________________________________

CONCLUSION

_________________________________________________________________________________________________________

Your system appears to be suitable for handling real-time audio and other tasks without dropouts.

LatencyMon has been analyzing your system for 0:00:23 (h:mm:ss) on all processors.

_________________________________________________________________________________________________________

SYSTEM INFORMATION

_________________________________________________________________________________________________________

Computer name: ANDREW-PC

OS version: Windows 10 , 10.0, build: 17763 (x64)

Hardware: Inspiron 620 , Dell Inc., 0GDG8Y

CPU: GenuineIntel Intel® Core™ i5-2320 CPU @ 3.00GHz

Logical processors: 4

Processor groups: 1

RAM: 8174 MB total

_________________________________________________________________________________________________________

CPU SPEED

_________________________________________________________________________________________________________

Reported CPU speed: 2993 MHz

_________________________________________________________________________________________________________

MEASURED INTERRUPT TO USER PROCESS LATENCIES

_________________________________________________________________________________________________________

Highest measured interrupt to process latency (µs): 205.10

Average measured interrupt to process latency (µs): 5.286235

Highest measured interrupt to DPC latency (µs): 175.90

Average measured interrupt to DPC latency (µs): 1.311209

_________________________________________________________________________________________________________

REPORTED ISRs

_________________________________________________________________________________________________________

Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.

Highest ISR routine execution time (µs): 173.595055

Driver with highest ISR routine execution time: ataport.SYS - ATAPI Driver Extension, Microsoft Corporation

Highest reported total ISR routine time (%): 0.008215

Driver with highest ISR total time: ataport.SYS - ATAPI Driver Extension, Microsoft Corporation

Total time spent in ISRs (%) 0.013993

ISR count (execution time <250 µs): 1557

ISR count (execution time 250-500 µs): 0

ISR count (execution time 500-999 µs): 0

ISR count (execution time 1000-1999 µs): 0

ISR count (execution time 2000-3999 µs): 0

ISR count (execution time >=4000 µs): 0

_________________________________________________________________________________________________________

REPORTED DPCs

_________________________________________________________________________________________________________

DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.

Highest DPC routine execution time (µs): 128.276980

Driver with highest DPC routine execution time: tcpip.sys - TCP/IP Driver, Microsoft Corporation

Highest reported total DPC routine time (%): 0.075054

Driver with highest DPC total execution time: rspLLL64.sys - Resplendence Latency Monitoring and Auxiliary Kernel Library, Resplendence Software Projects Sp.

Total time spent in DPCs (%) 0.191934

DPC count (execution time <250 µs): 59063

DPC count (execution time 250-500 µs): 0

DPC count (execution time 500-999 µs): 0

DPC count (execution time 1000-1999 µs): 0

DPC count (execution time 2000-3999 µs): 0

DPC count (execution time >=4000 µs): 0

_________________________________________________________________________________________________________

REPORTED HARD PAGEFAULTS

_________________________________________________________________________________________________________

Process with highest pagefault count: latmon.exe

Total number of hard pagefaults 7

Hard pagefault count of hardest hit process: 2

Number of processes hit: 4

_________________________________________________________________________________________________________

PER CPU DATA

_________________________________________________________________________________________________________

CPU 0 Interrupt cycle time (s): 0.723281

CPU 0 ISR highest execution time (µs): 173.595055

CPU 0 ISR total execution time (s): 0.012873

CPU 0 ISR count: 1557

CPU 0 DPC highest execution time (µs): 128.276980

CPU 0 DPC total execution time (s): 0.169175

CPU 0 DPC count: 58353

_________________________________________________________________________________________________________

CPU 1 Interrupt cycle time (s): 0.597639

CPU 1 ISR highest execution time (µs): 0.0

CPU 1 ISR total execution time (s): 0.0

CPU 1 ISR count: 0

CPU 1 DPC highest execution time (µs): 125.220180

CPU 1 DPC total execution time (s): 0.004004

CPU 1 DPC count: 375

_________________________________________________________________________________________________________

CPU 2 Interrupt cycle time (s): 0.459015

CPU 2 ISR highest execution time (µs): 0.0

CPU 2 ISR total execution time (s): 0.0

CPU 2 ISR count: 0

CPU 2 DPC highest execution time (µs): 82.457735

CPU 2 DPC total execution time (s): 0.002828

CPU 2 DPC count: 258

_________________________________________________________________________________________________________

CPU 3 Interrupt cycle time (s): 0.279242

CPU 3 ISR highest execution time (µs): 0.0

CPU 3 ISR total execution time (s): 0.0

CPU 3 ISR count: 0

CPU 3 DPC highest execution time (µs): 27.950551

CPU 3 DPC total execution time (s): 0.000572

CPU 3 DPC count: 77

_________________________________________________________________________________________________________

Attached Files

SPECCY 5-2-2019.txt 132.48KB 281 downloads

#32
RKinner

Posted 03 May 2019 - 04:06 AM

Malware Expert

Expert
24,624 posts

Doesn't look that bad. A few errors need to be taken care of.

Log: 'System' Date/Time: 03/05/2019 12:07:55 AM

Type: Error Category: 0

Event: 1500 Source: SNMP

The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Most people do not use SNMP so I expect it was turned on by mistake. Search for

services.msc

hit Enter. This should open the Services Window. Find SNMP or SNMP Trap and right click and select Properties. Change the Startup Type to Disabled. OK.

Log: 'Application' Date/Time: 02/05/2019 10:30:32 AM

Type: Error Category: 0

Event: 100 Source: Bonjour Service

Task Scheduling Error: m->NextScheduledSPRetry 1797

I would uninstall Bonjour as the version you are running does not seem to be working.

Most of the other errors are common to all Win 10 systems and do not have solutions but aren't really important so can be ignored. The exception is:

Log: 'Application' Date/Time: 03/05/2019 12:13:51 AM

Type: Warning Category: 7

Event: 508 Source: ESENT

Video.UI (4608,D,0) {D681F23C-55D3-4638-980E-49F72D4318DD}: A request to write to the file "C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb" at offset 24576 (0x0000000000006000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (20 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Usually this is not hardware related as the error claims but is caused by a corrupt file. Sometimes we can fix it:

Download the attached fixlist.txt to the same location as FRST

fixlist.txt 1.77KB 214 downloads
Run FRST and press Fix
A fix log will be generated please post that

PC will reboot.
Run FRST again as before. Make sure Addition.txt is checked and hit Scan. Post both logs.

If the fix doesn't work: Do you even use Zune?

#33
Krueg9651

Posted 05 May 2019 - 10:50 AM

Member

Topic Starter
Member
136 posts

Zune? I do not use Zune. Uninstall it? I looked up Control Panel and didn't see it as a program. I also uninstalled Bonjour and disabled SNMP and SNMP Trap.

Fix result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019

Ran by Andrew (04-05-2019 08:30:45) Run:5

Running from C:\Users\Andrew\Desktop

Loaded Profiles: Andrew & DefaultAppPool (Available Profiles: Andrew & DefaultAppPool)

Boot Mode: Normal

==============================================

fixlist content:

*****************

REG: reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup" /s

REG: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /s

CMD: sc start bits

File: C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log

File: C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb

File: C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb

CMD: SC stop BITS

CMD: SC stop wuauserv

esentutl /p C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log

esentutl /p C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb

esentutl /p C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb

CMD: SC start BITS

CMD: SC start wuauserv

CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"

Reboot:

*****************

========= reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup" /s =========

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup

BITS_metadata REG_MULTI_SZ %ProgramData%\Microsoft\Network\Downloader\* /s

ETW REG_MULTI_SZ %SystemRoot%\system32\LogFiles\WMI\RtBackup\*.*

Internet Explorer REG_MULTI_SZ %UserProfile%\index.dat /s

Kernel Dumps REG_MULTI_SZ %systemroot%\Minidump\* /s\0%systemroot%\memory.dmp

Memory Page File REG_MULTI_SZ \Pagefile.sys

Mount Manager REG_MULTI_SZ \System Volume Information\MountPointManagerRemoteDatabase

Netlogon REG_MULTI_SZ %SystemRoot%\netlogon.chg

Power Management REG_MULTI_SZ \hiberfil.sys

Storage Tiers Management REG_MULTI_SZ \System Volume Information\Heat\*.* /s

Temporary Files REG_MULTI_SZ %TEMP%\* /s

VSS Default Provider REG_MULTI_SZ \System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} /s

VSS Service Alternate DB REG_MULTI_SZ \System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817fd1bca}ALT

VSS Service DB REG_MULTI_SZ \System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817fd1bca}DB

WER REG_MULTI_SZ %ProgramData%\Microsoft\Windows\WER\* /s

WUA REG_MULTI_SZ %windir%\softwaredistribution\*.* /s

FVE2_Control REG_MULTI_SZ \System Volume Information\FVE2.{e40ad34d-dae9-4bc7-95bd-b16218c10f72}.*

FVE2_Log REG_MULTI_SZ \System Volume Information\FVE2.{c9ca54a3-6983-46b7-8684-a7e5e23499e3}

FVE2_VBB REG_MULTI_SZ \System Volume Information\FVE2.{24e6f0ae-6a00-4f73-984b-75ce9942852d}

FVE2_Wipe REG_MULTI_SZ \System Volume Information\FVE2.{9ef82dfa-1239-4a30-83e6-3b3e9b8fed08}

FVE2_WipeInfo REG_MULTI_SZ \System Volume Information\FVE2.{aff97bac-a69b-45da-aba1-2cfbce434750}.*

FVE2_WipeX REG_MULTI_SZ \System Volume Information\FVE2.{9ef82dfa-1239-4a30-83e6-3b3e9b8fed08}.*

FVE_Control REG_MULTI_SZ \System Volume Information\FVE.{e40ad34d-dae9-4bc7-95bd-b16218c10f72}.*

FVE_Log REG_MULTI_SZ \System Volume Information\FVE.{c9ca54a3-6983-46b7-8684-a7e5e23499e3}

FVE_Wipe REG_MULTI_SZ \System Volume Information\FVE.{9ef82dfa-1239-4a30-83e6-3b3e9b8fed08}

MS Distributed Transaction Coordinator REG_MULTI_SZ C:\Windows\system32\MSDtc\MSDTC.LOG\0C:\Windows\system32\MSDtc\trace\dtctrace.log

Offline Files Cache REG_MULTI_SZ C:\WINDOWS\CSC\* /s

========= End of Reg: =========

========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /s =========

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

(Default) REG_SZ mnmsrvc

AppInit_DLLs REG_SZ

DdeSendTimeout REG_DWORD 0x0

DesktopHeapLogging REG_DWORD 0x1

DeviceNotSelectedTimeout REG_SZ 15

DwmInputUsesIoCompletionPort REG_DWORD 0x1

EnableDwmInputProcessing REG_DWORD 0x7

GDIProcessHandleQuota REG_DWORD 0x2710

IconServiceLib REG_SZ IconCodecService.dll

LoadAppInit_DLLs REG_DWORD 0x1

NaturalInputHandler REG_SZ Ninput.dll

ShutdownWarningDialogTimeout REG_DWORD 0xffffffff

Spooler REG_SZ yes

ThreadUnresponsiveLogTimeout REG_DWORD 0x1f4

TransmissionRetryTimeout REG_SZ 90

USERNestedWindowLimit REG_DWORD 0x32

USERPostMessageLimit REG_DWORD 0x2710

USERProcessHandleQuota REG_DWORD 0x2710

Win32kLastWriteTime REG_SZ 1D4EFEFCFDAD817

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Win32kWPP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Win32kWPP\Parameters

ForceLogsInMiniDump REG_DWORD 0x1

LogPages REG_DWORD 0x14

Verbose REG_DWORD 0x1

WppRecorder_PerBufferMaxBytes REG_DWORD 0x14000

WppRecorder_PerBufferMinBytes REG_DWORD 0x200

WppRecorder_TraceGuid REG_SZ {335d5e04-5638-4e58-aa36-7ed1cfe76fd6}

========= End of Reg: =========

========= sc start bits =========

[SC] StartService FAILED 1056:

An instance of the service is already running.

========= End of CMD: =========

========================= File: C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log ========================

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log

Catalog: Error1: CreateFileW function failed

File not signed

MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)

Creation and modification date: 2019-04-05 08:22 - 2019-05-04 08:19

Size: 001310720

Attributes: ----A

Company Name:

Internal Name:

Original Name:

Product:

Description:

File Version:

Product Version:

VirusTotal: 0-byte

====== End of File: ======

========================= File: C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb ========================

C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb

Catalog: Error1: CreateFileW function failed

File not signed

MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)

Creation and modification date: 2019-05-02 19:13 - 2019-05-02 19:13

Size: 000262144

Attributes: ----A

Company Name:

Internal Name:

Original Name:

Product:

Description:

File Version:

Product Version:

VirusTotal: 0-byte

====== End of File: ======

========================= File: C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb ========================

C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb

Catalog: Error1: CreateFileW function failed

File not signed

MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)

Creation and modification date: 2019-04-05 08:22 - 2019-05-04 08:19

Size: 035913728

Attributes: ----A

Company Name:

Internal Name:

Original Name:

Product:

Description:

File Version:

Product Version:

VirusTotal: 0-byte

====== End of File: ======

========= SC stop BITS =========

SERVICE_NAME: BITS

TYPE : 30 WIN32

STATE : 3 STOP_PENDING

(NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x1

WAIT_HINT : 0x0

========= End of CMD: =========

========= SC stop wuauserv =========

SERVICE_NAME: wuauserv

TYPE : 30 WIN32

STATE : 3 STOP_PENDING

(NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x2

WAIT_HINT : 0x7530

========= End of CMD: =========

esentutl /p C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log => Error: No automatic fix found for this entry.

esentutl /p C:\Users\Andrew\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\anonymous\tmp.edb => Error: No automatic fix found for this entry.

esentutl /p C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb => Error: No automatic fix found for this entry.

========= SC start BITS =========

[SC] StartService FAILED 1056:

An instance of the service is already running.

========= End of CMD: =========

========= SC start wuauserv =========

[SC] StartService FAILED 1056:

An instance of the service is already running.

========= End of CMD: =========

========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========

Failed to clear log Microsoft-Windows-LiveId/Analytic.

Access is denied.

Failed to clear log Microsoft-Windows-LiveId/Operational.

Access is denied.

========= End of CMD: =========

The system needed a reboot.

==== End of Fixlog 08:34:11 ====

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-05.2019 01

Ran by Andrew (administrator) on ANDREW-PC (Dell Inc. Inspiron 620) (05-05-2019 11:46:05)

Running from C:\Users\Andrew\Desktop

Loaded Profiles: Andrew (Available Profiles: Andrew & DefaultAppPool)

Platform: Windows 10 Pro Version 1809 17763.475 (X64) Language: English (United States)

Default browser: Edge

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19031.17720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19041.481.0_x64__8wekyb3d8bbwe\YourPhone.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Chicony) [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe

(Conexant Systems, Inc. -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe

(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\caudiofilteragent64.exe

(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

(Dell Inc -> ) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe

(Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe

(Dell Inc -> Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\atiw.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe

(Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe

(Dell Inc -> SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe

(Dell Inc -> SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe

(Dell Inc -> SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe

(Dell Inc. -> ) C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.2.4.0_x64__htrsf667h5kn2\win32\SupportAssistAppWire.exe

(Dell Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(DELL) [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\IndicatorOSD.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe

(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe

(Google Inc -> Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\MsMpEng.exe

(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\NisSrv.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\Andrew\AppData\Local\Microsoft\OneDrive\OneDrive.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.44.40.0_x64__kzf8qxf38zg5c\SkypeApp.exe

(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.27.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.402_none_7e502ee34cd6a6f5\TiWorker.exe

(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe

(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe

(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncUP.exe

(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1542\DSAPI.exe

(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1542\pcdrwi.exe

(Rivet Networks LLC -> CloudBees, Inc.) C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe

(Rivet Networks LLC -> DELL) C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe

(Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RNDBWM.exe

(Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe

(Symantec Corporation -> Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe

(Unlimited Realities -> ) C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [883840 2012-03-28] (Conexant Systems, Inc. -> Conexant Systems, Inc.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2013-12-16] (Conexant Systems, Inc.) [File not signed]

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-26] (Apple Inc. -> Apple Inc.)

HKLM-x32\...\Run: [Chicony_OSD] => C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe [53248 2011-01-12] () [File not signed]

HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Symantec Corporation -> Dell, Inc.)

HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] (Nero AG -> )

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-07-05] (Apple Inc. -> Apple Inc.)

HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] (Unlimited Realities -> )

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [25638872 2018-04-23] (Google Inc -> Google)

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\Policies\system: [DisableLockWorkstation] 0

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [221184 2018-09-15] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-02] (Google LLC -> Google Inc.)

HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0579DB7C-F4CA-4845-9D46-928D728B9997} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {0CA1DE0B-DBBA-48A6-9ED1-5DE606B3AA18} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-10-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {164AB38D-BDD8-498A-B41D-F903CEDAD0DF} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [1512920 2019-04-10] (Dell Inc. -> Dell Inc.)

Task: {18E7C743-AB9B-4741-8586-400F4CC9A2F1} - System32\Tasks\{69D6DFB6-DD30-49C2-AF4F-0DE759856B3F} => C:\Program Files (x86)\e-iceblue\Spire.PDFConverter\Bin\PDFConverter.exe [1167360 2011-06-07] (e-iceblue) [File not signed]

Task: {1AC52998-29FC-4097-A5F5-FADCD7CB3249} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [7711878 2017-01-15] () [File not signed]

Task: {2560912E-0E58-40BA-A354-C05E87725ACF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {3B4DBCA3-208C-4116-A354-3EA58C3BCADE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {40CFC240-561C-4610-BBEC-998E0A3AF824} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)

Task: {5B68DDB2-0601-4C92-B014-141A85F9146E} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [32448 2018-09-12] (Rivet Networks LLC -> DELL)

Task: {658FDF8B-5680-473D-AAFE-45BBFB271FF0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {775BF3E0-25B4-4CA1-A74E-1F1DE4254F7B} - System32\Tasks\{0D8421A0-C776-441E-9A5A-8348A718FF18} => C:\Program Files (x86)\e-iceblue\Spire.PDFConverter\Bin\PDFConverter.exe [1167360 2011-06-07] (e-iceblue) [File not signed]

Task: {A8DD2A08-0A9F-4CBA-97B7-8015E3A1FFD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {BC05B29A-A0D9-4E8F-AD90-1BAE6B0D1198} - System32\Tasks\Microsoft\Windows\CUAssistant\CULauncher => C:\Program Files\CUAssistant\culauncher.exe [258568 2019-03-11] (Microsoft Windows -> Microsoft Corporation)

Task: {C0832607-22E9-4DD2-A4BE-3256AA57223F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)

Task: {E0FCE90F-5A6C-427B-A674-CC2768754559} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_122_Plugin.exe [1454592 2018-10-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {EDE780D1-95AF-449E-A9A6-B70A9500495B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{323d16de-a400-4672-9c31-84b8ca31219d}: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{b763cc00-27d6-496f-9e5a-42a604ed4a59}: [DhcpNameServer] 209.222.18.222 209.222.18.218

Tcpip\..\Interfaces\{d064c2cb-5202-426e-9b46-f8b21d3e07f6}: [DhcpNameServer] 192.168.1.254

Internet Explorer:

==================

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/USCON/1

SearchScopes: HKLM -> {8C76C316-788B-42E5-9B10-D5F6C84F616E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox

SearchScopes: HKLM-x32 -> {8C76C316-788B-42E5-9B10-D5F6C84F616E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox

SearchScopes: HKU\S-1-5-21-3960278461-2044705814-1633424519-1000 -> {921B4CE9-B045-4AC7-A263-134982A3E7A8} URL = hxxps://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=435371&p={searchTerms}

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)

DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab

Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group Inc. -> Cozi Group, Inc.)

FireFox:

========

FF ProfilePath: C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\3cuohms2.default [2019-05-02]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll [2018-10-09] () [File not signed]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll [2018-10-09] () [File not signed]

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] (Apple Inc. -> )

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-12] (VideoLAN) [File not signed]

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] (WildTangent Inc -> )

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-03-25] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:

=======

CHR NewTab: Default -> Not-active:"chrome-extension://mlnnopicjonfamklpcdfnbcomdlopmof/newtab.html"

CHR Profile: C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default [2019-05-05]

CHR Extension: (Slides) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]

CHR Extension: (Floorplanner) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2017-08-27]

CHR Extension: (Docs) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]

CHR Extension: (Google Drive) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]

CHR Extension: (Skype Calling) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-06-21]

CHR Extension: (YouTube) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]

CHR Extension: (QR Code Generator) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnehiohlphfeeoajihccdlbioaickhak [2017-07-29]

CHR Extension: (Google Search) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (InsertLearning) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehajjkfchegiinhcmoclkfbnmpgcahj [2019-04-17]

CHR Extension: (Sheets) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]

CHR Extension: (Print this page with CleanPrint) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\fklmmmdcofimkjmfjdnobmmgmefbapkf [2017-06-16]

CHR Extension: (The QR Code Generator) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmhlmapohffdglflokbgknlknnmogbb [2016-10-19]

CHR Extension: (Video Recorder for WeVideo) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaiglpeefdoagfbbfhjfbmomnfobojia [2019-02-10]

CHR Extension: (Pocket New Tab) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlnnopicjonfamklpcdfnbcomdlopmof [2019-05-05]

CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2019-03-10]

CHR Extension: (Wikibuy) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nenlahapcbofgnanklpelkaejcehkggg [2019-05-05]

CHR Extension: (Save to Pocket) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2019-05-01]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]

CHR Extension: (Gmail) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-17]

CHR Extension: (Chrome Media Router) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-05]

CHR HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Andrew\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-14]

CHR HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc. -> Apple Inc.)

R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [209392 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3363824 2019-02-28] (Dell Inc -> Dell Inc.)

R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [218096 2019-02-28] (Dell Inc -> Dell Inc.)

R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2016-12-21] (Dell Inc -> Dell Inc.)

R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1542\DSAPI.exe [1038144 2019-04-27] (PC-Doctor, Inc. -> PC-Doctor, Inc.)

R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [35976 2018-11-12] (Dell Inc -> )

R2 NOBU; C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2823000 2010-08-25] (Symantec Corporation -> Dell, Inc.)

R2 OSDSvc; C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe [176128 2010-12-01] (Chicony) [File not signed]

R2 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64184 2018-09-12] (Rivet Networks LLC -> CloudBees, Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5382448 2019-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SftService; C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE [1695040 2012-02-16] (Dell Inc -> SoftThinks SAS)

R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2114248 2018-09-12] (Rivet Networks LLC -> Rivet Networks)

S4 SNMP; C:\WINDOWS\System32\snmp.exe [53248 2019-04-05] (Microsoft Windows -> Microsoft Corporation)

R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [39896 2019-04-10] (Dell Inc. -> Dell Inc.)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\NisSrv.exe [3851264 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MsMpEng.exe [118144 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)

R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)

R3 athr; C:\WINDOWS\System32\drivers\athwnx.sys [4233728 2018-09-15] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)

R3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [40824 2019-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)

S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-10] (Malwarebytes Corporation -> Malwarebytes Corporation)

S3 rspLLL; C:\WINDOWS\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)

R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [120008 2018-09-12] (Rivet Networks LLC -> Rivet Networks, LLC.)

S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2015-08-10] (TunnelBear, Inc. -> The OpenVPN Project)

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2017-01-15] (OpenVPN Technologies, Inc. -> The OpenVPN Project)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-04-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [344544 2019-04-23] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60896 2019-04-23] (Microsoft Windows -> Microsoft Corporation)

R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-04 08:45 - 2019-05-04 08:45 - 000000000 ___HD C:\OneDriveTemp

2019-05-04 08:31 - 2019-05-04 08:31 - 026810880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 023441920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 012844032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 012140032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 006544256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 005436904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 005210904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 003551112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 003426816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 003406848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002701512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002393088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002275888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002205184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001994976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001697960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-05-04 08:31 - 2019-05-04 08:31 - 001674696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001671352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001469168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 001467552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000780632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000725696 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2019-05-04 08:31 - 2019-05-04 08:31 - 000673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000638376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2019-05-04 08:31 - 2019-05-04 08:31 - 000553656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000540720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000514632 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000454160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2019-05-04 08:31 - 2019-05-04 08:31 - 000451080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000263576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000146744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqmigplugin.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000129848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqmigplugin.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000122680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000109568 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll

2019-05-04 08:31 - 2019-05-04 08:31 - 000086960 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe

2019-05-04 08:31 - 2019-05-04 08:31 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 009683472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 007645632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 004997096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 004588544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 003657728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-05-04 08:30 - 2019-05-04 08:30 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 002720256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-05-04 08:30 - 2019-05-04 08:30 - 002469376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-05-04 08:30 - 2019-05-04 08:30 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001768960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001653760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001253904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 001219640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 001054928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 001044520 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000999424 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000806600 _____ C:\WINDOWS\SysWOW64\locale.nls

2019-05-04 08:30 - 2019-05-04 08:30 - 000806600 _____ C:\WINDOWS\system32\locale.nls

2019-05-04 08:30 - 2019-05-04 08:30 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000676256 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2019-05-04 08:30 - 2019-05-04 08:30 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2019-05-04 08:30 - 2019-05-04 08:30 - 000366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000280592 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000157200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000090640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-05-04 08:30 - 2019-05-04 08:30 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin

2019-05-04 08:30 - 2019-05-04 08:30 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin

2019-05-02 20:56 - 2019-05-02 20:56 - 002479224 _____ (Resplendence Software Projects Sp. ) C:\Users\Andrew\Desktop\LatencyMon (1).exe

2019-05-02 20:54 - 2019-05-02 20:55 - 000135659 _____ C:\Users\Andrew\Desktop\SPECCY 5-2-2019.txt

2019-05-02 20:53 - 2019-05-02 20:53 - 000000839 _____ C:\Users\Public\Desktop\Speccy.lnk

2019-05-02 20:53 - 2019-05-02 20:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

2019-05-02 20:53 - 2019-05-02 20:53 - 000000000 ____D C:\Program Files\Speccy

2019-05-02 20:52 - 2019-05-02 20:52 - 006889184 _____ (Piriform Ltd) C:\Users\Andrew\Downloads\spsetup132 (1).exe

2019-05-02 20:51 - 2019-05-02 20:51 - 000017255 _____ C:\junk 5-2-2019.txt

2019-05-02 20:50 - 2019-05-02 20:50 - 000024368 _____ C:\Users\Andrew\Desktop\Registry 5-2-2-10 process explorer.txt

2019-05-02 20:46 - 2019-05-02 20:46 - 000042904 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS

2019-05-02 20:45 - 2019-05-02 20:45 - 002703128 _____ (Sysinternals - www.sysinternals.com) C:\Users\Andrew\Desktop\procexp.exe

2019-05-02 20:45 - 2019-05-02 20:45 - 000009796 _____ C:\Users\Andrew\Desktop\VEW Application log.txt

2019-05-02 20:44 - 2019-05-02 20:44 - 000015279 _____ C:\Users\Andrew\Desktop\VEW System log.txt

2019-05-02 20:43 - 2019-05-02 20:45 - 000009796 _____ C:\VEW.txt

2019-05-02 20:42 - 2019-05-02 20:42 - 000061440 _____ ( ) C:\Users\Andrew\Desktop\VEW.exe

2019-05-02 04:18 - 2019-05-02 04:18 - 001967989 _____ C:\Users\Andrew\Downloads\Avencemos 3 Unidad 4 Paquete Juegos.pdf

2019-05-02 04:16 - 2019-05-02 04:16 - 000070054 _____ C:\Users\Andrew\Downloads\Copy of Unidad 5_ Prueba de práctica del vocabulario.pdf

2019-05-02 04:16 - 2019-05-02 04:16 - 000070054 _____ C:\Users\Andrew\Downloads\Copy of Unidad 5_ Prueba de práctica del vocabulario (1).pdf

2019-05-02 02:21 - 2019-05-02 02:21 - 000000080 ___SH C:\bootTel.dat

2019-04-30 06:27 - 2019-05-02 21:06 - 000001280 _____ C:\Users\Andrew\Desktop\Command Prompt (Admin).lnk

2019-04-29 22:38 - 2019-05-04 08:34 - 000009482 _____ C:\Users\Andrew\Desktop\Fixlog.txt

2019-04-29 22:38 - 2019-04-29 22:38 - 000161364 _____ C:\Users\Andrew\Desktop\FRST 4-29.txt

2019-04-29 22:38 - 2019-04-29 22:38 - 000065926 _____ C:\Users\Andrew\Desktop\Addition 4-29.txt

2019-04-29 22:09 - 2019-04-29 22:10 - 000000574 _____ C:\Users\Andrew\Downloads\fixlist (3).txt

2019-04-29 22:09 - 2019-04-29 22:10 - 000000574 _____ C:\Users\Andrew\Downloads\fixlist (2).txt

2019-04-29 22:09 - 2019-04-29 22:09 - 000000574 _____ C:\Users\Andrew\Downloads\fixlist (1).txt

2019-04-28 23:21 - 2019-04-28 23:21 - 006310771 _____ C:\Users\Andrew\Downloads\Did you get it 4.1 (3).pdf

2019-04-22 23:20 - 2019-04-22 23:20 - 000087253 _____ C:\Users\Andrew\Downloads\Copy of Preguntas - infografías sobre el trabajo infantil.pdf

2019-04-22 23:17 - 2019-04-22 23:17 - 000053825 _____ C:\Users\Andrew\Downloads\Copy of La hora del planeta AK (1).pdf

2019-04-22 23:13 - 2019-04-22 23:14 - 000053820 _____ C:\Users\Andrew\Downloads\Copy of La hora del planeta AK.pdf

2019-04-22 06:22 - 2019-04-22 06:22 - 000079588 _____ C:\Users\Andrew\Downloads\El Examen Unidad 4 - Parte Escrita.docx (1).pdf

2019-04-22 06:05 - 2019-04-22 06:05 - 000079588 _____ C:\Users\Andrew\Downloads\El Examen Unidad 4 - Parte Escrita.docx.pdf

2019-04-15 23:08 - 2019-04-15 23:08 - 000033969 _____ C:\Users\Andrew\Desktop\Copy of El Calentamiento Global escuchar.pdf

2019-04-15 23:08 - 2019-04-15 23:08 - 000028366 _____ C:\Users\Andrew\Downloads\Copy of El Calentamiento Global escuchar.pdf

2019-04-15 22:47 - 2019-04-15 22:47 - 000032966 _____ C:\Users\Andrew\Desktop\AK Copy of Univisión – Entra en vigor ley ....pdf

2019-04-15 22:46 - 2019-04-15 22:46 - 000026009 _____ C:\Users\Andrew\Downloads\AK Copy of Univisión – Entra en vigor ley ....pdf

2019-04-15 22:45 - 2019-04-15 22:45 - 000043958 _____ C:\Users\Andrew\Downloads\Copy of Spanish Listening con preguntas (2).pdf

2019-04-15 22:43 - 2019-04-15 22:43 - 000001212 _____ C:\Users\Andrew\Downloads\Práctica Escuchar - el trabajo infantil.txt

2019-04-15 00:36 - 2019-04-15 00:36 - 073569266 _____ C:\Users\Andrew\Downloads\jury orientation small.wmv

2019-04-14 10:18 - 2019-04-14 10:18 - 000763684 _____ C:\Users\Andrew\Downloads\Game of Thrones predictions - Krueger.pdf

2019-04-10 23:41 - 2019-04-10 23:41 - 000583027 _____ C:\Users\Andrew\Downloads\CLAVE - Subjuntivo_ Repaso con Duda v. Certeza 2019.pdf

2019-04-10 23:38 - 2019-04-10 23:38 - 000582907 _____ C:\Users\Andrew\Downloads\CLAVE - Subjuntivo_ Repaso con Duda v. Certeza 2019 .pdf

2019-04-10 17:54 - 2019-04-10 17:54 - 000450405 _____ C:\Users\Andrew\Downloads\CLAVE - p v i ws 3.pdf

2019-04-10 17:52 - 2019-04-10 17:52 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe

2019-04-10 17:52 - 2019-04-10 17:52 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 015223296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 008898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 007919104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 007877120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 006071296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 005765120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 004660224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 004527624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 003690496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 003602944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 003496448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 003421696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001615872 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001590064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001459080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001458056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001370624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001297120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001294520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2019-04-10 17:51 - 2019-04-10 17:51 - 001249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001155072 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001072424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 001019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000909840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000653040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000540448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2019-04-10 17:51 - 2019-04-10 17:51 - 000408528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000317240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys

2019-04-10 17:51 - 2019-04-10 17:51 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000312632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll

2019-04-10 17:51 - 2019-04-10 17:51 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe

2019-04-10 17:51 - 2019-04-10 17:51 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 017513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 004704272 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 004304896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 003557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 003377976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 002842624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 002627384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 002592816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 002438368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 002042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 002022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001856000 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001647632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001567232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001496576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001478968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001360184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 001342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2019-04-10 17:50 - 2019-04-10 17:50 - 001311232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001191728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001179680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001133568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2019-04-10 17:50 - 2019-04-10 17:50 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 001053192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 001035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000998712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000984888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000982880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000974352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2019-04-10 17:50 - 2019-04-10 17:50 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000865784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000821048 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000809784 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000793832 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000675096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000620560 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000598544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2019-04-10 17:50 - 2019-04-10 17:50 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000508208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000506168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000485192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000474928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2019-04-10 17:50 - 2019-04-10 17:50 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000386360 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000384312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000343984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000283032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000257696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000255128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000159272 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000147496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000143880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000134456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000115360 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000097808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys

2019-04-10 17:50 - 2019-04-10 17:50 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe

2019-04-10 17:50 - 2019-04-10 17:50 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2019-04-10 17:50 - 2019-04-10 17:50 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 002017792 _____ C:\WINDOWS\system32\rdpnano.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys

2019-04-10 17:49 - 2019-04-10 17:49 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 000306488 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll

2019-04-10 17:49 - 2019-04-10 17:49 - 000274492 _____ C:\Users\Andrew\Downloads\CLAVE - p v i ws tarea #2.pdf

2019-04-10 17:49 - 2019-04-10 17:49 - 000234808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys

2019-04-10 17:49 - 2019-04-10 17:49 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys

2019-04-10 17:49 - 2019-04-10 17:49 - 000131384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2019-04-10 17:49 - 2019-04-10 17:49 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2019-04-10 17:40 - 2019-04-10 17:40 - 000121467 _____ C:\Users\Andrew\Downloads\CLAVE - study guide for P v I quiz.pdf

2019-04-10 17:39 - 2019-04-10 17:39 - 000114127 _____ C:\Users\Andrew\Desktop\study guide for P v I quiz.pdf

2019-04-09 20:51 - 2019-04-09 20:51 - 000106512 _____ C:\Users\Andrew\Desktop\El Examen U4 - Práctica Escrita.pdf

2019-04-09 20:50 - 2019-04-09 20:50 - 000101261 _____ C:\Users\Andrew\Downloads\El Examen U4 - Práctica Escrita.pdf

2019-04-08 00:19 - 2019-04-08 00:19 - 000051414 _____ C:\Users\Andrew\Desktop\Conoce al _hombre-basura_ de cuida el planeta _ Al Rojo Vivo.pdf

2019-04-08 00:19 - 2019-04-08 00:19 - 000044305 _____ C:\Users\Andrew\Downloads\Conoce al _hombre-basura_ de cuida el planeta _ Al Rojo Vivo.pdf

2019-04-08 00:15 - 2019-04-08 00:15 - 001054709 _____ C:\Users\Andrew\Desktop\Esp. 3 _Did you get it__ Subjuntivo con expresiones de Emoción.pdf

2019-04-08 00:15 - 2019-04-08 00:15 - 001051834 _____ C:\Users\Andrew\Downloads\Esp. 3 _Did you get it__ Subjuntivo con expresiones de Emoción.pdf

2019-04-08 00:14 - 2019-04-08 00:14 - 000203626 _____ C:\Users\Andrew\Desktop\APUNTES subjuntive expressions of emotion.pdf

2019-04-08 00:13 - 2019-04-08 00:13 - 000203623 _____ C:\Users\Andrew\Downloads\APUNTES subjuntive expressions of emotion.pdf

2019-04-07 20:31 - 2019-04-07 20:31 - 000000020 ___SH C:\Users\DefaultAppPool\ntuser.ini

2019-04-06 02:56 - 2019-04-10 17:36 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2019-04-06 02:56 - 2019-04-10 17:36 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2019-04-06 00:50 - 2019-04-06 00:50 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2019-04-06 00:50 - 2019-04-06 00:50 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys

2019-04-06 00:50 - 2019-04-06 00:50 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys

2019-04-06 00:50 - 2019-04-06 00:50 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys

2019-04-06 00:50 - 2019-04-06 00:50 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe

2019-04-06 00:50 - 2019-04-06 00:50 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys

2019-04-06 00:50 - 2019-04-06 00:50 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys

2019-04-06 00:50 - 2019-04-06 00:50 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll

2019-04-06 00:50 - 2019-04-06 00:50 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl

2019-04-06 00:49 - 2019-04-06 00:49 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl

2019-04-06 00:49 - 2019-04-06 00:49 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2019-04-06 00:49 - 2019-04-06 00:49 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe

2019-04-06 00:49 - 2019-04-06 00:49 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys

2019-04-06 00:49 - 2019-04-06 00:49 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll

2019-04-06 00:49 - 2019-04-06 00:49 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000047136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe

2019-04-06 00:48 - 2019-04-06 00:48 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys

2019-04-06 00:48 - 2019-04-06 00:48 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll

2019-04-06 00:48 - 2019-04-06 00:48 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2019-04-05 10:43 - 2019-04-05 10:52 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2019-04-05 10:43 - 2019-04-05 10:43 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines

2019-04-05 10:41 - 2019-04-05 10:43 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2019-04-05 10:41 - 2019-04-05 10:41 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2019-04-05 10:38 - 2019-04-05 10:38 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 004488192 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 003952952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 003442176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 002986352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 002893312 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 002832896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 002429752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2019-04-05 10:38 - 2019-04-05 10:38 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 002160160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2019-04-05 10:38 - 2019-04-05 10:38 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001749504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001675712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001476096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001282640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001279024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl

2019-04-05 10:38 - 2019-04-05 10:38 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl

2019-04-05 10:38 - 2019-04-05 10:38 - 001162280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001022464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000964976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000870400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000854784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000662528 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Pipeline.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000604248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000588304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2019-04-05 10:38 - 2019-04-05 10:38 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2019-04-05 10:38 - 2019-04-05 10:38 - 000522312 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys

2019-04-05 10:38 - 2019-04-05 10:38 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000373768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000301096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000252536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2019-04-05 10:38 - 2019-04-05 10:38 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000121872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000114344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000098816 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Broker.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000094224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys

2019-04-05 10:38 - 2019-04-05 10:38 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe

2019-04-05 10:38 - 2019-04-05 10:38 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll

2019-04-05 10:38 - 2019-04-05 10:38 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 006132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 005561856 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 005527552 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 005130752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 004019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 003092480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002654208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002618880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002185728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002149368 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001824768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001797128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001700880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001664904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001533440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001520208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001387496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001315840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001287776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000864056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000863752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000828936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000818832 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000752136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000667152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000612368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000582240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000495624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000473616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000408800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000402576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000300024 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000294072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000276488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000178696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000175096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000164344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000151872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000148480 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000140808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000114856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000083472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000055608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys

2019-04-05 10:37 - 2019-04-05 10:37 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll

2019-04-05 10:37 - 2019-04-05 10:37 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe

2019-04-05 10:37 - 2019-04-05 10:37 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe

2019-04-05 10:33 - 2019-04-05 10:33 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpsnap.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntwin.exe

2019-04-05 10:33 - 2019-04-05 10:33 - 000107882 _____ C:\WINDOWS\system32\mib_ii.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntagnt.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml

2019-04-05 10:33 - 2019-04-05 10:33 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml

2019-04-05 10:33 - 2019-04-05 10:33 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmp.exe

2019-04-05 10:33 - 2019-04-05 10:33 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hostmib.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000048593 _____ C:\WINDOWS\system32\hostmib.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\lmmib2.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000034317 _____ C:\WINDOWS\system32\msiprip2.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000030448 _____ C:\WINDOWS\system32\mcastmib.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntcmd.exe

2019-04-05 10:33 - 2019-04-05 10:33 - 000026236 _____ C:\WINDOWS\system32\wins.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000026100 _____ C:\WINDOWS\system32\lmmib2.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000022462 _____ C:\WINDOWS\system32\rfc2571.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000021271 _____ C:\WINDOWS\system32\http.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64mib.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000015799 _____ C:\WINDOWS\system32\ipforwd.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000015032 _____ C:\WINDOWS\system32\authserv.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000014032 _____ C:\WINDOWS\system32\accserv.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000013767 _____ C:\WINDOWS\system32\msipbtp.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpmib.dll

2019-04-05 10:33 - 2019-04-05 10:33 - 000006179 _____ C:\WINDOWS\system32\ftp.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000004597 _____ C:\WINDOWS\system32\dhcp.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000004411 _____ C:\WINDOWS\system32\smi.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000000698 _____ C:\WINDOWS\system32\inetsrv.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000000581 _____ C:\WINDOWS\system32\msft.mib

2019-04-05 10:33 - 2019-04-05 10:33 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2019-04-05 10:33 - 2019-04-05 10:33 - 000000000 ____D C:\WINDOWS\system32\msmq

2019-04-05 10:33 - 2019-04-05 10:33 - 000000000 ____D C:\WINDOWS\system32\BestPractices

2019-04-05 10:33 - 2019-04-05 10:33 - 000000000 ____D C:\inetpub

2019-04-05 10:32 - 2019-04-05 10:32 - 001167960 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2019-04-05 10:32 - 2019-04-05 10:32 - 000780376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2019-04-05 10:32 - 2019-04-05 10:32 - 000126064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2019-04-05 10:32 - 2019-04-05 10:32 - 000104560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2019-04-05 10:32 - 2019-04-05 10:32 - 000036896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2019-04-05 10:32 - 2019-04-05 10:32 - 000035440 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2019-04-05 10:32 - 2019-04-05 10:32 - 000000000 ____D C:\Program Files\Reference Assemblies

2019-04-05 10:32 - 2019-04-05 10:32 - 000000000 ____D C:\Program Files\MSBuild

2019-04-05 10:32 - 2019-04-05 10:32 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2019-04-05 10:32 - 2019-04-05 10:32 - 000000000 ____D C:\Program Files (x86)\MSBuild

2019-04-05 08:27 - 2019-04-05 08:27 - 000000000 ____D C:\Users\Andrew\AppData\Local\PlaceholderTileLogoFolder

2019-04-05 08:27 - 2019-04-05 08:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2019-04-05 08:27 - 2019-04-05 08:27 - 000000000 ____D C:\ProgramData\ATI

2019-04-05 08:23 - 2019-04-05 08:23 - 000000020 ___SH C:\Users\Andrew\ntuser.ini

2019-04-05 08:22 - 2019-05-04 08:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-04-05 08:22 - 2019-04-15 17:21 - 000003370 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3960278461-2044705814-1633424519-1000

2019-04-05 08:22 - 2019-04-15 00:41 - 000004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5E45B52B-EC63-4571-B0D5-D23995CCD414}

2019-04-05 08:22 - 2019-04-05 08:22 - 000003752 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier

2019-04-05 08:22 - 2019-04-05 08:22 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2019-04-05 08:22 - 2019-04-05 08:22 - 000003344 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2019-04-05 08:22 - 2019-04-05 08:22 - 000003322 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2019-04-05 08:22 - 2019-04-05 08:22 - 000003302 _____ C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate

2019-04-05 08:22 - 2019-04-05 08:22 - 000003120 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2019-04-05 08:22 - 2019-04-05 08:22 - 000002496 _____ C:\WINDOWS\System32\Tasks\Private Internet Access Startup

2019-04-05 08:22 - 2019-04-05 08:22 - 000002258 _____ C:\WINDOWS\System32\Tasks\SmartByte Telemetry

2019-04-05 08:22 - 2019-04-05 08:22 - 000002160 _____ C:\WINDOWS\System32\Tasks\{69D6DFB6-DD30-49C2-AF4F-0DE759856B3F}

2019-04-05 08:22 - 2019-04-05 08:22 - 000002160 _____ C:\WINDOWS\System32\Tasks\{0D8421A0-C776-441E-9A5A-8348A718FF18}

2019-04-05 08:22 - 2019-04-05 08:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD

2019-04-05 08:22 - 2019-04-05 08:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform

2019-04-05 08:22 - 2019-04-05 08:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple

2019-04-05 08:20 - 2019-04-05 08:21 - 000011433 _____ C:\WINDOWS\diagwrn.xml

2019-04-05 08:20 - 2019-04-05 08:21 - 000011433 _____ C:\WINDOWS\diagerr.xml

2019-04-05 08:11 - 2019-05-04 08:48 - 000972156 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-04-05 08:03 - 2019-04-05 08:03 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2019-04-05 08:01 - 2019-04-29 22:39 - 000000000 ____D C:\Users\Andrew

2019-04-05 08:01 - 2019-04-15 17:21 - 000002413 _____ C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-04-05 08:01 - 2019-04-07 20:31 - 000000000 ____D C:\Users\DefaultAppPool

2019-04-05 08:01 - 2019-04-05 07:57 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\ATI

2019-04-05 08:01 - 2019-04-05 07:57 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Local\ATI

2019-04-05 08:01 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\ATI

2019-04-05 08:01 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Andrew\AppData\Local\ATI

2019-04-05 08:01 - 2018-09-15 02:29 - 000001105 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-04-05 07:58 - 2019-04-05 07:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2019-04-05 07:57 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI

2019-04-05 07:57 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Default\AppData\Local\ATI

2019-04-05 07:57 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Default User\AppData\Roaming\ATI

2019-04-05 07:57 - 2019-04-05 07:57 - 000000000 ____D C:\Users\Default User\AppData\Local\ATI

2019-04-05 07:57 - 2019-04-05 07:57 - 000000000 ____D C:\ProgramData\USOShared

2019-04-05 07:56 - 2019-04-06 00:48 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2019-04-05 07:53 - 2019-05-04 10:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-04-05 07:53 - 2019-05-04 08:41 - 000445888 _____ C:\WINDOWS\system32\FNTCACHE.DAT

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-05 11:47 - 2018-01-05 11:36 - 000028927 _____ C:\Users\Andrew\Desktop\FRST.txt

2019-05-05 11:46 - 2015-04-26 13:24 - 000000000 ____D C:\FRST

2019-05-05 11:41 - 2018-01-05 11:38 - 000066230 _____ C:\Users\Andrew\Desktop\Addition.txt

2019-05-05 11:36 - 2018-04-29 09:30 - 000000000 ____D C:\Users\Andrew\Desktop\FRST-OlderVersion

2019-05-05 11:36 - 2018-01-05 10:56 - 002430464 _____ (Farbar) C:\Users\Andrew\Desktop\FRST64.exe

2019-05-05 11:34 - 2018-09-15 02:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-05-04 08:59 - 2012-06-06 00:53 - 000000000 ____D C:\Users\Andrew\AppData\Local\Nero

2019-05-04 08:48 - 2018-09-15 02:31 - 000000000 ____D C:\WINDOWS\INF

2019-05-04 08:46 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\Registration

2019-05-04 08:45 - 2016-03-08 07:24 - 000000000 ___RD C:\Users\Andrew\OneDrive

2019-05-04 08:43 - 2018-09-15 21:38 - 000000000 ____D C:\Users\Default\AppData\Local\SoftThinks

2019-05-04 08:43 - 2018-09-15 21:38 - 000000000 ____D C:\Users\Default User\AppData\Local\SoftThinks

2019-05-04 08:43 - 2012-05-22 17:00 - 000000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup

2019-05-04 08:40 - 2018-09-15 01:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2019-05-04 08:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\TextInput

2019-05-04 08:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\ShellExperiences

2019-05-04 08:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2019-05-04 08:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-05-04 08:35 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-05-04 08:34 - 2018-09-15 02:23 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-05-02 21:20 - 2018-09-15 02:33 - 000000000 ___HD C:\Program Files\WindowsApps

2019-05-02 21:06 - 2018-09-16 20:21 - 000018875 _____ C:\junk.txt

2019-05-02 20:58 - 2018-09-16 20:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LatencyMon

2019-05-02 20:58 - 2018-09-16 20:30 - 000000000 ____D C:\Program Files\LatencyMon

2019-05-02 18:36 - 2015-05-03 20:40 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-05-02 18:36 - 2015-05-03 20:40 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2019-05-01 19:20 - 2017-12-12 23:31 - 000000000 ____D C:\Users\Andrew\AppData\Local\Packages

2019-04-28 13:22 - 2015-04-29 17:35 - 000000000 ____D C:\ProgramData\PCDr

2019-04-27 15:11 - 2012-05-22 16:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell

2019-04-27 15:06 - 2017-06-24 21:12 - 000000000 ____D C:\ProgramData\SupportAssist

2019-04-23 06:15 - 2018-02-21 23:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2019-04-11 01:14 - 2018-09-15 04:11 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2019-04-11 01:14 - 2018-09-15 02:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs

2019-04-11 01:14 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2019-04-11 01:14 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\oobe

2019-04-11 01:14 - 2018-09-15 01:09 - 000000000 ____D C:\WINDOWS\system32\Dism

2019-04-10 17:34 - 2016-03-09 19:41 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-04-10 17:28 - 2016-03-09 19:41 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-04-09 17:23 - 2015-05-18 21:33 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-04-08 00:11 - 2019-03-24 14:39 - 000061432 ____H C:\Users\Andrew\Desktop\~WRL0004.tmp

2019-04-06 11:37 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\appcompat

2019-04-06 03:01 - 2018-09-15 01:09 - 000000000 ____D C:\WINDOWS\servicing

2019-04-06 02:56 - 2017-12-12 23:54 - 000000000 ___RD C:\Users\Andrew\3D Objects

2019-04-06 02:56 - 2016-03-08 07:20 - 000000000 __RHD C:\Users\Public\AccountPictures

2019-04-06 02:56 - 2012-06-05 10:20 - 000000000 ___RD C:\Users\Andrew\Virtual Machines

2019-04-06 02:52 - 2018-09-15 02:33 - 000000000 ___RD C:\Program Files\Windows Defender

2019-04-06 02:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\appraiser

2019-04-05 10:52 - 2018-09-26 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rivet Networks

2019-04-05 10:52 - 2018-09-15 02:36 - 000000000 ____D C:\WINDOWS\Setup

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 __SHD C:\Program Files\Windows Sidebar

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\IME

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\spool

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\NDF

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\Macromed

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\IME

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\schemas

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\Cursors

2019-04-05 10:52 - 2018-09-15 02:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2019-04-05 10:52 - 2018-09-15 02:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2019-04-05 10:52 - 2018-04-11 18:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2019-04-05 10:52 - 2017-07-09 03:55 - 000000000 ____D C:\Program Files\CONEXANT

2019-04-05 10:52 - 2017-04-28 03:34 - 000000000 ____D C:\Program Files\UNP

2019-04-05 10:52 - 2017-01-24 17:54 - 000000000 ____D C:\WINDOWS\SysWOW64\Dell

2019-04-05 10:52 - 2016-08-30 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2019-04-05 10:52 - 2015-12-11 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deluge

2019-04-05 10:52 - 2015-10-30 04:07 - 000000000 ____D C:\WINDOWS\ShellNew

2019-04-05 10:52 - 2015-04-26 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2019-04-05 10:52 - 2015-04-15 06:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2019-04-05 10:52 - 2015-04-11 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Converter 15

2019-04-05 10:52 - 2014-01-14 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2019-04-05 10:52 - 2013-02-23 11:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2019-04-05 10:52 - 2012-07-28 16:13 - 000000000 ____D C:\WINDOWS\system32\appmgmt

2019-04-05 10:52 - 2012-07-05 04:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2019-04-05 10:52 - 2012-06-05 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2019-04-05 10:52 - 2012-05-22 17:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero

2019-04-05 10:52 - 2012-05-22 17:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-NFB Reading Technology

2019-04-05 10:52 - 2012-05-22 17:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online

2019-04-05 10:52 - 2012-05-22 17:14 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2019-04-05 10:52 - 2012-05-22 17:14 - 000000000 ____D C:\WINDOWS\en

2019-04-05 10:52 - 2012-05-22 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Stage

2019-04-05 10:52 - 2012-05-22 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe

2019-04-05 10:52 - 2009-07-14 00:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2019-04-05 10:50 - 2018-04-11 18:38 - 000000000 ____D C:\WINDOWS\InfusedApps

2019-04-05 10:49 - 2018-09-15 02:33 - 000000000 __RHD C:\Users\Public\Libraries

2019-04-05 10:43 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\Resources

2019-04-05 10:43 - 2017-07-09 03:55 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies

2019-04-05 10:43 - 2017-07-09 03:55 - 000000000 ____D C:\Program Files\AMD

2019-04-05 10:39 - 2018-09-15 04:11 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2019-04-05 10:39 - 2018-09-15 04:11 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2019-04-05 10:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2019-04-05 10:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\migwiz

2019-04-05 10:39 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\ShellComponents

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\inetsrv

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\et-EE

2019-04-05 10:33 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\system32\es-MX

2019-04-05 08:42 - 2018-09-15 02:33 - 000000000 ____D C:\WINDOWS\ServiceState

2019-04-05 08:42 - 2018-08-23 22:23 - 000000000 ____D C:\ProgramData\Packages

2019-04-05 08:25 - 2016-08-05 20:19 - 000000000 ____D C:\Users\Andrew\AppData\Local\ConnectedDevicesPlatform

2019-04-05 08:23 - 2019-02-06 00:17 - 000000000 ___DC C:\WINDOWS\Panther

2019-04-05 08:22 - 2018-09-15 01:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2019-04-05 08:13 - 2018-09-15 02:33 - 000000000 ___RD C:\WINDOWS\PrintDialog

2019-04-05 08:11 - 2018-09-15 02:33 - 000000000 __RSD C:\WINDOWS\media

2019-04-05 08:04 - 2017-01-15 12:34 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Private Internet Access

2019-04-05 08:04 - 2012-07-20 00:41 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2019-04-05 08:02 - 2013-02-23 10:50 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mkv2vob

2019-04-05 08:02 - 2012-07-28 16:16 - 000000000 ____D C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e-iceblue

2019-04-05 07:58 - 2017-07-09 03:56 - 000000000 ____D C:\Program Files\ATI Technologies

2019-04-05 07:58 - 2017-07-09 03:56 - 000000000 ____D C:\Program Files (x86)\ATI Technologies

2019-04-05 07:57 - 2018-09-15 02:33 - 000000000 ____D C:\ProgramData\USOPrivate

2019-04-05 07:57 - 2013-05-31 23:49 - 000000000 ____D C:\AMD

2019-04-05 06:55 - 2018-11-17 17:24 - 000000000 ____D C:\Program Files\rempl

==================== Files in the root of some directories =======

2014-01-14 21:46 - 2014-01-15 00:10 - 050053120 _____ () C:\Program Files (x86)\GUT8D24.tmp

2013-12-12 23:38 - 2014-06-25 03:15 - 000003749 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml

2015-04-20 16:19 - 2015-05-01 06:14 - 000000020 _____ () C:\Users\Andrew\AppData\Roaming\appdataFr3.bin

2013-12-04 01:50 - 2015-10-14 00:15 - 000016896 _____ () C:\Users\Andrew\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2018-05-13 22:38 - 2018-05-13 22:38 - 000000218 _____ () C:\Users\Andrew\AppData\Local\recently-used.xbel

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019 01

Ran by Andrew (05-05-2019 11:47:51)

Running from C:\Users\Andrew\Desktop

Windows 10 Pro Version 1809 17763.475 (X64) (2019-04-05 13:23:25)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3960278461-2044705814-1633424519-500 - Administrator - Disabled)

Andrew (S-1-5-21-3960278461-2044705814-1633424519-1000 - Administrator - Enabled) => C:\Users\Andrew

DefaultAccount (S-1-5-21-3960278461-2044705814-1633424519-503 - Limited - Disabled)

Guest (S-1-5-21-3960278461-2044705814-1633424519-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3960278461-2044705814-1633424519-1002 - Limited - Enabled)

WDAGUtilityAccount (S-1-5-21-3960278461-2044705814-1633424519-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.010.20099 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)

Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.122 - Adobe Systems Incorporated)

AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

AMD Catalyst Install Manager (HKLM\...\{C8807716-1F6F-5C43-3C32-7295A45CF060}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)

Apple Application Support (32-bit) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Application Profiles (HKLM-x32\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)

ATI AVIVO64 Codecs (HKLM\...\{262325FE-E6AA-7D56-9071-453A374086C9}) (Version: 11.6.0.10628 - ATI Technologies Inc.) Hidden

Bejeweled 2 Deluxe (HKLM-x32\...\WT089409) (Version: 2.2.0.95 - WildTangent) Hidden

Blackhawk Striker 2 (HKLM-x32\...\WT089410) (Version: 2.2.0.95 - WildTangent) Hidden

Blio (HKLM-x32\...\{400182B4-CA55-46A9-9D88-F8413DCFB36D}) (Version: 2.3.7140 - K-NFB Reading Technology, Inc.)

Bounce Symphony (HKLM-x32\...\WT089443) (Version: 2.2.0.95 - WildTangent) Hidden

Build-a-lot 2 (HKLM-x32\...\WT089411) (Version: 2.2.0.95 - WildTangent) Hidden

Cake Mania (HKLM-x32\...\WT089412) (Version: 2.2.0.95 - WildTangent) Hidden

ccoomPareItApplic (HKLM-x32\...\{88E96402-3BBD-02D9-0A36-6FB806AEE04E}) (Version: - )

Chuzzle Deluxe (HKLM-x32\...\WT089413) (Version: 2.2.0.95 - WildTangent) Hidden

Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.14.50 - Conexant)

Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)

Cozi (HKLM-x32\...\{EA1F3D6C-A6F5-4CDC-B0D3-9C56C06B4D29}) (Version: 1.0.6505.38692 - Cozi Group, Inc.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Dell Customer Connect (HKLM-x32\...\{4FA72FF9-DD64-43A8-8704-6380A11F11D5}) (Version: 1.4.15.0 - Dell Inc.)

Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.)

Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.)

Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)

Dell KM632 Wireless Keyboard Caps Lock Indicator (HKLM-x32\...\{55586382-6704-4237-AAA7-85FF9C055022}) (Version: 2.1.9.0401 - Dell)

Dell MusicStage (HKLM-x32\...\{3BD7DD08-991B-4A2F-A165-614ED14EAADD}) (Version: 1.6.225.0 - Fingertapps)

Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)

Dell Stage (HKLM-x32\...\{FE182796-F6BA-486A-8590-89B7E8D1D60F}) (Version: 1.7.209.0 - Fingertapps)

Dell SupportAssist (HKLM\...\{0309AC01-330F-494C-B27D-58E297E4674F}) (Version: 3.2.1.94 - Dell Inc.)

Dell Update (HKLM-x32\...\{5EBBC1DA-975F-44A0-B438-F325BCD45577}) (Version: 3.0.1 - Dell Inc.)

Dell VideoStage (HKLM-x32\...\{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.3.0.2214 - CyberLink Corp.) Hidden

Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.3.0.2214 - CyberLink Corp.)

Diner Dash 2 Restaurant Rescue (HKLM-x32\...\WT089414) (Version: 2.2.0.95 - WildTangent) Hidden

Dora's World Adventure (HKLM-x32\...\WT089415) (Version: 2.2.0.95 - WildTangent) Hidden

Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.4.47.146 - OSToto Co., Ltd.)

eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)

Escape Whisper Valley ™ (HKLM-x32\...\WT089434) (Version: 2.2.0.95 - WildTangent) Hidden

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )

Farm Frenzy (HKLM-x32\...\WT089450) (Version: 2.2.0.95 - WildTangent) Hidden

FATE (HKLM-x32\...\WT089418) (Version: 2.2.0.95 - WildTangent) Hidden

Final Drive Fury (HKLM-x32\...\WT089499) (Version: 2.2.0.95 - WildTangent) Hidden

Final Drive Nitro (HKLM-x32\...\WT089444) (Version: 2.2.0.95 - WildTangent) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.131 - Google Inc.)

Google Drive (HKLM-x32\...\{A8DC81F2-D365-4248-892A-FA3B5951F731}) (Version: 2.34.9392.7803 - Google, Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

iTunes (HKLM\...\{955524E7-79EB-4CA9-BA4D-FD2DF587651B}) (Version: 12.4.3.1 - Apple Inc.)

Jewel Quest (HKLM-x32\...\WT089420) (Version: 2.2.0.95 - WildTangent) Hidden

Jewel Quest Solitaire 2 (HKLM-x32\...\WT089422) (Version: 2.2.0.95 - WildTangent) Hidden

Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

LatencyMon 6.70 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.)

Luxor (HKLM-x32\...\WT089507) (Version: 2.2.0.95 - WildTangent) Hidden

Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\OneDriveSetup.exe) (Version: 19.043.0304.0007 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c)

Movavi Video Converter 15 (HKLM-x32\...\Movavi Video Converter 15) (Version: 15.2.2 - Movavi)

Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Namco All-Stars PAC-MAN (HKLM-x32\...\WT089440) (Version: 2.2.0.95 - WildTangent) Hidden

Penguins! (HKLM-x32\...\WT089445) (Version: 2.2.0.95 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (HKLM-x32\...\WT089452) (Version: 2.2.0.95 - WildTangent) Hidden

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Poker Superstars III (HKLM-x32\...\WT089426) (Version: 2.2.0.95 - WildTangent) Hidden

Polar Bowler (HKLM-x32\...\WT089508) (Version: 2.2.0.95 - WildTangent) Hidden

Polar Golfer (HKLM-x32\...\WT089433) (Version: 2.2.0.95 - WildTangent) Hidden

Private Internet Access Support Files (HKLM-x32\...\{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B}) (Version: 1.0.0.0 - Private Internet Access)

Samantha Swift (HKLM-x32\...\WT089503) (Version: 2.2.0.95 - WildTangent) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

SmartByte Drivers and Services (HKLM\...\{6AD3253B-AFE1-436E-971B-B16D8C6ABA3F}) (Version: 2.0.637 - Rivet Networks)

Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)

Spire.PDFConverter (HKLM-x32\...\{7144A11C-9162-4FE1-BA93-2A8CA6DB30CF}) (Version: 1.0.8 - e-iceblue)

SyncUP (HKLM-x32\...\{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}) (Version: 1.12.12400.17.102 - Nero AG) Hidden

SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.16100 - Nero AG)

TrustedID (HKLM-x32\...\{C16A92EF-017B-4839-9C75-FBADB5A1FA27}) (Version: 5.0 - TrustedID)

TrustedID IDMonitor Identity Protection (HKLM-x32\...\{0E74474A-1CDF-4249-A507-CE8C1DCEC8BC}) (Version: 1.1.0 - TrustedID Inc)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{B2E25355-C24E-4E7D-8AD3-455D59810838}) (Version: 2.57.0.0 - Microsoft Corporation)

Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{344F3227-F502-4219-9DC4-1967E586FAFA}) (Version: 2.51.0.0 - Microsoft Corporation)

Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden

Use VLC for YouTube (HKLM-x32\...\{C2E3DB8B-C43B-9203-7BE7-D03BA334FD8A}) (Version: - )

Virtual Villagers 4 - The Tree of Life (HKLM-x32\...\WT089430) (Version: 2.2.0.95 - WildTangent) Hidden

VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)

Web Launch Recorder (HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\WebLaunchRecorder) (Version: 2.0 - )

Wedding Dash - Ready, Aim, Love! (HKLM-x32\...\WT089446) (Version: 2.2.0.95 - WildTangent) Hidden

WildTangent Games (HKLM-x32\...\WildTangent dell Master Uninstall) (Version: 1.0.2.5 - WildTangent)

WildTangent Games App (Dell Games) (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-dell) (Version: 4.0.5.2 - WildTangent) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Zinio Reader 4 (HKLM-x32\...\{7FB00B6B-6843-97EC-EED6-78BD6D35370A}) (Version: 4.2.4164 - Zinio LLC) Hidden

Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)

Zuma Deluxe (HKLM-x32\...\WT089448) (Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)

ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google Inc -> Google)

ContextMenuHandlers1: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} => C:\Program Files (x86)\Movavi Video Converter 15\vcContext\vcContext.dll [2015-02-18] (Movavi) [File not signed]

ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google Inc -> Google)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers6: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} => C:\Program Files (x86)\Movavi Video Converter 15\vcContext\vcContext.dll [2015-02-18] (Movavi) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::

WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]

WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Loaded Modules (Whitelisted) ==============

2018-09-12 13:00 - 2018-09-12 13:00 - 000100864 _____ (Rivet Networks) [File not signed] C:\Program Files\Rivet Networks\SmartByte\KillerNetworkServicePS.dll

2012-05-22 16:56 - 2010-12-01 15:07 - 000176128 _____ (Chicony) [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe

2015-02-18 04:42 - 2015-02-18 04:42 - 002375680 _____ (Movavi) [File not signed] C:\Program Files (x86)\Movavi Video Converter 15\vcContext\vcContext.dll

2015-11-04 16:40 - 2015-11-04 16:40 - 000004608 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamenu.dll

2012-05-22 16:56 - 2011-01-12 19:17 - 000053248 _____ () [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe

2012-05-22 16:56 - 2011-04-01 17:08 - 000660480 _____ (DELL) [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\IndicatorOSD.exe

2019-04-06 13:07 - 2019-04-06 13:07 - 000020480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM\e4447920f93e9b6882cdca38f614dbd9\MOM.ni.exe

2019-04-06 13:07 - 2019-04-06 13:07 - 000391680 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\abfacb68b49cc8fcb5627970753a9b37\MOM.Implementation.ni.dll

2019-04-06 13:05 - 2019-04-06 13:05 - 000131584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\ebd57a1113b0e0f875e2f234df225a25\LOG.Foundation.ni.dll

2019-04-06 13:05 - 2019-04-06 13:05 - 000146432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\3e05a7bc83178f562d2bacbec56406b9\LOG.Foundation.Private.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000289792 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\dd060e6b82097097e0788603f9030cc3\LOG.Foundation.Implementation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\d95ee0ba8dbe862a8b54afb24cec9266\MOM.Foundation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\d37c91722dca681a3656648182c9dc28\LOG.Foundation.Implementation.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000199168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\c26f86980f2762a4cca4a05a692a921e\CCC.Implementation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\4a3e4f82cec9c105e1afb5833d305de1\NEWAEM.Foundation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC\8e2347fa4e75bbef76849516085f8c11\CCC.ni.exe

2019-04-06 13:06 - 2019-04-06 13:06 - 000295424 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\ea240799b401890077fa511a8fae7c0d\CLI.Foundation.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000060928 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\803bcb0423dd9e50412aab0861cfff91\CLI.Foundation.XManifest.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000228352 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\60d96a008b9e4948a02974f9e7e1be92\CLI.Component.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000149504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\a6a23f33211b0b74364eee35d553ecfe\CLI.Component.Runtime.Shared.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\b073b89a6911ee5bdfe6a55319e38f9d\CLI.Foundation.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\750ef3d68ea6421037665e32660217a8\CLI.Component.Runtime.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000122368 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\326cea1fbdd2a157acc4d049522b2925\ATICCCom.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\d2f63a425e49f2cba42da9f2ab392d24\AEM.Server.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000890368 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\befd4e5f17dd355c35bfaa295fa758a9\ADL.Foundation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000013824 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\3d5e4f14c1c70b714156766f00ff5b9f\AEM.Server.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000275456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\da2b5fd861dcbb192a4625625cf9b691\AEM.Plugin.Source.Kit.Server.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000090624 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\8352d5e1d5519f16c1a008d399da8182\CLI.Foundation.CoreAudioAPI.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\d088ed91fcf65288c73d8f0addf79bec\AEM.Plugin.Hotkeys.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\efd11645b1ae4e211dd89ffd90daf41d\AEM.Plugin.WinMessages.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000117248 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\d3e74857c3818a14e86f6103ee0d7163\DEM.Graphics.I0601.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\10989caf4046f704acdda094bf370d29\DEM.Foundation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000015872 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\b2ac88b04e0f781ac4f9c432a09bee41\DEM.Graphics.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000036352 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\a8a43edb324bfa7940bdfca74b11302f\DEM.Graphics.I1010.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 003187712 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\59c6bcc491f4b3a9c5423a5e3ef8ea97\CLI.Caste.Graphics.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 002786304 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\4bf6a36321bbb0cc6168df47e7a0bf86\CLI.Caste.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\a757dcd0f88e10772b06eade5ec3c6d0\AEM.Plugin.GD.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\4b595116057b875a6edcb44ad552a345\AEM.Actions.CCAA.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000083456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\10bcc2a89c57857811ec8b910534b3ac\DEM.Graphics.I0709.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\dc22b415879327328de2681407282a7e\ResourceManagement.Foundation.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000018944 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\e4c106a19634f76e392bcaceab4c0f6a\DEM.Graphics.I0804.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000038400 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\e7672f8c0499bf0edfe25c1b89909de2\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\1f325f5f72cf6bb57a8202c33e1ff184\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000451584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\fec6402a49e592fe88587cf0fb566bf3\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000206336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\c87b8e499f4c4af834d415506fbd85c7\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000014848 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\ed2fe119ab433e6511ee7abc99723963\DEM.Graphics.I0912.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\37ab395d1835accaf8b6fa0474e55c6b\DEM.Graphics.I0706.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\3b9a4257d13adf79969e3b76e980e896\DEM.Graphics.I0712.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000290816 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\7572b825e3f3f579203c129bf7172a92\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 001131008 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine7332395e#\682b937d3e89319866184aa6cde96d96\CLI.Combined.Graphics.Aspects2.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\a485e433a6569f0536f539fa63385fdc\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000355840 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\be9315527e8a12d2814cc818d575f34d\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000124928 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\a3400ce07aa813f1aecccdf11e5b3c4d\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000011776 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\87c01e9399626f81f28c7f2c8f3e09d5\DEM.Graphics.I0812.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\79f11cb834aa0f52c4990a807ff89494\DEM.Graphics.I0805.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000337408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\37569c668c0d50b2dc313d4f0f109ded\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000017920 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0703\85ba9630be28cf1371639886bdbd2104\DEM.Graphics.I0703.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000098816 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.74ef3339#\28ac3333561877351ce24412b4c7c332\CLI.Aspect.WorkstationConfig2.Graphics.Runtime.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000120832 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.42db43ac#\0cd2ee5318c4d1e40025fa9ee0f127c5\CLI.Aspect.WorkstationConfig2.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000727552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\d4c740951f8a060a7438da5e29135d62\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\2a8e78e877ab3be47b62d587dd71ce47\AEM.Plugin.REG.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000236032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\1c331931189a11337107cd0f8755b7d1\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\69f0a89ede992f4f2852f31c205ca108\DEM.Graphics.I0906.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000046592 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\5bb7fbb960c67e135990c98273b20b0d\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000104448 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\1dc16b0c51bbf0efad07e54a02e83fe9\CLI.Aspect.TransCode.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\3d9d7280a75d5881b64aeb49c5220931\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\3f95518e52f26511cb80790bed0672e7\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000143872 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa15a884#\841cda571946187780e13c4b646e47ef\CLI.Aspect.SDI.Graphics.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.344b46f1#\176144815230f85dcacc2d46ac81d27f\CLI.Aspect.SDI.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000062976 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\dd3435025ef76c8efd25a2d3ce2c4126\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000050176 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\49b81515b866d1425819f6a2ab868472\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 001144320 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\8312516c551bdd09e1d94a6d8fec9be9\Localization.Foundation.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000056320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\7f4dde3cf8b8da5ba5d8e4adb1f33bed\CLI.Aspect.FPS.Graphics.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\f8d8a13b537d9a96348d3a2f55627cca\CLI.Aspect.FPS.Graphics.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000304640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\7e477c5ecc33f795ec249e8ba7066fd5\CLI.Caste.Fuel.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\e1a0baf5a6151704493b2c17c1c725b0\CLI.Caste.Fuel.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\aaef41ee247dc5ab2f3b80f408967d5d\Fuel.Foundation.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000043520 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\45f468314ac3365b3f9f2f9741a74e3b\CLI.Caste.Platform.Runtime.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\ea58c1f6c390eb9d73e1a8a89fdfab9b\CLI.Caste.Platform.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\40cadbfad9c90c6b2f36d6951e228c94\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\d3ad2e867889abb1ebe85fae372c7928\CLI.Caste.HydraVision.Runtime.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\f2830673053361c52f6a0ec38b9177ec\CLI.Caste.HydraVision.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\e9020fe76348ab6b94e1aaa71e1dadd9\CLI.Caste.A4.Runtime.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\890de27bf8e2654882a3bd8e352cb65f\CLI.Caste.A4.Shared.ni.dll

2019-04-06 13:05 - 2019-04-06 13:05 - 000032256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\4ca2c4be1404f99551bb4fc186aa6fe8\A4.Foundation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000250368 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\8970dcc96f08ee7b056f2d0fb6900731\APM.Server.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000056320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\eb4a87a2ad021c37d914d2b9e405fc12\APM.Foundation.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\233048c5cd666e11028f9bf6ff6fa3ad\CLI.Component.Runtime.Extension.EEU.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\fddea5e4ffe7b145c4f2490e2f4c4a9d\AEM.Plugin.EEU.Shared.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000910336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\a41065a831121183bd91657909f3c6b1\CLI.Component.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000133632 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\c1fe1e8d2bb695d341177c1809d10ec5\CLI.Component.Client.Shared.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000019968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\f604373f8a10224fdd13b02f8d7ad3ca\CLI.Component.Client.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000086016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\a1235958f1c44714e1db622d78491b97\CLI.Component.Dashboard.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 001605632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\65078e6d3002dd5b50118eaa29a66b54\CLI.Component.Dashboard.Shared.Private.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000574976 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\021415a5b42072af1a2be4ec1c9fbca7\CLI.Caste.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 001537536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\b8e8ad9e99703aa437047c65191980de\CLI.Caste.Graphics.Dashboard.Shared.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000090112 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\8281303f77f29bc8766fc6d525b104d6\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000270848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\250d5237bb3e99520926b1ef0ec73335\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 007986176 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\05795abc7d0ffa91802f124e6a9e194f\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000446464 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\ec23542522e333a583cc2c249d7745fc\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000066560 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\3a7fb58cbc805869c7846a64016657c8\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 006323200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\4443ff50bb6502eee71ba21bac9a54ea\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 003282432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\9acbea23789c41dc140438576f617e3d\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000665600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\b498181d018c2df98889b2cdedb3f1f5\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000073728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\aacb4f95d60c494d6a020aa2818b112f\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000253440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8ae26521#\853e9e4886af6addd0b5945f6e3344cf\CLI.Aspect.WorkstationConfig2.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000310784 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.87ad5c75#\f2ed3c7f27be84db9084b592879a6a9a\CLI.Aspect.OverDrive5.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000154624 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.15a2db5c#\c946f1b2a850b347dec4218ce15ed8be\CLI.Aspect.SDI.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000081920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\21bdc9e83bc3e1f77ed0f5bf382516e1\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\f9733584482bc9b66b25668e2ed83829\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\236d6667a48b046452855d26a7a22d4a\CLI.Caste.Fuel.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\34b2f455abac237d452eabdf42e90f9f\CLI.Caste.Platform.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\3ac227a735f141209479e46db9093e45\CLI.Caste.HydraVision.Dashboard.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\e7718d1bb2e9d551c248e4b4d083d66c\CLI.Caste.A4.Dashboard.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 001052672 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\9c151d7237b480dcf1d4a3146bc013c9\CLI.Foundation.Client.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000168960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\56983457feaa0e4d3a5a3fdad2f0f84b\CLI.Component.Dashboard.ProfileManager2.ni.dll

2019-04-06 13:07 - 2019-04-06 13:07 - 000242688 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\887241491263c2d0195573df7b5bc55c\ResourceManagement.Foundation.Implementation.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 002497536 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\02998222aee1c0637b4e20fbf66bee7f\Microsoft.WindowsAPICodePack.Shell.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 000332800 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\524e976483563118dbb68fb6c5ab3e5c\Microsoft.WindowsAPICodePack.ni.dll

2019-04-06 13:06 - 2019-04-06 13:06 - 001642496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\16d5f1c0e20434bcc8913904d835c3e5\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll

2016-09-14 18:44 - 2016-09-14 18:44 - 001430016 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files\Rivet Networks\SmartByte\x64\SQLite.Interop.dll

2019-04-26 20:24 - 2019-04-26 20:24 - 017180160 _____ () [File not signed] C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.2.4.0_x64__htrsf667h5kn2\SupportAssistClientUI.dll

2019-04-06 12:59 - 2019-04-06 12:59 - 002196480 _____ (Conexant Systems, Inc) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\SmartAudio\df75897294c865b4c803bae325bb0379\SmartAudio.ni.exe

2019-04-06 12:59 - 2019-04-06 12:59 - 000328192 _____ ( ) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxHef9fb4ae#\81a6f9b9d6e3bd02de57b463b019f1b4\Interop.CxHDAudioAPILib.ni.dll

2016-08-05 20:56 - 2013-12-16 11:00 - 001086464 _____ (Conexant Systems, Inc.) [File not signed] C:\Program Files\Conexant\SAII\CxHDAudioAPI.dll

2012-05-22 16:56 - 2011-03-11 11:09 - 000028672 _____ () [File not signed] C:\Program Files (x86)\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\INDICATOR_OSD.DLL

2012-02-01 11:44 - 2012-02-01 11:44 - 018858496 _____ (Unlimited Realities) [File not signed] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\libumajin.dll

2012-02-01 11:44 - 2012-02-01 11:44 - 008151040 _____ () [File not signed] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll

2012-02-01 11:44 - 2012-02-01 11:44 - 002278400 _____ () [File not signed] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 002459648 ____R (Python Software Foundation) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\python27.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 000098816 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32api.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000110080 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\pywintypes27.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 000364544 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\pythoncom27.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 000320512 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32com.shell.shell.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000914432 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_hashlib.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 001176576 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._core_.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000155136 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxbase30u_net_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 002030592 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxbase30u_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 004796928 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxmsw30u_core_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 001251328 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxmsw30u_adv_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 000806400 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._gdi_.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000816128 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._windows_.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000601088 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxmsw30u_html_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 001067008 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._controls_.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000733184 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._misc_.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000682496 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\pysqlite2._sqlite.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000088064 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_ctypes.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000686080 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\unicodedata.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000119808 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32file.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000108544 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32security.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000007168 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\hashobjs_ext.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000017920 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\thumbnails_ext.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000088064 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\usb_ext.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000012800 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\common.time34.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000018432 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32event.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000167936 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32gui.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000046080 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_socket.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 001303552 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_ssl.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000128512 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_elementtree.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000127488 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\pyexpat.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000038912 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32inet.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000036864 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_psutil_windows.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000011264 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32crypt.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000123392 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._wizard.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000077312 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._html2.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000110080 ____R (wxWidgets development team) [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wxmsw30u_webview_vc90.dll

2019-05-04 08:44 - 2019-05-04 08:44 - 000027648 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_multiprocessing.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000020480 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\_yappi.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000035840 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32process.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000078848 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\wx._animate.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000024064 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32pipe.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000010240 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\select.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000025600 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32pdh.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000017408 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32profile.pyd

2019-05-04 08:44 - 2019-05-04 08:44 - 000022528 ____R () [File not signed] C:\Users\Andrew\AppData\Local\Temp\_MEI35922\win32ts.pyd

2019-04-05 08:03 - 2019-04-05 08:03 - 001093120 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL

2019-04-05 08:03 - 2019-04-05 08:03 - 000057344 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80ENU.DLL

2019-04-05 08:03 - 2019-04-05 08:03 - 000097280 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.DLL

2019-04-06 03:07 - 2019-04-06 03:07 - 000039424 _____ (Adobe Systems Incorporated) [File not signed] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\f95a4f0f57ae5aca8f68caa891646e41\PresentationCFFRasterizer.ni.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\...\eztv.ag -> hxxps://eztv.ag

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2015-05-03 11:29 - 000000035 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\

HKU\S-1-5-21-3960278461-2044705814-1633424519-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg

DNS Servers: 192.168.1.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D330DA15-5213-42F3-B3F7-9C893B3B1A41}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe No File

FirewallRules: [{1A769229-E754-4DAB-AD0E-F26DADEC1962}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe No File

FirewallRules: [TCP Query User{47980681-F642-4852-997D-C887161D0695}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe No File

FirewallRules: [UDP Query User{E0E4F86F-A1C9-4E1C-948A-113953C2712A}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe No File

FirewallRules: [{8BA3F465-6FBF-4F45-A4DE-D7943E6F07AB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File

FirewallRules: [{2254CC99-E6B7-46FE-BDB8-284FD54EB8DC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File

FirewallRules: [{F6A277C3-9332-4CC0-84C2-1EFD67960323}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe No File

FirewallRules: [{C792BD28-E91B-4E29-9167-203DE88574BA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe No File

FirewallRules: [{9C9A37BB-6713-4D64-AB1D-1333BCEBE1B4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File

FirewallRules: [{C53727B8-8E0A-44EF-B26B-B77B6237536D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File

FirewallRules: [{FD70F34A-5AC8-4E78-AB27-91BB08970B23}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

19-04-2019 23:45:19 Scheduled Checkpoint

29-04-2019 23:30:48 Scheduled Checkpoint

04-05-2019 08:19:23 Windows Update

05-05-2019 11:43:26 Removed Bonjour

==================== Faulty Device Manager Devices =============

Name: Dell Wireless 1450 Dual-band (802.11a/b/g) USB 2.0 Adapter

Description: Dell Wireless 1450 Dual-band (802.11a/b/g) USB 2.0 Adapter

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:

==================

System errors:

=============

Error: (05/05/2019 11:34:27 AM) (Source: DCOM) (EventID: 10016) (User: Andrew-PC)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}

and APPID

{15C20B67-12E7-4BB6-92BB-7AFF07997402}

to the user Andrew-PC\Andrew SID (S-1-5-21-3960278461-2044705814-1633424519-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 10:10:28 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (05/04/2019 09:04:13 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)

Description: A corruption was discovered in the file system structure on volume ??.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

Error: (05/04/2019 09:03:42 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)

Description: A corruption was discovered in the file system structure on volume OS.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

Error: (05/04/2019 08:45:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscDataProtection

and APPID

Unavailable

to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 08:45:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscBrokerManager

and APPID

Unavailable

Error: (05/04/2019 08:45:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.SecurityAppBroker

and APPID

Unavailable

Error: (05/04/2019 08:45:29 AM) (Source: DCOM) (EventID: 10016) (User: Andrew-PC)

Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscCloudBackupProvider

and APPID

Unavailable

CodeIntegrity:

===================================

Date: 2019-05-04 08:56:06.526

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:06.486

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:06.423

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:06.241

Description:

Date: 2019-05-04 08:56:06.216

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:06.201

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:05.083

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2019-05-04 08:56:04.855

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. A08 09/27/2012

Motherboard: Dell Inc. 0GDG8Y

Processor: Intel® Core™ i5-2320 CPU @ 3.00GHz

Percentage of memory in use: 51%

Total physical RAM: 8174.64 MB

Available physical RAM: 3949.18 MB

Total Virtual: 25582.64 MB

Available Virtual: 19810.33 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:1844.7 GB) (Free:1417.31 GB) NTFS

Drive d: (WHO_IS_AMERICA_DISC_2) (CDROM) (Total:4.7 GB) (Free:0 GB) UDF

\\?\Volume{89db7e19-a466-11e1-9521-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:18.28 GB) (Free:7.77 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 1863 GB) (Disk ID: 0EF3ACCD)

Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)

Partition 2: (Active) - (Size=18.3 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=1844.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

#34
RKinner

Posted 05 May 2019 - 03:13 PM

Malware Expert

Expert
24,624 posts

This error is back:

Error: (05/04/2019 09:04:13 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)

Description: A corruption was discovered in the file system structure on volume ??.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

Error: (05/04/2019 09:03:42 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)

Description: A corruption was discovered in the file system structure on volume OS.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

We just ran the disk check but it came back so either the drive is on the way out or you have some bad RAM. Check your RAM using the builtin test:

https://www.windowsc...lems-windows-10

To uninstall Zune follow the instructions on

https://www.howtogee...reinstall-them/

Scroll down until you find:

Use PowerShell to Uninstall Built-in Apps

then open powershell and use the command to

Uninstall Groove Music:

Get-AppxPackage *zunemusic* | Remove-AppxPackage

#35
Krueg9651

Posted 10 June 2019 - 05:30 PM

Member

Topic Starter
Member
136 posts

ok I just uninstalled Zune and did the diagnostics test (see attached jpeg)

Thanks!

Attached Thumbnails

#36
RKinner

Posted 10 June 2019 - 09:08 PM

Malware Expert

Expert
24,624 posts

Sometimes on a desktop the hard drive cables need to be disconnected and reconnected. You might try that then run the disk check on C: again. See if the error comes back.