[daba]

I remembered the last time this happened: I uninstalled avast and installed Panda antivirus and that fixed it. Right this minute - for whatever reason - I'm able to type normally but not two minutes earlier, in the previous message, I was having to hit multiple same key strikes and it was all over the place. It's weird.

[Advertisements]

Another hint (don't know if it helps or not): not every time, again it's random, but when it's playing up it will sometimes beep. A single beep.

[daba]

Another hint (don't know if it helps or not): not every time, again it's random, but when it's playing up it will sometimes beep. A single beep.

[RKinner]

What does device manager say now?

 

From your earlier Speccy post you appeared to have a wireless keyboard.  Have you removed the software for the wireless?

[daba]

Thank you. Device Manager is as before: HID Keyboard Device, HID Keyboard Device, Standard PS/2 Keyboard.

I have never had a wireless keyboard, never - so I have no clue why Speccy would say that. I have not removed any wireless software (that I know of).

I am now very confused. Were you telling me to remove one or all (or just reinstall after a reboot) those 3 keyboard devices? They are as before.

[RKinner]

All was correct.

 

See if you can install

https://www.dell.com...?driverid=9ft4r

[daba]

Hello. I've installed but it's still skipping.Thank you.

[RKinner]

Do you have the same problem in notepad or wordpad as in a browser?

 

Try the keyboard test here:

 

https://www.softpedi...t-Utility.shtml

[daba]

Thank you.

'The actual test is straightforward and consists of pressing the key buttons that you think are problematic. Once pressed, the keys are highlighted on the virtual keyboard, so you know they are working properly.'

 

Nothing happened. Didn't work so I think I'll do what I did last time and change my antivirus, see if it works a second time. Thank you.

[RKinner]

You do have to download and then double click on the downloaded file.  Then you should get:

 

[daba]

Hi. Yes, I did get that but when I typed the keys nothing lit up at all. The purpose of the test seems to be for specific key malfunction whereas my issue is systemic and not directly related with the keyboard per se (at least, I don't think so based on past experience). I changed the antivirus. Right now, as I type this, all is well - no latency, no skips - but I'll see as the day progresses if things stay that way or not. Thank you.

[RKinner]

Now that your keys are working again does the keyboard test work?

[RKinner]

I have been reading about keyboards and there is something called an UpperFilter in the registry which may be the cause.  Apparently key strokes get piped through one or more filters before going to the outside.  One of these UpperFilters is usually from your antivirus so it sounds promising.

 

Let's see what you have.

 

I'll use a fixlist but this one will just look at the one registry key so should be very quick and will not require a reboot.

 

Download the attached fixlist.txt to the same location as FRST

 fixlist.txt   242bytes   131 downloads

Run FRST and press Fix
A fix log will be generated please post that

I will also need a FRST scan so I can see if the filter is working.

Run FRST again but this time make sure Addition.txt is checked and hit Scan.  Post both logs.


 

[daba]

Thanks a lot. Yes the keyboard test works fine. No issues. The problem I have is that I have tried every possible permutation for this fixlist and FRST and I just can't find the right folder. I'm embarrassed to be so technically challenged. Embarrassed. Apologies.

[RKinner]

FRST says:
 

Running from C:\Users\David Jackson\Desktop

 

 

 

so download the fixlist and move it to your desktop.

[daba]

Thank you, this time - it worked.

Fix result of Farbar Recovery Scan Tool (x64) Version: 03-09-2020

Ran by David Jackson (03-09-2020 22:29:48) Run:10

Running from C:\Users\David Jackson\Desktop

Loaded Profiles: David Jackson

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

REG: reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318} /s

 

 

 

*****************

 

 

========= reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318} /s =========

 

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}

    Class    REG_SZ    Keyboard

    ClassDesc    REG_SZ    @%SystemRoot%\System32\SysClass.Dll,-3002

    UpperFilters    REG_MULTI_SZ    kbdclass

    IconPath    REG_MULTI_SZ    %SystemRoot%\System32\setupapi.dll,-3

    NoInstallClass    REG_SZ    1

    LastDeleteDate    REG_BINARY    54FC001F2581D601

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}\0000

    DriverDesc    REG_SZ    HID Keyboard Device

    ProviderName    REG_SZ    Microsoft

    DriverDateData    REG_BINARY    00808CA3C594C601

    DriverDate    REG_SZ    6-21-2006

    DriverVersion    REG_SZ    10.0.18362.1

    InfPath    REG_SZ    keyboard.inf

    InfSection    REG_SZ    HID_Keyboard_Inst.NT

    MatchingDeviceId    REG_SZ    HID_DEVICE_SYSTEM_KEYBOARD

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}\0001

    DriverDesc    REG_SZ    HID Keyboard Device

    ProviderName    REG_SZ    Microsoft

    DriverDateData    REG_BINARY    00808CA3C594C601

    DriverDate    REG_SZ    6-21-2006

    DriverVersion    REG_SZ    10.0.18362.1

    InfPath    REG_SZ    keyboard.inf

    InfSection    REG_SZ    HID_Keyboard_Inst.NT

    MatchingDeviceId    REG_SZ    HID_DEVICE_SYSTEM_KEYBOARD

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}\0002

    DriverDesc    REG_SZ    Standard PS/2 Keyboard

    ProviderName    REG_SZ    Microsoft

    DriverDateData    REG_BINARY    00808CA3C594C601

    DriverDate    REG_SZ    6-21-2006

    DriverVersion    REG_SZ    10.0.18362.1

    InfPath    REG_SZ    keyboard.inf

    InfSection    REG_SZ    STANDARD_Inst

    MatchingDeviceId    REG_SZ    *PNP0303

    LocationInformationOverride    REG_SZ    plugged into keyboard port

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}\Properties

 

 

========= End of Reg: =========

 

 

==== End of Fixlog 22:29:48 ====

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 03-09-2020

Ran by David Jackson (administrator) on DAVIDDELL2 (Dell Inc. Vostro 3478) (03-09-2020 22:31:59)

Running from C:\Users\David Jackson\Desktop

Loaded Profiles: David Jackson

Platform: Windows 10 Home Version 1909 18363.1016 (X64) Language: English (United States)

Default browser: "C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe" -- "%1"

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe

(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0355311.inf_amd64_815d26f2163260da\B355199\atieclxx.exe

(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0355311.inf_amd64_815d26f2163260da\B355199\atiesrxx.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\protectedservice.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe

(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe

(Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe <13>

(F.lux Software LLC -> f.lux Software LLC) C:\Users\David Jackson\AppData\Local\FluxSoftware\Flux\flux.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® pGFX 2020 -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_cf129e457c51e71b\OneApp.IGCC.WinService.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0ff9f497187b8bed\igfxCUIService.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0ff9f497187b8bed\igfxEM.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_020c2c7d3ac4a7d3\IntelCpHDCPSvc.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_020c2c7d3ac4a7d3\IntelCpHeciSvc.exe

(Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdlogsr.exe

(Microsoft Windows Hardware Compatibility Publisher -> Windows ® Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe

(Open-Shell) [File not signed] C:\Program Files\Open-Shell\StartMenu.exe

(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe

(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe

(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

 

==================== Registry (Whitelisted) ===================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9246656 2018-01-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1505728 2018-01-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1210288 2017-11-14] (Waves Inc -> Waves Audio Ltd.)

HKLM\...\Run: [Open-Shell Start Menu] => C:\Program Files\Open-Shell\StartMenu.exe [216576 2018-08-18] (Open-Shell) [File not signed]

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [318920 2019-05-30] (Intel® Rapid Storage Technology -> Intel Corporation)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [705928 2020-08-28] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\Run: [f.lux] => C:\Users\David Jackson\AppData\Local\FluxSoftware\Flux\flux.exe [1469968 2020-06-17] (F.lux Software LLC -> f.lux Software LLC)

HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2075816 2020-08-27] (Brave Software, Inc. -> Brave Software, Inc.)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.83\Installer\chrmstp.exe [2020-08-27] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\85.1.13.82\Installer\chrmstp.exe [2020-08-28] (Brave Software, Inc.) [File not signed]

FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

 

==================== Scheduled Tasks (Whitelisted) ============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {044E1B9A-370F-4F6F-BADB-0A0F0DA37B38} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-05-15] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {11FCF4AA-3F7D-4378-967A-F69D76B06EE6} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_414_pepper.exe [1471032 2020-08-11] (Adobe Inc. -> Adobe)

Task: {1628DE49-B22E-47A2-9958-9B7685BB85C5} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {1FEE1AB6-7875-4C51-8A22-DFEA95CAE2DE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {5FC8279F-34E1-4E48-96E4-05997EF10D17} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe

Task: {74F7F83F-2E3D-47E4-AB60-9AD942D901C5} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK

Task: {75198F92-0F54-4164-926B-3AA5947FE1E3} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe

Task: {7CD4CBB1-A683-4DF4-8551-75673ECCEDBE} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1628160 2020-05-15] (Advanced Micro Devices, Inc.) [File not signed]

Task: {85493095-4007-4EB6-9694-D88CFAE7F7AE} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {8A408B5D-FB1B-4DEC-B6C8-7B2A2CC01B52} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-05-15] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {8E9545BB-8354-41B5-B7EB-2FBE21D68677} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [228048 2020-08-28] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

Task: {8EEC5CF0-6E3A-4C54-8E3A-812E083C98B1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {91E71EFD-DB12-463D-98F3-EAA0741A29C6} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-05-15] (Advanced Micro Devices, Inc.) [File not signed]

Task: {BB8CD43C-4901-4FC2-AA25-E43E380B45FF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-24] (Google LLC -> Google LLC)

Task: {CA437914-1533-42A0-9BD7-557841658C20} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628160 2020-05-15] (Advanced Micro Devices, Inc.) [File not signed]

Task: {D399D880-303A-47CC-94F1-D96370C19676} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {DC6795B8-FE5E-4511-8151-24C490DD4E68} - System32\Tasks\StartCNBM => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-05-15] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {E4C6E767-DB28-42E3-BC6E-E4C32DBA1375} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2760512 2020-08-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

Task: {E5FF8A78-41FB-4163-BA38-79B475EECFEE} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [30140088 2020-09-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

Task: {E7611AFD-1B56-4D55-AE60-0C0DE6CB3B2D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-24] (Google LLC -> Google LLC)

Task: {EC8B1B18-0FAC-4DC3-9501-10DB2041BDAC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-11] (Adobe Inc. -> Adobe)

Task: {F3BD7406-3407-4868-B770-5B166A045ADE} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 10.0.0.254

Tcpip\..\Interfaces\{8c70cad8-062e-4f13-8ce5-2a31ab038f35}: [DhcpNameServer] 10.0.0.254

Tcpip\..\Interfaces\{b3d91cbd-008e-4ca0-a438-0fc4de714817}: [DhcpNameServer] 8.8.8.8

Tcpip\..\Interfaces\{e74bf68f-123f-41dc-be80-cfca9c0eab71}: [DhcpNameServer] 192.168.88.1 192.168.1.1

 

Internet Explorer:

==================

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-2490165305-1638453623-257508744-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [File not signed]

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_64.dll [2018-08-18] (Open-Shell) [File not signed]

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer32.dll [2018-08-18] (Open-Shell) [File not signed]

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_32.dll [2018-08-18] (Open-Shell) [File not signed]

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [File not signed]

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer32.dll [2018-08-18] (Open-Shell) [File not signed]

Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

 

FireFox:

========

FF DefaultProfile: 58x27176.default-1552496324060

FF ProfilePath: C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060 [2020-09-02]

FF Extension: (Clear Cache) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2019-07-10]

FF Extension: (Reverso – Translation, dictionary) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2020-07-21]

FF Extension: (Simple Translate) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2020-05-11]

FF Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2020-07-21]

FF Extension: (uBlock Origin) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2020-09-02]

FF Extension: (Avast Online Security) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\[email protected] [2020-04-10] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]

FF Extension: (Startpage.com — Private Search Engine) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\{20fc2e06-e3e4-4b2b-812b-ab431220cada}.xpi [2019-10-27]

FF Extension: (Zhongwen: Chinese-English Dictionary) - C:\Users\David Jackson\AppData\Roaming\Mozilla\Firefox\Profiles\58x27176.default-1552496324060\Extensions\{b65c7bc6-846b-4f65-b6ed-099d7e042309}.xpi [2019-03-14] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [No File]

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [No File]

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [No File]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-10-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

 

Chrome: 

=======

CHR Profile: C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default [2020-09-02]

CHR Extension: (Slides) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-24]

CHR Extension: (Docs) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-24]

CHR Extension: (Google Drive) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-04-24]

CHR Extension: (YouTube) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-24]

CHR Extension: (uBlock Origin) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-06-27]

CHR Extension: (Sheets) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-24]

CHR Extension: (Google Docs Offline) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-27]

CHR Extension: (Avast Online Security) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-06-27]

CHR Extension: (Chrome Web Store Payments) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-24]

CHR Extension: (Gmail) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-04-24]

CHR Extension: (Chrome Media Router) - C:\Users\David Jackson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-27]

CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]

CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

 

==================== Services (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-11] (Adobe Inc. -> Adobe)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208568 2020-08-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [537160 2020-08-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484432 2020-08-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484432 2020-08-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [572752 2020-08-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S4 AUEPLauncher; C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPLauncher.exe [60600 2020-05-15] (Advanced Micro Devices, Inc. -> AMD)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [636592 2020-08-28] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [382728 2020-08-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [245400 2020-08-28] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161376 2020-08-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-23] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\NisSrv.exe [2343112 2020-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\MsMpEng.exe [128360 2020-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)

 

===================== Drivers (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)

S3 asvpndrv; C:\WINDOWS\System32\drivers\asvpndrv.sys [31744 2014-05-18] (Astrill -> Astrill)

R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S0 avelam; C:\WINDOWS\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)

R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [208024 2020-06-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [199752 2020-04-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [97176 2019-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com)

S3 rspLLL; C:\WINDOWS\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)

S3 rspWhySoSlow; C:\WINDOWS\System32\DRIVERS\rspWhy64.sys [28928 2016-12-17] (Daniel Terhell -> Resplendence Software Projects Sp.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48520 2020-09-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [428256 2020-09-02] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [69856 2020-09-02] (Microsoft Windows -> Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One month (created) ===================

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2020-09-03 22:31 - 2020-09-03 22:34 - 000028122 _____ C:\Users\David Jackson\Desktop\FRST.txt

2020-09-03 22:29 - 2020-09-03 22:29 - 000002675 _____ C:\Users\David Jackson\Desktop\Fixlog.txt

2020-09-03 20:48 - 2020-09-03 20:48 - 000000242 _____ C:\Users\David Jackson\Downloads\fixlist.txt

2020-09-03 20:46 - 2020-09-03 20:46 - 002299392 _____ (Farbar) C:\Users\David Jackson\Desktop\FRST64 (1).exe

2020-09-03 16:22 - 2020-09-03 16:22 - 000493313 _____ C:\Users\David Jackson\Downloads\David-Jackson_18553152_cv-library.pdf

2020-09-03 11:00 - 2020-09-03 11:00 - 000003132 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher

2020-09-03 11:00 - 2020-09-03 11:00 - 000003118 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate

2020-09-02 22:12 - 2020-09-03 11:00 - 000000000 ____D C:\Users\Public\Security Sessions

2020-09-02 22:11 - 2020-09-02 22:11 - 000003716 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update

2020-09-02 22:10 - 2020-09-02 22:10 - 000003374 _____ C:\WINDOWS\system32\Tasks\Avira_Antivirus_Systray

2020-09-02 22:10 - 2020-09-02 22:10 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf

2020-09-02 22:09 - 2020-06-09 13:37 - 000208024 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys

2020-09-02 22:09 - 2020-04-30 12:37 - 000199752 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys

2020-09-02 22:09 - 2019-06-07 15:09 - 000078936 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avdevprot.sys

2020-09-02 22:09 - 2019-03-20 19:50 - 000089736 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys

2020-09-02 22:09 - 2019-03-20 19:50 - 000046704 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys

2020-09-02 22:09 - 2019-03-20 19:50 - 000045472 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys

2020-09-02 22:09 - 2019-03-20 19:50 - 000022336 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avelam.sys

2020-09-02 22:03 - 2020-09-02 22:12 - 000000000 ____D C:\Users\David Jackson\AppData\Local\Avira

2020-09-02 22:03 - 2020-09-02 22:03 - 000003788 _____ C:\WINDOWS\system32\Tasks\AviraSystemSpeedupUpdate

2020-09-02 22:03 - 2020-09-02 22:03 - 000000000 ____D C:\Users\Public\Speedup Sessions

2020-09-02 22:02 - 2020-09-02 22:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2020-09-02 22:02 - 2020-09-02 22:12 - 000000000 ____D C:\ProgramData\Avira

2020-09-02 22:02 - 2020-09-02 22:11 - 000000000 ____D C:\Program Files (x86)\Avira

2020-09-02 22:02 - 2020-09-02 22:02 - 000001265 _____ C:\Users\Public\Desktop\Avira.lnk

2020-09-02 22:02 - 2020-09-02 22:02 - 000001265 _____ C:\ProgramData\Desktop\Avira.lnk

2020-09-02 21:45 - 2020-09-02 21:45 - 004434320 _____ (Avira Operations GmbH & Co. KG) C:\Users\David Jackson\Downloads\avira_en_sptl1_cbc6c5b27d137256__phpws-spotlight-release.exe

2020-09-02 20:31 - 2020-09-02 20:31 - 002037248 _____ (Javad Taheri) C:\Users\David Jackson\Downloads\keyboardtestutility.exe

2020-09-02 17:37 - 2020-09-02 17:38 - 000344948 _____ C:\WINDOWS\Tweaking.com - Windows Repair Setup Log.txt

2020-09-02 17:36 - 2020-09-02 17:37 - 038049696 _____ (Tweaking.com) C:\Users\David Jackson\Downloads\tweaking.com_windows_repair_aio_setup.exe

2020-09-02 16:40 - 2020-09-02 16:40 - 009314160 _____ (Dell Inc.) C:\Users\David Jackson\Downloads\Intel-HID-Event-Filter-Driver_9FT4R_WIN_2.2.1.375_A10_01.EXE

2020-09-02 12:07 - 2020-09-02 12:07 - 000164119 _____ C:\Users\David Jackson\Downloads\LHA Rates 2020.pdf

2020-08-24 20:37 - 2020-08-24 20:37 - 000000000 ____D C:\Users\David Jackson\Documents\Chinese dox

2020-08-18 13:31 - 2020-08-18 13:31 - 001622658 _____ C:\Users\David Jackson\Downloads\IMG_3219.MOV

2020-08-17 10:18 - 2020-08-17 10:18 - 000000000 ____D C:\Users\David Jackson\AppData\LocalLow\Intel

2020-08-17 10:10 - 2020-06-14 18:27 - 021268312 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 020173688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 003183928 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_h265ve_64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 003177152 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_vp9ve_64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 003163656 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_h264ve_64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 003005448 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_mjpgvd_64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 002962120 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_encrypt_64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 002575616 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_h265ve_32.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 002570944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_vp9ve_32.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 002562000 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_h264ve_32.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 002406240 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_encrypt_32.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 001776600 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2020-08-17 10:10 - 2020-06-14 18:27 - 001776600 _____ C:\WINDOWS\system32\vulkaninfo.exe

2020-08-17 10:10 - 2020-06-14 18:27 - 001367008 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-08-17 10:10 - 2020-06-14 18:27 - 001367008 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2020-08-17 10:10 - 2020-06-14 18:27 - 001087304 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 001087304 _____ C:\WINDOWS\system32\vulkan-1.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 000947016 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 000947016 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 000208680 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll

2020-08-17 10:10 - 2020-06-14 18:27 - 000176456 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll

2020-08-17 10:10 - 2020-06-14 18:26 - 025068552 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll

2020-08-17 10:10 - 2020-06-14 18:26 - 011912200 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll

2020-08-17 10:10 - 2020-06-14 18:26 - 002430984 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_mjpgvd_32.dll

2020-08-17 10:10 - 2020-06-14 18:26 - 000118280 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2020-08-17 10:10 - 2020-06-14 18:26 - 000103432 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2020-08-17 10:10 - 2020-01-27 11:03 - 000072305 _____ C:\WINDOWS\SysWOW64\h265e_32.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000071888 _____ C:\WINDOWS\SysWOW64\vp9e_32.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000070721 _____ C:\WINDOWS\SysWOW64\he_32.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000066153 _____ C:\WINDOWS\SysWOW64\mj_32.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000014145 _____ C:\WINDOWS\system32\h265e_64.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000013996 _____ C:\WINDOWS\system32\vp9e_64.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000013589 _____ C:\WINDOWS\system32\he_64.vp

2020-08-17 10:10 - 2020-01-27 11:03 - 000013309 _____ C:\WINDOWS\system32\mj_64.vp

2020-08-17 10:09 - 2020-01-27 11:03 - 000057143 _____ C:\WINDOWS\SysWOW64\dev_32.vp

2020-08-17 10:09 - 2020-01-27 11:03 - 000056359 _____ C:\WINDOWS\system32\dev_64.vp

2020-08-17 10:09 - 2020-01-27 11:03 - 000001125 _____ C:\WINDOWS\SysWOW64\cpa_32.vp

2020-08-17 10:09 - 2020-01-27 11:03 - 000001125 _____ C:\WINDOWS\system32\cpa_64.vp

2020-08-15 09:32 - 2020-08-15 09:32 - 000000000 ____D C:\Users\David Jackson\Desktop\E

2020-08-14 10:12 - 2020-08-14 10:12 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2020-08-14 10:12 - 2020-08-14 10:12 - 000941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll

2020-08-14 10:12 - 2020-08-14 10:12 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrahc.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 025903104 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 022642688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 019852288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 019812352 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 018032128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 007758848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 007270912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 006294528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 005904896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 005013504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 004859904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 004611072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 004129408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 003637760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 003516416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 002950808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2020-08-14 10:11 - 2020-08-14 10:11 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2020-08-14 10:11 - 2020-08-14 10:11 - 002588688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 002422384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 002259192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 002138280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 001870200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001418832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001282872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2020-08-14 10:11 - 2020-08-14 10:11 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 001197056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000995840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000738064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000671040 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000666280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000359496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000343408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL

2020-08-14 10:11 - 2020-08-14 10:11 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe

2020-08-14 10:11 - 2020-08-14 10:11 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll

2020-08-14 10:11 - 2020-08-14 10:11 - 000000357 _____ C:\WINDOWS\system32\DrtmAuthKeyDelegate_From_20190529_To_20200303.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000357 _____ C:\WINDOWS\system32\DrtmAuth1KeyDelegate.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin

2020-08-14 10:11 - 2020-08-14 10:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin

2020-08-14 10:10 - 2020-08-14 10:10 - 014820352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 006074552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 005946368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 005849872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 005767224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 005111296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 005003824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 003974376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 003743056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2020-08-14 10:10 - 2020-08-14 10:10 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002737664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002576896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002307584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002096128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 002022400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001740800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001672544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001654312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001564160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001420320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001406464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001397576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 001101312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000897648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000894032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000875520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000775480 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000718336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000690536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000675040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000675024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000673088 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000593480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000568128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000564488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000379704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HrtfApo.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2020-08-14 10:10 - 2020-08-14 10:10 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000273744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000165176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000133256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000124512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000090936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys

2020-08-14 10:10 - 2020-08-14 10:10 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acwow64.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys

2020-08-14 10:10 - 2020-08-14 10:10 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll

2020-08-14 10:10 - 2020-08-14 10:10 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe

2020-08-14 10:10 - 2020-08-14 10:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 009932088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 007270728 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 006436864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 003806208 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 003727872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 003368616 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 002766952 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 002698048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 002085632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 001756592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2020-08-14 10:09 - 2020-08-14 10:09 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 001512848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 001482568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 001393960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 001366144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2020-08-14 10:09 - 2020-08-14 10:09 - 001182248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000888352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000867840 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000823744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000822800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 000548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000522688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2020-08-14 10:09 - 2020-08-14 10:09 - 000463168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000457016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2020-08-14 10:09 - 2020-08-14 10:09 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2020-08-14 10:09 - 2020-08-14 10:09 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll

2020-08-14 10:09 - 2020-08-14 10:09 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll

2020-08-14 10:08 - 2020-08-14 10:09 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 017792512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 007915864 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 007850784 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 007583272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 007297536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 005283776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 004625184 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin

2020-08-14 10:08 - 2020-08-14 10:08 - 004005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2020-08-14 10:08 - 2020-08-14 10:08 - 003141632 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002808832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002717696 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2020-08-14 10:08 - 2020-08-14 10:08 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002523136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002471936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002260312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 002136064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001660536 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001338368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001182208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001123344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001072128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001059328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001055232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000937984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000917800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000875424 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2020-08-14 10:08 - 2020-08-14 10:08 - 000716312 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\HrtfApo.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2020-08-14 10:08 - 2020-08-14 10:08 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000369304 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayServer.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000209208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000201544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys

2020-08-14 10:08 - 2020-08-14 10:08 - 000186472 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000152416 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe

2020-08-14 10:08 - 2020-08-14 10:08 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll

2020-08-14 10:08 - 2020-08-14 10:08 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll

2020-08-13 22:29 - 2020-08-13 22:30 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2020-08-13 22:29 - 2020-08-13 22:30 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

2020-08-13 18:13 - 2020-08-13 18:14 - 000047021 _____ C:\Users\David Jackson\Downloads\Living Costs for Socotra.pdf

2020-08-13 10:26 - 2020-08-13 10:26 - 001937318 _____ C:\Users\David Jackson\Downloads\ReachAcross News August 2020.pdf

 

==================== One month (modified) ==================

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2020-09-03 22:33 - 2020-01-24 00:15 - 000000000 ____D C:\FRST

2020-09-03 22:27 - 2019-08-25 22:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2020-09-03 21:35 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2020-09-03 20:53 - 2020-02-10 22:45 - 000000000 ____D C:\Users\David Jackson\Downloads\FRST-OlderVersion

2020-09-03 20:50 - 2019-10-06 14:14 - 000000000 ____D C:\Users\David Jackson\AppData\Local\OpenShell

2020-09-03 19:37 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps

2020-09-03 19:37 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2020-09-03 10:59 - 2018-10-17 11:39 - 000000000 __SHD C:\Users\David Jackson\IntelGraphicsProfiles

2020-09-02 22:58 - 2018-10-17 11:02 - 000000000 ____D C:\Users\David Jackson\AppData\LocalLow\Mozilla

2020-09-02 22:50 - 2020-06-09 23:41 - 000000000 ____D C:\Program Files\Mozilla Firefox

2020-09-02 22:50 - 2018-10-17 11:02 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2020-09-02 22:50 - 2018-10-17 11:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2020-09-02 22:34 - 2020-04-19 10:57 - 000460904 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2020-09-02 22:34 - 2019-08-25 23:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-09-02 22:33 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2020-09-02 22:10 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-09-02 22:02 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF

2020-09-02 22:01 - 2019-03-13 22:07 - 000000000 ____D C:\ProgramData\Package Cache

2020-09-02 22:00 - 2018-10-18 10:25 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2020-09-02 21:53 - 2020-06-12 22:09 - 000000000 ____D C:\ProgramData\Panda Security

2020-09-02 21:52 - 2020-06-12 22:21 - 000000000 ____D C:\Users\David Jackson\AppData\Roaming\Panda Security

2020-09-02 17:47 - 2020-03-05 15:22 - 000735058 _____ C:\WINDOWS\system32\perfh010.dat

2020-09-02 17:47 - 2020-03-05 15:22 - 000135432 _____ C:\WINDOWS\system32\perfc010.dat

2020-09-02 17:47 - 2020-01-14 21:53 - 000745756 _____ C:\WINDOWS\system32\perfh00C.dat

2020-09-02 17:47 - 2020-01-14 21:53 - 000139160 _____ C:\WINDOWS\system32\perfc00C.dat

2020-09-02 17:47 - 2020-01-14 21:35 - 000696098 _____ C:\WINDOWS\system32\perfh007.dat

2020-09-02 17:47 - 2020-01-14 21:35 - 000139468 _____ C:\WINDOWS\system32\perfc007.dat

2020-09-02 17:47 - 2019-08-26 08:17 - 000395550 _____ C:\WINDOWS\system32\prfh0804.dat

2020-09-02 17:47 - 2019-08-26 08:17 - 000122334 _____ C:\WINDOWS\system32\prfc0804.dat

2020-09-02 17:47 - 2019-08-25 23:03 - 003916954 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-09-02 17:37 - 2018-12-19 10:36 - 000000000 ____D C:\Users\David Jackson\AppData\Local\CrashDumps

2020-09-02 17:17 - 2019-03-15 01:43 - 000000000 ____D C:\Program Files\Common Files\FlashIntegro

2020-09-02 16:41 - 2019-03-13 22:08 - 000000000 ____D C:\Program Files (x86)\Intel

2020-08-31 14:08 - 2020-05-31 09:50 - 000000000 ____D C:\Users\David Jackson\AppData\Roaming\Foxit Software

2020-08-31 14:06 - 2020-05-31 09:51 - 000000000 ____D C:\ProgramData\Foxit Software

2020-08-28 11:13 - 2020-05-11 12:00 - 000002424 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk

2020-08-28 11:13 - 2020-05-11 12:00 - 000002383 _____ C:\Users\Public\Desktop\Brave.lnk

2020-08-28 11:13 - 2020-05-11 12:00 - 000002383 _____ C:\ProgramData\Desktop\Brave.lnk

2020-08-27 21:53 - 2020-04-24 13:53 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-08-27 21:53 - 2020-04-24 13:53 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2020-08-27 21:53 - 2020-04-24 13:53 - 000002262 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2020-08-27 13:08 - 2018-10-17 11:39 - 000000000 ____D C:\Users\David Jackson\AppData\Local\Packages

2020-08-18 13:31 - 2018-10-17 10:44 - 000000000 ____D C:\Users\David Jackson\AppData\Roaming\vlc

2020-08-15 09:20 - 2018-10-25 14:52 - 000000000 ___RD C:\Users\David Jackson\3D Objects

2020-08-15 09:20 - 2016-11-20 19:51 - 000000000 __RHD C:\Users\Public\AccountPictures

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\setup

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\migwiz

2020-08-14 22:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism

2020-08-14 22:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences

2020-08-14 22:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Provisioning

2020-08-14 22:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2020-08-14 22:33 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\servicing

2020-08-14 10:26 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2020-08-11 23:10 - 2020-06-12 09:24 - 000842296 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2020-08-11 23:10 - 2020-06-12 09:24 - 000175160 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2020-08-11 23:10 - 2020-06-09 14:09 - 004510264 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2020-08-11 23:10 - 2019-08-25 23:13 - 000004564 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier

2020-08-11 23:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2020-08-11 23:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed

2020-08-04 22:51 - 2019-08-25 22:52 - 000000000 ____D C:\Users\David Jackson

2020-08-04 19:43 - 2018-10-17 11:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

 

==================== Files in the root of some directories ========

 

2019-01-27 14:38 - 2019-01-27 14:48 - 000000094 _____ () C:\Users\David Jackson\AppData\Roaming\AlamySizeCheck Preferences

2019-03-15 01:43 - 2019-03-15 01:43 - 039718141 _____ () C:\Users\David Jackson\AppData\Local\Ahiramto

 

==================== SigCheck ============================

 

(There is no automatic fix for files that do not pass verification.)

 

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2020

Ran by David Jackson (03-09-2020 22:38:06)

Running from C:\Users\David Jackson\Desktop

Windows 10 Home Version 1909 18363.1016 (X64) (2019-08-25 22:15:07)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-2490165305-1638453623-257508744-500 - Administrator - Disabled)

David Jackson (S-1-5-21-2490165305-1638453623-257508744-1001 - Administrator - Enabled) => C:\Users\David Jackson

DefaultAccount (S-1-5-21-2490165305-1638453623-257508744-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-2490165305-1638453623-257508744-1000 - Limited - Disabled) => C:\Users\defaultuser0

Guest (S-1-5-21-2490165305-1638453623-257508744-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-2490165305-1638453623-257508744-504 - Limited - Disabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Avira Antivirus (Enabled - Up to date) {88AE6B46-DC3C-455A-A21B-085F285A3546}

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

7-Zip 19.02 alpha (x64) (HKLM\...\7-Zip) (Version: 19.02 alpha - Igor Pavlov)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.414 - Adobe)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.4.2 - Advanced Micro Devices, Inc.)

Anki (HKLM-x32\...\Anki) (Version: 2.1.13 - )

Avira (HKLM-x32\...\{30361B56-9FDE-41F7-9E9E-5F46D7C5BA9C}) (Version: 1.2.149.21141 - Avira Operations GmbH & Co. KG) Hidden

Avira (HKLM-x32\...\{34a7e780-9295-4863-9fe4-6c679faf7f44}) (Version: 1.2.149.21141 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2008.1934 - Avira Operations GmbH & Co. KG) Hidden

Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.35.1.21885 - Avira Operations GmbH & Co. KG) Hidden

Avira Security (HKLM-x32\...\Avira Security_is1) (Version: 1.0.35.11288 - Avira Operations GmbH & Co. KG) Hidden

Avira Security (HKLM-x32\...\AviraSecurityUninstaller) (Version:  - Avira Operations GmbH & Co. KG;)

Avira Software Updater (HKLM-x32\...\{073825B9-FF06-4690-8CE4-3C0B72036122}) (Version: 2.0.6.37231 - Avira Operations GmbH & Co. KG) Hidden

Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 6.7.0.10991 - Avira Operations GmbH & Co. KG) Hidden

Branding64 (HKLM\...\{856DA29A-EA4A-468B-BBC2-B5F60DD75BFE}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden

Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 85.1.13.82 - Brave Software Inc)

f.lux (HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\Flux) (Version:  - f.lux Software LLC)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 85.0.4183.83 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden

Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

Intel® Chipset Device Software (HKLM-x32\...\{c4a581e8-a702-448c-80c7-4b6192985db2}) (Version: 10.1.18228.8176 - Intel® Corporation)

Intel® Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10209.6897 - Intel Corporation)

Intel® Graphics Driver Software (HKLM-x32\...\{34b71f5b-fd06-4029-966e-c1d187ea90a7}) (Version: 3.11.1.0 - Intel) Hidden

Intel® Graphics Driver Software (HKLM-x32\...\{d7a872bf-e69e-4300-8537-086dc6abbf23}) (Version: 3.11.1.0 - Intel) Hidden

Intel® HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 2.2.1.375 - Intel Corporation)

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1914.12.0.1255 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7212 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.5.0.1017 - Intel Corporation)

Intel® Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.52.230.1 - Intel Corporation) Hidden

Intel® Trusted Connect Services Client (HKLM-x32\...\{c6de84fd-ece7-4c2a-9f06-8cabe7ab79a0}) (Version: 1.52.230.1 - Intel Corporation) Hidden

Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{7D4998B3-AC68-4815-AC47-5A1969D91E30}) (Version: 17.5.0.1017 - Intel Corporation)

Luminar 3 (HKLM\...\Luminar 3) (Version: 3.2.0.5246 - Skylum)

Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9326.0 - Waves Audio Ltd.) Hidden

Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\OneDriveSetup.exe) (Version: 19.152.0801.0008 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)

Mozilla Firefox 78.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 78.0.2 (x64 en-US)) (Version: 78.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2 - Mozilla)

OEM Application Profile (HKLM-x32\...\{12C2AEB0-ED60-4CCF-DD83-C65BC7CCFB50}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Open-Shell (HKLM\...\{FD722BB1-4960-455F-89C6-EFAEB79527EF}) (Version: 4.4.131 - The Open-Shell Team)

Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32\...\{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10505 - Qualcomm)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.18362.31252 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8339 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.1.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.5 - VS Revo Group, Ltd.)

Skype version 8.63 (HKLM-x32\...\Skype_is1) (Version: 8.63 - Skype Technologies S.A.)

Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)

Update for Skype for Business 2016 (KB3127939) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{0E31A60F-4066-4FD8-AB36-4119E0FED3D9}) (Version:  - Microsoft)

Update for Skype for Business 2016 (KB3127939) 64-Bit Edition (HKLM\...\{90160000-012B-0409-1000-0000000FF1CE}_Office16.PROPLUS_{0E31A60F-4066-4FD8-AB36-4119E0FED3D9}) (Version:  - Microsoft)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)

UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden

VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)

Vulkan Run Time Libraries 1.0.68.0 (HKLM\...\VulkanRT1.0.68.0) (Version: 1.0.68.0 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.68.0 (HKLM\...\VulkanRT1.0.68.0-2) (Version: 1.0.68.0 - LunarG, Inc.) Hidden

Zoom (HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\ZoomUMX) (Version: 5.1 - Zoom Video Communications, Inc.)

 

Packages:

=========

Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-08] (Autodesk Inc.)

Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2727.0_x64__8j3eq9eme6ctt [2020-03-13] (INTEL CORP) [Startup Task]

Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2020-02-19] (INTEL CORP)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]

Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Studios) [MS Ad]

Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.6005.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios)

MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]

Photos Add-on -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-03-15] (Microsoft Corporation)

Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-12-24] (Microsoft Corporation)

PhotoScape X -> C:\Program Files\WindowsApps\MooiiTech.PhotoScapeX_4.0.2.0_x64__f5eddttrpssna [2019-12-31] (Mooii Tech)

Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c [2020-02-07] (Skype)

 

==================== Custom CLSID (Whitelisted): ==============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-2490165305-1638453623-257508744-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)

ShellIconOverlayIdentifiers: [  OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-05-09] (Intel® Rapid Storage Technology -> )

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [File not signed]

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [File not signed]

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2020-07-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {14cb2bd0-2375-3d10-9b5d-5e18865c8959} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2020-08-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-05-09] (Intel® Rapid Storage Technology -> )

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]

ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {700866bb-c8e9-3e71-b359-abb28baed0e8} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2020-08-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-05-15] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {0cab5786-30e8-3185-9b3b-ccefbf1b8afe} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2020-08-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]

ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2020-07-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2018-08-18] (Open-Shell) [File not signed]

 

==================== Codecs (Whitelisted) ====================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Drivers32: [msacm.voxacm160] => C:\WINDOWS\system32\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [File not signed]

HKLM\...\Drivers32: [msacm.scg726] => C:\WINDOWS\system32\scg726.acm [13239 2000-03-14] (SHARP Corporation) [File not signed]

HKLM\...\Drivers32: [msacm.alf2cd] => C:\WINDOWS\system32\alf2cd.acm [38912 2003-05-21] (NCT Company) [File not signed]

HKLM\...\Drivers32: [msacm.ac3acm] => C:\WINDOWS\system32\AC3ACM.acm [81920 2004-02-04] (fccHandler) [File not signed]

HKLM\...\Drivers32: [msacm.lame] => C:\WINDOWS\system32\lame.ax [245760 2005-08-01] () [File not signed]

HKLM\...\Drivers32: [vidc.dvsd] => C:\WINDOWS\system32\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [File not signed]

HKLM\...\Drivers32: [vidc.mpg4] => C:\WINDOWS\system32\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]

HKLM\...\Drivers32: [vidc.mp42] => C:\WINDOWS\system32\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]

HKLM\...\Drivers32: [vidc.mp43] => C:\WINDOWS\system32\mpg4c32.dll [413760 2002-08-20] (Microsoft Corporation) [File not signed]

HKLM\...\Drivers32: [vidc.xvid] => C:\WINDOWS\system32\xvidvfw.dll [139264 2004-07-03] () [File not signed]

HKLM\...\Drivers32: [vidc.DIVX] => C:\WINDOWS\system32\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [File not signed]

HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]

HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]

HKLM\...\Drivers32: [vidc.VP62] => C:\WINDOWS\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [File not signed]

HKLM\...\Drivers32: [vidc.LAGS] => C:\WINDOWS\system32\lagarith.dll [216064 2011-12-07] () [File not signed]

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

ShortcutWithArgument: C:\Users\David Jackson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave Apps\Secure, Fast & Private Web Browser with Adblocker _ Brave Browser.lnk -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\chrome_proxy.exe (Brave Software, Inc.) ->  --profile-directory=Default --app-id=dnglpbpmfhoikjfpaeipmeobcbnoikhg

ShortcutWithArgument: C:\Users\David Jackson\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\e2f3576b7abb043d\Brave.lnk -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc.) -> --profile-directory=Default

 

==================== Loaded Modules (Whitelisted) =============

 

2019-07-18 11:30 - 2019-07-18 11:30 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll

2019-10-18 16:48 - 2019-09-05 20:00 - 000076800 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

2018-08-18 22:57 - 2018-08-18 22:57 - 000880128 _____ (Open-Shell) [File not signed] C:\Program Files\Open-Shell\ClassicExplorer64.dll

2018-08-18 22:57 - 2018-08-18 22:57 - 003447808 _____ (Open-Shell) [File not signed] C:\Program Files\Open-Shell\StartMenuDLL.dll

2018-08-18 22:57 - 2018-08-18 22:57 - 000301568 _____ (Open-Shell) [File not signed] C:\WINDOWS\system32\StartMenuHelper64.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000413696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000519168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 001431040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll

2020-05-15 15:34 - 2020-05-15 15:34 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 001083904 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000287232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000329216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000089088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000312320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll

2019-07-18 11:30 - 2019-07-18 11:30 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll

2020-05-15 15:34 - 2020-05-15 15:34 - 000085504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll

 

==================== Alternate Data Streams (Whitelisted) ========

 

==================== Safe Mode (Whitelisted) ==================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanmanServer => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LanmanWorkstation => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NfsClnt => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SamSs => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NfsClnt => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\simptcp => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

 

==================== Association (Whitelisted) =================

 

==================== Internet Explorer trusted/restricted ==========

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

IE trusted site: HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\localhost -> localhost

 

==================== Hosts content: =========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2016-07-16 12:47 - 2019-10-11 16:40 - 000000855 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost

 

2019-09-29 20:13 - 2019-09-29 20:13 - 000000440 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

 

==================== Other Areas ===========================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2490165305-1638453623-257508744-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg

DNS Servers: 10.0.0.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(If an entry is included in the fixlist, it will be removed.)

 

MSCONFIG\Services: AUEPLauncher => 2

HKLM\...\StartupApproved\Run: => "WindowsDefender"

HKU\S-1-5-21-2490165305-1638453623-257508744-1001\...\StartupApproved\Run: => "OneDrive"

 

==================== FirewallRules (Whitelisted) ================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [UDP Query User{FCA55D5D-7C11-43D9-BE5C-AF42F4705963}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{FA87A6B8-3905-474D-8007-7A444EAD1613}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{2B068F4C-AD4C-4CAD-A478-02D7224AB2ED}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{C94A512A-482D-4332-843B-29B804F22DBB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{3EBE2972-F1C6-4B63-9055-16A9896B355F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{9B577813-145A-4B2A-974A-581F724B04CF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{1E20A7E5-59B2-42F2-BED9-FB04D19643AE}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{3DA20463-FDCA-456A-8F99-4A7721540B47}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{194FEEA0-9365-4201-9F22-1C18DED52A83}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{21A82943-4743-4655-9964-877F56AFD9E9}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{066146B5-2CFD-4617-984F-22B7E8118678}] => (Allow) C:\Users\David Jackson\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{8A4F0690-60CD-446D-940F-60974758D261}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{699D3121-F424-48C8-981B-878BFD4F9BF0}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{D68D24B8-6976-4D6B-9EC5-48FF2EB614FD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{92B68DB5-5C90-4C99-85FE-59466E4E39F6}] => (Allow) C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{B9CA4AFA-C216-4652-8D66-D77FD0AD118A}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

FirewallRules: [{470B04B9-3721-4CD7-817C-4144A50C63C9}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

FirewallRules: [{17317877-99AD-48CC-A0FD-0A5F5D1711A1}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

 

==================== Restore Points =========================

 

26-08-2020 12:08:13 Scheduled Checkpoint

 

==================== Faulty Device Manager Devices ============

 

Name: PS/2 Compatible Mouse

Description: PS/2 Compatible Mouse

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

 

==================== Event log errors: ========================

 

Application errors:

==================

Error: (09/03/2020 11:02:35 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )

Description: Event-ID 0

 

Error: (09/02/2020 10:26:51 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x8007001f, A device attached to the system is not functioning.

.

 

 

Operation:

   Executing Asynchronous Operation

 

Context:

   Current State: DoSnapshotSet

 

Error: (09/02/2020 10:25:03 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.

.

This is often caused by incorrect security settings in either the writer or requestor process.

 

 

Operation:

   Gathering Writer Data

 

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {fa577967-6dac-41ec-86bd-237505d7468c}

 

Error: (09/02/2020 10:12:22 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)

Description: Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll" (Win32 error code 126).

 

Error: (09/02/2020 10:12:19 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1017) (User: NT AUTHORITY)

Description: Disabled performance counter data collection from the "Outlook" service because the performance counter library for that service has generated one or more errors. The errors that forced this action have been written to the application event log. Correct the errors before enabling the performance counters for this service.

 

Error: (09/02/2020 10:12:19 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1022) (User: NT AUTHORITY)

Description: Windows cannot open the 64-bit extensible counter DLL C:\PROGRA~1\MICROS~1\Office16\OLMAPI32.DLL in a 32-bit environment (Win32 error code 193). Contact the file vendor to obtain a 32-bit version. Alternatively if you are running a 64-bit native environment, you can open the 64-bit extensible counter DLL by using the 64-bit version of Performance Monitor. To use this tool, open the Windows folder, open the System32 folder, and then start Perfmon.exe.

 

Error: (09/02/2020 09:56:20 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x8007045b, A system shutdown is in progress.

.

 

Error: (09/02/2020 09:56:20 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.

]

 

 

System errors:

=============

Error: (09/02/2020 10:33:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: The Avira Scheduler service terminated with the following service-specific error: 

Incorrect function.

 

Error: (09/02/2020 09:56:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x8024001e: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.323.392.0).

 

Error: (09/02/2020 06:32:41 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The Update Orchestrator Service service hung on starting.

 

Error: (09/02/2020 05:43:03 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)

Description: DCOM got error "1084" attempting to start the service RmSvc with arguments "Unavailable" in order to run the server:

{581333F6-28DB-41BE-BC7A-FF201F12F3F6}

 

Error: (09/02/2020 05:43:03 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)

Description: DCOM got error "1084" attempting to start the service RmSvc with arguments "Unavailable" in order to run the server:

{581333F6-28DB-41BE-BC7A-FF201F12F3F6}

 

Error: (09/02/2020 05:42:19 PM) (Source: DCOM) (EventID: 10005) (User: Window Manager)

Description: DCOM got error "1084" attempting to start the service DispBrokerDesktopSvc with arguments "Unavailable" in order to run the server:

DispBrokerDesktop.GlobalBrokerInstance

 

Error: (09/02/2020 01:41:31 PM) (Source: DCOM) (EventID: 10000) (User: DAVIDDELL2)

Description: Unable to start a DCOM Server: {71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}. The error:

"2147942593"

Happened while starting this command:

C:\Users\David Jackson\AppData\Local\Microsoft\OneDrive\19.152.0801.0008\FileCoAuth.exe -Embedding

 

Error: (08/29/2020 06:10:38 PM) (Source: DCOM) (EventID: 10010) (User: DAVIDDELL2)

Description: The server microsoft.windowscommunicationsapps_16005.12624.20368.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.

 

 

Windows Defender:

===================================

Date: 2020-09-02 22:21:17.313

Description: 

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 1.323.389.0

Previous security intelligence Version: 1.317.1232.0

Update Source: User

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version: 1.1.17400.5

Previous Engine Version: 1.1.17400.5

Error code: 0x80509004

Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support. 

 

Date: 2020-09-02 22:21:17.313

Description: 

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 1.323.389.0

Previous security intelligence Version: 1.317.1232.0

Update Source: User

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version: 1.1.17400.5

Previous Engine Version: 1.1.17400.5

Error code: 0x80509004

Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support. 

 

Date: 2020-09-02 22:08:36.628

Description: 

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 

Previous security intelligence Version: 1.317.1232.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version: 

Previous Engine Version: 1.1.17400.5

Error code: 0x80070102

Error description: The wait operation timed out. 

 

Date: 2020-09-02 21:56:20.179

Description: 

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 

Previous security intelligence Version: 1.317.1232.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version: 

Previous Engine Version: 1.1.17400.5

Error code: 0x80072f8f

Error description: A security error occurred 

 

Date: 2020-09-02 21:56:20.179

Description: 

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 

Previous security intelligence Version: 1.317.1232.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version: 

Previous Engine Version: 1.1.17400.5

Error code: 0x80072f8f

Error description: A security error occurred 

 

==================== Memory info =========================== 

 

BIOS: Dell Inc. 1.9.0 07/04/2019

Motherboard: Dell Inc. 0RKTGR

Processor: Intel® Core™ i5-8250U CPU @ 1.60GHz

Percentage of memory in use: 89%

Total physical RAM: 3961.07 MB

Available physical RAM: 420.76 MB

Total Virtual: 7043.34 MB

Available Virtual: 1406.5 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:100 GB) (Free:25.57 GB) NTFS

Drive d: () (Fixed) (Total:272 GB) (Free:245.06 GB) NTFS

Drive e: () (Fixed) (Total:272 GB) (Free:240.99 GB) NTFS

Drive f: () (Fixed) (Total:272.88 GB) (Free:265.95 GB) NTFS

 

\\?\Volume{3f430384-b413-4fd9-8d5a-36680837eb73}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.53 GB) NTFS

\\?\Volume{e34ef38a-3c5e-4b5c-8b7d-6e369a09d72f}\ (Image) (Fixed) (Total:11.76 GB) (Free:0.13 GB) NTFS

\\?\Volume{14ad7310-6585-44c2-acde-6de083ea88c1}\ (DELLSUPPORT) (Fixed) (Total:1.13 GB) (Free:0.05 GB) NTFS

\\?\Volume{7bd86504-d9e3-4a41-a225-36b9f05f67dd}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.6 GB) FAT32

 

==================== MBR & Partition Table ====================

 

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 1AFE04F0)

 

Partition: GPT.

 

==================== End of Addition.txt =======================